Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c036d4d-75f4-42ab-abce-a358edf11f4b/fb1395873d6fed2e1a2b485799dd7b99cd3ddb34.roa
File:                     fb1395873d6fed2e1a2b485799dd7b99cd3ddb34.roa (raw, json)
Hash identifier:          WAt4MFHn1B475/gUv4RnlF/RcJ6ReZqd8OC4fLUrqo4=
Subject key identifier:   BC:77:AD:B5:FF:74:F6:4C:73:49:2A:1E:63:04:5B:08:B8:F6:85:87
Certificate issuer:       /CN=debeb6294e93216759f5a631a2f8b9604e220b81
Certificate serial:       0D1CCC
Authority key identifier: 89:3B:59:E1:36:E8:7C:79:32:B5:E8:07:B1:F4:31:71:98:72:08:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/debeb6294e93216759f5a631a2f8b9604e220b81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1c036d4d-75f4-42ab-abce-a358edf11f4b/fb1395873d6fed2e1a2b485799dd7b99cd3ddb34.roa
Signing time:             Wed 24 Mar 2021 14:32:48 +0000
ROA not before:           Wed 24 Mar 2021 14:32:48 +0000
ROA not after:            Tue 24 Mar 2026 14:32:48 +0000
asID:                     266707
IP address blocks:        45.229.248.0/22 maxlen: 22
                          2803:3d20::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859340 (0xd1ccc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=debeb6294e93216759f5a631a2f8b9604e220b81
        Validity
            Not Before: Mar 24 14:32:48 2021 GMT
            Not After : Mar 24 14:32:48 2026 GMT
        Subject: CN=fb1395873d6fed2e1a2b485799dd7b99cd3ddb34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4c:e2:c7:d9:ba:42:75:97:1f:e0:8e:5d:90:
                    1a:d0:81:fc:a0:2c:e1:3c:c6:62:d4:a8:fa:38:31:
                    f6:0b:45:56:1e:b4:d5:ed:bd:51:ab:31:dd:cc:f7:
                    27:76:e4:3e:d4:18:a5:cf:5c:e7:3d:b9:67:4b:45:
                    c9:d1:60:77:fa:4f:5e:d5:e3:55:04:1d:93:e0:eb:
                    61:2a:36:c2:95:83:95:31:29:e9:7c:c8:b9:1b:5f:
                    ca:8b:13:1b:96:f8:d8:84:c2:41:46:08:95:f7:ec:
                    3e:ce:6a:ca:96:23:58:cb:db:50:a8:fa:eb:1b:ef:
                    12:df:58:6d:43:ba:9e:e2:d3:0e:5e:4e:c6:dc:be:
                    a8:24:39:ee:bb:96:bb:77:25:b0:84:18:89:8e:d6:
                    8e:f2:65:7b:1e:ba:d7:44:c0:85:ba:b0:a8:66:7d:
                    ac:1e:1c:2b:59:b1:9b:df:fe:f2:a8:22:ca:1a:a8:
                    a6:b6:99:1c:04:71:94:81:0c:af:50:7c:4a:cd:ca:
                    7b:c6:7f:85:4d:0f:87:c1:ec:1b:97:7b:af:6c:26:
                    fa:f9:77:b1:15:7d:32:76:8d:f9:99:4d:52:47:97:
                    dd:49:ac:16:b2:8c:2f:5d:dd:4a:c1:d0:fd:b6:8c:
                    3a:ac:94:17:6d:53:04:aa:24:98:4f:f4:67:58:62:
                    2a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:77:AD:B5:FF:74:F6:4C:73:49:2A:1E:63:04:5B:08:B8:F6:85:87
            X509v3 Authority Key Identifier:
                keyid:89:3B:59:E1:36:E8:7C:79:32:B5:E8:07:B1:F4:31:71:98:72:08:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/debeb6294e93216759f5a631a2f8b9604e220b81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c036d4d-75f4-42ab-abce-a358edf11f4b/fb1395873d6fed2e1a2b485799dd7b99cd3ddb34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1c036d4d-75f4-42ab-abce-a358edf11f4b/debeb6294e93216759f5a631a2f8b9604e220b81.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.248.0/22
                IPv6:
                  2803:3d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:72:67:27:16:1c:e8:c5:b0:40:95:31:21:49:82:6c:89:69:
         bb:6a:f5:c7:87:b3:0b:bf:ff:76:92:d2:20:f5:44:ec:db:bc:
         53:53:cd:0d:76:0f:d8:43:82:aa:b0:86:5c:2f:4f:26:fb:04:
         00:7d:9a:c2:3d:09:0c:a8:23:ea:80:55:34:ea:e4:38:e0:54:
         d5:ad:37:d5:c3:52:b0:7e:00:27:ac:93:39:ad:6d:9c:fb:3e:
         af:75:74:3f:ed:20:7a:bd:a2:12:ee:87:a6:6b:16:42:57:22:
         eb:99:0f:9d:55:f5:88:99:9e:e9:d9:06:bd:12:1d:73:70:16:
         a4:9c:8a:8a:92:12:6d:7a:d7:df:5a:ad:08:80:93:ce:76:36:
         05:2f:4e:2a:f3:7b:1a:7d:f9:ee:51:91:2e:ab:90:e7:48:07:
         c6:e1:f5:2c:de:2e:be:a2:a1:0c:74:62:f0:17:cd:66:1e:50:
         27:7d:b7:34:e3:ea:91:6a:9b:d2:b9:90:98:9f:86:ee:48:9b:
         b0:b3:7a:5a:79:2d:5f:56:f5:dc:d7:4a:74:88:29:70:a7:df:
         b5:f4:51:97:2f:74:ee:fc:46:95:cb:ac:33:e5:54:02:9e:7c:
         f6:6b:3f:fe:f1:28:3f:81:79:35:9a:64:e4:9c:56:5c:09:74:
         97:c4:04:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----