Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0203196b-d643-442f-8d05-53356818427e/67f98984d1857605493a054cc705cf210820ac9f.roa
File:                     67f98984d1857605493a054cc705cf210820ac9f.roa (raw, json)
Hash identifier:          dgUXZr9E6yRGlk31X4xGmTcUtJNThO59TVV63TeJZGg=
Subject key identifier:   7D:8B:B2:EF:6F:C9:ED:57:DE:1D:DB:57:A7:45:99:FE:94:4A:C2:28
Certificate issuer:       /CN=9c039812edab95b305292dc8f1a3339fcf9cd5dc
Certificate serial:       0D3518
Authority key identifier: EB:8E:77:AD:91:33:AA:32:0B:37:CF:99:93:4C:D6:85:E0:B3:51:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c039812edab95b305292dc8f1a3339fcf9cd5dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0203196b-d643-442f-8d05-53356818427e/67f98984d1857605493a054cc705cf210820ac9f.roa
Signing time:             Wed 24 Mar 2021 22:49:28 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     266655
IP address blocks:        45.225.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865560 (0xd3518)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c039812edab95b305292dc8f1a3339fcf9cd5dc
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=67f98984d1857605493a054cc705cf210820ac9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ce:31:c1:f8:36:60:bf:d4:93:30:68:8e:a0:
                    fa:7b:cf:cd:3c:3e:f9:85:ad:b4:f3:cf:9e:fd:7e:
                    9a:73:63:d8:b1:4d:96:1e:e8:6c:f3:cf:3b:d5:ec:
                    35:7b:2d:51:a6:0b:fa:d7:fa:73:5a:05:27:75:f5:
                    06:34:df:58:69:ad:4d:3c:1a:c6:5c:74:51:5c:76:
                    c9:00:27:af:87:7d:b5:5d:53:a8:44:8e:3d:4c:8f:
                    03:45:8c:49:c0:bf:f5:10:0d:49:cb:5d:9f:5c:88:
                    12:9e:05:0b:02:91:53:22:9c:ba:c2:4b:28:0b:b5:
                    aa:7a:73:85:b9:c9:5b:41:22:b9:04:b5:84:71:c5:
                    3d:04:17:12:19:ea:5b:ee:28:db:b4:c4:d6:39:1d:
                    5c:85:c9:88:f9:81:c7:55:21:ee:3f:21:cc:7a:b9:
                    d1:a3:71:6b:f8:20:65:24:93:11:ae:a2:a3:3a:a2:
                    77:48:7c:dd:2a:e3:ce:69:b8:46:ca:91:e0:9a:ea:
                    a4:af:26:a6:af:a2:d4:4b:34:99:50:a8:3a:02:b2:
                    f4:a9:3d:98:dd:f5:8b:a3:07:6e:3b:90:a3:18:2b:
                    1c:38:dd:c0:9f:97:77:73:32:73:bf:6a:b0:9a:01:
                    b7:71:1d:67:be:09:ca:1d:91:1c:91:9c:88:b7:fa:
                    fd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8B:B2:EF:6F:C9:ED:57:DE:1D:DB:57:A7:45:99:FE:94:4A:C2:28
            X509v3 Authority Key Identifier:
                keyid:EB:8E:77:AD:91:33:AA:32:0B:37:CF:99:93:4C:D6:85:E0:B3:51:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c039812edab95b305292dc8f1a3339fcf9cd5dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0203196b-d643-442f-8d05-53356818427e/67f98984d1857605493a054cc705cf210820ac9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0203196b-d643-442f-8d05-53356818427e/9c039812edab95b305292dc8f1a3339fcf9cd5dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:2b:6d:dc:5c:52:83:9a:26:87:c6:0a:a8:10:c7:9a:dc:e2:
         ec:fc:e7:39:3e:50:ef:0f:7a:fb:d0:ec:08:e3:7c:b9:cf:3f:
         08:c7:f9:0f:ad:34:2a:09:c9:33:70:ae:60:45:80:f2:85:1d:
         cb:dc:a3:2f:88:cb:9b:b2:d7:fc:93:8b:78:5c:48:6b:98:86:
         57:60:bc:8a:1f:18:d9:a0:33:04:ee:b0:9a:eb:3f:76:e2:87:
         0d:8b:f6:ad:aa:8a:cd:34:3b:bd:d5:01:83:f1:22:50:8f:1d:
         58:53:b0:b1:ab:35:dc:a5:fd:72:89:2d:3e:e7:d7:1c:46:fa:
         e4:a9:53:3f:51:a9:d2:6d:93:e3:a6:95:f9:e9:68:de:e4:37:
         f9:f7:89:04:8a:bf:ab:75:c0:d7:16:2e:fc:f1:c9:72:31:4e:
         32:26:35:9b:60:92:df:aa:e2:ec:5c:be:64:6a:fa:4b:47:ac:
         a5:fb:49:f4:81:92:03:f9:85:5e:d8:cf:a4:d3:29:6e:07:4f:
         bc:5c:e6:f5:83:bf:71:b0:64:2e:55:a7:8c:70:32:47:85:be:
         ed:5f:31:d3:8d:80:11:0a:52:5f:a2:6b:df:3e:05:4b:cd:d1:
         a4:42:e9:37:64:c1:92:24:86:e0:79:14:8e:d6:99:35:21:d9:
         8f:27:3d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----