Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/c4badcd99f17d5e6db591e6650665c4cfec4f569.roa
File:                     c4badcd99f17d5e6db591e6650665c4cfec4f569.roa (raw, json)
Hash identifier:          X3KstlQgRngfHYOLKvkMLg9euSC5ELwr4sSR+wSNgho=
Subject key identifier:   D0:7D:F8:D2:0E:EF:A6:A6:4E:94:A2:BE:3F:8D:C6:66:83:6D:49:55
Certificate issuer:       /CN=9d0eefbeed1a04984bf835792198e2b00880f6fa
Certificate serial:       01689E
Authority key identifier: 1B:01:3A:65:56:04:09:45:78:68:41:59:4A:C4:1D:78:42:4D:7C:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d0eefbeed1a04984bf835792198e2b00880f6fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/c4badcd99f17d5e6db591e6650665c4cfec4f569.roa
Signing time:             Wed 24 Mar 2021 14:29:51 +0000
ROA not before:           Wed 24 Mar 2021 14:29:51 +0000
ROA not after:            Tue 24 Mar 2026 14:29:51 +0000
asID:                     270072
IP address blocks:        131.0.132.0/22 maxlen: 24
                          2803:13e0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92318 (0x1689e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d0eefbeed1a04984bf835792198e2b00880f6fa
        Validity
            Not Before: Mar 24 14:29:51 2021 GMT
            Not After : Mar 24 14:29:51 2026 GMT
        Subject: CN=c4badcd99f17d5e6db591e6650665c4cfec4f569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:80:06:39:9c:ac:83:99:1d:f0:ae:4c:37:
                    a1:12:f7:69:1d:18:3c:a3:40:82:36:ff:47:d7:fd:
                    a8:c6:c4:00:db:ef:0e:06:3b:01:83:a4:27:02:f9:
                    a0:64:c7:67:ef:00:31:cb:5b:79:91:32:e5:9a:8b:
                    46:0f:09:d1:16:de:dc:06:e7:d0:36:6b:69:40:58:
                    2e:10:0c:49:84:de:ba:b5:b2:7a:b1:74:55:8b:3f:
                    b9:39:ba:a2:3d:b1:8a:59:56:c8:89:51:2c:4b:4d:
                    65:78:b7:6f:89:8f:20:98:71:ab:09:7f:b0:2c:67:
                    b5:03:f3:0a:3c:4f:93:fa:31:94:4a:62:e9:a7:e7:
                    ee:17:22:19:05:d0:7d:ac:8a:cc:40:25:c1:63:ea:
                    53:c9:97:69:93:09:b2:8b:75:2f:ce:3d:0f:0f:3a:
                    56:84:7d:6b:a5:f6:56:84:86:ff:58:e7:48:93:62:
                    ab:25:77:0b:c3:f3:cf:61:6b:91:46:6f:24:bd:ed:
                    d0:90:01:d4:7e:e1:54:b9:4b:cf:13:6c:07:14:64:
                    b1:02:34:f6:56:44:06:44:52:bd:82:c8:9a:4d:a1:
                    c7:fc:48:bc:3d:62:5f:28:40:6c:58:d9:b2:95:ef:
                    2d:66:95:29:62:3c:05:4f:41:5f:10:b8:cb:9e:96:
                    d6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7D:F8:D2:0E:EF:A6:A6:4E:94:A2:BE:3F:8D:C6:66:83:6D:49:55
            X509v3 Authority Key Identifier:
                keyid:1B:01:3A:65:56:04:09:45:78:68:41:59:4A:C4:1D:78:42:4D:7C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d0eefbeed1a04984bf835792198e2b00880f6fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/c4badcd99f17d5e6db591e6650665c4cfec4f569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.132.0/22
                IPv6:
                  2803:13e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:16:9d:02:d7:bf:74:52:89:62:fc:49:ec:a5:4e:f3:97:68:
         9c:fc:ae:a8:23:d6:4c:46:e0:b2:d3:80:07:3e:f0:60:b7:e1:
         01:64:2a:db:49:d2:f7:00:61:13:0d:a6:ad:aa:62:d6:b3:44:
         74:b0:ad:d1:c2:e1:0b:c9:57:10:31:44:6e:14:3b:71:e3:39:
         4a:f0:dc:37:23:40:bd:0d:a9:8a:bc:71:d0:db:d9:dd:99:1a:
         39:61:b0:25:24:a0:f4:37:cf:a4:5d:df:85:e4:b7:fe:70:b5:
         5b:8c:04:2d:fb:57:91:37:54:ca:3e:3d:94:76:51:e3:27:7a:
         d3:de:e3:6e:a0:d7:95:91:04:6c:18:a8:13:40:64:d4:49:db:
         41:d6:5d:4a:c9:d5:5a:99:72:cf:f7:bd:89:df:1e:10:cc:18:
         6e:c1:b1:bd:e5:d4:0d:b6:01:33:b1:78:ad:98:55:93:7f:5b:
         31:ad:77:fa:4f:6d:66:84:78:6d:2a:93:b6:ad:22:6c:65:15:
         e5:ec:4f:11:62:09:7c:e7:6d:42:e7:df:15:3f:b4:7c:32:3f:
         94:85:42:76:ff:09:64:88:06:4e:74:93:97:67:a3:b8:c6:48:
         85:48:e4:87:14:38:34:57:6a:5f:37:be:e0:01:ee:13:49:b1:
         51:d1:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----