Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/49b63f362ce5579c4b75e6b8240f9dfc740e51de.roa
File:                     49b63f362ce5579c4b75e6b8240f9dfc740e51de.roa (raw, json)
Hash identifier:          RM1WZAFgERH8grxNFvloykk2JChkp8NtvV6xAdhVhKU=
Subject key identifier:   57:5B:F3:94:0B:A5:19:5E:CC:4C:AA:C2:9E:BD:2A:D1:99:FE:54:54
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       203D8E
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/49b63f362ce5579c4b75e6b8240f9dfc740e51de.roa
Signing time:             Fri 20 Jan 2023 15:44:20 +0000
ROA not before:           Thu 18 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     262589
IP address blocks:        190.90.209.0/24 maxlen: 24
                          190.90.225.0/24 maxlen: 24
                          190.90.233.0/24 maxlen: 24
                          190.90.242.0/24 maxlen: 24
                          190.90.250.0/24 maxlen: 24
                          190.90.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2112910 (0x203d8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Mar 18 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=49b63f362ce5579c4b75e6b8240f9dfc740e51de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0b:5b:dd:7f:5f:2d:3d:97:14:01:b9:9b:72:
                    89:23:9b:95:cd:94:68:58:90:d1:f0:b9:fb:53:7f:
                    6e:e3:54:2d:41:3e:01:62:2c:db:a8:d5:49:54:5a:
                    ec:02:c6:d9:04:a7:86:11:06:2a:5c:16:50:8d:fc:
                    ee:14:8e:2f:28:eb:83:6b:c5:aa:2c:2f:53:6d:ae:
                    41:8a:c1:d3:09:a2:71:04:5f:90:22:dc:2f:f3:f8:
                    f7:d7:94:f1:1c:03:44:db:61:f4:97:cc:70:cf:52:
                    c7:b4:7e:d6:b3:9f:76:60:70:c5:93:51:ca:89:0d:
                    3b:e2:4e:5b:10:7c:99:db:13:4d:db:97:43:90:6b:
                    29:2a:b2:ea:c3:bc:25:49:03:c2:d2:3d:d9:6c:aa:
                    4e:96:43:d0:8b:f8:98:26:fe:db:5e:86:11:0a:47:
                    91:99:ea:5c:29:14:ba:08:ea:8d:4d:dd:21:50:2f:
                    50:11:ab:d1:32:ee:a4:1d:31:5b:d7:68:09:22:70:
                    61:85:0b:56:d1:4f:ab:30:79:0b:86:20:f4:fc:ed:
                    75:3e:ba:8a:69:23:5d:0a:d4:e6:59:00:53:5c:97:
                    0b:8c:74:fa:57:5d:a7:f0:9e:04:a8:2a:43:93:57:
                    d0:39:0d:a8:af:68:2d:7b:b4:77:5b:5c:1b:7c:1d:
                    c9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5B:F3:94:0B:A5:19:5E:CC:4C:AA:C2:9E:BD:2A:D1:99:FE:54:54
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/49b63f362ce5579c4b75e6b8240f9dfc740e51de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.209.0/24
                  190.90.225.0/24
                  190.90.233.0/24
                  190.90.242.0/24
                  190.90.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:83:41:d2:9b:8d:3e:c7:86:e1:63:65:9c:08:14:f5:ee:68:
         53:80:8c:82:6e:19:82:82:7b:a1:53:c2:90:8a:56:00:81:cb:
         57:cc:85:15:9b:0b:4e:24:4c:4d:4b:63:00:95:eb:4d:c1:5f:
         ce:43:60:85:48:bc:7b:05:be:cd:3c:ad:04:f8:c9:e4:48:a3:
         85:14:39:4f:54:16:c4:dc:e0:ff:4a:88:97:60:d4:c2:44:25:
         75:c7:d4:8e:50:7c:ef:d6:3e:7c:04:8c:ad:ac:15:5c:81:9e:
         19:e5:92:16:b6:fb:81:1d:3b:51:fb:32:e9:7d:1a:17:1a:88:
         11:b0:b9:6f:d5:6d:03:85:a0:c8:7e:56:1d:4a:64:1a:35:a9:
         04:43:c1:87:7c:db:c9:be:1d:18:6e:f9:ad:a5:3e:41:c4:16:
         45:15:ed:49:61:9d:08:e0:9b:b9:e8:05:27:0a:85:7f:30:81:
         b8:b5:97:c5:b9:ae:c5:dd:0a:ad:f8:f8:58:6a:eb:f5:21:dd:
         24:c8:3b:7d:af:36:31:ad:6e:b3:89:1f:17:8e:1f:7b:5c:17:
         25:d0:1c:96:21:74:49:57:20:e3:bb:47:37:d9:22:59:6c:d5:
         9a:15:a2:a5:4b:8e:3d:ba:84:c7:f1:a0:87:45:51:44:0e:d7:
         a0:67:e8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----