Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/6e0a67a209755c1904c687450898efb4486b68cc.roa
File:                     6e0a67a209755c1904c687450898efb4486b68cc.roa (raw, json)
Hash identifier:          nIt/URxH+MR1PTKdsLnU6Tdft3K83kylNd4sFOaLRm4=
Subject key identifier:   FB:59:C9:6D:16:C0:C1:7A:0A:0B:8D:8C:63:A6:D1:BF:3C:97:B5:41
Certificate issuer:       /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial:       19EB32
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/6e0a67a209755c1904c687450898efb4486b68cc.roa
Signing time:             Tue 30 Aug 2022 05:40:02 +0000
ROA not before:           Tue 30 Aug 2022 05:02:27 +0000
ROA not after:            Fri 30 Aug 2024 05:02:27 +0000
asID:                     6429
IP address blocks:        190.54.179.0/24 maxlen: 24
                          190.54.180.0/24 maxlen: 24
                          190.54.183.0/24 maxlen: 24
                          190.54.184.0/24 maxlen: 24
                          190.54.185.0/24 maxlen: 24
                          190.54.187.0/24 maxlen: 24
                          190.54.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1698610 (0x19eb32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
        Validity
            Not Before: Aug 30 05:02:27 2022 GMT
            Not After : Aug 30 05:02:27 2024 GMT
        Subject: CN=6e0a67a209755c1904c687450898efb4486b68cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:b2:79:0f:6f:28:6e:98:3f:75:b6:94:62:
                    a5:48:4a:6b:e2:3b:c2:6e:28:cd:3a:74:bb:c2:9f:
                    1f:38:f9:95:83:b5:7a:e2:c8:63:ac:98:50:4f:c2:
                    3a:8f:91:8b:dd:d4:67:77:c5:9a:76:4b:4a:79:7a:
                    61:2b:a3:e4:32:a4:bd:c3:c1:10:6c:03:73:9f:4b:
                    a8:02:af:c3:43:13:f5:89:51:04:62:4b:2b:24:44:
                    ab:ed:8c:71:8c:4d:a7:cf:3b:d7:e7:00:f7:63:94:
                    2c:17:c3:71:06:35:da:ec:0f:17:9b:51:46:7a:b6:
                    5d:37:cb:c7:23:ab:f0:b2:d5:82:5e:fe:b0:4d:7b:
                    0b:cc:d8:ab:ac:9c:0b:b6:50:bf:6d:c5:10:e9:8b:
                    9e:4a:93:a7:0f:8e:91:01:e1:c6:0a:4a:d5:cc:06:
                    de:0c:92:71:91:06:f4:d8:9b:23:30:f8:e2:b6:bd:
                    3f:74:3f:17:e1:0e:61:e5:7f:76:ab:57:2a:7e:8a:
                    6b:5f:43:fb:b4:99:ab:07:42:79:af:6b:b7:b8:01:
                    a1:01:d6:0b:cf:57:64:b3:52:fb:ea:70:dc:01:62:
                    ff:58:08:f7:7e:e5:1c:fc:a4:fa:0e:fb:fa:3c:ae:
                    e7:75:07:a2:5e:c7:92:24:46:29:83:33:d9:d1:19:
                    df:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:59:C9:6D:16:C0:C1:7A:0A:0B:8D:8C:63:A6:D1:BF:3C:97:B5:41
            X509v3 Authority Key Identifier:
                keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/6e0a67a209755c1904c687450898efb4486b68cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.179.0-190.54.180.255
                  190.54.183.0-190.54.185.255
                  190.54.187.0-190.54.188.255

    Signature Algorithm: sha256WithRSAEncryption
         5b:f5:d1:54:f6:3c:e0:60:26:27:54:36:80:2a:c4:46:1a:44:
         13:e8:e1:b1:aa:77:e2:a8:5a:27:7a:a2:3d:2a:3b:2c:71:42:
         ad:d4:89:0a:0f:04:0b:91:2b:2f:0f:6e:c2:41:ef:b2:79:bd:
         97:a5:75:81:62:04:71:cb:e0:a8:36:de:8f:c6:fd:de:da:1f:
         f0:bf:10:2d:75:77:a2:ed:11:c5:f3:e5:c3:fd:47:40:35:f1:
         80:74:87:e6:50:6a:f7:84:b1:57:c5:80:e9:78:4f:1a:ac:67:
         8e:5b:6f:c7:d9:d1:e3:12:79:2a:b5:99:d4:5d:90:79:88:81:
         9f:42:79:74:0c:a3:52:63:7f:4d:36:4f:76:af:14:62:7d:6e:
         97:fe:5f:01:88:6a:10:04:f5:bc:0e:5e:ef:ad:d6:78:f2:90:
         e3:95:39:9d:d9:1e:7f:2c:80:2e:4a:ac:cc:4b:6e:ad:d1:6e:
         dd:52:c0:e6:ea:09:02:65:a1:87:34:33:2f:b2:83:e1:85:c9:
         92:0b:7b:cb:d0:04:c9:27:66:4b:92:6b:f4:3b:b2:1d:4f:c4:
         a1:02:32:04:e8:88:1d:45:ff:5d:3c:62:0f:39:13:f2:5c:db:
         1e:29:99:ce:2d:ed:9e:5c:70:f4:9e:a1:f8:a8:1c:a2:b3:77:
         dc:6f:09:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----