Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/e4c7b307728784d2e4556bcf0e8a4c43c48a25d1.roa
File:                     e4c7b307728784d2e4556bcf0e8a4c43c48a25d1.roa (raw, json)
Hash identifier:          QwfkkJlhNozab2fHZc1dFLVdpg6O/pTF4csd3LpzVqw=
Subject key identifier:   3C:14:6B:E5:C4:C8:10:F6:28:36:72:AF:C5:3B:57:F4:A9:66:7D:0E
Certificate issuer:       /CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Certificate serial:       1C54CA
Authority key identifier: 61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/e4c7b307728784d2e4556bcf0e8a4c43c48a25d1.roa
Signing time:             Thu 22 Sep 2022 21:08:30 +0000
ROA not before:           Thu 22 Sep 2022 21:06:02 +0000
ROA not after:            Sun 22 Sep 2024 21:06:02 +0000
asID:                     22368
IP address blocks:        190.96.128.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1856714 (0x1c54ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
        Validity
            Not Before: Sep 22 21:06:02 2022 GMT
            Not After : Sep 22 21:06:02 2024 GMT
        Subject: CN=e4c7b307728784d2e4556bcf0e8a4c43c48a25d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:a5:52:b2:f3:2c:0b:f5:05:a8:a4:23:11:
                    23:e9:fb:94:12:1c:29:a3:7b:a4:26:0c:b9:22:f3:
                    15:ac:78:a7:64:b3:3c:5a:c6:30:1d:3e:01:d0:45:
                    9f:c6:62:a3:0e:ff:97:43:1f:09:45:48:ad:e1:e7:
                    32:6a:bd:bf:3a:36:43:4b:bc:e6:82:a9:81:1f:c1:
                    6c:4a:b6:a2:74:24:a9:c3:d1:35:bf:76:d3:1e:d6:
                    b0:b4:a5:b0:86:5b:e9:1c:92:ca:1e:7f:41:58:0a:
                    cf:b1:1a:81:97:4b:89:78:3e:b7:43:41:ac:d6:e0:
                    f0:50:fa:ee:87:70:38:b8:78:2a:02:c6:66:0c:59:
                    20:cd:11:a5:30:e6:0b:18:1e:ee:f2:18:20:19:58:
                    1e:5a:b8:5e:69:20:60:96:75:78:a6:7d:ea:74:0f:
                    86:b1:f8:e6:30:45:87:40:75:21:66:87:71:5c:9e:
                    15:69:49:22:d7:c7:ae:9a:75:02:0b:ac:2b:63:ad:
                    2d:c8:a4:c8:cd:63:4a:d5:ca:63:d3:f3:10:eb:cf:
                    46:b2:be:14:19:30:e0:7a:f8:bd:cb:a5:bb:85:b1:
                    a6:f2:07:51:10:cb:35:79:67:78:de:55:85:e4:41:
                    50:d3:dc:38:44:a3:28:50:58:ba:22:f9:e7:55:da:
                    af:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:14:6B:E5:C4:C8:10:F6:28:36:72:AF:C5:3B:57:F4:A9:66:7D:0E
            X509v3 Authority Key Identifier:
                keyid:61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/e4c7b307728784d2e4556bcf0e8a4c43c48a25d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:8c:ee:79:3b:55:27:5d:6e:58:ea:d0:c4:f6:fa:67:87:ad:
         fa:0e:dc:e9:11:3d:49:d6:d0:f4:60:c7:f7:3a:e6:28:e4:ab:
         85:5d:38:de:cf:70:90:56:d2:68:f7:52:14:05:e7:f1:87:21:
         61:17:ce:77:81:ac:2e:03:df:4b:b2:c7:fb:df:57:74:33:e2:
         58:71:b5:d4:f9:50:51:de:1e:08:b0:21:55:85:cc:77:1c:a6:
         21:e3:0d:59:e9:60:ca:a6:fa:a9:08:72:52:b8:5e:f2:64:b6:
         cf:92:ef:97:52:c7:3e:0a:07:5e:90:86:1b:1c:c5:5a:01:15:
         26:ac:fd:a2:33:71:91:6b:ea:c7:62:6d:f8:1c:d5:8d:e9:9c:
         8b:79:44:89:8a:98:43:87:f8:fe:c5:ea:aa:7b:09:fb:dd:e5:
         ab:a7:80:2d:3a:16:a3:9b:f2:4c:b1:76:9a:9b:8d:b3:47:30:
         4e:0d:db:6d:17:a9:91:bb:e4:b4:bb:34:71:8f:6d:24:82:e3:
         89:ed:fa:7f:2a:db:8e:96:bf:f0:6a:2a:a6:e9:fa:80:85:b7:
         d8:5a:d2:7c:06:3e:6a:c2:62:41:47:aa:2c:4a:27:02:d5:43:
         4a:fb:0c:2d:da:1b:42:4c:42:ce:7c:c5:e5:e8:7c:64:69:90:
         41:ac:49:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----