Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/90b522c723fa59f0f86bf9a2a0d2d90a8d4ef5e1.roa
File:                     90b522c723fa59f0f86bf9a2a0d2d90a8d4ef5e1.roa (raw, json)
Hash identifier:          h4Y7dTp903Qdv8Kxx84ACDOui1liy9+gaVwHjqfS6/E=
Subject key identifier:   A1:47:87:6F:EB:0B:31:8F:5B:D2:C9:4E:4F:C4:3F:84:46:07:FE:59
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       20F5FA
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/90b522c723fa59f0f86bf9a2a0d2d90a8d4ef5e1.roa
Signing time:             Mon 12 Jun 2023 15:09:35 +0000
ROA not before:           Sun 11 Jun 2023 15:09:34 +0000
ROA not after:            Thu 12 Jun 2025 15:09:34 +0000
asID:                     27789
IP address blocks:        190.93.64.0/18 maxlen: 24
                          201.221.69.0/24 maxlen: 24
                          201.221.72.0/21 maxlen: 24
                          201.221.80.0/22 maxlen: 24
                          201.221.84.0/23 maxlen: 24
                          200.12.240.0/21 maxlen: 24
                          201.221.93.0/24 maxlen: 24
                          201.221.94.0/24 maxlen: 24
                          190.93.0.0/19 maxlen: 24
                          201.221.64.0/22 maxlen: 24
                          2800:70::/32 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2160122 (0x20f5fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Jun 11 15:09:34 2023 GMT
            Not After : Jun 12 15:09:34 2025 GMT
        Subject: CN=90b522c723fa59f0f86bf9a2a0d2d90a8d4ef5e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:32:40:24:60:35:d5:41:c1:2f:08:03:c4:f0:
                    65:6e:7b:78:bd:a7:53:b2:0c:35:1d:3d:7f:d8:c9:
                    67:dd:be:a4:13:65:29:49:de:cd:63:9f:5f:f1:c3:
                    63:21:e8:05:c4:2f:f7:1c:c2:92:64:ae:d2:6d:7f:
                    3a:4d:9c:24:88:e8:6d:a5:dc:4c:7b:8f:61:54:bc:
                    f4:e2:a0:bf:a9:ee:69:3e:25:17:bd:5d:da:fa:f6:
                    e6:54:fc:7d:a8:02:75:af:55:e8:ce:5c:84:f1:1b:
                    00:58:a9:9b:47:7b:a0:38:9e:92:27:bb:e1:68:cf:
                    49:b2:2a:2c:4c:16:ab:80:f6:83:c9:05:86:12:d7:
                    e1:24:a6:be:55:30:d9:17:55:08:77:6b:fc:2f:7d:
                    d9:a7:95:c5:ae:83:55:79:5d:62:4c:80:e3:4c:48:
                    a3:a3:d9:de:82:a4:7e:96:85:25:e2:89:48:01:9f:
                    36:d5:87:b2:ee:b6:48:76:e7:dc:0f:f3:0f:c5:ab:
                    7a:50:38:f8:36:e9:b6:ab:18:e4:32:db:d8:5f:9d:
                    45:62:6d:76:90:9e:4a:c5:70:ea:94:b5:c4:87:b1:
                    22:d4:86:ed:89:ed:e7:a0:c7:8e:15:4e:bc:2d:ca:
                    28:50:b1:45:87:81:f5:80:58:ed:b1:d6:ca:61:1c:
                    8c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:47:87:6F:EB:0B:31:8F:5B:D2:C9:4E:4F:C4:3F:84:46:07:FE:59
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/90b522c723fa59f0f86bf9a2a0d2d90a8d4ef5e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.0.0/19
                  190.93.64.0/18
                  200.12.240.0/21
                  201.221.64.0/22
                  201.221.69.0/24
                  201.221.72.0-201.221.85.255
                  201.221.93.0-201.221.94.255
                IPv6:
                  2800:70::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:02:2c:b4:8e:2a:cb:77:7e:a6:3c:20:e7:d0:fc:bc:79:af:
         f0:70:c9:fc:a5:0d:ef:21:18:cb:78:2c:24:a4:c5:2b:29:1f:
         ea:0a:48:5e:02:42:be:21:62:15:a5:7c:2b:91:e3:0e:73:8f:
         64:55:7d:42:7e:cd:16:7e:83:14:65:14:13:54:76:4d:d3:0e:
         3d:1c:63:b6:f6:a1:08:f0:a1:c5:7b:20:78:eb:d1:13:f5:b6:
         c6:e1:9b:73:35:dc:6c:ae:0a:45:c8:13:77:83:ec:4b:21:ed:
         a2:6a:e0:d5:f1:ad:72:9e:77:44:13:cc:66:6e:75:4f:e1:3c:
         85:2c:be:c3:92:cd:1d:93:e5:bf:b9:79:72:53:dd:46:f5:9e:
         52:fd:de:4f:3b:0f:60:58:af:04:46:1e:d9:4a:92:02:e9:b3:
         23:01:f9:72:40:a6:bd:4b:8a:fb:de:3c:c5:3f:ee:62:ae:f9:
         6d:c6:0f:11:b4:8d:39:b2:6e:55:02:84:d3:cd:86:7a:b8:d2:
         fa:4d:f4:4c:1b:5e:d7:9d:63:b6:9a:0a:0d:95:6c:ba:94:59:
         a7:21:89:90:2e:02:32:f3:43:72:60:00:89:c6:76:e1:f4:bd:
         9a:e6:4e:65:de:2d:79:75:ac:4c:36:c7:34:f5:a3:79:ec:6f:
         42:48:b2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----