Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/8e638c0ad0e5e875ad25a1e40268555fea7ba4b0.roa
File:                     8e638c0ad0e5e875ad25a1e40268555fea7ba4b0.roa (raw, json)
Hash identifier:          Lf3NwzrzwJebASMxjhH8+lXkPnWS1fGIMMcZHMntlow=
Subject key identifier:   51:B4:DC:DF:95:81:0C:7D:0C:D6:A9:AA:C0:C1:AF:70:0C:51:48:7D
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EDDFD
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/8e638c0ad0e5e875ad25a1e40268555fea7ba4b0.roa
Signing time:             Wed 24 Mar 2021 14:29:31 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 974333 (0xeddfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=8e638c0ad0e5e875ad25a1e40268555fea7ba4b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:21:8e:8e:ef:92:40:b6:c5:5f:03:f3:fc:6e:
                    eb:3f:29:ec:54:0b:d1:4f:8d:a1:89:0c:02:44:d9:
                    e2:3b:d0:27:61:85:bc:38:1a:27:b8:bf:f4:a9:f4:
                    3f:c4:ce:0d:45:ee:ab:0f:ca:cd:f5:1b:61:23:94:
                    0d:ca:97:da:3b:21:cd:3c:0b:ba:22:5b:16:80:8d:
                    23:b8:85:39:2d:09:f0:75:7a:81:c7:4d:57:0f:48:
                    24:f5:d4:1d:fc:e6:d2:3b:65:54:fb:94:e9:8a:c4:
                    1f:fe:26:c8:1c:ab:d2:63:aa:c6:01:68:42:d7:f4:
                    9f:8a:38:93:46:c0:96:9a:10:5a:03:1f:12:42:15:
                    3e:6e:90:5b:c1:ec:f0:24:3a:c3:c6:70:1c:36:91:
                    89:91:03:2d:6d:78:2a:4e:f2:b4:be:5e:b3:e8:84:
                    25:57:9f:e2:44:07:69:15:7b:71:5a:7b:d3:4d:3f:
                    ba:89:11:00:ff:ca:ae:86:3e:87:2a:e5:5c:2e:36:
                    a0:65:f4:68:04:4b:62:96:12:2c:7e:30:18:4d:1c:
                    be:3c:b3:43:b1:1d:4a:46:39:11:fc:d8:d7:f6:79:
                    8c:31:ad:03:1b:66:fd:4b:63:68:6a:eb:18:69:87:
                    69:c4:52:4d:3b:4e:da:a5:5f:3d:00:a9:7f:f0:e3:
                    7d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B4:DC:DF:95:81:0C:7D:0C:D6:A9:AA:C0:C1:AF:70:0C:51:48:7D
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/8e638c0ad0e5e875ad25a1e40268555fea7ba4b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:5f:9a:f1:d1:93:e3:e3:2d:78:15:a6:d9:b1:69:de:dd:4f:
         ad:46:d8:0d:b4:6c:f6:18:96:77:e0:67:19:ce:69:d1:46:e0:
         b2:bf:cc:25:e6:21:ef:d5:c3:9b:2b:dc:41:be:83:91:18:fd:
         2d:92:a3:28:29:19:2f:d3:b2:c0:2f:f3:ca:7b:ec:81:9a:fb:
         e9:6c:7a:b5:19:5c:49:d0:aa:b2:0b:b9:f5:f1:8f:e9:07:48:
         ac:6c:26:f5:e0:68:55:a6:22:79:13:33:c7:e7:fe:17:6a:27:
         35:f3:1c:c1:93:31:7d:96:0f:69:e8:cf:ea:10:ba:8d:dd:58:
         6c:cd:4e:e5:73:f7:b3:f0:6f:cc:ff:80:59:d2:5f:47:8f:27:
         6d:73:b0:db:b1:19:02:03:69:40:92:aa:48:69:2e:73:bc:d1:
         f0:03:ac:62:43:10:41:a1:8e:19:1d:2c:1b:83:9f:82:92:75:
         a5:90:f3:10:76:a3:95:97:6c:40:81:25:ae:ab:86:13:a8:5b:
         3b:23:c5:d3:0b:64:71:59:5c:fd:0b:99:bd:7a:e1:57:1a:1c:
         da:9e:0c:23:2a:0f:47:d9:2a:40:17:8c:7a:09:ee:f6:11:08:
         3d:bf:9d:e8:00:c7:7b:e9:a7:db:ee:a4:92:65:a6:d0:50:ce:
         2d:11:7b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----