Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/37cbceb14b8cf60e9270f4b41a26d2df6b420a55.roa
File:                     37cbceb14b8cf60e9270f4b41a26d2df6b420a55.roa (raw, json)
Hash identifier:          oA3MNBeLf/FW+0vKWL2lKFz1lbXd/VQZJ6guQCwd7QQ=
Subject key identifier:   52:4D:FE:26:E3:85:B1:3E:D9:83:8F:1B:A5:0C:F3:09:3F:1B:45:19
Certificate issuer:       /CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Certificate serial:       211710
Authority key identifier: BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/37cbceb14b8cf60e9270f4b41a26d2df6b420a55.roa
Signing time:             Thu 27 Apr 2023 06:15:13 +0000
ROA not before:           Wed 26 Apr 2023 06:15:13 +0000
ROA not after:            Sun 27 Apr 2025 06:15:13 +0000
asID:                     13682
IP address blocks:        190.143.128.0/18 maxlen: 24
                          190.143.192.0/19 maxlen: 24
                          190.143.224.0/20 maxlen: 24
                          200.119.128.0/20 maxlen: 24
                          200.119.144.0/22 maxlen: 24
                          200.119.148.0/23 maxlen: 24
                          200.119.150.0/24 maxlen: 24
                          200.119.154.0/23 maxlen: 24
                          200.119.156.0/22 maxlen: 24
                          200.119.160.0/20 maxlen: 24
                          200.119.176.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2168592 (0x211710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
        Validity
            Not Before: Apr 26 06:15:13 2023 GMT
            Not After : Apr 27 06:15:13 2025 GMT
        Subject: CN=37cbceb14b8cf60e9270f4b41a26d2df6b420a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:af:d8:f3:de:76:76:46:70:ea:7c:25:61:d7:
                    2d:6e:45:80:d0:ed:94:e8:89:ec:a7:c2:ec:97:06:
                    10:dc:49:43:d0:31:79:0f:2c:aa:46:9c:99:bd:15:
                    7c:34:0a:87:65:fc:5a:4c:21:7e:36:ae:91:44:50:
                    7d:3f:b2:c8:b5:a7:e3:46:47:ec:e3:8b:d8:cd:5c:
                    54:1b:5e:6f:ab:ea:05:87:37:96:03:5a:76:6a:01:
                    94:77:36:01:a2:b7:a6:23:1b:c6:89:aa:63:35:c7:
                    c9:f9:87:20:a0:80:4b:0e:06:a3:3b:38:c0:69:78:
                    91:27:ed:a3:34:65:ac:68:c6:54:ea:18:57:ad:62:
                    ee:51:89:9a:17:73:1e:ca:93:be:93:d0:12:0d:28:
                    44:d7:66:a8:fc:1f:49:74:68:0c:ad:05:d8:4e:31:
                    4c:68:b5:4c:bd:f8:e7:46:17:f9:62:b8:28:5a:cc:
                    2b:cc:59:f1:be:ab:2f:aa:2f:9b:26:43:1d:89:f6:
                    f5:d5:61:47:3c:b3:8b:51:13:eb:9e:36:83:60:ce:
                    14:fe:88:07:d1:49:7b:1b:d9:50:c6:43:75:98:50:
                    cc:cd:1f:f3:10:a5:e4:cb:bb:db:cf:7d:35:2e:5e:
                    5a:82:84:0c:61:3f:6a:bd:b0:39:a9:50:db:68:b1:
                    d8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4D:FE:26:E3:85:B1:3E:D9:83:8F:1B:A5:0C:F3:09:3F:1B:45:19
            X509v3 Authority Key Identifier:
                keyid:BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/37cbceb14b8cf60e9270f4b41a26d2df6b420a55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.128.0-190.143.239.255
                  200.119.128.0-200.119.150.255
                  200.119.154.0-200.119.183.255

    Signature Algorithm: sha256WithRSAEncryption
         17:58:2d:93:31:ff:44:fb:bf:b1:64:37:e7:62:c1:f7:1f:ac:
         90:ac:1f:8d:cb:61:94:8f:9d:ae:d7:80:eb:b0:ab:65:d9:e9:
         b8:ee:5c:1d:14:4f:fa:8f:dc:26:6b:df:e0:50:2f:90:e6:4a:
         96:e7:42:c4:dc:5d:ef:af:07:64:01:00:40:83:ab:a7:99:ef:
         42:ed:43:7c:6d:84:c1:fb:83:e8:27:dc:a4:b6:a7:d3:ad:66:
         31:0c:d4:4a:ca:77:4c:4d:a2:b2:1f:cc:7e:87:62:9c:37:93:
         a2:32:7f:9a:69:68:e7:32:16:d3:70:7a:43:22:7d:ed:3f:85:
         0d:d2:11:e7:e8:34:ae:f0:d4:9d:81:8d:6b:e6:e9:0e:cb:ae:
         70:c4:94:b6:54:f2:87:ff:71:ea:0a:13:10:68:64:9e:e6:ce:
         22:10:e1:77:db:41:17:f8:2c:c0:27:68:5f:ba:ba:c2:df:fe:
         06:f6:13:5c:aa:00:e4:49:de:1c:4d:71:28:eb:02:fd:2d:e1:
         9e:b5:c6:2b:d0:62:26:bd:21:19:6b:56:83:91:a5:31:2d:5c:
         d0:e7:5e:fd:27:32:0b:ef:50:c5:28:22:c8:71:81:52:68:dd:
         65:88:a3:63:48:78:61:bd:15:b0:a8:82:eb:a5:bc:16:42:20:
         f7:3c:b8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----