Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b8991d3a20fc8c4363912ccfa22f6f5439491956.roa
File:                     b8991d3a20fc8c4363912ccfa22f6f5439491956.roa (raw, json)
Hash identifier:          xi7qTi/sK1GCfKR0lOzUQVGYwqo5GbudNeAJt9m1vQo=
Subject key identifier:   5A:84:2B:A9:AE:D0:C5:45:7A:9F:B0:79:2B:F3:53:76:52:36:26:F8
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       25ED2D
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b8991d3a20fc8c4363912ccfa22f6f5439491956.roa
Signing time:             Tue 03 Oct 2023 15:33:00 +0000
ROA not before:           Mon 02 Oct 2023 15:33:00 +0000
ROA not after:            Fri 03 Oct 2025 16:33:00 +0000
asID:                     834
IP address blocks:        190.93.67.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2485549 (0x25ed2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Oct  2 15:33:00 2023 GMT
            Not After : Oct  3 16:33:00 2025 GMT
        Subject: CN=b8991d3a20fc8c4363912ccfa22f6f5439491956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f8:41:04:84:c0:1a:cc:98:ab:dc:db:47:b6:
                    61:53:ad:4c:c6:ef:dc:19:50:ae:e4:04:12:e8:7c:
                    b0:27:2f:97:f1:b4:c3:3b:5c:15:ae:2f:d2:1e:37:
                    4d:46:77:5c:51:3b:29:87:57:4c:4e:09:06:f2:e2:
                    09:2f:fa:1c:67:24:0d:ea:d8:ce:84:e0:f9:c8:a3:
                    9f:a6:78:ec:d5:02:9f:2c:d6:fa:b0:56:24:85:bb:
                    43:3d:be:ca:e8:9d:3c:d9:ef:5c:d3:6f:14:e1:59:
                    4a:69:83:76:81:5c:e4:88:2a:1a:49:45:db:02:0a:
                    8e:9b:1f:59:79:c4:0b:b0:80:7b:10:07:b3:bc:2d:
                    8d:84:90:02:3b:79:66:ef:94:f2:f9:cf:1c:fb:ed:
                    a0:36:f8:1a:52:3d:31:69:bc:11:78:03:83:84:6e:
                    e0:e8:2f:d7:6c:a9:93:6b:dd:37:48:19:d4:15:0a:
                    80:64:a5:e0:27:ea:90:9b:01:d4:39:bd:f0:d6:6e:
                    17:18:08:d9:b0:16:b4:f5:d3:a6:75:29:33:46:72:
                    d0:5c:60:2f:b0:28:8f:44:a3:9f:59:75:18:1e:98:
                    b1:b7:6b:37:41:19:2c:ba:3d:78:c2:58:31:dc:8b:
                    c4:1c:d5:a6:83:8b:d6:d4:74:cb:b9:3d:9c:7a:67:
                    e7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:84:2B:A9:AE:D0:C5:45:7A:9F:B0:79:2B:F3:53:76:52:36:26:F8
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b8991d3a20fc8c4363912ccfa22f6f5439491956.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:9f:84:23:65:3b:bd:6a:f1:44:81:1f:1b:ca:75:6d:25:11:
         e9:54:a6:dd:83:aa:90:a2:44:87:08:21:10:0b:d0:b7:33:dd:
         77:91:9c:4c:52:80:81:51:e9:19:a2:8b:9d:30:44:01:d7:71:
         ae:43:19:5b:36:92:a2:3e:42:56:17:8b:e9:f3:70:59:ba:01:
         a4:a8:d2:87:cb:ee:b4:5d:ed:7d:93:f8:37:1b:4d:2a:64:de:
         c5:b7:c2:c6:50:f7:c4:42:64:3a:a5:b9:85:30:cb:94:e9:e2:
         ad:13:28:1e:f1:d7:83:31:08:f1:06:a5:a0:2c:4b:e0:e4:1d:
         01:de:4b:ae:e3:ab:1f:f9:e1:8f:c7:b8:a0:72:91:f6:a8:85:
         fe:5c:d8:1f:4a:ea:02:10:c8:fa:0c:a7:45:3b:9e:bd:75:93:
         10:ff:4f:1a:c1:4d:b4:ba:f3:fe:e3:c9:97:de:f1:2a:2c:25:
         40:50:e8:bb:1c:71:2b:04:4e:90:a7:44:a4:07:3c:98:27:fd:
         ac:f7:ef:cc:b0:af:90:3e:30:9f:07:fa:4f:cc:ed:01:6b:6f:
         02:a3:d3:b3:24:26:da:67:72:14:ca:cf:29:dc:b5:de:b7:56:
         1e:41:54:c9:fe:7b:a9:9b:e9:dd:99:82:24:56:14:8d:80:ae:
         02:05:76:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----