Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/947e4d49d239067828f0805628d4ccb4e3785d15.roa
File:                     947e4d49d239067828f0805628d4ccb4e3785d15.roa (raw, json)
Hash identifier:          ha8P9rFwp95E8xZDBMUZ7hfHnyzoEi97GzoPmZ7YI0k=
Subject key identifier:   60:C5:F8:4D:D2:59:7D:3C:0A:16:07:4A:86:F3:6A:16:75:77:BC:78
Certificate issuer:       /CN=513674dcb37b91021affeddf80ef34c924423627
Certificate serial:       184CE8
Authority key identifier: 9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/947e4d49d239067828f0805628d4ccb4e3785d15.roa
Signing time:             Mon 11 Jul 2022 22:58:34 +0000
ROA not before:           Mon 11 Jul 2022 03:00:00 +0000
ROA not after:            Thu 11 Jul 2024 03:00:00 +0000
asID:                     52392
IP address blocks:        190.99.120.0/21 maxlen: 24
                          2803:b100::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1592552 (0x184ce8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513674dcb37b91021affeddf80ef34c924423627
        Validity
            Not Before: Jul 11 03:00:00 2022 GMT
            Not After : Jul 11 03:00:00 2024 GMT
        Subject: CN=947e4d49d239067828f0805628d4ccb4e3785d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6e:44:84:f2:25:97:92:05:7b:e0:1f:07:85:
                    de:2f:0a:5d:a0:98:6f:6d:4e:be:ec:c5:54:f7:73:
                    a1:85:1a:4a:3f:0d:ff:eb:1f:1f:40:b6:76:34:68:
                    7f:d3:2d:53:5a:5e:d6:43:31:47:be:8f:b8:d5:c5:
                    ec:16:95:f3:cd:aa:cb:f9:95:1f:35:eb:dd:38:9d:
                    cb:3c:cc:0e:2e:da:f8:0b:33:68:e0:83:ad:40:8f:
                    fc:a7:98:fd:57:fc:e2:23:f5:82:c5:ea:53:d0:23:
                    5b:57:a5:86:3c:9c:84:cd:43:24:4c:cf:fe:f9:ab:
                    33:49:ac:53:c2:63:ea:df:f5:60:b9:b0:db:5f:f4:
                    3a:e1:0a:83:59:14:b8:99:85:3d:cf:38:72:44:c4:
                    dd:b9:82:48:24:27:b8:15:4d:95:99:aa:de:d1:9b:
                    50:42:10:3b:31:34:cd:93:7f:e2:bb:5c:b9:d7:b8:
                    7b:a0:0a:49:d4:b1:0d:64:93:60:d9:46:4a:3c:85:
                    58:34:b4:ed:44:4e:2f:90:32:41:0a:c4:10:35:93:
                    d5:a8:a2:6f:c8:a7:36:b6:3f:69:5a:d7:07:50:11:
                    1e:90:98:cc:03:3c:df:e4:03:9f:51:d3:d1:ad:57:
                    0d:e4:80:35:a6:92:6c:98:46:9e:65:d0:67:cb:b4:
                    8c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C5:F8:4D:D2:59:7D:3C:0A:16:07:4A:86:F3:6A:16:75:77:BC:78
            X509v3 Authority Key Identifier:
                keyid:9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/947e4d49d239067828f0805628d4ccb4e3785d15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/513674dcb37b91021affeddf80ef34c924423627.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.120.0/21
                IPv6:
                  2803:b100::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:30:f3:7a:34:12:4d:24:5e:be:10:68:b0:da:5b:aa:27:2b:
         48:19:e5:c7:5b:6a:f5:c8:f8:e6:ce:92:29:02:e2:92:8a:96:
         95:0e:e9:06:b1:f1:14:82:89:21:a6:b0:d0:57:ea:ca:3f:f6:
         9b:76:f9:df:76:4c:5d:fc:36:39:28:4d:b3:be:6d:02:18:8d:
         49:53:af:de:09:85:7c:c1:54:3a:5f:ce:3c:d7:58:d0:22:23:
         6c:a0:ba:6f:b0:4b:76:e2:bb:b9:08:de:9e:b8:6b:fb:77:ca:
         38:e7:58:19:42:13:e6:ca:33:42:23:60:17:9d:33:65:2b:a9:
         26:67:19:10:e0:c7:03:8a:0d:9e:fc:50:0c:e7:84:a8:9d:b1:
         3c:a3:17:bd:4f:df:e7:84:d8:45:3c:4d:6f:05:da:29:49:6d:
         26:ce:9a:14:29:7e:f6:1a:15:dd:4c:9d:02:db:f2:ef:be:1d:
         52:fa:3c:7e:7d:e9:15:08:db:b6:b2:25:b9:cf:3b:75:31:88:
         e0:ec:4c:21:b3:6e:ad:0c:8c:10:a3:60:91:b4:85:ca:58:c9:
         4f:7b:29:79:ac:33:55:8d:e9:8c:00:bd:85:83:a3:45:8b:d1:
         fb:ba:c8:02:f2:4c:21:f3:d5:4e:2d:d6:73:24:48:b9:05:18:
         bb:f7:a2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----