Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/79e7f7ebb0ecaf65164a4913c0c19ffd9c78996b.roa
File:                     79e7f7ebb0ecaf65164a4913c0c19ffd9c78996b.roa (raw, json)
Hash identifier:          3USOmONc0fyiY9Zf4GCpvo7y/p7mFu5N//lHfXSekUE=
Subject key identifier:   30:8B:ED:A1:61:77:47:34:F4:FF:9B:54:13:29:9A:96:C3:02:13:28
Certificate issuer:       /CN=513674dcb37b91021affeddf80ef34c924423627
Certificate serial:       22E866
Authority key identifier: 9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/79e7f7ebb0ecaf65164a4913c0c19ffd9c78996b.roa
Signing time:             Tue 12 Sep 2023 14:59:32 +0000
ROA not before:           Mon 11 Sep 2023 14:59:32 +0000
ROA not after:            Fri 12 Sep 2025 14:59:32 +0000
asID:                     52392
IP address blocks:        190.99.120.0/24 maxlen: 24
                          190.99.121.0/24 maxlen: 24
                          190.99.122.0/24 maxlen: 24
                          190.99.123.0/24 maxlen: 24
                          190.99.124.0/24 maxlen: 24
                          190.99.125.0/24 maxlen: 24
                          190.99.126.0/24 maxlen: 24
                          190.99.127.0/24 maxlen: 24
                          2803:b100:9::/48 maxlen: 48
                          2803:b100:b::/48 maxlen: 48
                          2803:b100:a::/48 maxlen: 48
                          2803:b100:8::/48 maxlen: 48
                          2803:b100:1::/48 maxlen: 48
                          2803:b100::/48 maxlen: 48
                          2803:b100:3::/48 maxlen: 48
                          2803:b100:2::/48 maxlen: 48
                          2803:b100:6::/48 maxlen: 48
                          2803:b100:e::/48 maxlen: 48
                          2803:b100:7::/48 maxlen: 48
                          2803:b100:c::/48 maxlen: 48
                          2803:b100:f::/48 maxlen: 48
                          2803:b100:4::/48 maxlen: 48
                          2803:b100:d::/48 maxlen: 48
                          2803:b100:5::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2287718 (0x22e866)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513674dcb37b91021affeddf80ef34c924423627
        Validity
            Not Before: Sep 11 14:59:32 2023 GMT
            Not After : Sep 12 14:59:32 2025 GMT
        Subject: CN=79e7f7ebb0ecaf65164a4913c0c19ffd9c78996b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:30:9d:9c:58:7d:83:80:71:aa:b3:c9:c7:a6:
                    85:5e:3f:6d:f0:e1:5b:94:e6:46:e0:d5:35:1b:cd:
                    b1:ad:6d:a0:46:59:2e:bd:3f:ab:52:d9:3b:40:b8:
                    19:d3:ce:2f:80:c1:91:27:cd:e5:80:cb:f4:32:46:
                    44:2b:41:a1:74:ac:2b:65:3a:01:2f:38:2a:c8:10:
                    af:a3:70:fc:31:0e:c3:db:00:d3:45:f9:c4:89:94:
                    9a:2e:4f:27:d1:88:d8:37:1a:2f:f9:e2:36:6b:0f:
                    4f:62:bc:c1:cf:6f:74:ab:54:4d:19:3d:6d:cf:3b:
                    1d:8b:89:aa:10:b0:50:12:27:cd:12:7a:55:85:a6:
                    33:ae:31:e8:f5:5a:75:b0:5a:5d:f1:88:9e:a4:6e:
                    f5:9a:da:1d:4d:b2:48:89:7c:76:fb:a7:92:81:05:
                    20:6a:7d:e1:3c:57:cd:e9:70:cd:30:96:21:8a:98:
                    35:c2:07:d4:23:f9:fd:09:2b:14:b4:d3:14:84:f2:
                    5a:92:0b:14:dd:11:d5:4e:6d:b4:38:25:1d:9d:25:
                    17:89:00:df:8f:10:2d:4f:21:d6:02:f1:6d:1e:5f:
                    e2:f3:68:f5:7c:4f:71:af:b7:60:fd:74:91:94:b2:
                    d8:7f:93:32:d8:b2:2e:48:93:5a:41:ee:92:ff:92:
                    93:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8B:ED:A1:61:77:47:34:F4:FF:9B:54:13:29:9A:96:C3:02:13:28
            X509v3 Authority Key Identifier:
                keyid:9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/79e7f7ebb0ecaf65164a4913c0c19ffd9c78996b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/513674dcb37b91021affeddf80ef34c924423627.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.120.0/21
                IPv6:
                  2803:b100::/44

    Signature Algorithm: sha256WithRSAEncryption
         59:15:d4:78:3a:78:5b:7d:6a:d9:d7:a1:47:21:8f:50:d1:39:
         6f:ac:d8:09:98:16:b9:62:51:4d:e1:98:10:41:06:51:02:55:
         8c:ae:92:df:a5:25:d8:42:c2:c3:07:1d:a3:37:2b:4a:26:87:
         3f:9d:44:37:49:fd:ff:06:e0:e8:51:44:49:54:b0:58:6a:96:
         d6:b9:fe:b5:e3:74:f1:af:91:bd:a7:92:45:0e:1e:0b:b4:0d:
         f4:63:99:e2:78:da:42:8a:5d:1f:c0:8d:e3:30:c4:58:64:bd:
         f0:c7:14:b2:cd:16:c2:53:63:f8:9c:ed:b8:15:79:ed:66:1f:
         28:13:ec:e3:b6:64:22:21:7e:00:05:29:3c:1b:eb:1a:fb:56:
         69:1b:a3:a3:f2:88:30:61:dd:05:21:8e:cd:ed:5a:df:eb:f1:
         63:e3:11:37:1b:ce:f7:0e:d2:bb:22:bf:a2:9e:94:c8:e8:c6:
         9b:cd:d7:01:89:94:9e:05:00:1c:29:4d:81:b9:76:b2:9b:5b:
         54:bd:ff:b3:ac:a7:96:d3:5a:7b:97:b2:dd:0b:ca:0c:1c:9f:
         26:1f:11:dc:51:f5:05:9a:59:d1:4b:90:d6:b6:32:24:81:2f:
         84:2b:64:7f:20:4d:08:9e:c4:36:73:2a:b4:8a:84:9a:36:a6:
         5f:91:b8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----