Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/8e2f9634a419202d5f33b401a4c972c38df2ed88.roa
File:                     8e2f9634a419202d5f33b401a4c972c38df2ed88.roa (raw, json)
Hash identifier:          hWVTZpBs9buI74UWH3kNusxj8SoWiwxqDgCtG3vWATk=
Subject key identifier:   0E:23:8F:30:3B:F2:6B:06:3C:5C:0F:CD:C7:B0:0D:F0:55:3F:44:F1
Certificate issuer:       /CN=1c011c49ef045ef0e106ad87280aa70643378a03
Certificate serial:       169619
Authority key identifier: 75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/8e2f9634a419202d5f33b401a4c972c38df2ed88.roa
Signing time:             Mon 03 Apr 2023 20:49:40 +0000
ROA not before:           Tue 23 Mar 2021 14:34:47 +0000
ROA not after:            Tue 24 Mar 2026 14:34:47 +0000
asID:                     270035
IP address blocks:        190.108.76.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1480217 (0x169619)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c011c49ef045ef0e106ad87280aa70643378a03
        Validity
            Not Before: Mar 23 14:34:47 2021 GMT
            Not After : Mar 24 14:34:47 2026 GMT
        Subject: CN=8e2f9634a419202d5f33b401a4c972c38df2ed88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c9:52:7e:37:70:69:46:a3:72:db:0d:b1:fd:
                    e1:86:71:3a:ed:e0:47:bb:74:53:12:94:81:40:ea:
                    41:f1:8b:a5:03:07:64:f1:5e:1e:3d:37:cf:fe:2c:
                    ce:d6:3d:5f:4e:81:85:18:e0:03:d6:c2:ad:60:96:
                    e0:ff:3f:e6:0c:3c:37:15:2f:3c:c7:79:17:56:92:
                    d5:12:b3:05:27:a7:14:f3:98:a9:c5:94:4d:df:3e:
                    8e:97:5e:b7:b3:0f:6c:e5:22:26:2a:98:42:4c:5c:
                    b7:3e:41:ca:4b:4a:bb:c2:de:41:b8:3c:ef:b4:5f:
                    2e:a4:1d:56:96:14:23:66:f3:8a:bb:c3:04:fe:1e:
                    36:52:e1:09:b7:4a:d3:ea:fc:d2:d3:0a:28:8a:93:
                    98:c0:61:a5:c7:f4:28:09:63:f8:fe:de:9d:27:57:
                    7e:ee:fe:17:b5:dd:d8:2d:dc:06:b1:4d:f1:23:d1:
                    e1:a4:f5:f0:f5:56:95:dd:d4:e4:88:e1:39:39:84:
                    46:c6:e0:96:9a:a9:da:37:63:5a:fe:b0:7b:7b:31:
                    bb:91:ae:f9:85:0a:5b:74:27:70:63:ea:fa:79:17:
                    7a:ca:68:56:88:2a:39:6c:9d:24:73:68:c6:2b:19:
                    f4:0d:6d:83:d8:3c:12:2a:7a:8b:5a:38:41:7e:46:
                    70:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:23:8F:30:3B:F2:6B:06:3C:5C:0F:CD:C7:B0:0D:F0:55:3F:44:F1
            X509v3 Authority Key Identifier:
                keyid:75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/8e2f9634a419202d5f33b401a4c972c38df2ed88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c011c49ef045ef0e106ad87280aa70643378a03.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:7a:c3:e5:73:81:52:9a:b7:95:e6:49:ed:17:de:7c:fa:52:
         88:82:e9:17:a4:5e:98:d7:b4:15:f8:23:57:b6:10:75:15:30:
         c0:77:94:97:e5:cb:1d:2d:ed:9a:7a:9c:67:40:7d:8a:da:fe:
         b3:8c:f3:49:6f:25:4e:c5:bf:22:06:af:cc:40:e6:ae:20:41:
         4b:5d:88:cf:8a:2b:ed:04:10:d7:7a:af:bc:08:ec:e1:e6:7c:
         aa:b3:83:db:11:78:bc:9f:68:96:bc:22:df:90:16:82:53:7c:
         f6:94:96:46:43:a6:21:99:d1:a2:91:ab:02:80:e0:c0:55:10:
         ba:04:18:cd:a5:20:a6:3c:56:21:3a:b7:58:67:76:b9:47:75:
         c6:22:5a:a1:39:53:0b:9f:dc:be:d0:7f:74:a0:ec:71:01:f7:
         a8:52:3c:7f:1d:17:41:e6:dc:26:d2:4c:b8:12:f7:f3:fd:5d:
         83:ef:0d:db:30:95:78:3f:04:14:23:1b:f2:ae:0b:64:3c:ab:
         7b:d1:40:9b:25:71:74:70:d8:b0:f0:a3:d8:51:70:df:6e:2d:
         de:43:f3:2e:9c:f7:36:d7:d2:ac:12:61:80:bb:0f:3b:8f:52:
         b0:50:da:a4:c1:3c:19:11:88:1f:a6:4f:08:ae:95:89:f1:1e:
         30:ed:a9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----