Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/a34a4c42f9103649d9f8353a1588c98623753332.roa
File:                     a34a4c42f9103649d9f8353a1588c98623753332.roa (raw, json)
Hash identifier:          pwdtaffMmGj4bbNVjnVArg23gD+OiP0ExO+LrdNxKWo=
Subject key identifier:   8E:01:64:94:D8:B4:31:5D:54:F0:D3:74:3D:C9:F6:05:01:26:A2:60
Certificate issuer:       /CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
Certificate serial:       04F077
Authority key identifier: 54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/a34a4c42f9103649d9f8353a1588c98623753332.roa
Signing time:             Wed 24 Mar 2021 14:36:06 +0000
ROA not before:           Wed 24 Mar 2021 14:36:06 +0000
ROA not after:            Tue 24 Mar 2026 14:36:06 +0000
asID:                     262215
IP address blocks:        45.179.202.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323703 (0x4f077)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
        Validity
            Not Before: Mar 24 14:36:06 2021 GMT
            Not After : Mar 24 14:36:06 2026 GMT
        Subject: CN=a34a4c42f9103649d9f8353a1588c98623753332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b0:b1:5f:3b:a2:bc:14:e0:92:be:fe:0b:94:
                    1d:fa:a2:c1:51:4b:97:11:99:89:1f:7d:83:a8:24:
                    44:fd:40:43:8e:ef:09:c8:67:70:b8:42:9f:e6:97:
                    e6:39:1d:f7:35:31:03:ed:e9:66:8b:77:a1:e9:8f:
                    8d:d2:e5:6c:8c:42:be:9b:85:67:f3:21:4c:28:0b:
                    1a:eb:2f:81:e1:9e:da:a9:59:68:d6:36:07:03:0a:
                    93:23:dc:df:d3:8a:69:bb:85:c2:dd:93:b8:d7:d2:
                    6f:a3:1e:53:02:9e:81:dc:2b:46:17:27:d6:a5:bf:
                    15:f3:70:a9:b3:10:0b:5b:92:06:ef:db:88:4a:2f:
                    c6:cc:da:6d:33:d6:2b:fb:71:f7:58:b5:e3:ee:5b:
                    28:f9:4e:80:a2:9f:93:ba:73:dc:00:ef:ca:9f:0a:
                    aa:17:13:8f:75:a0:bf:1f:c9:15:e1:cc:a7:b6:e6:
                    a1:32:60:8b:a7:d7:27:95:ee:3d:a6:e3:a8:64:1b:
                    8b:67:dd:8d:21:06:66:f2:08:db:62:61:3b:7a:3d:
                    62:60:e2:d2:b7:e9:fe:84:58:fa:4f:a2:2b:91:e7:
                    4d:c0:4a:f0:a2:33:ec:0d:da:b7:23:fd:6d:29:84:
                    40:c1:19:51:bd:63:52:23:aa:dd:06:c4:be:cb:f9:
                    b2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:01:64:94:D8:B4:31:5D:54:F0:D3:74:3D:C9:F6:05:01:26:A2:60
            X509v3 Authority Key Identifier:
                keyid:54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/a34a4c42f9103649d9f8353a1588c98623753332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/27a5488123c2689d948f7eb4b73b6005b88be1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:f6:89:0d:d6:d0:1b:a0:c4:1a:36:40:4a:6c:97:fd:78:a8:
         19:5e:45:0b:5b:5c:85:81:87:6f:87:0f:41:bb:c2:a4:82:6e:
         d3:2e:7d:05:51:84:f4:43:66:cb:51:ab:13:88:be:86:67:42:
         84:9e:34:a8:c1:94:cf:38:fa:fb:ff:2e:e5:6f:33:37:07:af:
         1c:28:54:8c:64:aa:58:3b:15:9c:48:66:af:6b:08:1f:46:ef:
         fd:96:61:74:ac:a4:47:f4:e7:b8:27:6a:2a:2b:a2:35:79:8d:
         90:cb:b1:95:8f:1b:48:bb:71:c5:8e:b9:11:a0:04:d0:06:e5:
         5e:2a:ea:c6:a4:f8:eb:5b:98:2a:16:cf:5f:4d:d5:c3:72:50:
         44:6e:c6:8c:1a:9d:cc:6a:d4:5b:05:64:c6:97:fa:c7:7f:d0:
         02:79:8f:d4:30:32:71:a6:2d:a4:d0:e2:47:99:03:08:5c:e2:
         85:1c:5e:af:62:6d:7f:f1:77:36:f7:7a:2a:36:88:d4:70:34:
         22:af:04:4d:ff:9b:39:75:d3:83:94:c0:cd:1a:a3:9e:b1:9a:
         cf:25:f7:72:7c:5a:1d:e9:c9:fb:b9:64:74:e3:29:f2:1b:5b:
         ab:d2:00:61:b6:55:ef:4d:26:8d:1a:59:24:14:30:41:03:db:
         5c:ad:62:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----