Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/d588a84bd50e6557055fdd6883c30c546bf47cf9.roa
File:                     d588a84bd50e6557055fdd6883c30c546bf47cf9.roa (raw, json)
Hash identifier:          yLR7eWRVJbb4/Z5UTmnqCYhRP2sHsSISKeCExKzMNGI=
Subject key identifier:   F4:CF:D9:53:C1:1B:A7:B2:79:40:2B:7D:B0:C2:33:E8:9C:76:CE:6E
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1D7431
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/d588a84bd50e6557055fdd6883c30c546bf47cf9.roa
Signing time:             Mon 03 Oct 2022 14:14:27 +0000
ROA not before:           Wed 24 Mar 2021 14:34:57 +0000
ROA not after:            Tue 24 Mar 2026 14:34:57 +0000
asID:                     21578
IP address blocks:        190.68.254.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1930289 (0x1d7431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Mar 24 14:34:57 2021 GMT
            Not After : Mar 24 14:34:57 2026 GMT
        Subject: CN=d588a84bd50e6557055fdd6883c30c546bf47cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:01:49:98:40:da:fe:88:a7:87:a7:89:85:
                    a9:44:bb:35:4e:5e:39:2b:20:a3:64:76:67:c6:41:
                    f4:df:56:be:bd:67:a4:fd:a3:ab:62:19:91:70:09:
                    a0:a1:6f:85:b8:5c:d9:2a:86:2c:20:30:c6:c3:da:
                    a6:54:d8:c0:e9:44:55:3f:4d:36:34:8a:d7:70:58:
                    99:95:9e:6d:20:16:a3:62:f3:10:aa:ee:e8:cc:3d:
                    7d:c6:de:73:a2:63:a4:f8:d8:2a:df:56:14:9d:2c:
                    76:ac:8a:ce:3f:60:cc:f1:7e:88:b7:13:64:e7:1c:
                    5d:9e:71:e4:1e:79:37:af:2f:a2:de:ae:c7:2f:07:
                    7a:ef:01:6e:7d:32:88:f1:b9:11:9d:94:50:7c:09:
                    29:ff:e2:1c:dd:c8:9b:d3:b4:b1:da:e6:fd:ad:2b:
                    19:df:ea:9d:58:90:f8:82:ed:fb:33:0d:07:4e:a7:
                    ae:27:1b:bb:35:a6:d1:07:2c:13:16:46:41:e1:88:
                    b5:38:8e:65:2d:33:3c:a7:8a:9f:5c:be:0d:d5:f7:
                    28:cf:62:ba:f4:54:b7:8e:8e:f5:40:02:c8:60:b0:
                    fd:44:ac:48:d6:69:d3:e3:f1:1c:8e:de:1b:b1:78:
                    ec:9d:90:53:f4:b6:b3:b9:ce:7d:69:cf:23:b3:46:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CF:D9:53:C1:1B:A7:B2:79:40:2B:7D:B0:C2:33:E8:9C:76:CE:6E
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/d588a84bd50e6557055fdd6883c30c546bf47cf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.68.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:fc:a5:c2:99:2b:c6:79:9b:72:cd:1c:86:21:fa:44:36:17:
         54:14:d6:7b:a5:84:38:93:74:52:81:4a:bb:75:ee:1e:2f:83:
         e7:b8:1b:e0:c1:dc:93:ed:f5:91:e1:8a:7d:7e:aa:0e:ba:a7:
         d9:57:1b:05:2a:1f:17:c8:b6:36:51:7b:b8:97:ec:48:35:63:
         c3:53:9a:e4:d6:80:ae:dc:d0:d2:e4:b9:e7:89:b8:6d:ac:b9:
         dc:6b:f4:d8:20:82:2c:b3:cd:ee:49:3b:39:84:10:b4:e9:b7:
         13:e3:f7:0a:5f:a2:63:e3:b0:b1:27:b0:a9:9f:2a:dc:7d:b2:
         29:f2:0f:e5:09:63:e4:e5:cf:68:d5:a8:8a:aa:9d:7f:61:be:
         a8:bc:fc:44:8c:a1:f8:e3:91:43:5e:0a:92:c5:88:02:5a:62:
         f6:f3:31:2f:a3:4b:fe:68:e2:a6:03:c0:b0:0b:63:7b:84:cb:
         e5:d3:95:11:b3:fe:bf:bd:40:46:fa:02:37:30:47:e9:3d:48:
         4f:8c:2c:69:ec:db:81:2a:a6:db:b5:87:d1:e3:16:dc:46:80:
         43:ab:f1:c6:47:b5:26:2e:df:9e:e0:5c:fa:0d:df:32:27:4e:
         70:ed:b9:84:e7:b6:80:b3:2d:41:19:eb:ac:a4:02:f9:13:de:
         7d:b6:fd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----