Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/7621d2c5973b21e980b40452ea996e5dcaba933c.roa
File:                     7621d2c5973b21e980b40452ea996e5dcaba933c.roa (raw, json)
Hash identifier:          QmGn3KXwPVLpDtW3VY/RdYuFnnClcIYFD4G1JRWdu8o=
Subject key identifier:   48:42:90:6A:D5:E9:FB:56:68:DB:68:E8:3F:27:A6:72:C5:37:68:1D
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       20B8F1
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/7621d2c5973b21e980b40452ea996e5dcaba933c.roa
Signing time:             Fri 24 Mar 2023 08:30:36 +0000
ROA not before:           Thu 23 Mar 2023 08:30:36 +0000
ROA not after:            Sat 22 Mar 2025 08:30:36 +0000
asID:                     28075
IP address blocks:        190.113.152.0/22 maxlen: 24
                          2803:6603:100::/40 maxlen: 56

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2144497 (0x20b8f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: Mar 23 08:30:36 2023 GMT
            Not After : Mar 22 08:30:36 2025 GMT
        Subject: CN=7621d2c5973b21e980b40452ea996e5dcaba933c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:80:b7:17:1a:6c:f7:b9:07:a1:4b:e9:f1:7d:
                    da:15:1c:5c:aa:5d:05:92:09:b1:d9:d5:9b:12:55:
                    be:c0:cf:3f:ac:c2:9d:ae:e5:38:3a:b7:42:71:a7:
                    20:92:9a:a2:13:5f:4f:7e:03:c3:52:4a:c6:59:33:
                    1d:65:a3:c8:f6:73:4e:fb:ed:be:a8:9e:18:d1:d2:
                    b4:97:06:27:68:74:ea:f6:cc:e1:2a:c8:99:b0:16:
                    54:a8:aa:21:8d:29:14:7a:56:5c:1b:67:be:1b:f6:
                    ce:14:27:5b:e3:09:83:6d:6c:e8:17:ae:69:1b:f1:
                    73:2e:39:73:02:6f:f3:ac:60:9c:c7:48:d9:2e:59:
                    7b:9c:4d:e5:9b:f5:ff:a3:42:1e:f9:a9:d4:1e:78:
                    75:9e:d6:89:12:fd:7e:c5:3b:48:dc:79:7d:69:36:
                    c0:73:b3:aa:6d:e5:0f:1a:5e:6c:1a:ae:df:c2:2f:
                    28:2a:2c:c0:18:2d:b1:81:79:f9:c6:ab:40:86:db:
                    d2:77:6d:8f:c0:66:df:57:5f:9c:49:cd:27:5e:b3:
                    82:fc:31:39:27:09:a9:1c:bb:9f:15:1d:85:b8:7a:
                    8c:43:aa:be:2a:8a:cb:8c:a7:94:60:79:b8:91:63:
                    20:72:65:00:19:81:aa:53:6f:bf:06:f8:70:c6:f0:
                    23:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:42:90:6A:D5:E9:FB:56:68:DB:68:E8:3F:27:A6:72:C5:37:68:1D
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/7621d2c5973b21e980b40452ea996e5dcaba933c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.152.0/22
                IPv6:
                  2803:6603:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:d8:2b:10:19:fa:fb:33:31:69:88:a7:53:01:e3:e9:f4:0b:
         d2:a4:34:c8:da:89:98:ce:a7:dc:de:5c:70:bf:89:f0:a7:6a:
         af:9e:c4:92:10:d2:52:be:69:4d:22:ff:49:db:d9:d9:41:be:
         47:4c:20:67:3f:c8:86:1e:1d:f7:fe:1c:08:7b:43:09:68:64:
         c0:9e:e8:e7:8a:75:ab:39:7d:c5:8f:a9:fd:a1:2e:eb:ef:6a:
         62:a9:7a:60:ca:17:64:06:30:2b:e8:eb:8d:f1:6d:b4:d8:37:
         8d:38:4b:65:3c:83:b6:a1:47:3b:10:66:17:50:62:8c:b5:dc:
         42:d3:cb:82:ae:ce:65:5c:60:8a:26:03:e6:58:21:7c:15:dc:
         fe:a1:8b:54:fb:ef:36:8e:50:76:8b:2c:62:09:f2:52:f7:37:
         6b:38:d3:51:97:8c:00:2f:d1:f3:a6:04:72:29:27:b9:44:b2:
         2e:e2:5e:5a:e0:41:3f:76:de:aa:b2:a3:65:92:58:a8:d2:21:
         c8:c5:6a:83:29:7b:8a:04:06:97:5f:87:ba:dc:52:4a:47:0c:
         1e:9d:87:dc:27:a9:dd:1e:df:3a:31:5a:31:4f:b7:bf:21:91:
         2b:d4:b0:0c:1e:18:43:76:96:89:65:57:9b:93:0f:ca:ce:c7:
         38:10:27:12
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIDILjxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg4
ZDNiMzhmYjliZmNlZDU3YzZhZDVlYjE2MGMxMzBhY2YzMjY0MWMwHhcNMjMwMzIz
MDgzMDM2WhcNMjUwMzIyMDgzMDM2WjAzMTEwLwYDVQQDEyg3NjIxZDJjNTk3M2Iy
MWU5ODBiNDA0NTJlYTk5NmU1ZGNhYmE5MzNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvIC3Fxps97kHoUvp8X3aFRxcql0Fkgmx2dWbElW+wM8/rMKd
ruU4OrdCcacgkpqiE19PfgPDUkrGWTMdZaPI9nNO++2+qJ4Y0dK0lwYnaHTq9szh
KsiZsBZUqKohjSkUelZcG2e+G/bOFCdb4wmDbWzoF65pG/FzLjlzAm/zrGCcx0jZ
Lll7nE3lm/X/o0Ie+anUHnh1ntaJEv1+xTtI3Hl9aTbAc7OqbeUPGl5sGq7fwi8o
KizAGC2xgXn5xqtAhtvSd22PwGbfV1+cSc0nXrOC/DE5JwmpHLufFR2FuHqMQ6q+
KorLjKeUYHm4kWMgcmUAGYGqU2+/BvhwxvAjHQIDAQABo4ICazCCAmcwHQYDVR0O
BBYEFEhCkGrV6ftWaNto6D8npnLFN2gdMB8GA1UdIwQYMBaAFPsbKsFJ3WU0RJWG
NPmzt6e3aen4MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODhkM2Iz
OGZiOWJmY2VkNTdjNmFkNWViMTYwYzEzMGFjZjMyNjQxYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjAxNWM0NmItMTU0MC00OWViLWI5NjktMGYzYzQw
ZTAwMTQwLzc2MjFkMmM1OTczYjIxZTk4MGI0MDQ1MmVhOTk2ZTVkY2FiYTkzM2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMDE1YzQ2Yi0xNTQwLTQ5ZWItYjk2OS0wZjNj
NDBlMDAxNDAvODhkM2IzOGZiOWJmY2VkNTdjNmFkNWViMTYwYzEzMGFjZjMyNjQx
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAvBggrBgEFBQcBBwEB/wQg
MB4wDAQCAAEwBgMEAr5xmDAOBAIAAjAIAwYAKANmAwEwDQYJKoZIhvcNAQELBQAD
ggEBAHHYKxAZ+vszMWmIp1MB4+n0C9KkNMjaiZjOp9zeXHC/ifCnaq+exJIQ0lK+
aU0i/0nb2dlBvkdMIGc/yIYeHff+HAh7QwloZMCe6OeKdas5fcWPqf2hLuvvamKp
emDKF2QGMCvo643xbbTYN404S2U8g7ahRzsQZhdQYoy13ELTy4KuzmVcYIomA+ZY
IXwV3P6hi1T77zaOUHaLLGIJ8lL3N2s401GXjAAv0fOmBHIpJ7lEsi7iXlrgQT92
3qqyo2WSWKjSIcjFaoMpe4oEBpdfh7rcUkpHDB6dh9wnqd0e3zoxWjFPt78hkSvU
sAweGEN2lollV5uTD8rOxzgQJxI=
-----END CERTIFICATE-----