Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/cb4a4742d3b39e39ac4b1de374ff87ebd6042c6a.roa
File:                     cb4a4742d3b39e39ac4b1de374ff87ebd6042c6a.roa (raw, json)
Hash identifier:          mLz3i1hhAb/+hrhsaFjmVx+eJw87FiiXAjA08HbknB0=
Subject key identifier:   59:50:0D:D7:E7:87:10:AD:8F:42:E4:9B:E3:CB:B0:1D:0F:B2:0F:1C
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       254359
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/cb4a4742d3b39e39ac4b1de374ff87ebd6042c6a.roa
Signing time:             Mon 11 Sep 2023 17:14:30 +0000
ROA not before:           Sun 10 Sep 2023 17:14:30 +0000
ROA not after:            Thu 11 Sep 2025 17:14:30 +0000
asID:                     834
IP address blocks:        190.93.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2442073 (0x254359)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Sep 10 17:14:30 2023 GMT
            Not After : Sep 11 17:14:30 2025 GMT
        Subject: CN=cb4a4742d3b39e39ac4b1de374ff87ebd6042c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:72:dd:82:29:55:93:f9:30:9a:44:2a:8f:ce:
                    ca:b5:23:81:f9:2e:74:27:c4:5c:29:a3:e6:3e:69:
                    72:e8:44:7a:82:ff:10:dc:a3:64:b2:69:06:71:a9:
                    2d:0d:8f:4a:aa:4d:e2:58:5b:d3:0a:39:a8:28:2f:
                    62:bf:73:2f:28:0a:48:3a:6f:09:86:6a:92:8e:e5:
                    33:29:9e:77:ee:63:0b:ca:5c:58:09:ae:38:80:7e:
                    8c:2d:e5:82:25:2d:20:e6:f3:6f:23:d3:6e:06:18:
                    ef:c4:8b:b2:71:3f:84:0c:83:16:b0:46:9c:82:ce:
                    e6:aa:de:08:5f:0c:5d:1f:9c:3e:99:71:1e:b2:96:
                    b2:49:1d:97:02:d7:c7:88:e8:06:84:f5:56:16:20:
                    bd:2d:01:04:62:ec:5b:a2:35:6b:02:e8:9b:10:8b:
                    21:ab:51:0b:6c:5f:9a:59:3a:cf:d9:b4:c3:8e:b9:
                    4b:b0:13:00:b3:08:30:b3:bc:c8:a6:db:a6:70:a6:
                    7d:07:e2:4e:40:b4:84:aa:6f:bd:cf:55:7d:0c:44:
                    a8:b7:98:2b:59:f2:c3:d9:1e:a5:f4:ee:ad:0e:99:
                    79:17:d9:a4:42:11:96:3a:1a:3b:e9:17:6a:df:d2:
                    e0:84:07:21:0d:d7:d0:b4:ce:1f:af:43:d1:4b:f3:
                    24:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:50:0D:D7:E7:87:10:AD:8F:42:E4:9B:E3:CB:B0:1D:0F:B2:0F:1C
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/cb4a4742d3b39e39ac4b1de374ff87ebd6042c6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:4d:40:55:b3:07:84:be:26:82:b4:11:f6:b3:a8:33:9a:92:
         15:0b:6a:ba:45:1b:9d:3e:1a:d7:26:c8:24:70:b7:87:38:1c:
         97:c4:1a:99:46:81:59:e6:db:ef:3d:43:a1:6c:ad:90:51:e0:
         2e:d1:60:34:49:26:76:63:7e:ca:b8:d0:42:87:6a:71:da:80:
         b1:3e:1e:b9:8a:c3:ba:b2:5e:9b:47:26:2b:da:7d:d1:22:0c:
         ec:39:66:29:d9:5d:d6:9c:db:66:54:8d:5e:81:e7:ab:35:c1:
         55:48:f8:4c:28:80:df:d0:30:7d:c1:53:26:eb:f3:dc:65:9a:
         36:7a:ec:39:e7:d6:56:4a:31:99:b4:1b:3f:56:d4:48:b6:f7:
         7f:b6:72:8e:db:46:d7:52:ed:b3:a8:aa:f7:cd:7a:52:cc:35:
         96:93:4d:e5:47:73:f0:52:a3:69:ed:24:2f:3c:7a:06:2c:50:
         70:dd:d8:55:6f:13:b2:94:3f:6d:16:0b:4d:fa:72:ad:4d:39:
         b0:51:f3:8f:2c:ac:99:47:3b:71:62:35:cc:7d:5c:90:d2:9e:
         01:c3:21:e5:ff:f1:a5:28:c3:7d:e6:f6:07:1a:02:8e:12:91:
         41:66:a9:32:7e:53:5f:e8:ce:90:a2:65:50:e7:13:d1:7e:64:
         69:07:48:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----