Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/0d0991dfdae2b87aa8b33f2e387534a75fbfb92d.roa
File:                     0d0991dfdae2b87aa8b33f2e387534a75fbfb92d.roa (raw, json)
Hash identifier:          LjmY7m41NSmisHQAGeH7852nw2aDr2E5N/GLiIxU6Tw=
Subject key identifier:   82:E2:14:4C:33:CF:92:A6:57:EF:BE:C0:28:A5:02:8C:2E:A7:83:41
Certificate issuer:       /CN=1c011c49ef045ef0e106ad87280aa70643378a03
Certificate serial:       169D68
Authority key identifier: 75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/0d0991dfdae2b87aa8b33f2e387534a75fbfb92d.roa
Signing time:             Mon 03 Apr 2023 20:51:04 +0000
ROA not before:           Tue 23 Mar 2021 14:34:47 +0000
ROA not after:            Tue 24 Mar 2026 14:34:47 +0000
asID:                     270035
IP address blocks:        190.108.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1482088 (0x169d68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c011c49ef045ef0e106ad87280aa70643378a03
        Validity
            Not Before: Mar 23 14:34:47 2021 GMT
            Not After : Mar 24 14:34:47 2026 GMT
        Subject: CN=0d0991dfdae2b87aa8b33f2e387534a75fbfb92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:de:91:a2:18:aa:80:95:08:a1:25:ce:a3:7a:
                    d5:69:bc:41:12:b9:62:a5:7a:f0:13:ed:64:8c:78:
                    52:67:5d:41:22:c7:42:86:9a:01:88:e1:15:3c:48:
                    c8:d8:72:44:43:2b:b4:38:6e:2d:74:a1:aa:e4:b9:
                    d1:7f:96:d9:8f:e9:03:a9:69:0d:52:09:0a:ba:52:
                    a4:4e:98:97:f1:37:07:27:be:fa:55:ff:d0:c6:e0:
                    56:e6:be:3b:cb:52:c4:6a:f7:6b:77:f4:17:93:9d:
                    8b:c9:f0:c8:58:0c:ee:54:1e:e5:a1:08:a9:af:00:
                    df:60:d4:25:6f:69:4e:4c:ab:a5:ff:d7:f2:bd:c2:
                    e5:b4:ae:89:37:d1:e7:cf:bc:3a:cb:4f:5f:d4:1c:
                    12:6d:80:e8:f6:ab:51:7d:ab:ed:de:6b:41:2f:49:
                    5b:c3:81:9f:89:78:b6:29:9d:d9:44:47:7c:1b:15:
                    32:01:a6:e1:05:ab:c0:dd:91:0e:de:61:cf:0f:9c:
                    d2:f4:fa:e7:54:f2:07:64:75:d8:b1:e2:2e:79:e2:
                    62:5f:67:8b:27:28:38:2c:ec:27:56:0d:68:36:3d:
                    36:73:32:50:61:e2:bd:fc:75:be:e3:f7:ff:b1:66:
                    2b:fb:57:ef:55:16:3d:6b:e3:e6:76:c1:56:74:ed:
                    c1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E2:14:4C:33:CF:92:A6:57:EF:BE:C0:28:A5:02:8C:2E:A7:83:41
            X509v3 Authority Key Identifier:
                keyid:75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/0d0991dfdae2b87aa8b33f2e387534a75fbfb92d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c011c49ef045ef0e106ad87280aa70643378a03.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:53:63:61:2d:f8:1f:71:10:08:0b:2d:be:49:b6:db:c7:61:
         af:a7:27:1b:37:8c:e6:1b:d0:26:a9:a4:91:03:cc:94:3f:b2:
         d0:f1:38:ca:d8:a6:db:37:77:60:40:d0:6a:f0:e8:40:64:68:
         4c:8d:a9:09:7b:8c:f0:e0:ee:1d:83:73:2b:c8:a8:1b:52:09:
         a9:c5:d9:d6:f5:60:c2:d4:35:6a:3a:67:b5:c6:df:58:42:9e:
         0f:fe:65:29:e4:cd:52:82:00:07:27:6c:49:0a:81:4a:d9:d1:
         89:16:9d:2d:88:3d:0e:f8:81:6f:57:da:72:c8:b6:17:3a:ad:
         43:58:54:8c:1a:d0:a0:0a:1b:7f:4b:ba:68:58:2b:bd:70:c3:
         ad:7d:a4:66:5e:0a:d7:12:cd:cb:66:69:f6:17:74:2f:66:8d:
         1c:d5:78:80:40:67:d9:d3:c9:f5:24:c5:c7:88:2a:ad:01:c1:
         a1:e8:91:d1:21:28:ae:f3:ee:67:61:6d:c3:a9:51:43:47:e5:
         5c:5f:fd:3f:db:ee:45:42:78:e5:d7:eb:ad:ef:96:26:0a:f1:
         58:e2:d4:43:18:68:dd:f2:30:bd:51:78:04:86:e0:bd:4f:24:
         ae:50:7e:ad:eb:bd:c4:b6:6e:48:d4:fb:58:5f:0e:2c:ac:1a:
         9a:c5:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----