Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/6ffa4862f7c175604f31414f5774d5b09153ce30.roa
File:                     6ffa4862f7c175604f31414f5774d5b09153ce30.roa (raw, json)
Hash identifier:          2iKefsC7f3Pxv/8yG/DilrzIEhLqdJjYMIc9wchrO+w=
Subject key identifier:   A2:99:EE:B9:C1:37:C3:AB:8C:90:8C:59:6B:E5:91:FB:5B:EC:5D:F7
Certificate issuer:       /CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
Certificate serial:       207019
Authority key identifier: 76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/6ffa4862f7c175604f31414f5774d5b09153ce30.roa
Signing time:             Fri 12 May 2023 08:30:04 +0000
ROA not before:           Thu 11 May 2023 08:30:04 +0000
ROA not after:            Sat 10 May 2025 08:30:04 +0000
asID:                     27773
IP address blocks:        190.150.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2125849 (0x207019)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
        Validity
            Not Before: May 11 08:30:04 2023 GMT
            Not After : May 10 08:30:04 2025 GMT
        Subject: CN=6ffa4862f7c175604f31414f5774d5b09153ce30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d8:25:d1:24:9d:03:98:d6:2c:94:b2:c8:34:
                    17:2f:7d:e7:94:ab:15:92:29:4d:c1:ea:64:48:54:
                    b9:4b:4a:0e:6a:87:0d:bf:58:77:9a:68:37:cb:2f:
                    b9:0a:66:c0:0c:ba:b6:7a:a9:78:b7:82:16:ee:d7:
                    02:8d:dd:5e:b4:56:2b:99:bd:03:e1:c8:45:77:1f:
                    1d:b1:2c:ca:de:2b:ad:02:46:3a:5e:71:b1:7c:02:
                    b9:2e:3a:2b:ed:dd:b1:cf:d5:dc:a0:8e:18:b3:47:
                    51:cb:37:50:47:d2:dc:ce:38:db:af:ee:85:9e:da:
                    c6:10:5d:2b:bc:bd:ba:9f:81:5f:93:7e:61:8f:b6:
                    0d:f7:e6:ec:fa:e6:f6:ae:83:2b:06:d6:37:71:92:
                    9e:ce:40:0a:2a:4d:ca:1a:29:e0:38:e0:7f:76:fc:
                    67:31:19:f4:b6:dc:49:f4:a9:94:20:b2:d7:c8:65:
                    63:15:d5:c8:52:09:1f:d2:d2:2a:13:de:cf:ae:9b:
                    52:9a:1f:5d:d3:25:38:a2:17:91:0b:04:ca:c2:85:
                    31:5d:3c:c6:8c:6d:0b:fc:36:68:42:4f:71:78:8c:
                    a9:34:0f:9f:fc:67:ee:d6:39:99:fa:c8:fa:e5:d8:
                    ed:af:33:a4:d1:f2:95:9f:d4:29:c4:44:07:bf:c3:
                    0f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:99:EE:B9:C1:37:C3:AB:8C:90:8C:59:6B:E5:91:FB:5B:EC:5D:F7
            X509v3 Authority Key Identifier:
                keyid:76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/6ffa4862f7c175604f31414f5774d5b09153ce30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/eb6de066f1c70b82f75b54d19209c0e03f1f0279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:0b:05:48:51:a9:5c:7a:f9:d2:f0:54:da:ec:e8:70:ad:18:
         2c:a6:2d:14:bb:3d:4b:fb:6a:78:9f:88:94:b0:8b:1b:d2:90:
         11:a3:59:f2:31:f4:dc:ce:ee:83:cb:a7:8d:09:81:de:7c:9a:
         72:1d:33:21:9c:c1:55:e8:2c:b9:b7:e1:37:2a:ae:e6:dc:c9:
         73:01:29:18:e5:86:3d:e2:ad:3d:b2:16:f4:60:ab:3b:6b:b1:
         7a:47:d7:46:a8:d2:2f:16:78:ee:f5:2e:b9:87:4f:03:76:ed:
         6a:ee:6e:79:6d:9f:4f:4e:05:b2:0f:ee:97:1c:aa:0c:da:23:
         c0:3e:42:99:c6:59:99:ee:82:e7:ea:90:56:13:7c:b8:93:5b:
         16:b6:ed:e2:c6:98:cb:fa:9b:eb:e4:33:a1:59:f0:bb:47:2f:
         cd:bb:5e:1c:11:ec:b0:d0:d7:a4:f7:9f:82:71:95:25:6a:a7:
         3c:70:1f:90:d3:1c:44:00:02:fa:db:c4:0c:bf:e8:3d:6e:70:
         4d:43:f3:3f:da:90:87:bf:e8:0e:cd:01:6c:9c:0a:98:33:4f:
         fb:a6:5f:57:83:b9:bf:ed:e6:b6:6d:9f:54:6a:2d:59:1f:32:
         3e:13:b6:43:c3:48:02:29:fd:9f:a9:f3:bb:78:1c:6a:3e:57:
         81:2f:6e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----