Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/484f9f8aeb89adb364492737645e4cdaa9fcf3ae.roa
File:                     484f9f8aeb89adb364492737645e4cdaa9fcf3ae.roa (raw, json)
Hash identifier:          LVJuxJNHllgCv8TnuHJD9rjiOQEhIEeMSoPVuN1jv2c=
Subject key identifier:   BB:59:53:9D:7A:40:FC:55:B0:3B:3D:00:B4:1C:CD:EC:74:BD:E4:75
Certificate issuer:       /CN=1c011c49ef045ef0e106ad87280aa70643378a03
Certificate serial:       1693D1
Authority key identifier: 75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/484f9f8aeb89adb364492737645e4cdaa9fcf3ae.roa
Signing time:             Mon 03 Apr 2023 20:49:04 +0000
ROA not before:           Tue 23 Mar 2021 14:34:47 +0000
ROA not after:            Tue 24 Mar 2026 14:34:47 +0000
asID:                     270035
IP address blocks:        190.108.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1479633 (0x1693d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c011c49ef045ef0e106ad87280aa70643378a03
        Validity
            Not Before: Mar 23 14:34:47 2021 GMT
            Not After : Mar 24 14:34:47 2026 GMT
        Subject: CN=484f9f8aeb89adb364492737645e4cdaa9fcf3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6e:c3:58:b6:ca:64:5d:8d:8e:1a:62:e0:5a:
                    e4:da:74:59:e5:4d:5e:37:74:17:53:10:3d:f3:c4:
                    57:33:af:f7:a3:cc:ee:8f:53:7b:d8:83:2f:46:1b:
                    3f:f8:46:37:77:21:58:74:88:d4:d8:0c:b3:9b:ac:
                    79:cf:84:c0:c2:9e:26:34:ef:a7:73:32:b7:a8:52:
                    5d:c2:5c:80:75:d9:44:e4:7a:e2:09:71:ff:8d:05:
                    88:0e:89:db:64:e8:15:60:41:fb:67:5f:95:ca:63:
                    98:6e:eb:03:5b:ce:c7:5f:2e:3e:02:3d:75:5f:3d:
                    26:ba:36:3e:35:e9:9c:3a:a7:9c:f6:31:12:7f:c3:
                    5d:a1:74:23:52:b1:8a:19:27:20:8f:eb:a4:76:df:
                    ff:69:23:2e:13:06:e9:71:0c:43:0a:89:6e:bd:fe:
                    d2:93:d2:df:95:91:30:9a:d9:24:ec:0a:d8:eb:e8:
                    b0:08:18:26:8e:31:f4:33:0f:c2:78:d5:d6:ff:45:
                    c5:1a:94:bd:f6:0f:f4:b6:30:dd:98:95:ca:5c:27:
                    d5:52:a8:19:07:3e:8e:74:7f:04:58:f2:e3:90:53:
                    1a:42:c6:d6:ce:ac:d6:d4:d0:77:c7:2c:5a:3a:56:
                    c0:bd:72:f9:56:87:12:6d:cc:fe:36:3c:22:7f:a2:
                    85:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:59:53:9D:7A:40:FC:55:B0:3B:3D:00:B4:1C:CD:EC:74:BD:E4:75
            X509v3 Authority Key Identifier:
                keyid:75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/484f9f8aeb89adb364492737645e4cdaa9fcf3ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c011c49ef045ef0e106ad87280aa70643378a03.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:07:db:02:b0:b0:70:a0:9b:df:b0:ba:41:55:d4:78:ff:2a:
         63:16:e3:8d:67:33:3f:c1:97:27:f4:9f:40:01:ce:9f:8e:eb:
         8b:65:26:55:10:f5:3b:e2:65:1b:bd:49:ff:65:f1:e4:c2:07:
         1f:76:2d:ad:52:92:f6:fb:33:57:8a:69:df:61:02:2a:3e:a3:
         44:f1:a5:40:f1:d8:cd:6b:02:46:5b:ab:0a:82:26:00:c4:44:
         ee:d0:13:e4:d6:be:55:c9:29:f1:b0:d4:d1:3a:ed:6e:fa:c9:
         e4:29:6c:20:a5:6f:c6:80:ee:d3:c7:32:04:81:7c:05:9a:c8:
         a3:6c:2b:28:4c:cb:41:1b:93:77:5d:4b:37:1b:fd:5f:2c:c0:
         e0:13:cb:e0:cd:2c:86:df:d2:9f:b2:5e:cd:5c:cd:e4:aa:84:
         e5:eb:5d:d1:6c:54:7f:66:ce:17:4a:b7:60:d2:01:37:ff:69:
         f1:fb:97:25:4c:67:d2:bc:68:1a:04:05:9a:2d:92:5b:d5:7b:
         02:94:87:fa:11:62:49:de:c9:56:1a:fd:e3:6a:c5:f7:1e:78:
         6a:3f:17:e2:75:30:6a:70:98:0c:a8:7d:be:3b:58:f3:7b:75:
         81:99:a1:34:dd:48:f3:c4:31:aa:09:3e:6e:88:3e:4e:f9:9f:
         23:30:da:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----