Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/2ae845e7b16ddaf2b323b9417beaca511298954a.roa
File:                     2ae845e7b16ddaf2b323b9417beaca511298954a.roa (raw, json)
Hash identifier:          88AiNr8Aibq4m/ciKkHeyAxrI9Oocf8quG6xueDU93M=
Subject key identifier:   AA:8C:B8:0F:AD:C4:99:F5:36:42:6E:6E:8B:6E:F5:AF:EC:03:33:80
Certificate issuer:       /CN=8cca422c9ff30980ab758c3310c2e40a2e836482
Certificate serial:       0DC3FC
Authority key identifier: 2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/2ae845e7b16ddaf2b323b9417beaca511298954a.roa
Signing time:             Wed 24 Mar 2021 14:36:27 +0000
ROA not before:           Wed 24 Mar 2021 14:36:26 +0000
ROA not after:            Tue 24 Mar 2026 14:36:26 +0000
asID:                     52468
IP address blocks:        190.61.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902140 (0xdc3fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cca422c9ff30980ab758c3310c2e40a2e836482
        Validity
            Not Before: Mar 24 14:36:26 2021 GMT
            Not After : Mar 24 14:36:26 2026 GMT
        Subject: CN=2ae845e7b16ddaf2b323b9417beaca511298954a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:06:e7:3a:af:c1:b2:7b:53:d4:80:e4:1b:73:
                    b6:67:ac:7a:af:26:ae:1e:ec:c2:93:b2:70:99:3e:
                    dd:a5:99:72:51:32:57:ae:ac:37:55:e7:a9:7b:38:
                    32:7e:e1:11:81:b4:b5:c7:98:3e:59:4d:9d:90:3e:
                    79:bf:fc:01:ba:12:a1:ba:6e:e7:88:1d:79:d0:98:
                    82:cf:b7:8c:d3:77:cf:02:41:f9:3a:3b:48:a6:57:
                    31:d7:82:e2:81:44:5a:0f:f5:1f:75:a7:4d:81:08:
                    92:54:77:85:e8:9e:60:96:6f:00:69:71:47:46:af:
                    0d:83:26:f8:31:18:8f:f7:37:dd:9d:55:79:8b:57:
                    0d:60:dc:04:a2:3c:39:ee:4a:58:46:92:e7:e8:c1:
                    5d:98:64:b4:93:61:ee:57:07:14:97:e5:8e:c4:e6:
                    61:1d:33:63:70:bf:51:fa:ce:4c:73:f5:8f:a2:b0:
                    88:de:3f:74:b1:b0:7a:4e:a4:d4:31:27:36:ca:c8:
                    75:89:ec:5c:c7:e8:25:ce:88:10:41:eb:66:62:0d:
                    25:4b:15:c0:ce:29:57:0a:23:ac:89:5a:e0:fe:12:
                    bd:c6:01:5d:6b:d8:61:90:29:21:27:b3:62:11:39:
                    85:99:13:d9:f1:24:cb:4d:a9:0b:df:a1:6e:35:18:
                    d3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8C:B8:0F:AD:C4:99:F5:36:42:6E:6E:8B:6E:F5:AF:EC:03:33:80
            X509v3 Authority Key Identifier:
                keyid:2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/2ae845e7b16ddaf2b323b9417beaca511298954a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/8cca422c9ff30980ab758c3310c2e40a2e836482.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:de:7e:b3:05:93:1e:13:25:b0:14:7d:d0:3f:e3:92:30:65:
         f5:ea:38:88:87:24:47:3e:ca:f2:d9:23:24:ca:e5:5d:a6:4c:
         ef:f8:1e:79:2a:34:c1:b1:01:c1:46:8a:67:10:78:e4:a1:04:
         4c:26:b4:e0:2e:85:fb:68:52:68:30:7f:3f:9a:fb:75:59:86:
         11:10:50:c4:b4:7c:4e:09:95:59:2e:05:5e:2c:bd:93:f9:56:
         f7:6a:64:58:1d:7f:1b:43:11:92:a6:ff:48:0e:76:0f:68:81:
         02:e3:f7:81:84:ab:2f:42:4b:3d:7e:16:10:2a:9c:83:90:21:
         47:cf:e6:35:17:45:cb:05:4d:38:ab:35:ba:1e:ae:e8:24:49:
         d9:e5:56:04:68:98:03:3b:c7:66:6e:37:cf:08:40:be:25:0c:
         b9:22:ca:e7:e4:57:ca:b5:05:3d:21:23:46:3b:f4:4e:02:c9:
         f0:5f:cf:42:71:b4:7b:5a:88:2e:8c:64:c6:0c:4d:28:67:0e:
         32:06:7a:01:8e:95:ba:d5:ff:c3:8a:32:00:65:49:4e:a3:08:
         e3:ae:72:64:c6:5e:6d:03:45:a3:d7:fb:87:16:da:99:2a:41:
         22:1e:ff:5d:96:26:b4:f3:24:10:64:e8:dd:51:fe:8e:33:f0:
         36:44:27:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----