Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/5f12f777da66cfcc20ea765741ec0d0cd8cf0764.roa
File:                     5f12f777da66cfcc20ea765741ec0d0cd8cf0764.roa (raw, json)
Hash identifier:          rCKn9waa7x2j48iG9JSCWq6MgIRU5R/c2jbatXiSKuw=
Subject key identifier:   51:2D:D3:A5:41:D3:3F:DB:A3:E8:F9:61:9D:50:DF:D5:83:66:5D:04
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       0E0EAC
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/5f12f777da66cfcc20ea765741ec0d0cd8cf0764.roa
Signing time:             Wed 24 Mar 2021 22:50:00 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     28075
IP address blocks:        190.113.152.0/22 maxlen: 24
                          2803:6603:100::/40 maxlen: 56

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921260 (0xe0eac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=5f12f777da66cfcc20ea765741ec0d0cd8cf0764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a2:01:47:7b:a4:9e:04:26:fa:41:48:64:a9:
                    a8:f1:5a:e2:15:ba:d6:38:70:09:c1:59:b1:0c:72:
                    77:3c:88:e9:74:75:71:d3:cb:41:26:b3:b2:c9:bb:
                    7d:1a:3e:98:e7:27:c9:41:5c:bb:50:fd:3a:c0:f9:
                    53:53:4a:60:f6:b3:42:1a:c8:9d:3d:8a:d7:fe:7f:
                    4c:b9:cd:43:57:9c:e0:c7:1a:cc:ae:19:e3:44:ae:
                    00:4e:df:2c:d2:d0:b6:db:89:ef:18:71:a0:85:42:
                    f8:6b:4c:a7:43:d9:ba:83:2c:19:01:c7:2e:02:0b:
                    c7:16:03:4e:5d:2e:93:9d:81:5d:15:16:e7:7e:1d:
                    21:bb:aa:24:98:56:5d:d1:bf:62:12:51:68:e4:21:
                    14:cc:13:23:11:81:ad:5a:86:b9:ee:f6:6e:e5:96:
                    7a:d7:1d:b8:c8:0c:97:b0:e2:69:ac:54:40:1e:31:
                    6a:a9:7c:9c:22:c3:31:31:a5:db:20:eb:6f:2b:0f:
                    ee:e9:64:a9:76:cb:83:5d:43:ec:09:c8:b6:3b:40:
                    6c:be:a1:b8:a6:19:a3:22:93:a2:d8:3c:4a:be:86:
                    51:38:4b:0d:a9:ef:4b:09:e9:33:e2:38:d9:5d:b3:
                    5c:c7:b6:32:ec:8a:af:53:d6:93:a1:67:00:bb:d8:
                    65:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2D:D3:A5:41:D3:3F:DB:A3:E8:F9:61:9D:50:DF:D5:83:66:5D:04
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/5f12f777da66cfcc20ea765741ec0d0cd8cf0764.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.152.0/22
                IPv6:
                  2803:6603:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5d:9f:f7:ba:76:e0:bf:61:8d:dd:f9:a4:e9:5d:a8:b0:38:fe:
         a0:35:02:0a:e7:32:ff:ee:f8:bd:d8:7e:77:4f:1d:4a:6e:52:
         fd:99:c6:ed:21:61:ef:a9:45:69:5c:ae:ac:7c:61:21:f5:be:
         76:77:2c:85:4e:b5:20:92:47:bc:49:a7:4a:d0:30:f5:5a:4e:
         fb:92:37:5e:07:d3:a6:54:2c:ee:8f:6a:ba:b8:f4:bb:76:76:
         63:2c:3c:a4:20:45:6d:3f:b8:13:cc:a6:04:54:fb:18:1d:b8:
         d3:b8:be:23:74:16:dc:15:48:df:a9:f4:6f:ba:40:03:95:5f:
         48:9c:32:1d:23:53:3c:26:88:56:c0:37:5c:08:2a:42:9a:de:
         39:e6:67:01:e2:36:e0:4a:95:a6:cb:1d:36:6d:11:e8:59:64:
         a8:2e:39:13:da:ad:8a:14:9d:eb:26:6a:c0:c2:5c:ae:35:cc:
         23:76:61:ff:eb:5a:87:49:9d:53:45:e9:40:51:bf:d1:b3:3e:
         af:a1:e5:6a:34:a5:12:7f:60:d2:3a:93:c3:6f:c7:60:7d:fc:
         68:db:a0:b5:5b:50:b3:36:09:ed:24:f9:a2:51:f6:49:52:c7:
         d8:89:78:4d:4c:1e:7e:1c:dc:ba:ab:b7:08:ed:d6:bf:9e:a1:
         5d:c6:31:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----