Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/35ff96173ded11bf3ce9ea583ac2a87424b34487.roa
File:                     35ff96173ded11bf3ce9ea583ac2a87424b34487.roa (raw, json)
Hash identifier:          /8AIVaBk+nmx09IY87e7UDyS1x1vVXaYVtqkk6kv28Q=
Subject key identifier:   21:52:8D:D3:D3:5F:42:80:6D:6F:F1:2B:1E:CF:0D:81:4D:46:28:1B
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       20E6CD
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/35ff96173ded11bf3ce9ea583ac2a87424b34487.roa
Signing time:             Mon 27 Feb 2023 17:11:39 +0000
ROA not before:           Fri 23 Dec 2022 16:26:20 +0000
ROA not after:            Sat 28 Dec 2024 16:26:20 +0000
asID:                     28006
IP address blocks:        190.214.5.0/24 maxlen: 24
                          190.214.253.0/24 maxlen: 24
                          181.113.192.0/24 maxlen: 24
                          2800:370:2a::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2156237 (0x20e6cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Dec 23 16:26:20 2022 GMT
            Not After : Dec 28 16:26:20 2024 GMT
        Subject: CN=35ff96173ded11bf3ce9ea583ac2a87424b34487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8e:0d:0c:5d:76:b0:30:30:ea:ad:6d:7d:8b:
                    d2:c1:e1:9f:e1:6c:1d:a3:52:76:75:82:47:0d:bf:
                    c5:db:47:82:e1:cf:41:02:dc:94:b8:0d:fe:4d:7b:
                    4b:a7:e0:f0:5b:25:e6:34:36:84:8f:cc:25:09:bd:
                    17:9c:93:fe:06:02:2a:92:a1:c3:ca:03:d7:3a:ab:
                    28:c4:57:0f:f0:15:f4:f5:77:17:43:f8:fd:d6:bd:
                    e3:eb:de:4a:54:6e:20:eb:0d:31:ed:f0:e3:0e:e3:
                    7e:ec:65:3e:ac:a1:83:91:b4:44:83:d1:48:8e:12:
                    10:c3:6a:2a:ee:b4:0b:71:df:a2:c3:f3:be:0f:1b:
                    28:fc:4e:6c:58:58:cf:78:2f:e2:e8:e4:c2:1d:b5:
                    9b:84:7a:43:87:fc:a2:df:a2:79:4a:a5:12:44:d4:
                    a5:c7:be:22:0c:54:46:f9:ae:d5:a3:b8:2f:66:5d:
                    49:e2:4e:bd:02:25:36:da:09:b8:8d:f7:f1:fe:1c:
                    2b:7c:2f:85:ce:35:e0:54:e7:c3:2b:25:cb:ea:0d:
                    a1:7f:85:48:b6:d3:92:f0:3c:58:08:ad:d7:c2:40:
                    d6:08:3d:68:95:e0:44:64:4d:cc:38:4a:39:85:48:
                    20:ec:24:68:22:77:0f:97:03:40:9d:f7:46:8b:bc:
                    33:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:52:8D:D3:D3:5F:42:80:6D:6F:F1:2B:1E:CF:0D:81:4D:46:28:1B
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/35ff96173ded11bf3ce9ea583ac2a87424b34487.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.113.192.0/24
                  190.214.5.0/24
                  190.214.253.0/24
                IPv6:
                  2800:370:2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:37:4d:00:e0:85:f4:fa:e0:c3:ef:f1:76:64:98:ac:74:f7:
         5c:0e:e6:b3:33:e8:10:99:34:fa:28:66:2e:37:cd:fa:e4:07:
         bf:e1:4e:a4:b8:0f:f6:d8:ce:96:4b:60:c8:ac:90:a4:67:1e:
         ec:37:41:0e:c1:df:dc:34:3b:d6:fa:d7:f9:e0:d1:03:81:22:
         aa:4e:4f:b5:e0:47:fa:45:4c:96:1b:a0:d2:8f:ad:f7:58:a0:
         60:d0:7b:9f:0d:41:2f:8f:de:64:76:ef:af:3d:0f:d7:7e:e2:
         6a:d1:b2:dd:2f:d6:45:b1:54:f7:ae:1f:65:d8:39:cc:ee:d7:
         f7:5d:b0:76:92:ac:c8:8e:3e:49:30:6c:73:5d:95:92:d1:0d:
         99:49:fc:d0:60:51:20:f9:95:fd:7b:4f:99:a2:50:0b:f7:18:
         09:6c:f8:02:46:a6:2f:6a:ec:29:5b:b4:b5:68:f8:3e:59:c5:
         52:4f:ad:c0:88:d3:58:f9:d5:b8:7f:7d:a3:7b:54:06:91:97:
         6c:1f:24:72:7c:60:17:72:cb:50:03:55:fe:c9:ee:27:75:37:
         39:54:9e:43:1e:bc:56:53:23:df:31:c1:1d:86:f4:5b:97:cd:
         25:df:60:d2:df:eb:72:9d:96:43:fc:4e:e1:ef:5f:41:2c:5c:
         4f:0a:45:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----