Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/93b8ee9546047e46144bbee959399b130f510951.roa
File:                     93b8ee9546047e46144bbee959399b130f510951.roa (raw, json)
Hash identifier:          swTwkHFF0CvLTnv8sSlIjdHRJ19NDdlZkw3DxfAN16I=
Subject key identifier:   38:84:6A:1B:10:BF:81:69:A4:6D:29:DC:CC:E2:A5:3C:D7:6E:E3:58
Certificate issuer:       /CN=bd9e7183ffaa02803fe68e22a1e77851adb2eb28
Certificate serial:       0D4DDC
Authority key identifier: EA:6A:E3:33:73:C2:63:42:3A:F7:72:55:2C:65:79:D6:C9:B2:02:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/93b8ee9546047e46144bbee959399b130f510951.roa
Signing time:             Wed 24 Mar 2021 14:46:14 +0000
ROA not before:           Wed 24 Mar 2021 14:46:13 +0000
ROA not after:            Tue 24 Mar 2026 14:46:13 +0000
asID:                     266784
IP address blocks:        45.235.120.0/22 maxlen: 24
                          2803:a0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871900 (0xd4ddc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd9e7183ffaa02803fe68e22a1e77851adb2eb28
        Validity
            Not Before: Mar 24 14:46:13 2021 GMT
            Not After : Mar 24 14:46:13 2026 GMT
        Subject: CN=93b8ee9546047e46144bbee959399b130f510951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0f:4d:3c:d4:e0:01:cf:b1:60:3a:e0:8c:6e:
                    da:09:bf:7a:c8:64:35:28:4b:1d:87:63:00:b5:ce:
                    7c:6a:d4:6b:40:5f:26:1f:b9:9f:1e:42:a2:a7:f2:
                    92:82:55:7f:13:d7:9f:75:d4:f1:50:5d:6f:88:c1:
                    7a:17:bb:b4:cf:2a:e2:07:c9:b6:b9:eb:60:71:7f:
                    98:ac:2b:44:04:92:e3:ed:89:14:5c:f9:cd:a5:d2:
                    47:9d:01:3a:3b:16:de:89:b0:d1:e8:03:3c:56:fe:
                    a0:74:33:75:8c:25:d9:49:4f:97:d8:18:a9:bb:05:
                    0b:50:5a:23:cc:3a:cb:9f:c3:c2:f3:32:1b:c5:b4:
                    9a:e5:e3:2f:16:47:ff:e3:31:b9:e9:21:0b:f7:4b:
                    6c:14:6f:1a:c6:6c:f5:f5:c6:a8:83:d9:2d:00:16:
                    ec:74:29:d5:cf:c4:27:a9:34:a9:a0:84:cb:17:28:
                    ad:a5:57:ef:37:21:9b:86:8b:79:69:23:40:a6:28:
                    ad:16:a0:ac:98:11:72:b0:bb:ed:32:5f:78:b9:d7:
                    3c:a6:a9:7f:dc:0a:2e:b7:d6:e1:33:53:e0:d6:4f:
                    82:29:2f:7d:7f:11:bd:35:47:58:7c:b6:0f:e9:a9:
                    58:7b:01:37:bc:b3:60:8c:c4:fc:a5:db:18:8e:8f:
                    19:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:84:6A:1B:10:BF:81:69:A4:6D:29:DC:CC:E2:A5:3C:D7:6E:E3:58
            X509v3 Authority Key Identifier:
                keyid:EA:6A:E3:33:73:C2:63:42:3A:F7:72:55:2C:65:79:D6:C9:B2:02:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/93b8ee9546047e46144bbee959399b130f510951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.120.0/22
                IPv6:
                  2803:a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:ac:b2:6b:59:59:a4:ab:2b:42:31:8a:03:f7:38:71:e8:52:
         ca:99:6d:2d:b8:dd:d0:a3:29:4a:86:60:0c:2f:a5:0c:34:24:
         e4:3f:02:5b:37:66:27:e6:81:e5:04:03:53:81:48:5b:4b:51:
         54:07:22:74:0d:5c:c9:f6:a7:d7:ba:da:85:de:f3:e6:e8:81:
         25:31:a6:81:39:8a:6d:52:e5:b2:30:95:3a:eb:75:31:11:5b:
         6d:e7:35:74:5a:80:e3:6d:81:89:41:98:be:4b:12:8b:4f:c2:
         6c:ae:12:6b:0d:8e:3c:0e:e6:96:ba:97:5e:a1:99:ca:08:23:
         50:1f:c4:48:df:ba:34:10:97:64:6e:57:7a:28:1e:6b:0a:f6:
         b3:49:75:8b:47:a5:39:20:55:71:3b:cf:47:ab:fe:76:0c:c7:
         5d:6a:58:6c:1d:b6:c7:4b:3c:ba:14:09:c9:ea:51:31:46:04:
         3f:01:5b:c3:40:07:05:78:a8:1e:3d:6f:22:50:1b:1b:36:67:
         30:50:23:da:35:c1:03:ef:3e:f1:2c:c7:6f:a3:5f:d9:f6:d8:
         73:db:c0:0c:43:5a:a7:f1:6b:e2:89:9f:e5:32:61:7f:d7:ff:
         53:0b:13:9a:b1:5f:3d:76:24:74:a7:d5:3d:c7:9c:42:61:64:
         85:90:76:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----