Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/27a09c21710bf187cf1a663209df5c274fc43564.roa
File:                     27a09c21710bf187cf1a663209df5c274fc43564.roa (raw, json)
Hash identifier:          JdnF5IS2pB2sq9PDYqtxqGkEpCi4WLQXma0Id0Uk1B4=
Subject key identifier:   0B:4F:A0:BC:98:F2:72:6F:D9:1A:D3:D3:DE:09:EC:DF:4F:B6:DA:75
Certificate issuer:       /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial:       20A533
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/27a09c21710bf187cf1a663209df5c274fc43564.roa
Signing time:             Fri 12 May 2023 19:37:19 +0000
ROA not before:           Thu 11 May 2023 19:37:17 +0000
ROA not after:            Mon 12 May 2025 19:37:17 +0000
asID:                     26611
IP address blocks:        190.242.72.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2139443 (0x20a533)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Validity
            Not Before: May 11 19:37:17 2023 GMT
            Not After : May 12 19:37:17 2025 GMT
        Subject: CN=27a09c21710bf187cf1a663209df5c274fc43564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:09:d7:c3:46:66:6d:9d:8b:c4:b2:6a:a4:6e:
                    ca:a5:fa:2b:8f:a6:e3:4d:2e:e3:76:26:47:93:52:
                    6a:34:15:e3:5a:b8:d4:fb:58:7b:df:4d:c4:82:01:
                    93:a1:ed:68:fd:97:b6:77:5b:38:6f:72:84:74:6c:
                    13:7a:3e:bc:f9:37:98:13:a2:cf:3e:a4:91:32:2c:
                    cd:73:95:d8:22:67:64:41:cb:93:67:27:e2:0a:45:
                    5b:74:bb:4a:8e:ce:ab:49:d5:d6:d3:27:c3:0d:c2:
                    ea:45:e9:bd:0b:59:88:3e:05:b9:e9:2e:11:48:3e:
                    b5:06:6f:d2:d3:31:06:07:5f:b4:09:33:3b:5f:93:
                    de:d2:01:fc:e7:22:26:e0:cf:09:7a:8b:77:bb:3d:
                    53:40:42:82:8c:10:ee:0f:5f:db:32:04:e2:cb:20:
                    15:58:0f:39:64:c5:d3:84:97:4b:b0:f0:5c:3f:d9:
                    bb:c1:0b:c8:b7:84:ef:63:05:62:45:ee:4d:84:13:
                    b6:de:32:2a:8f:94:49:96:bf:5d:72:2b:6e:44:48:
                    ae:f3:b2:f3:70:18:2b:8d:a1:c2:bf:2a:1f:b9:29:
                    71:68:40:7a:f3:e9:22:50:38:d0:52:f4:d2:75:0b:
                    7e:de:3c:1f:da:77:69:7b:0b:f6:5c:82:57:48:8b:
                    00:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4F:A0:BC:98:F2:72:6F:D9:1A:D3:D3:DE:09:EC:DF:4F:B6:DA:75
            X509v3 Authority Key Identifier:
                keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/27a09c21710bf187cf1a663209df5c274fc43564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:cb:cd:62:b9:07:94:d5:cc:cc:d2:2f:92:8d:31:4e:c7:06:
         4f:8f:bc:0a:e9:4b:3d:d2:28:38:dc:29:4e:fa:cf:39:85:76:
         9d:42:43:5c:35:8d:c2:7a:7f:11:bb:84:20:a1:e2:ba:0b:4e:
         66:46:55:e1:b2:3e:74:7d:f7:be:f9:16:73:1e:e1:b6:72:9a:
         47:ed:39:82:fe:1d:34:b2:84:c8:fe:cb:fc:ae:4d:90:91:f6:
         39:2a:77:aa:15:64:61:ad:87:da:5e:20:da:30:87:ed:09:22:
         6c:4e:f8:96:4f:88:d3:e0:0c:ef:31:b3:d3:4a:27:62:d1:eb:
         63:c1:61:20:eb:e8:db:d2:5f:4f:d7:e6:c7:70:9f:c9:76:f7:
         22:1d:e7:65:fb:b5:cb:a4:01:09:6c:df:28:2e:49:4f:c8:8f:
         c0:86:bf:1a:f1:6e:af:a0:9a:9e:07:e4:f7:92:e3:3d:f7:60:
         73:b1:3e:30:05:aa:bf:6c:6f:c1:45:82:3d:8a:6d:1a:5b:f0:
         b6:1e:be:bf:78:93:75:10:f9:6a:32:56:f7:e4:3d:2c:34:60:
         ef:9b:71:ff:cc:03:0d:4f:48:fa:79:fe:b8:a4:73:c9:75:28:
         df:68:56:57:85:3c:bf:1b:0a:c0:85:7b:f2:78:73:5d:4e:d5:
         37:c8:15:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----