Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/fb0f3d6de0cbbefbb722a893245329d4b1f39213.roa
File:                     fb0f3d6de0cbbefbb722a893245329d4b1f39213.roa (raw, json)
Hash identifier:          WK91eq1EtEhkLQeHoU8oygqBA5/4Eb7RzX2Ww0xlNDE=
Subject key identifier:   1F:3C:ED:A0:BA:65:0C:67:0F:58:AB:14:CA:A7:1B:1D:F2:32:8C:A9
Certificate issuer:       /CN=74935393919dd2a404caa7ccadf12085d19ef35d
Certificate serial:       20F908
Authority key identifier: 5E:D2:1A:5E:C3:72:12:AF:DA:1B:4A:34:2F:5F:76:B5:2D:DC:07:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74935393919dd2a404caa7ccadf12085d19ef35d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/fb0f3d6de0cbbefbb722a893245329d4b1f39213.roa
Signing time:             Wed 05 Apr 2023 14:15:19 +0000
ROA not before:           Mon 22 Mar 2021 14:32:23 +0000
ROA not after:            Tue 24 Mar 2026 14:32:23 +0000
asID:                     264669
IP address blocks:        168.90.252.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2160904 (0x20f908)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74935393919dd2a404caa7ccadf12085d19ef35d
        Validity
            Not Before: Mar 22 14:32:23 2021 GMT
            Not After : Mar 24 14:32:23 2026 GMT
        Subject: CN=fb0f3d6de0cbbefbb722a893245329d4b1f39213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c0:7f:e4:53:ac:e2:3b:43:4b:09:c0:f4:26:
                    1c:1d:09:c9:97:a2:ba:0d:b2:7f:2d:78:f5:cb:4f:
                    3e:07:e8:37:7e:3c:9e:a9:a8:58:88:ff:10:db:03:
                    86:9d:dc:b6:67:79:9c:dc:0b:60:db:f8:6f:fd:14:
                    3c:4c:e5:49:63:c3:a5:20:78:cf:12:41:3c:ab:f1:
                    17:20:bd:80:72:8c:3a:c1:07:04:be:0d:b0:c2:8b:
                    03:b6:cf:c9:7c:48:be:d5:c9:f4:66:25:4a:4c:f1:
                    1e:10:38:e9:42:07:49:a5:24:b4:81:48:89:7f:77:
                    47:6a:05:91:34:34:74:94:7c:41:59:c3:2c:80:c4:
                    ef:dd:80:d8:a3:9d:2f:3c:c2:e1:db:ca:16:d4:c0:
                    c2:1d:7c:b8:94:df:f5:4e:13:cd:5f:0e:5c:19:50:
                    2c:cf:b8:3a:cf:1d:78:47:75:1d:58:34:6f:35:17:
                    63:da:1f:3f:1e:33:9b:ab:3b:19:fd:d3:12:16:96:
                    36:31:8f:d3:71:b6:f7:15:56:3c:7a:ad:13:df:7a:
                    2a:e7:5a:14:a6:ff:7e:ce:71:bd:09:bb:18:56:b9:
                    2e:4b:8e:1d:89:79:ca:04:05:7b:c5:32:71:bf:93:
                    8b:4e:1f:6d:8d:e5:a7:a5:db:ef:82:36:7c:41:bb:
                    52:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3C:ED:A0:BA:65:0C:67:0F:58:AB:14:CA:A7:1B:1D:F2:32:8C:A9
            X509v3 Authority Key Identifier:
                keyid:5E:D2:1A:5E:C3:72:12:AF:DA:1B:4A:34:2F:5F:76:B5:2D:DC:07:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74935393919dd2a404caa7ccadf12085d19ef35d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/fb0f3d6de0cbbefbb722a893245329d4b1f39213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/74935393919dd2a404caa7ccadf12085d19ef35d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:70:44:b4:0f:a2:33:99:20:99:96:86:c4:c1:e1:10:1f:1c:
         52:2b:6e:52:8a:b3:17:f5:d9:70:04:14:08:1c:33:94:4c:38:
         3c:eb:14:a0:5c:c0:aa:67:2b:1d:68:42:c0:7f:88:cf:0c:e4:
         33:17:0c:67:b2:b1:39:d6:5e:2e:83:a9:0b:a6:e2:8d:07:7d:
         1b:70:06:aa:21:34:d6:ad:76:47:3e:bf:eb:d3:06:9f:2a:31:
         74:09:48:fd:29:68:8f:03:07:37:8b:6f:7c:65:98:65:cf:83:
         9e:c4:c7:2c:25:d1:96:97:24:ca:43:11:aa:af:b9:7e:ad:ce:
         20:64:db:b4:09:ec:fd:41:71:4b:d3:c2:4a:35:ef:4b:e4:54:
         3e:78:e7:c6:80:e6:0b:f9:9b:b2:24:f5:28:41:04:39:4c:15:
         ed:c1:f4:31:c9:d3:cb:60:d8:94:5b:46:1b:6b:3e:c1:2b:5b:
         b3:fb:76:63:c0:6e:9c:11:f9:51:a6:b3:b3:41:ab:41:9f:35:
         d0:6e:67:82:a1:10:fc:90:cd:73:9d:7d:07:f5:ef:a1:e9:fe:
         8e:f3:fc:ce:81:31:0c:87:50:91:85:62:7b:d4:c0:77:4a:49:
         fc:3c:dc:5b:37:bc:b5:15:4c:43:58:a6:11:27:7c:15:72:08:
         01:6e:53:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----