Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/452eca4c77ff2ba4b70c8aae54e10e29d2c690ce.roa
File:                     452eca4c77ff2ba4b70c8aae54e10e29d2c690ce.roa (raw, json)
Hash identifier:          8eFwPRU804+yGcLmhQdVopSAJTWdllYHuvooq2MTaIo=
Subject key identifier:   34:B2:E8:2D:CD:A5:E0:DD:DA:D7:0A:8D:01:C2:88:35:9F:D4:7E:DF
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       12A69D
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/452eca4c77ff2ba4b70c8aae54e10e29d2c690ce.roa
Signing time:             Thu 23 Dec 2021 20:52:18 +0000
ROA not before:           Thu 23 Dec 2021 03:00:00 +0000
ROA not after:            Mon 23 Dec 2030 03:00:00 +0000
asID:                     27932
IP address blocks:        181.79.224.0/24 maxlen: 24
                          181.79.225.0/24 maxlen: 24
                          181.79.226.0/24 maxlen: 24
                          181.79.227.0/24 maxlen: 24
                          181.79.228.0/24 maxlen: 24
                          181.79.229.0/24 maxlen: 24
                          181.79.230.0/24 maxlen: 24
                          181.79.231.0/24 maxlen: 24
                          181.79.232.0/24 maxlen: 24
                          181.79.233.0/24 maxlen: 24
                          181.79.234.0/24 maxlen: 24
                          181.79.235.0/24 maxlen: 24
                          181.79.236.0/24 maxlen: 24
                          181.79.237.0/24 maxlen: 24
                          181.79.238.0/24 maxlen: 24
                          181.79.239.0/24 maxlen: 24
                          181.79.240.0/24 maxlen: 24
                          181.79.241.0/24 maxlen: 24
                          181.79.242.0/24 maxlen: 24
                          181.79.243.0/24 maxlen: 24
                          181.79.244.0/24 maxlen: 24
                          181.79.245.0/24 maxlen: 24
                          181.79.246.0/24 maxlen: 24
                          181.79.247.0/24 maxlen: 24
                          181.79.248.0/24 maxlen: 24
                          181.79.249.0/24 maxlen: 24
                          181.79.250.0/24 maxlen: 24
                          181.79.251.0/24 maxlen: 24
                          181.79.252.0/24 maxlen: 24
                          181.79.253.0/24 maxlen: 24
                          181.79.254.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1222301 (0x12a69d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Dec 23 03:00:00 2021 GMT
            Not After : Dec 23 03:00:00 2030 GMT
        Subject: CN=452eca4c77ff2ba4b70c8aae54e10e29d2c690ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:22:1a:f9:56:54:2c:1a:6f:7a:2a:27:96:
                    bb:d2:16:84:b3:40:a2:c2:26:28:23:7c:91:2a:ac:
                    e3:b7:6b:44:8a:6a:5f:e2:d3:3e:6f:aa:64:9c:c5:
                    17:35:2b:27:89:a5:ab:65:d5:66:71:ed:92:99:ee:
                    11:04:ef:01:cf:55:a1:f6:53:bd:1b:55:7b:1a:ba:
                    02:c1:e8:0a:f2:9d:95:58:90:34:05:e2:f5:20:7f:
                    0e:17:de:f2:c4:45:05:c5:c0:38:ff:40:2e:6c:34:
                    7c:41:aa:d1:51:1b:68:34:15:7c:44:b8:37:c0:0e:
                    ed:2e:08:ec:17:94:59:09:07:b9:97:82:70:c8:fd:
                    55:a8:94:f0:ff:55:ba:35:b2:5f:c8:3c:6f:5a:53:
                    ca:14:7e:a8:ab:a3:13:f6:70:b0:e9:9e:cb:8e:ca:
                    6b:78:1d:c4:08:08:bf:b6:e9:7e:97:d8:ce:f7:c1:
                    0c:5f:49:23:bf:47:d8:41:4e:16:95:3a:c7:ce:07:
                    41:e8:ba:39:2d:a2:61:ec:b9:34:cb:aa:a1:4c:61:
                    b5:df:d3:f4:5b:b8:df:03:d6:cb:dd:bb:4b:d8:b1:
                    a7:dd:15:7c:40:10:5b:06:ef:36:90:4b:ff:da:d6:
                    3c:22:da:72:d2:03:9b:34:19:09:60:7d:d6:66:6a:
                    a9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B2:E8:2D:CD:A5:E0:DD:DA:D7:0A:8D:01:C2:88:35:9F:D4:7E:DF
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/452eca4c77ff2ba4b70c8aae54e10e29d2c690ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.224.0-181.79.254.255

    Signature Algorithm: sha256WithRSAEncryption
         6d:ce:b0:af:d3:45:73:eb:60:10:63:9f:96:68:0d:61:86:dd:
         e5:a3:92:eb:f7:51:d4:f7:26:96:d2:9a:d7:9d:f3:3c:cd:b0:
         84:39:53:44:be:57:18:9a:f6:59:75:12:4f:51:c2:a3:20:be:
         90:ba:1a:90:b6:29:23:02:1f:fc:b8:0c:82:09:90:fe:87:90:
         c5:05:e4:5a:fb:59:02:7c:2e:8c:97:47:d8:cb:26:61:24:b0:
         07:ad:a9:03:6d:ae:a8:92:d3:5d:cd:99:cf:46:07:c3:d1:0a:
         4b:a0:32:6d:de:d7:60:a6:34:fb:40:e2:17:f4:00:1a:fa:5a:
         0d:2e:e2:7e:05:64:24:44:35:4a:93:11:98:3d:f0:52:70:67:
         1c:fd:3a:16:29:2e:36:7e:94:57:c8:1e:91:de:4d:90:99:3a:
         87:bd:f7:76:d7:e6:27:b0:90:4d:7a:a8:b6:44:6e:f4:7a:50:
         55:69:69:00:4c:e0:bc:05:72:a1:8b:b4:d8:b9:68:1e:07:16:
         64:c9:de:f6:79:c9:85:08:d9:3a:41:fe:ff:e2:05:43:9f:0a:
         f6:0e:32:bf:15:e8:f9:7a:a2:1e:7d:ce:11:46:ba:03:c8:ac:
         9f:f3:7c:2e:27:41:0a:0c:52:c4:8f:24:cd:62:13:43:e8:0d:
         41:28:f8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----