Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/1d96575cad85d89beaa4dfb29384482e99172121.roa
File:                     1d96575cad85d89beaa4dfb29384482e99172121.roa (raw, json)
Hash identifier:          ns5HIU0R6PPJy9DTCJJD02Ufp8fCCGkfWh+RyOQWGqc=
Subject key identifier:   E3:6E:F6:43:59:38:E2:0B:ED:7D:28:1E:DD:33:E5:15:03:07:01:35
Certificate issuer:       /CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
Certificate serial:       03E458
Authority key identifier: EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/1d96575cad85d89beaa4dfb29384482e99172121.roa
Signing time:             Wed 24 Mar 2021 14:47:12 +0000
ROA not before:           Wed 24 Mar 2021 14:47:12 +0000
ROA not after:            Tue 24 Mar 2026 14:47:12 +0000
asID:                     30133
IP address blocks:        2001:13c7:7009::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255064 (0x3e458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
        Validity
            Not Before: Mar 24 14:47:12 2021 GMT
            Not After : Mar 24 14:47:12 2026 GMT
        Subject: CN=1d96575cad85d89beaa4dfb29384482e99172121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f4:fc:3c:8d:08:0f:d7:15:9b:58:e7:4c:2e:
                    79:a2:47:11:0d:fa:b2:53:6b:e6:a9:79:f9:ad:4d:
                    f9:31:db:b2:57:6e:d7:7a:2c:5a:c6:f1:b5:6d:e8:
                    8f:ae:e2:f7:89:e6:59:17:1c:b6:e8:2e:f3:14:57:
                    de:98:ff:6b:c0:a1:ad:b9:8c:7f:7b:00:92:58:b0:
                    cb:5f:32:b9:2d:0b:0b:d1:2f:4a:11:de:ee:dc:cd:
                    71:98:8a:28:aa:6a:37:61:1d:f2:31:4b:33:d6:2e:
                    cd:29:f1:2d:17:b2:e7:55:87:90:34:ba:7f:78:fd:
                    8f:3a:1f:13:1d:39:38:a3:6e:11:b5:9d:d8:34:78:
                    dd:27:71:a6:4d:20:67:ee:97:3f:b0:32:18:8c:5d:
                    57:98:45:73:ca:3d:bf:66:4c:55:e1:e8:5b:5e:7f:
                    77:57:14:97:07:81:bf:46:14:17:7d:c4:60:fa:98:
                    7e:ef:43:99:2d:61:2f:ce:66:2f:5e:8f:5d:57:69:
                    0e:02:06:b6:b5:3c:df:fa:25:26:95:e7:ff:23:e2:
                    a4:14:c8:65:e4:81:f6:17:51:40:4c:b2:1a:1a:70:
                    2f:9d:af:14:e4:25:d3:c3:98:a7:97:9f:1c:76:e0:
                    4d:0c:00:d1:40:0c:52:1a:89:3c:55:42:67:4d:5f:
                    36:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6E:F6:43:59:38:E2:0B:ED:7D:28:1E:DD:33:E5:15:03:07:01:35
            X509v3 Authority Key Identifier:
                keyid:EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/1d96575cad85d89beaa4dfb29384482e99172121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/7ad45033c78c4f66de023e56ff03e177bf1bcb19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7009::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:a1:c0:00:cc:a6:38:f9:4d:fa:66:64:06:1c:97:16:3e:0c:
         9e:6f:51:0d:df:02:00:ed:2f:56:ee:c0:65:84:45:09:fe:30:
         aa:88:10:3e:23:06:bc:ba:c7:c4:da:98:d7:1f:81:0b:02:63:
         dc:c5:a8:5a:6e:f5:df:d3:8c:0e:7f:dc:19:ce:b8:f4:9d:b3:
         f0:1f:34:a6:cc:48:96:b1:64:fc:f9:c7:0e:40:8d:7a:ef:80:
         5f:bc:d3:c9:d2:a3:9b:cd:f3:84:08:00:53:c1:c2:1d:92:80:
         62:cd:42:0c:91:35:69:a0:9e:38:9a:a2:0e:e9:e9:fd:0c:26:
         8e:50:1d:dc:4d:19:ea:06:5f:c4:e5:86:63:18:a7:31:c8:32:
         0a:0a:0a:7c:c2:61:e5:e5:4d:6d:56:0b:46:a5:45:cd:c7:3e:
         76:47:17:4a:e1:12:17:9c:bb:fa:d1:01:37:e6:dd:19:ca:16:
         be:75:fc:17:79:89:59:74:13:42:6c:49:f3:fc:f9:d1:7a:d3:
         ec:a4:71:9d:71:55:a6:b5:f4:ec:18:45:b0:4a:77:2e:9b:af:
         9b:bd:b8:ab:7b:cd:aa:82:52:d8:9d:f0:a7:1f:e5:c7:67:9e:
         0a:fa:c7:f8:b7:95:b3:70:fb:2b:0d:00:3b:d0:3e:94:97:a9:
         98:11:82:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----