Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/5cce40a8a8bfef6ad051123b31559ab268771c7e.roa
File:                     5cce40a8a8bfef6ad051123b31559ab268771c7e.roa (raw, json)
Hash identifier:          idA6THzO0CLtyvuPGb3pnnrmOin6hyg36Hz5d5INNMg=
Subject key identifier:   DE:47:10:02:AC:4F:CC:6E:EC:7A:CA:1C:99:D0:4B:03:04:F2:B0:E2
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       0F1545
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/5cce40a8a8bfef6ad051123b31559ab268771c7e.roa
Signing time:             Sat 24 Apr 2021 12:06:18 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     21599
IP address blocks:        190.5.224.0/20 maxlen: 24
                          190.5.240.0/20 maxlen: 24
                          190.122.160.0/20 maxlen: 24
                          200.46.0.0/16 maxlen: 24
                          200.90.128.0/20 maxlen: 24
                          200.115.128.0/20 maxlen: 24
                          200.115.144.0/20 maxlen: 24
                          201.218.192.0/19 maxlen: 24
                          201.218.224.0/19 maxlen: 24
                          201.218.250.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 988485 (0xf1545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=5cce40a8a8bfef6ad051123b31559ab268771c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:f9:29:34:78:83:86:fe:7e:38:c5:02:a3:
                    f8:af:9e:2f:57:84:4a:40:73:40:ab:50:d7:44:f4:
                    d7:5c:5d:26:9c:05:29:21:df:4b:4f:0c:e7:b5:fe:
                    72:f2:ba:aa:b1:58:36:30:a3:0c:3f:4d:2b:46:43:
                    8e:bb:d2:7d:e8:7e:63:b8:b6:6f:8e:08:72:71:25:
                    28:e8:3d:27:65:18:d6:a5:58:81:60:14:ef:ba:75:
                    84:9a:56:97:e6:e8:69:0e:e5:17:56:e5:f9:ed:d1:
                    8a:c8:e3:5b:9b:fe:71:d5:c7:e6:8a:e1:21:31:3a:
                    22:91:d3:e2:5c:eb:07:8a:91:5a:0a:11:6f:66:55:
                    f6:bd:3b:d6:c4:1d:c3:c0:38:03:7a:76:9e:97:38:
                    1f:39:7f:55:de:25:82:f0:ba:71:75:4b:e3:b2:7a:
                    75:96:9c:ec:a7:92:9d:c8:0d:a2:1d:d2:e6:eb:f2:
                    f0:fd:a1:dd:b8:f8:a8:3b:64:5c:47:f7:d9:06:38:
                    52:97:75:ed:f5:04:6c:37:c1:01:2d:de:2f:64:6b:
                    f2:ff:ee:3b:99:d0:12:b7:be:20:c8:9c:c8:23:1c:
                    d8:76:21:65:69:3e:af:bd:89:c1:0f:eb:07:35:42:
                    f7:f3:a3:76:28:62:54:0b:2d:0e:e0:29:ef:7f:ef:
                    7c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:47:10:02:AC:4F:CC:6E:EC:7A:CA:1C:99:D0:4B:03:04:F2:B0:E2
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/5cce40a8a8bfef6ad051123b31559ab268771c7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.224.0/19
                  190.122.160.0/20
                  200.46.0.0/16
                  200.90.128.0/20
                  200.115.128.0/19
                  201.218.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         78:49:4d:cf:35:27:8a:eb:19:ba:20:e3:0d:e6:e2:64:95:15:
         2f:b7:93:fa:ed:2b:a6:b3:75:88:ec:ec:ee:42:7e:cb:0e:dc:
         9c:5f:71:d5:1e:c7:ce:e0:8e:24:9d:81:63:7c:10:af:76:af:
         2e:00:58:bc:ba:7f:90:ed:26:52:ea:d9:7e:26:22:4f:ab:79:
         0a:f0:ee:5e:a7:e0:03:5f:bb:04:bd:46:52:cd:07:ab:be:ea:
         c1:9a:01:61:d0:71:b5:96:8f:f2:42:30:45:f9:8c:11:b9:e4:
         aa:97:e2:dd:e2:4e:03:6e:72:74:45:b0:32:db:95:cc:11:20:
         0c:f9:01:2b:7f:f6:61:3d:3a:10:f3:ba:99:83:0a:5e:e1:41:
         ec:a3:4f:93:d9:ba:c1:55:8d:62:41:3f:90:0d:41:2a:c6:f2:
         62:1d:ec:98:7f:b1:fc:dd:08:ba:81:83:de:c9:81:30:4a:ef:
         14:88:d5:d6:96:ed:48:fd:44:50:31:c0:29:a9:32:84:0d:59:
         f0:a4:ab:46:6b:42:3e:d1:8a:ea:0a:a3:d8:09:96:dc:2b:1d:
         f2:a8:df:3e:91:37:4e:5a:82:f6:54:31:54:0a:b3:53:b1:c6:
         2b:2c:e9:1b:b9:0e:a4:e8:c3:d0:70:ec:2f:d1:b1:b4:23:22:
         87:fa:f3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----