Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/99686eacaa2a816926b2e6d7390fb05187820a9c.roa
File:                     99686eacaa2a816926b2e6d7390fb05187820a9c.roa (raw, json)
Hash identifier:          Uvkz2GNAmwXamiY5pvihWEYG9Z+du1Gf9OKQMRgrZl4=
Subject key identifier:   FA:D6:15:8C:25:FD:E9:DF:A3:77:A6:EF:53:72:17:FF:4C:F8:1C:0D
Certificate issuer:       /CN=035480923cfb3fc749b393f95a7b72c277263815
Certificate serial:       04F3F6
Authority key identifier: 68:6A:59:4F:A9:67:FB:ED:13:5E:25:44:95:AE:8C:D6:9E:21:09:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/035480923cfb3fc749b393f95a7b72c277263815.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/99686eacaa2a816926b2e6d7390fb05187820a9c.roa
Signing time:             Wed 24 Mar 2021 14:41:02 +0000
ROA not before:           Wed 24 Mar 2021 14:41:02 +0000
ROA not after:            Tue 24 Mar 2026 14:41:02 +0000
asID:                     269953
IP address blocks:        190.89.128.0/22 maxlen: 22
                          2803:46e0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324598 (0x4f3f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=035480923cfb3fc749b393f95a7b72c277263815
        Validity
            Not Before: Mar 24 14:41:02 2021 GMT
            Not After : Mar 24 14:41:02 2026 GMT
        Subject: CN=99686eacaa2a816926b2e6d7390fb05187820a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:79:7d:b8:19:f0:a8:73:ba:ad:dd:ca:9c:e2:
                    7a:a3:53:45:5a:86:fe:94:27:85:e5:24:81:4d:19:
                    a8:7d:17:fc:de:be:52:82:5f:4b:18:6b:2d:db:d7:
                    5f:8e:6b:d2:2c:cc:92:04:4f:10:84:b9:e0:9c:9c:
                    02:92:c7:6a:bc:cf:71:b3:d8:e8:87:f4:7b:0a:8e:
                    a4:f9:74:c2:c3:76:9f:52:66:d8:73:42:5e:36:16:
                    82:53:3b:71:ea:51:c6:4b:cf:e8:82:94:63:1e:a7:
                    06:32:20:3b:6e:78:40:b2:f4:38:8e:af:f4:06:33:
                    70:8a:a8:6d:14:48:b0:ed:7c:e5:56:57:f2:3e:cb:
                    d8:73:0d:ba:59:82:9b:ed:94:5c:eb:1b:04:c9:a7:
                    ea:a6:4d:fb:b5:db:50:c6:b7:98:cd:92:ef:70:93:
                    bb:70:1d:fc:64:96:57:00:25:0b:9d:60:dd:71:b5:
                    ad:9d:ff:ae:48:1e:31:3c:b7:fc:b7:f2:c7:5c:08:
                    d5:a3:8a:25:f2:e3:3b:31:73:ae:3a:d6:ea:cd:52:
                    83:90:89:93:6e:48:45:ee:cd:ae:a8:b7:7b:55:51:
                    05:96:f8:7a:11:96:a9:28:a3:f8:93:bd:62:20:af:
                    c6:3b:e1:f0:d7:3e:03:cb:ff:03:04:26:cb:75:f5:
                    70:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D6:15:8C:25:FD:E9:DF:A3:77:A6:EF:53:72:17:FF:4C:F8:1C:0D
            X509v3 Authority Key Identifier:
                keyid:68:6A:59:4F:A9:67:FB:ED:13:5E:25:44:95:AE:8C:D6:9E:21:09:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/035480923cfb3fc749b393f95a7b72c277263815.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/99686eacaa2a816926b2e6d7390fb05187820a9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/035480923cfb3fc749b393f95a7b72c277263815.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.128.0/22
                IPv6:
                  2803:46e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:cd:26:8c:97:ae:e4:18:71:7d:c0:3d:2a:86:52:65:12:af:
         fa:5a:a9:49:73:48:3d:88:c6:7a:1a:05:00:5e:17:70:a6:54:
         75:8f:6d:29:49:33:df:b1:4b:4e:74:d1:ab:3d:25:4c:ed:29:
         2d:5f:d7:91:f5:14:88:46:b0:9b:c2:1d:5a:74:98:af:f5:25:
         57:72:dc:4b:27:d8:23:ed:49:d3:75:f4:4b:0e:2e:68:52:7c:
         28:ce:15:6f:0e:64:30:2a:60:39:fb:a3:0c:c7:7b:ad:d2:d2:
         e9:47:ea:aa:e7:34:ce:d6:75:f9:47:b4:70:19:74:b9:15:2b:
         1f:b4:9e:3d:14:51:52:03:56:3a:b5:5b:80:5f:ad:82:87:7b:
         5c:c9:6c:6a:65:e4:70:11:28:37:2a:5c:56:a0:59:c9:88:91:
         86:81:2c:ea:9f:e9:d5:75:ee:6f:bd:4f:04:da:e7:09:b0:51:
         28:b2:c4:d2:cb:c5:8d:ce:ab:5c:f1:58:1e:fd:fe:7d:1b:9e:
         cc:61:ac:fd:4b:70:ca:e0:b4:49:f1:55:3d:8b:5a:c7:a4:e0:
         03:e0:92:ec:e3:79:35:64:31:c1:97:d5:7b:31:53:f1:77:91:
         2d:53:a9:2e:9b:f0:86:6d:01:cf:3e:9c:57:68:00:32:6e:b7:
         2d:26:49:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----