Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/5459a1fa97eb2baa3caaebe404ba14b81c68cc64.roa
File:                     5459a1fa97eb2baa3caaebe404ba14b81c68cc64.roa (raw, json)
Hash identifier:          SFZPCFAwzepPx4PjaQfJwd94xz7mWsgdZjolF1fLUMU=
Subject key identifier:   C3:96:6F:6E:42:FE:E6:25:43:88:C0:59:3A:20:43:14:3A:BD:49:0F
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       195895
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/5459a1fa97eb2baa3caaebe404ba14b81c68cc64.roa
Signing time:             Tue 06 Sep 2022 20:03:22 +0000
ROA not before:           Wed 24 Mar 2021 14:30:56 +0000
ROA not after:            Tue 24 Mar 2026 14:30:56 +0000
asID:                     266725
IP address blocks:        181.119.33.0/24 maxlen: 24
                          181.119.41.0/24 maxlen: 24
                          181.119.69.0/24 maxlen: 24
                          181.119.71.0/24 maxlen: 24
                          181.119.72.0/24 maxlen: 24
                          181.119.73.0/24 maxlen: 24
                          181.119.74.0/24 maxlen: 24
                          181.119.75.0/24 maxlen: 24
                          181.119.76.0/24 maxlen: 24
                          181.119.77.0/24 maxlen: 24
                          181.119.78.0/24 maxlen: 24
                          181.119.79.0/24 maxlen: 24
                          181.119.80.0/24 maxlen: 24
                          181.119.81.0/24 maxlen: 24
                          181.119.82.0/24 maxlen: 24
                          181.119.158.0/24 maxlen: 24
                          181.119.169.0/24 maxlen: 24
                          181.119.170.0/24 maxlen: 24
                          181.119.3.0/24 maxlen: 24
                          181.79.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1661077 (0x195895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Mar 24 14:30:56 2021 GMT
            Not After : Mar 24 14:30:56 2026 GMT
        Subject: CN=5459a1fa97eb2baa3caaebe404ba14b81c68cc64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2f:f2:ec:ae:bb:94:e9:72:67:db:87:f1:54:
                    a8:00:19:91:bb:c6:58:b9:d1:de:8f:23:fe:13:a6:
                    51:2f:f3:1a:bf:e1:86:8a:59:db:89:25:1f:7e:63:
                    f1:62:10:5a:88:47:11:b0:8a:e8:82:23:8b:ae:88:
                    67:b1:80:49:9c:2b:a0:8d:40:77:da:87:ae:85:fb:
                    14:e6:a3:1b:e8:a4:e3:85:ed:b4:b0:73:36:64:ad:
                    a9:a9:74:58:81:d7:21:85:27:46:38:61:11:d7:25:
                    f2:28:f9:56:53:84:be:5b:68:3f:32:e7:ba:61:38:
                    2e:6e:9f:58:b6:30:da:b6:b4:ed:63:e8:b5:13:ad:
                    ce:16:d4:c6:f8:c3:cd:7c:06:e1:17:51:9e:1e:71:
                    19:39:fd:5e:8d:cd:62:0e:f8:1b:07:da:aa:de:55:
                    04:b7:c5:33:6e:e8:0b:e7:49:e8:fa:67:91:9e:14:
                    98:f0:9d:ea:56:61:a7:08:79:a7:b4:84:a4:e5:ca:
                    a7:04:99:59:c0:c4:f3:5d:a1:3d:64:ab:38:60:4b:
                    2e:8b:b5:6d:f1:9c:3c:c0:da:64:0c:2c:2f:bb:29:
                    59:bb:54:1f:2f:0d:94:0b:c5:f9:af:b1:c9:0d:ec:
                    46:cc:80:db:c4:d4:c4:c3:fd:2a:08:81:29:1c:05:
                    b1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:96:6F:6E:42:FE:E6:25:43:88:C0:59:3A:20:43:14:3A:BD:49:0F
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/5459a1fa97eb2baa3caaebe404ba14b81c68cc64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.219.0/24
                  181.119.3.0/24
                  181.119.33.0/24
                  181.119.41.0/24
                  181.119.69.0/24
                  181.119.71.0-181.119.82.255
                  181.119.158.0/24
                  181.119.169.0-181.119.170.255

    Signature Algorithm: sha256WithRSAEncryption
         63:39:ba:ed:29:42:b7:b5:81:4a:04:6b:38:f3:54:bc:f4:94:
         f5:2d:70:c0:3c:ac:03:91:bd:03:7b:e4:3d:9b:27:2d:d9:61:
         cb:93:97:01:87:f2:08:ef:3a:ad:69:b9:4a:27:3a:1c:3a:0d:
         28:28:87:e6:d1:57:e7:39:f9:0e:6d:0d:93:c9:56:65:b3:9a:
         20:ee:45:7f:c2:80:9a:32:0f:26:37:a4:7e:03:f1:62:45:95:
         49:e7:3c:69:b8:f6:06:2d:db:0f:89:bb:44:b7:4a:c2:96:84:
         85:72:c1:a1:e5:af:a0:25:51:0b:0b:44:a4:9b:6d:c7:cb:f8:
         dc:29:be:20:77:a1:53:8d:fc:69:26:66:2b:e8:45:6c:48:63:
         7c:50:80:df:84:d8:93:92:d1:4d:96:42:4b:6b:80:2a:2b:7a:
         ea:88:fe:b2:4a:ae:9f:0e:9c:37:61:fb:15:99:9d:16:6c:c6:
         a6:67:a2:36:ad:3a:82:a9:6a:9e:30:45:02:6a:b1:af:bb:58:
         94:cc:78:e0:47:fc:be:f3:32:1f:7d:02:60:28:63:2a:83:10:
         02:f3:bc:79:1e:4e:3b:54:58:f1:a6:b6:0e:2c:af:cc:e8:10:
         7f:d7:8b:47:c1:d0:bc:44:f2:03:c9:3f:d7:a0:49:ae:e3:f3:
         b5:e5:bb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----