Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/8526e836a979309ee4a8c131dbae618bd8bed9e2.roa
File:                     8526e836a979309ee4a8c131dbae618bd8bed9e2.roa (raw, json)
Hash identifier:          ADpsHIthlogwvFDsS/MxyKuf6rez5aYerYB2OzVjYNU=
Subject key identifier:   2D:46:F7:EC:A6:96:28:3F:82:82:75:C8:79:BE:62:E9:65:D4:A7:13
Certificate issuer:       /CN=07a3e63d1966870c34f83b79e6705d8dc3f9b809
Certificate serial:       1383B9
Authority key identifier: E7:4F:4B:4C:08:78:4E:1A:4E:22:4C:95:7A:B5:B7:5F:81:D9:24:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07a3e63d1966870c34f83b79e6705d8dc3f9b809.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/8526e836a979309ee4a8c131dbae618bd8bed9e2.roa
Signing time:             Wed 15 Sep 2021 14:27:45 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     16732
IP address blocks:        200.59.32.64/26 maxlen: 26

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1278905 (0x1383b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a3e63d1966870c34f83b79e6705d8dc3f9b809
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=8526e836a979309ee4a8c131dbae618bd8bed9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:10:14:65:68:fe:24:e2:96:f4:20:ab:8a:55:
                    fe:e3:18:f3:05:bd:f7:03:61:07:27:a9:2b:d3:9c:
                    cc:f8:d2:49:5e:f6:9f:b3:fa:34:70:cf:d6:e5:44:
                    68:5b:0d:28:57:fb:d7:76:08:1f:90:86:65:89:54:
                    60:97:94:20:c8:57:8a:ef:18:36:03:5c:ac:8a:2d:
                    42:8c:f9:2a:e1:c2:ed:aa:08:67:33:34:4b:22:34:
                    6b:3c:55:77:8e:ad:2d:79:53:1e:27:4e:1e:dd:15:
                    c9:ec:1a:d7:35:75:46:1d:ee:13:9a:ed:f6:c4:38:
                    7a:96:f8:f3:a5:b2:fb:f5:8a:aa:0c:dc:df:26:58:
                    1d:3d:9b:97:ad:df:c3:9d:5e:69:7e:39:e0:d0:a0:
                    2c:9e:24:38:d9:6b:88:41:b4:b7:51:bd:92:50:a7:
                    e6:f3:ca:70:6e:64:1d:2f:4d:58:41:d9:7f:d0:fb:
                    31:0f:7d:c2:99:c7:2f:c9:4b:99:bc:a0:b3:d6:06:
                    9a:25:c2:27:be:5e:9a:64:5b:ae:8b:6a:f2:41:4f:
                    0b:82:af:9d:3e:15:a4:2c:00:46:46:40:09:32:bc:
                    ed:19:ee:ee:30:3d:75:5a:14:be:84:50:42:d9:a2:
                    43:99:8f:3f:36:ec:21:70:ab:1c:76:c5:1b:8b:9d:
                    f5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:46:F7:EC:A6:96:28:3F:82:82:75:C8:79:BE:62:E9:65:D4:A7:13
            X509v3 Authority Key Identifier:
                keyid:E7:4F:4B:4C:08:78:4E:1A:4E:22:4C:95:7A:B5:B7:5F:81:D9:24:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07a3e63d1966870c34f83b79e6705d8dc3f9b809.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/8526e836a979309ee4a8c131dbae618bd8bed9e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/07a3e63d1966870c34f83b79e6705d8dc3f9b809.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.32.64/26

    Signature Algorithm: sha256WithRSAEncryption
         0e:ae:33:40:b3:f7:c1:b2:35:a9:88:3f:05:31:f4:42:de:2d:
         e1:42:b4:8b:6d:65:16:d9:7e:91:18:e7:2e:3b:e8:ea:f5:c2:
         9b:6f:af:f8:df:73:5f:6e:c4:a2:31:4f:33:25:3d:85:18:81:
         25:23:69:aa:54:2c:cc:2f:9f:27:c6:80:56:f9:87:a2:96:b0:
         0f:01:1b:50:a1:19:2a:99:90:53:15:e9:74:67:72:5c:9a:b4:
         7a:4c:0f:b3:55:33:fb:9d:21:c9:aa:fc:8c:9c:fe:c0:60:b9:
         cb:e3:9d:f2:45:10:8b:20:9c:1a:12:4f:72:a2:fa:0b:84:b8:
         eb:26:e6:25:46:18:11:3e:68:c4:1d:4b:39:2d:ee:cd:4e:10:
         5a:ef:e5:7c:34:30:f6:5d:fb:ac:d7:c3:93:07:4c:49:95:fb:
         35:3b:d0:07:27:46:18:d4:94:74:b1:b0:7d:2a:14:09:b1:b0:
         ad:f5:f0:bb:77:52:7d:ca:c1:e5:96:78:e9:54:d0:56:a2:20:
         3e:e1:77:e7:c0:13:df:cd:18:80:7f:19:55:54:0a:b6:f3:e1:
         d6:97:bd:b7:40:cc:a1:61:8b:ee:51:44:6a:46:9c:77:df:22:
         77:b2:b6:49:9b:13:ca:cd:b5:00:ac:8d:82:33:f7:03:34:70:
         d7:ee:37:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----