Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1b0bb939-fc7f-4653-91cc-033691f7717e/16d5cb73fe3b088250232a9ef85f2123964aaa68.roa
File:                     16d5cb73fe3b088250232a9ef85f2123964aaa68.roa (raw, json)
Hash identifier:          uK+xFwKenJ4lsEE+NPvPZVmKYyFoW0O+Ht4mk3yL6wA=
Subject key identifier:   92:7F:EF:F7:17:72:80:97:A3:DD:9E:F1:2A:77:C7:17:4C:04:C2:37
Certificate issuer:       /CN=c0336e51f59b3eb4c8fdcd66973da9eaefcef446
Certificate serial:       0D6952
Authority key identifier: 81:A2:5A:1C:E5:AB:54:EE:7D:9E:62:06:92:CC:C7:B9:8A:4F:EA:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c0336e51f59b3eb4c8fdcd66973da9eaefcef446.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1b0bb939-fc7f-4653-91cc-033691f7717e/16d5cb73fe3b088250232a9ef85f2123964aaa68.roa
Signing time:             Wed 24 Mar 2021 14:48:13 +0000
ROA not before:           Wed 24 Mar 2021 14:48:13 +0000
ROA not after:            Tue 24 Mar 2026 14:48:13 +0000
asID:                     265641
IP address blocks:        170.254.172.0/22 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878930 (0xd6952)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0336e51f59b3eb4c8fdcd66973da9eaefcef446
        Validity
            Not Before: Mar 24 14:48:13 2021 GMT
            Not After : Mar 24 14:48:13 2026 GMT
        Subject: CN=16d5cb73fe3b088250232a9ef85f2123964aaa68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fc:c3:2d:f3:d9:58:31:42:0c:15:f1:f5:72:
                    d3:6d:e7:aa:a3:df:4b:af:84:2f:ff:b6:d7:9f:3e:
                    89:ac:4c:1b:c8:0e:3b:f8:d9:02:2f:2a:1d:b9:ce:
                    16:b9:ba:76:74:f9:e3:e8:73:ab:97:95:98:08:1b:
                    0d:26:12:64:f9:76:38:11:32:dd:e9:84:dd:13:3b:
                    ea:59:f6:83:46:55:94:00:8a:b1:d0:d5:0a:8e:9d:
                    fb:b9:cb:41:a5:fb:bd:98:2a:cc:94:07:f5:3a:d7:
                    5a:c1:b9:40:d3:a7:47:05:10:72:43:43:1d:81:58:
                    e1:78:9d:0b:93:03:96:42:6d:bb:97:17:d4:fd:b4:
                    ac:39:a6:81:43:ea:b7:da:dc:fa:e1:e0:94:21:10:
                    e8:28:c2:5d:48:35:7f:4a:44:bb:16:99:51:b4:8c:
                    5d:76:36:8e:4f:f3:76:59:54:fc:56:4f:34:12:5a:
                    ca:74:a2:32:88:fc:3f:6b:9f:78:85:d3:36:ef:43:
                    b7:1b:f4:4a:15:b4:d5:4c:b7:bc:ab:3c:bb:2a:b6:
                    93:95:3a:29:b9:bf:cc:36:f6:dd:38:a4:ba:49:f5:
                    80:69:58:80:4d:76:ed:ec:36:90:6f:2f:f9:56:be:
                    2f:64:a1:5e:e3:4f:4e:07:ac:84:2e:ea:e3:87:91:
                    66:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7F:EF:F7:17:72:80:97:A3:DD:9E:F1:2A:77:C7:17:4C:04:C2:37
            X509v3 Authority Key Identifier:
                keyid:81:A2:5A:1C:E5:AB:54:EE:7D:9E:62:06:92:CC:C7:B9:8A:4F:EA:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c0336e51f59b3eb4c8fdcd66973da9eaefcef446.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1b0bb939-fc7f-4653-91cc-033691f7717e/16d5cb73fe3b088250232a9ef85f2123964aaa68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1b0bb939-fc7f-4653-91cc-033691f7717e/c0336e51f59b3eb4c8fdcd66973da9eaefcef446.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:3f:8a:09:3f:99:8a:e1:55:bb:db:96:76:62:ad:34:79:46:
         02:1b:f5:b9:04:63:4f:6c:0e:a1:ce:e2:7c:9d:5a:e5:3a:fc:
         a3:07:71:29:01:1f:50:99:31:c4:9c:71:1c:a1:68:22:7e:5b:
         e6:77:0d:c5:7b:81:cf:0a:52:c4:ef:03:ed:73:a3:30:2e:1d:
         bb:af:91:d8:19:64:bd:31:b2:3e:f5:4c:04:a0:3b:13:79:d9:
         c3:f9:da:28:22:92:b6:95:e5:d5:55:32:f9:3f:17:82:84:b3:
         b7:78:ee:7f:f6:b8:cd:cb:c5:08:b9:f3:ab:0d:34:77:50:9b:
         a0:5c:e0:e2:87:c3:e6:ec:05:1b:c7:9f:b4:a3:5f:af:15:f8:
         17:6a:28:b6:20:9e:5c:3a:07:33:1e:ae:49:2b:51:29:1f:96:
         03:40:e1:d7:57:b1:8e:c8:27:79:28:ef:38:c0:67:ac:42:6f:
         de:53:ef:ce:a0:1c:cd:ee:08:cb:50:20:a6:f4:9f:06:95:75:
         67:b1:a3:7f:81:41:bb:46:17:79:34:67:b3:f2:c5:5e:f1:a7:
         40:7b:52:20:78:2c:50:de:86:a3:ce:65:b2:16:ce:aa:fc:45:
         ab:a8:d8:a2:0e:d3:0a:8c:15:15:40:36:71:d8:ab:fb:60:83:
         b6:7a:cf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----