Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/edf02981-1357-4daa-8149-083dde7bb009/90f57d992e5900aeb06c74630c5ade2b763c5947.roa
File:                     90f57d992e5900aeb06c74630c5ade2b763c5947.roa (raw, json)
Hash identifier:          SRw/hrryF/zbO3oBKofpOgnHEwbxHnljdxk9dQTV0QU=
Subject key identifier:   1C:DF:DA:BB:9C:08:5E:DF:91:14:17:14:5C:A4:ED:BE:1D:85:DC:85
Certificate issuer:       /CN=ab8a0b112e65d5e4030b0990fd668c531efaf401
Certificate serial:       11B49E
Authority key identifier: 38:A6:6B:A0:54:46:AD:48:4C:9F:91:15:08:CC:6D:CE:11:A9:7E:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab8a0b112e65d5e4030b0990fd668c531efaf401.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/edf02981-1357-4daa-8149-083dde7bb009/90f57d992e5900aeb06c74630c5ade2b763c5947.roa
Signing time:             Tue 25 Apr 2023 20:00:24 +0000
ROA not before:           Mon 24 Apr 2023 20:00:24 +0000
ROA not after:            Tue 25 Apr 2028 20:00:24 +0000
asID:                     271809
IP address blocks:        200.106.196.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1160350 (0x11b49e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8a0b112e65d5e4030b0990fd668c531efaf401
        Validity
            Not Before: Apr 24 20:00:24 2023 GMT
            Not After : Apr 25 20:00:24 2028 GMT
        Subject: CN=90f57d992e5900aeb06c74630c5ade2b763c5947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:39:28:80:02:9d:40:ac:b6:d6:6e:1a:55:c1:
                    dd:9e:b0:15:52:59:33:80:93:f8:ac:98:04:d5:b1:
                    42:40:d4:21:b4:c7:d5:5a:8f:86:d7:44:e1:04:23:
                    ef:61:a0:27:72:f1:57:3e:9c:46:d7:bf:28:86:b1:
                    a9:b1:6c:07:3b:03:cc:a9:00:16:f6:48:16:fa:5c:
                    42:15:d6:2d:30:7c:eb:84:68:ce:bb:22:8a:41:ab:
                    b9:93:c1:2e:4b:0c:3d:cd:9d:a4:f4:50:7b:d0:07:
                    7b:fc:eb:e9:46:59:e9:c6:46:1b:f6:2d:4e:fb:20:
                    94:ff:4c:c6:9b:48:20:27:48:04:04:bf:38:89:f2:
                    f8:f5:40:e6:ca:83:0c:d5:b3:8f:98:bd:6d:e8:ed:
                    df:62:05:67:93:a8:f0:f7:37:d4:35:52:45:0b:6a:
                    d5:e8:17:41:07:9a:24:69:81:65:b6:47:7f:df:03:
                    da:59:4f:92:d1:48:39:20:a1:77:70:83:e2:cf:32:
                    58:62:15:3f:1c:be:c2:b9:29:bf:10:8b:9f:01:64:
                    60:61:af:f5:3e:8b:8d:1f:8a:0c:84:31:8d:93:e6:
                    59:58:d3:1e:fb:b5:20:98:b6:7f:6e:35:45:64:b0:
                    63:66:c4:22:2a:d4:b1:2f:c0:42:f9:18:26:02:07:
                    45:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DF:DA:BB:9C:08:5E:DF:91:14:17:14:5C:A4:ED:BE:1D:85:DC:85
            X509v3 Authority Key Identifier:
                keyid:38:A6:6B:A0:54:46:AD:48:4C:9F:91:15:08:CC:6D:CE:11:A9:7E:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab8a0b112e65d5e4030b0990fd668c531efaf401.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/edf02981-1357-4daa-8149-083dde7bb009/90f57d992e5900aeb06c74630c5ade2b763c5947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/edf02981-1357-4daa-8149-083dde7bb009/ab8a0b112e65d5e4030b0990fd668c531efaf401.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:9b:53:7d:80:f8:7b:e6:6a:2c:88:dd:71:f0:fe:d4:57:45:
         c2:86:9b:11:b4:ff:5c:81:c8:e2:e3:35:6c:e7:3a:45:b2:37:
         b7:d9:e2:5b:7a:91:e8:db:d9:52:78:de:a8:0a:19:bf:49:86:
         b5:8c:d8:a9:91:61:7d:97:85:51:7f:98:cd:47:0c:a3:ec:56:
         be:92:89:8e:33:ce:63:4f:ab:3a:39:2e:79:45:a2:06:58:5a:
         17:55:bb:e5:88:1d:a2:23:f9:96:bd:b7:cd:51:2c:7f:17:55:
         08:7c:af:c7:39:97:27:a0:c9:02:6e:54:d6:56:a7:43:38:5b:
         a6:40:e3:7f:e3:ac:26:c5:3d:af:c1:f5:a6:13:96:b5:42:e2:
         06:a5:ed:ec:3d:b5:bc:c2:20:a3:fe:cd:90:0e:9b:5d:88:0b:
         5b:08:d0:cd:aa:27:80:e8:d1:05:ed:42:02:ee:e5:96:76:b4:
         46:e4:36:2a:ec:64:63:0e:4a:47:ba:5c:ee:7a:c6:51:8e:eb:
         c8:bc:b3:3f:32:af:e5:03:73:5c:4c:f0:74:c2:b8:d1:54:dd:
         0a:7a:98:94:ef:6c:09:49:a7:b1:40:f6:23:2a:a9:8d:b6:bc:
         0d:c7:29:c1:3c:f0:c8:a8:7f:76:66:dd:0c:09:b2:51:ab:71:
         52:7b:bd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----