Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93324fdd-d684-4ba2-9561-fc1c18f8d8ea/9d0036b6d4414d334e10524354ffd16de235b17b.roa
File:                     9d0036b6d4414d334e10524354ffd16de235b17b.roa (raw, json)
Hash identifier:          Bh51/cBx8QoTRRVpY65aXXGfTIj1Q49CGu6eCFgPg/U=
Subject key identifier:   52:8C:1C:05:37:BC:41:71:F7:A0:DD:30:D2:5A:C6:F3:E5:99:3D:D0
Certificate issuer:       /CN=1c33cd24270cada6da31a888012312771b5c5073
Certificate serial:       116E2E
Authority key identifier: 50:94:73:16:DF:A0:9C:B8:94:55:B0:7C:B3:27:47:D3:0A:A2:38:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c33cd24270cada6da31a888012312771b5c5073.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93324fdd-d684-4ba2-9561-fc1c18f8d8ea/9d0036b6d4414d334e10524354ffd16de235b17b.roa
Signing time:             Sun 18 Jun 2023 20:28:05 +0000
ROA not before:           Sat 17 Jun 2023 20:28:05 +0000
ROA not after:            Wed 18 Jun 2025 20:28:05 +0000
asID:                     269938
IP address blocks:        190.83.60.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1142318 (0x116e2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c33cd24270cada6da31a888012312771b5c5073
        Validity
            Not Before: Jun 17 20:28:05 2023 GMT
            Not After : Jun 18 20:28:05 2025 GMT
        Subject: CN=9d0036b6d4414d334e10524354ffd16de235b17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:d9:3b:44:2a:23:3e:da:a4:03:b7:50:de:
                    1a:b6:18:f3:cc:92:18:3a:df:38:3c:f6:ad:a6:98:
                    8d:cc:b2:a9:25:73:59:3d:d0:64:0a:f7:05:44:08:
                    76:f4:76:fe:6e:9d:b3:00:85:e6:1d:7b:a3:ea:20:
                    fe:9b:ca:6f:74:8f:6f:e5:33:85:7b:dc:06:35:92:
                    bd:e3:bd:88:ec:a1:1c:57:18:54:23:0a:3d:7c:36:
                    4d:d4:60:77:02:96:db:0d:7a:e9:6c:b1:85:bc:6d:
                    f8:e4:87:e4:c5:87:6c:55:9c:15:74:74:77:58:bd:
                    4d:1d:32:31:3d:83:64:e6:71:c0:e7:95:91:2e:1a:
                    7f:c1:69:00:ae:f2:61:ca:24:96:7a:0d:0a:d5:da:
                    a7:ec:13:a5:58:3c:96:88:37:d0:fa:0d:16:bf:96:
                    83:42:b0:58:9a:a2:42:32:72:19:27:37:51:aa:8b:
                    88:45:2a:aa:63:7b:17:3f:2a:45:fb:6b:ad:4e:78:
                    4e:d3:df:8e:09:b8:97:c8:d2:d6:ac:92:ab:eb:98:
                    28:1e:c2:9b:ef:00:13:14:49:d4:84:e2:50:a0:8b:
                    32:23:99:4c:e9:df:30:3e:aa:10:81:e9:d4:91:e1:
                    ef:2c:7b:03:63:3c:bb:d6:4b:40:8d:ee:6c:11:09:
                    1e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8C:1C:05:37:BC:41:71:F7:A0:DD:30:D2:5A:C6:F3:E5:99:3D:D0
            X509v3 Authority Key Identifier:
                keyid:50:94:73:16:DF:A0:9C:B8:94:55:B0:7C:B3:27:47:D3:0A:A2:38:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c33cd24270cada6da31a888012312771b5c5073.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93324fdd-d684-4ba2-9561-fc1c18f8d8ea/9d0036b6d4414d334e10524354ffd16de235b17b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93324fdd-d684-4ba2-9561-fc1c18f8d8ea/1c33cd24270cada6da31a888012312771b5c5073.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:c8:97:4f:f2:f0:94:86:b4:c4:ed:cd:c1:35:53:0d:f3:31:
         6d:47:5f:04:73:40:14:c6:ee:b8:4d:13:e5:a2:04:b0:8b:a5:
         61:bb:90:7b:72:0f:f4:e5:93:48:4a:a7:5d:ce:dc:0b:f5:ed:
         a7:cf:27:68:ea:79:22:9b:bb:84:03:4f:0f:6c:9a:65:92:11:
         50:d1:ae:f2:0c:c2:63:b0:6f:97:f0:41:30:23:8d:7b:bb:37:
         71:6b:c5:91:62:13:65:14:b3:68:e3:8f:17:83:29:64:64:33:
         b2:12:68:84:4e:c5:be:12:94:cb:dc:7c:7a:fc:3e:6f:a5:43:
         f8:d7:54:55:b0:a8:24:8a:2f:dc:c7:77:1f:8c:c9:fb:09:d0:
         c5:83:a9:01:23:28:9f:be:86:41:3d:ed:c6:20:c4:a6:8b:87:
         a6:b4:4f:5d:8c:a3:b7:98:37:e3:3a:c7:7a:35:ac:f7:7f:17:
         e1:eb:44:5f:df:9a:22:4c:b2:62:23:47:cb:7d:75:31:b4:fd:
         09:b6:aa:7c:ae:2c:e0:a5:be:6e:ae:04:51:87:19:0c:dd:e8:
         d8:62:96:c5:96:67:38:be:86:2e:e7:a8:88:96:30:c9:94:27:
         50:83:c4:b9:10:06:a0:0d:0f:bc:92:53:39:4e:ba:ec:58:2d:
         19:12:64:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----