Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/79ad01bb96ec38f40e5205aeb964188c477162c3.roa
File:                     79ad01bb96ec38f40e5205aeb964188c477162c3.roa (raw, json)
Hash identifier:          6ttg2o/Tf5Eilhj+xQDtY7wWqqUonId1E2dQJCa00MQ=
Subject key identifier:   75:C5:A0:1A:BF:C3:BB:FB:30:96:CB:AE:3D:43:D5:A5:DF:4D:97:E2
Certificate issuer:       /CN=1c011c49ef045ef0e106ad87280aa70643378a03
Certificate serial:       168DA6
Authority key identifier: 75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/79ad01bb96ec38f40e5205aeb964188c477162c3.roa
Signing time:             Mon 03 Apr 2023 20:47:06 +0000
ROA not before:           Tue 23 Mar 2021 14:34:47 +0000
ROA not after:            Tue 24 Mar 2026 14:34:47 +0000
asID:                     270035
IP address blocks:        190.108.76.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1478054 (0x168da6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c011c49ef045ef0e106ad87280aa70643378a03
        Validity
            Not Before: Mar 23 14:34:47 2021 GMT
            Not After : Mar 24 14:34:47 2026 GMT
        Subject: CN=79ad01bb96ec38f40e5205aeb964188c477162c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:44:e1:4b:66:fe:38:cc:30:e2:86:86:00:c0:
                    41:e1:08:00:f9:b8:90:40:a8:02:59:57:ce:3d:bf:
                    73:45:64:41:b1:d3:0a:90:70:77:a1:d4:a4:2e:02:
                    b5:e5:64:3e:49:50:bc:83:dc:b8:09:f5:2e:08:f4:
                    a0:0f:17:ff:a4:31:73:19:d7:29:d5:b6:ae:f3:38:
                    df:67:c5:5b:1f:17:2b:3f:2d:f6:87:f5:b8:42:63:
                    e6:05:5f:55:61:ba:0f:e9:b8:a0:f1:f8:5b:0c:64:
                    b9:27:f3:46:2f:78:25:09:61:84:d4:4e:e1:81:87:
                    e1:1a:39:30:57:19:f9:d2:78:fc:29:fd:4b:b2:5f:
                    e2:56:62:1b:9e:64:9c:59:9b:3c:f9:4a:1f:a3:f5:
                    72:3a:b0:5a:5b:44:05:59:b9:db:fe:fd:0a:be:c3:
                    8a:f1:ba:08:8e:61:ea:f9:a6:e8:f5:0f:99:6b:da:
                    65:92:37:d2:9a:79:77:42:d6:ce:e2:30:b3:28:0a:
                    07:be:bc:3d:d7:97:4c:1b:a1:87:5a:ad:4d:c3:5d:
                    05:76:7d:7d:34:a9:b2:19:85:54:45:9c:d8:95:de:
                    ea:bd:18:01:c9:e0:76:c1:bc:cb:20:d6:c3:5d:5a:
                    36:68:f8:65:39:80:ad:a2:d0:cc:87:ff:76:ae:9a:
                    ce:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C5:A0:1A:BF:C3:BB:FB:30:96:CB:AE:3D:43:D5:A5:DF:4D:97:E2
            X509v3 Authority Key Identifier:
                keyid:75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/79ad01bb96ec38f40e5205aeb964188c477162c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c011c49ef045ef0e106ad87280aa70643378a03.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:ab:fa:c8:16:89:23:a1:de:a9:b2:11:55:cd:dd:45:35:26:
         62:6b:32:2d:17:70:01:01:92:c3:a4:07:98:4b:90:00:0e:ee:
         39:d5:a0:6b:b1:f1:4a:64:21:ba:06:c3:4d:8b:82:d8:4b:1f:
         e1:94:b2:6d:1d:13:76:94:84:3c:23:80:5f:47:88:90:bb:a3:
         f1:1a:8a:f7:78:cf:9b:03:be:d2:6c:05:e2:af:2a:49:82:a8:
         e4:75:c8:14:74:e4:c7:e5:59:a8:42:16:1d:cb:30:d4:df:76:
         0d:08:ab:bb:8c:d3:96:dc:13:dd:3b:80:1e:aa:7a:5e:02:c6:
         c1:ab:d5:c3:d9:6a:f3:bd:0a:0f:a7:83:3f:34:da:94:57:a6:
         20:e1:18:b7:5d:17:33:bc:30:f7:f9:82:93:5f:33:b5:16:4c:
         5e:43:b1:a6:af:9d:f6:94:b9:14:2e:82:cf:61:d5:6e:16:2f:
         e7:4a:14:17:f1:f9:26:62:c4:9e:4e:a2:a9:7f:6f:50:a7:57:
         30:3a:6e:f7:f2:f0:9b:8b:e7:7a:40:62:fa:0a:2b:8f:0c:9a:
         17:f9:b6:6b:3e:8c:bb:c6:5e:03:fa:e5:f9:20:f3:5e:15:42:
         5b:54:28:64:32:7c:1f:34:58:70:92:a8:af:38:8a:e5:79:38:
         40:ce:e8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----