Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/7f13974a7f4428a028e93ceb9dd78eb30cc4e0e1.roa
File:                     7f13974a7f4428a028e93ceb9dd78eb30cc4e0e1.roa (raw, json)
Hash identifier:          7i/hOtt1YlrrsSuyQ2yswWCf9yI28E1DJBEeQnybves=
Subject key identifier:   9F:B7:32:F4:F1:12:87:C2:9E:ED:88:99:87:0C:63:DD:C1:C9:51:30
Certificate issuer:       /CN=419e23f1fa27160195e5e3ab407b2d1b2f418f98
Certificate serial:       211BE8
Authority key identifier: 2E:4A:34:D5:A8:74:62:61:36:DB:18:55:57:9C:12:AE:4F:1B:9C:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/419e23f1fa27160195e5e3ab407b2d1b2f418f98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/7f13974a7f4428a028e93ceb9dd78eb30cc4e0e1.roa
Signing time:             Fri 23 Jun 2023 18:01:59 +0000
ROA not before:           Thu 22 Jun 2023 18:01:59 +0000
ROA not after:            Mon 23 Jun 2025 18:01:59 +0000
asID:                     267801
IP address blocks:        190.122.86.24/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2169832 (0x211be8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=419e23f1fa27160195e5e3ab407b2d1b2f418f98
        Validity
            Not Before: Jun 22 18:01:59 2023 GMT
            Not After : Jun 23 18:01:59 2025 GMT
        Subject: CN=7f13974a7f4428a028e93ceb9dd78eb30cc4e0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d5:3f:57:d8:d6:f8:61:12:aa:71:1a:7d:d4:
                    eb:d1:91:20:9c:b2:71:19:06:0d:d7:f0:6b:3a:1e:
                    17:2a:1d:5d:f5:9f:b4:e8:f4:01:3a:6b:98:f7:1d:
                    53:2b:69:73:ad:44:79:a9:dd:ca:bf:14:b2:aa:85:
                    9e:c6:12:0f:11:66:37:63:ed:ea:82:c8:46:69:09:
                    dd:a8:d3:e1:43:5d:69:ac:d7:a1:b9:03:49:89:66:
                    d9:6c:04:31:92:14:b6:fe:93:78:44:90:d4:ec:2e:
                    57:b5:5b:c1:f5:6e:95:b4:23:46:b5:64:56:7d:3a:
                    7e:65:97:79:ee:e8:d2:2b:bd:ec:a6:dd:00:2b:7d:
                    3f:92:6a:62:4e:95:b9:a7:66:29:89:c2:d4:c0:77:
                    39:da:fc:bf:28:0f:bd:3a:67:8e:9e:62:cf:82:f5:
                    bb:28:41:ba:73:9d:9c:99:28:8f:6a:37:ff:e0:16:
                    62:f2:c8:06:d7:4e:4c:b4:66:b8:e3:9b:ef:ea:5e:
                    9b:0b:62:7c:fa:54:bb:82:34:59:f3:dc:f0:2e:1b:
                    a0:fb:cf:d0:f5:78:13:85:a5:28:c4:ea:3c:9f:31:
                    a6:49:65:3f:82:f1:31:12:f9:d9:76:d6:ab:9f:ee:
                    c4:01:50:b1:04:59:e5:3e:e0:3f:65:d7:08:fd:56:
                    93:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B7:32:F4:F1:12:87:C2:9E:ED:88:99:87:0C:63:DD:C1:C9:51:30
            X509v3 Authority Key Identifier:
                keyid:2E:4A:34:D5:A8:74:62:61:36:DB:18:55:57:9C:12:AE:4F:1B:9C:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/419e23f1fa27160195e5e3ab407b2d1b2f418f98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/7f13974a7f4428a028e93ceb9dd78eb30cc4e0e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/419e23f1fa27160195e5e3ab407b2d1b2f418f98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.86.24/29

    Signature Algorithm: sha256WithRSAEncryption
         5b:57:8b:d5:58:90:e3:79:ec:e1:f8:a3:cc:84:90:5c:d9:30:
         88:c9:ce:42:06:39:5e:1c:20:b7:4c:37:a0:f7:ca:53:37:2e:
         a6:46:ad:46:1a:96:ee:e0:02:6a:83:73:cc:d8:96:19:63:f1:
         a3:47:3a:c0:5e:c1:14:8c:c1:ce:09:27:e7:9a:01:7a:0a:4f:
         14:4d:4e:d2:4b:80:8b:ce:e1:94:06:5b:3f:a3:7a:2f:e4:d5:
         cc:2b:39:86:09:12:cb:59:81:73:3f:0a:15:99:f9:67:bd:2e:
         37:b8:f1:fc:c3:13:58:71:96:d0:33:a8:36:f3:87:71:96:eb:
         ed:de:95:7f:4e:f1:e7:20:17:af:0c:f9:3f:2a:02:d3:d4:46:
         61:f1:ea:ba:af:1a:fa:10:75:cc:13:89:2f:37:84:e1:44:de:
         b9:7e:4d:83:47:38:c9:5b:88:13:06:d3:b8:66:d2:5c:a5:e6:
         ea:dd:64:07:e5:c7:5e:03:68:f5:7f:91:a6:c5:5b:5e:e6:07:
         d1:f1:aa:1b:af:da:60:5d:51:c4:b5:57:bb:d2:49:9e:56:e7:
         2c:1a:9c:f4:53:42:4f:c8:12:23:bd:4d:5e:82:a8:fb:10:37:
         66:6a:55:49:06:bb:de:34:dd:d8:2f:2f:06:6f:7c:5c:bb:0a:
         6c:03:4b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----