Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5aa6f2cecb5afb8ceec27e0c638be4ea0195ca18.roa
File:                     5aa6f2cecb5afb8ceec27e0c638be4ea0195ca18.roa (raw, json)
Hash identifier:          5u68CLKACNwEjJrZ+uG1HILCIrSumJdKSgpImSFiHzA=
Subject key identifier:   DF:CB:EC:3E:6F:9D:94:53:46:0C:E6:13:F2:5A:B4:5B:60:5F:B7:8C
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2B88A4
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5aa6f2cecb5afb8ceec27e0c638be4ea0195ca18.roa
Signing time:             Wed 13 Mar 2024 14:59:47 +0000
ROA not before:           Wed 13 Mar 2024 14:59:47 +0000
ROA not after:            Fri 13 Mar 2026 14:59:47 +0000
asID:                     834
IP address blocks:        190.93.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 18:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2853028 (0x2b88a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Mar 13 14:59:47 2024 GMT
            Not After : Mar 13 14:59:47 2026 GMT
        Subject: CN=5aa6f2cecb5afb8ceec27e0c638be4ea0195ca18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:29:cf:98:79:1c:e4:59:5f:d9:50:6b:4b:74:
                    88:2e:8f:82:48:8b:3a:1f:5a:9e:a3:b5:fe:87:cb:
                    38:89:94:86:88:98:67:7a:f3:08:1e:62:d4:a3:c7:
                    21:e3:b7:59:5b:06:57:11:4c:7c:33:15:dc:23:f8:
                    d6:9f:87:96:9b:b7:04:d0:8b:e7:d0:cb:76:03:93:
                    82:7a:10:e0:fe:6f:e4:b4:5e:30:3d:77:73:34:44:
                    44:b9:0a:cd:82:c2:1c:0f:9a:53:4c:9b:1a:65:e3:
                    4c:46:28:42:e0:1e:72:66:ce:13:5c:28:22:70:e9:
                    d1:21:e2:88:10:e9:bc:39:01:e4:66:2a:0b:81:55:
                    71:64:bc:9b:53:e5:a3:88:ed:41:94:39:e7:ee:ef:
                    c8:8c:ce:6b:33:49:61:fa:ae:1c:a2:da:11:c2:5a:
                    50:6b:9d:03:0f:8e:6a:b9:f7:4d:95:43:69:e5:94:
                    86:09:95:bc:bb:36:cb:82:06:f6:51:9b:3a:64:a6:
                    ff:55:a4:13:6f:a5:fb:80:ea:1f:59:52:40:51:fa:
                    ce:d6:9e:ac:b7:26:26:8a:cd:60:6d:19:5b:59:a5:
                    f5:c6:7f:70:3c:a8:0a:51:fd:8e:e9:2a:c4:36:de:
                    18:57:5e:5e:4a:bc:2b:d4:91:43:3e:f4:0b:90:65:
                    ca:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CB:EC:3E:6F:9D:94:53:46:0C:E6:13:F2:5A:B4:5B:60:5F:B7:8C
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5aa6f2cecb5afb8ceec27e0c638be4ea0195ca18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:d5:bd:11:83:a5:c3:a7:db:8e:3a:43:bb:6e:ab:ff:ae:0d:
         84:79:b9:b8:8a:fc:3f:5d:e3:01:4f:4b:74:c5:3f:a2:50:68:
         3e:89:98:8a:25:73:20:ff:54:4c:4d:1d:d9:89:e0:99:02:b1:
         0f:db:bf:a8:33:3f:97:7a:74:28:9d:c2:cc:90:4b:85:95:75:
         10:93:25:80:72:e2:4c:25:3c:e3:af:c3:fd:c8:14:de:8d:d2:
         20:d6:98:5a:df:96:a1:4f:96:7b:07:fa:08:4d:87:ec:e7:30:
         68:f2:dd:e1:80:48:fd:4a:e2:34:5e:5a:9c:19:43:f4:40:23:
         44:0f:9f:45:7e:5c:33:41:24:cd:59:b8:2e:b4:e0:98:de:c9:
         71:09:94:c7:52:90:b4:cc:97:de:b4:bd:ef:85:21:eb:60:4d:
         ca:b8:3c:3e:e2:fe:2f:dd:48:e8:d5:0f:77:81:ee:f1:48:8f:
         fa:3e:d7:60:d2:bc:52:b9:2d:72:29:c8:22:10:63:a5:b2:bd:
         ee:a8:50:6e:6c:1b:74:e8:cf:dd:39:1d:ea:52:82:35:ab:02:
         c2:5b:d1:41:30:ad:ef:76:7c:4b:3c:ab:b7:c8:6f:a8:99:92:
         47:8a:f4:21:42:2a:e9:f1:20:56:e0:4f:bf:38:51:9b:c4:f7:
         b0:5a:6e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----