Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e1286592565cb8263a9efea017b886c4f493469d.roa
File:                     e1286592565cb8263a9efea017b886c4f493469d.roa (raw, json)
Hash identifier:          1/OVbNnNWvCxX0UxaV2zZJDWw5BbTtLwLPEx2TNTAuc=
Subject key identifier:   E0:05:FD:83:2E:D1:E8:16:98:5A:55:31:E6:4C:07:57:11:23:C3:FF
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       287412
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e1286592565cb8263a9efea017b886c4f493469d.roa
Signing time:             Thu 21 Dec 2023 13:28:09 +0000
ROA not before:           Thu 21 Dec 2023 13:28:09 +0000
ROA not after:            Sun 21 Dec 2025 13:28:09 +0000
asID:                     21859
IP address blocks:        190.93.82.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2651154 (0x287412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Dec 21 13:28:09 2023 GMT
            Not After : Dec 21 13:28:09 2025 GMT
        Subject: CN=e1286592565cb8263a9efea017b886c4f493469d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e9:7f:38:83:c9:fa:15:9e:86:3d:8f:f2:b0:
                    2e:f0:18:89:66:62:6c:fb:9f:68:1d:96:21:22:57:
                    71:73:57:ff:43:8a:08:e3:ae:b0:9e:ba:83:9c:31:
                    0b:c8:e8:a0:67:80:09:31:21:c1:f7:cb:b1:6e:f4:
                    86:64:a8:44:5f:fb:fa:0d:62:6c:8f:39:ab:44:e9:
                    85:f5:d5:ae:87:86:76:0a:ea:34:2b:de:5e:a5:f4:
                    63:80:bf:05:cf:d7:43:0b:ce:9d:41:ce:86:38:dc:
                    2e:35:a6:ed:8d:e6:12:89:de:dc:97:a0:29:a4:4e:
                    88:aa:68:7d:d8:9f:9f:bb:28:73:53:b2:17:0a:2e:
                    6e:20:40:41:e2:1b:e5:46:5e:d0:0d:dd:cf:a1:36:
                    17:53:8f:19:74:90:8e:f1:0e:32:68:81:a8:19:8f:
                    ac:42:03:1a:bc:16:f8:54:a4:77:f0:c0:49:67:bc:
                    59:83:3a:39:58:6d:44:9c:f0:6b:e7:b6:6d:c4:41:
                    1d:6d:dd:3c:3c:bc:84:4d:2c:5a:b2:9c:9e:cf:e1:
                    86:93:bd:1d:e6:2f:a1:f4:83:91:67:fa:f8:a9:e3:
                    d2:7a:fc:3d:cd:ba:a9:ff:19:6c:d9:c9:51:8b:ef:
                    fe:81:e1:ac:52:67:e4:0b:06:07:30:5c:3c:6e:b7:
                    1a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:05:FD:83:2E:D1:E8:16:98:5A:55:31:E6:4C:07:57:11:23:C3:FF
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e1286592565cb8263a9efea017b886c4f493469d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:e7:4a:8a:f5:6b:f4:82:38:59:15:9c:e4:40:c9:b9:78:0a:
         58:3d:7a:b0:6d:26:66:af:d0:2e:67:7e:f4:47:55:c7:15:c4:
         ec:12:1c:bb:67:19:12:82:7a:64:33:7b:ac:e2:d4:b3:21:39:
         71:99:34:0e:6e:9b:97:f7:44:98:d2:1a:e9:3a:d9:44:dc:d9:
         5f:00:71:d1:d1:92:39:5a:b8:df:85:64:c5:89:ee:96:bf:de:
         39:c7:c6:11:ca:d8:5b:bb:a3:d4:92:22:4e:9f:30:58:29:b4:
         38:20:14:00:36:87:9c:41:ab:c3:80:ca:5b:d2:bd:35:98:b7:
         ae:33:fe:1a:65:26:69:43:35:94:b5:07:e0:68:a2:29:4d:04:
         f9:84:6a:b1:0a:51:ef:19:a8:0f:26:a0:6a:56:32:e4:8e:48:
         4c:69:59:41:97:70:b7:ab:17:aa:7a:2a:ac:53:28:d5:a4:ca:
         28:88:ae:7d:8c:38:d1:65:37:55:76:30:ad:18:75:08:82:e3:
         63:70:46:9f:80:8d:19:b9:46:4c:be:04:3a:1d:77:3a:cd:6d:
         2b:b9:da:19:14:f4:b1:fa:4a:a4:6b:57:58:f0:0d:b9:68:e9:
         26:38:79:97:7d:4f:94:e4:42:ad:18:b6:07:9b:84:83:6b:9d:
         3b:2b:90:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----