Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/c1ff0588526eee27bb31d708825fe281f647e40f.roa
File:                     c1ff0588526eee27bb31d708825fe281f647e40f.roa (raw, json)
Hash identifier:          i+ka+zSDV7hf4NFCgEpQPsl0fXvTzHANWx26U32vZFQ=
Subject key identifier:   58:28:9B:1D:21:72:A6:1E:B2:66:99:FC:A8:8D:76:A8:24:DA:65:05
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       09ECDA
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/c1ff0588526eee27bb31d708825fe281f647e40f.roa
Signing time:             Wed 24 Mar 2021 14:43:17 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        201.148.32.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 650458 (0x9ecda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=c1ff0588526eee27bb31d708825fe281f647e40f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fb:d2:f9:9c:ed:80:d0:99:2f:49:74:22:e5:
                    16:22:41:e9:5d:b2:80:28:c7:52:fc:6e:bd:28:31:
                    ba:09:0e:09:78:0e:59:fd:d1:a3:48:b7:35:df:e3:
                    ee:09:24:ed:2a:a7:94:26:60:ce:00:d7:af:8e:2d:
                    de:83:40:4c:d3:f2:22:57:96:2e:72:be:51:54:dd:
                    30:52:69:a2:a4:37:b8:e5:40:17:53:35:5d:a1:7e:
                    6c:7b:bb:68:98:61:7b:01:28:01:00:27:d1:15:c1:
                    6b:b1:8e:83:dd:22:5d:7b:7a:e2:da:e4:74:a8:aa:
                    f3:b4:a5:8b:81:96:37:c8:5a:35:bf:88:35:d6:ff:
                    ae:b2:7a:bf:42:15:20:17:53:00:d2:d6:4c:3c:a7:
                    67:d7:dd:4a:0b:1b:7a:6a:d9:a1:74:19:ec:db:fd:
                    38:25:27:f1:5e:3a:54:12:05:d2:5f:c4:1f:89:76:
                    f2:01:e4:2c:6a:1b:b4:a5:c5:56:92:4a:d5:4b:15:
                    54:c1:68:12:fc:12:ed:73:46:ba:cd:1a:fa:d1:bf:
                    27:be:6a:bc:a9:49:24:2f:2a:97:f2:59:e7:4a:6e:
                    14:b2:3e:7d:27:33:0c:b0:d7:46:10:46:40:09:7c:
                    cc:d6:79:7f:03:1d:ae:07:7b:21:27:3d:ee:0f:1a:
                    ca:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:28:9B:1D:21:72:A6:1E:B2:66:99:FC:A8:8D:76:A8:24:DA:65:05
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/c1ff0588526eee27bb31d708825fe281f647e40f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8e:50:9b:69:f6:0c:32:12:df:b7:e5:19:13:24:96:66:11:97:
         8e:6d:9c:a8:df:44:ba:5f:c3:99:2d:a4:4f:fb:b9:a8:d6:f5:
         67:20:f9:65:f1:65:5b:99:5f:e0:eb:40:d6:d9:c3:e3:96:b2:
         10:3f:e0:17:ec:10:95:93:9c:95:34:2e:9d:8b:da:c1:f9:16:
         9f:9b:13:c0:8b:ca:25:b7:5b:24:50:d3:4d:ec:21:73:d9:5a:
         6d:bf:f0:da:dc:59:80:fc:6e:d5:cb:cd:79:9a:cc:1f:5d:de:
         b8:0f:5e:a4:c9:f6:8d:2e:2b:2c:2e:6c:c7:2f:e8:1e:a2:8b:
         df:53:e4:49:b6:b1:f5:fb:86:c2:75:78:18:fc:dc:ca:c2:8f:
         f5:83:1b:81:09:fa:21:af:16:ad:de:99:55:88:ed:ca:7c:d5:
         36:e7:83:4f:0c:47:a5:ac:eb:56:4e:dd:61:5a:9f:dd:1d:c4:
         b5:bf:41:66:56:f4:99:8e:31:75:1d:11:e8:d3:ec:92:32:ea:
         a4:14:92:4d:46:86:5c:c0:d3:96:c6:96:bb:7f:fc:af:e8:b2:
         c7:58:2b:bf:e7:24:03:6c:2a:06:9e:c4:d2:db:b1:85:fb:d4:
         eb:91:30:25:f5:90:39:66:6d:48:db:b8:b6:01:db:60:40:ab:
         c3:5b:d8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----