Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a5cf04f1-4e91-40be-b76d-e6a47e3b7692/8ccef3425833ce6142c69fe93dfdd632fda5ef1f.roa
File:                     8ccef3425833ce6142c69fe93dfdd632fda5ef1f.roa (raw, json)
Hash identifier:          gR6P352ijsOdWSFOJ7TVCMO2QhhXqY6LWs5qH5i90XY=
Subject key identifier:   B8:60:F8:B2:54:60:20:1C:4D:7E:93:67:21:3D:59:ED:D7:86:3D:2C
Certificate issuer:       /CN=87849b3a9cbb45397d154a68db4f01165de22acb
Certificate serial:       1F58C1
Authority key identifier: F0:C7:DB:68:F3:54:0D:E0:E8:E7:C1:C5:04:F4:ED:33:08:AF:AB:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87849b3a9cbb45397d154a68db4f01165de22acb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a5cf04f1-4e91-40be-b76d-e6a47e3b7692/8ccef3425833ce6142c69fe93dfdd632fda5ef1f.roa
Signing time:             Thu 30 Mar 2023 21:04:52 +0000
ROA not before:           Wed 29 Mar 2023 21:03:32 +0000
ROA not after:            Sun 30 Mar 2025 21:03:32 +0000
asID:                     52278
IP address blocks:        190.105.240.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2054337 (0x1f58c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87849b3a9cbb45397d154a68db4f01165de22acb
        Validity
            Not Before: Mar 29 21:03:32 2023 GMT
            Not After : Mar 30 21:03:32 2025 GMT
        Subject: CN=8ccef3425833ce6142c69fe93dfdd632fda5ef1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c6:5a:53:21:38:7d:6f:e4:12:f7:65:77:0a:
                    fd:d0:96:44:25:c3:5c:13:b3:dc:50:8e:a4:d6:cf:
                    45:33:57:f3:81:89:be:f6:9b:30:97:1e:12:bd:00:
                    9d:38:0c:d2:c9:e8:5b:15:c0:92:c0:87:c5:a3:43:
                    02:13:87:db:10:af:3b:9f:a1:cd:1f:38:5a:b2:13:
                    34:db:f3:8f:16:39:be:3c:a8:af:56:a4:fc:21:75:
                    f7:5c:e3:bd:a9:6d:25:71:15:5f:0e:2f:6a:ad:f9:
                    15:24:3d:02:53:69:0f:3a:b4:29:4b:d8:a1:ca:a9:
                    50:8f:e1:97:e1:93:a6:01:8c:1f:c3:8a:a6:88:b0:
                    51:f1:a7:95:e5:3d:4d:57:1b:6c:fa:09:0d:a0:b3:
                    41:ff:10:37:95:53:f1:5a:71:84:7c:87:9a:8b:6a:
                    c8:df:7c:c3:ee:f9:99:ca:58:f1:1a:1b:3a:00:21:
                    c7:9c:02:6c:72:e2:c3:80:e1:b5:b2:4e:13:dc:ed:
                    9c:7e:f5:bf:9f:7b:b6:37:eb:71:79:ba:f0:73:f0:
                    7f:bb:2f:7a:83:bf:88:36:ea:e9:35:e5:c7:02:5e:
                    19:53:dc:9f:8d:f1:c3:3c:9a:52:3e:6e:c2:7b:4a:
                    22:03:c9:e8:83:b6:39:88:30:4f:53:fd:08:55:32:
                    6e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:60:F8:B2:54:60:20:1C:4D:7E:93:67:21:3D:59:ED:D7:86:3D:2C
            X509v3 Authority Key Identifier:
                keyid:F0:C7:DB:68:F3:54:0D:E0:E8:E7:C1:C5:04:F4:ED:33:08:AF:AB:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87849b3a9cbb45397d154a68db4f01165de22acb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a5cf04f1-4e91-40be-b76d-e6a47e3b7692/8ccef3425833ce6142c69fe93dfdd632fda5ef1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a5cf04f1-4e91-40be-b76d-e6a47e3b7692/87849b3a9cbb45397d154a68db4f01165de22acb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:f8:7a:47:01:a3:e7:b3:9e:a8:ee:b2:c5:93:59:15:3e:67:
         bd:66:cc:58:15:5a:b5:ed:86:05:50:87:00:a2:0a:f2:54:af:
         64:51:b5:d9:ec:ac:25:16:12:91:99:64:87:95:ac:2a:c7:cf:
         76:f7:c2:86:a8:ac:e2:0c:71:ae:06:80:e6:4f:0e:ac:e0:07:
         34:bc:cd:c1:e6:cf:8c:67:95:78:1d:c8:13:0e:0d:93:3e:07:
         dc:5c:05:a3:68:d9:f1:e5:ec:29:79:67:4e:4d:ab:2b:ff:c9:
         60:d4:02:02:02:f0:47:66:b7:2a:a6:9c:a7:1b:08:90:a9:b8:
         5a:6e:57:dc:57:59:f7:5c:33:1b:bc:1f:f8:65:49:53:1c:f6:
         70:aa:e1:0b:dd:23:a3:d6:e2:94:66:b2:b2:56:cc:12:20:27:
         31:75:c3:ae:c2:ce:58:30:ab:a6:e4:e5:31:9a:e6:03:6b:bd:
         1e:1f:ca:67:9b:0f:47:4d:19:9f:e5:38:a0:6d:6f:3a:30:13:
         92:55:2a:23:f4:1a:7a:7f:d6:c6:d7:a4:6f:15:1a:b2:c6:b4:
         b9:04:9c:2e:7b:b3:f2:ba:95:19:4f:8a:84:2d:0e:7f:2f:56:
         22:36:37:38:cb:1d:20:25:33:b2:f9:66:5a:64:1d:b5:7f:4c:
         7d:9c:e7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----