Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/d314921594a771416e671fbf6685bf438383588b.roa
File:                     d314921594a771416e671fbf6685bf438383588b.roa (raw, json)
Hash identifier:          606fJOhO9v78+Lz9xD03Uc6rBbxu4Cj6jHGLiU2feus=
Subject key identifier:   01:4C:04:A7:10:76:B7:06:B5:9D:26:00:7B:E6:54:78:16:66:59:84
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       211B21
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/d314921594a771416e671fbf6685bf438383588b.roa
Signing time:             Fri 17 Feb 2023 14:54:22 +0000
ROA not before:           Tue 27 Sep 2022 13:53:38 +0000
ROA not after:            Sat 28 Sep 2024 13:53:38 +0000
asID:                     3816
IP address blocks:        190.52.0.0/19 maxlen: 19
                          190.52.0.0/24 maxlen: 24
                          190.52.1.0/24 maxlen: 24
                          190.52.4.0/22 maxlen: 22
                          190.52.10.0/24 maxlen: 24
                          190.52.11.0/24 maxlen: 24
                          190.52.12.0/24 maxlen: 24
                          190.52.14.0/24 maxlen: 24
                          190.52.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2169633 (0x211b21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Sep 27 13:53:38 2022 GMT
            Not After : Sep 28 13:53:38 2024 GMT
        Subject: CN=d314921594a771416e671fbf6685bf438383588b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:51:4b:8c:e6:b4:e7:de:00:62:e4:30:72:29:
                    a7:5c:52:de:27:d7:33:e8:09:26:82:91:e3:46:fd:
                    02:b2:6a:a0:1c:fa:27:a8:56:7a:8e:65:2c:db:a7:
                    2a:74:50:2c:9a:05:f2:aa:f3:af:1c:b9:43:41:ff:
                    43:e4:9b:05:80:65:0f:79:52:3b:71:2f:c9:20:1f:
                    19:1f:17:e7:0a:9e:7a:38:ee:af:c5:69:50:eb:5b:
                    e6:fd:50:a3:42:60:5c:52:20:09:ab:ac:5b:28:c5:
                    f6:da:75:97:87:dd:09:0d:87:c2:d4:4d:68:76:b3:
                    3a:c4:07:cd:7b:a8:c0:0d:27:79:50:a3:e0:e0:71:
                    2a:18:c7:1a:85:6b:29:f3:6a:71:f6:ff:02:ef:ff:
                    36:65:c5:a4:ac:bc:9e:7a:39:e1:ca:cf:46:f8:52:
                    7e:3b:25:ef:00:cb:fb:55:12:21:7f:13:92:06:24:
                    18:64:42:aa:69:bd:05:0d:39:0c:e3:ac:0a:99:07:
                    d3:ac:7c:84:5f:dc:c1:c7:55:3d:b3:82:c5:29:69:
                    71:76:0d:dd:9e:f6:97:ac:85:72:44:8a:8a:a8:43:
                    06:f5:f9:4e:1d:51:ae:4f:d0:46:f7:61:84:fe:c4:
                    83:10:21:b6:af:42:84:3c:cd:45:7f:37:4b:fd:f1:
                    8b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4C:04:A7:10:76:B7:06:B5:9D:26:00:7B:E6:54:78:16:66:59:84
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/d314921594a771416e671fbf6685bf438383588b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0a:a3:b7:ea:79:dd:d6:0b:5a:43:5c:c6:f1:e7:29:71:19:1f:
         b5:13:30:cf:db:cb:4b:cb:56:7d:c8:60:9b:de:bc:70:5e:df:
         7c:f9:58:a7:30:50:35:f5:2d:98:5e:a3:57:3d:f1:98:84:ba:
         ae:f3:98:24:a8:80:c2:2d:78:1b:be:97:02:c3:0f:79:30:22:
         9a:0e:a8:e3:41:38:75:a3:1f:63:3d:ab:ff:74:f1:5d:b7:1b:
         72:45:42:1c:66:23:27:13:ab:b1:e7:d2:5b:ee:51:f6:fc:1d:
         53:09:b8:dc:43:ea:5a:a7:d0:d9:18:10:3c:56:f8:9d:e7:4e:
         f5:e3:7b:37:72:f7:24:b6:27:21:27:ae:74:45:d8:81:49:25:
         2a:68:8b:71:fc:42:de:2b:ec:b1:fd:4d:6b:ff:66:37:23:4a:
         f6:87:76:50:ff:96:ad:25:be:3c:58:81:ba:8f:7e:49:1f:2e:
         02:3b:2a:d7:38:b6:8f:a1:df:b7:04:46:a6:99:a2:91:9c:81:
         ea:61:10:00:10:2f:5d:a3:07:75:f0:69:06:d2:3c:ca:0e:44:
         08:64:9b:99:5b:4b:28:27:1a:bb:8f:22:1e:5f:57:d4:36:02:
         cd:65:cf:7c:98:d9:db:9a:ce:45:d2:80:ec:e3:ca:45:45:e2:
         0e:f9:1c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----