Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/ed8d23b174f49bfccc2ed8287dfb7d3c0ebd1b81.roa
File:                     ed8d23b174f49bfccc2ed8287dfb7d3c0ebd1b81.roa (raw, json)
Hash identifier:          9MnCp8fJMpjBf0XwLTmuv5i9KXVAdrcmM5zaL0hZK6A=
Subject key identifier:   77:7C:C4:80:F9:61:C1:F3:EF:24:3A:3B:74:C4:A4:AF:42:9F:19:EB
Certificate issuer:       /CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
Certificate serial:       0CAC01
Authority key identifier: 2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/ed8d23b174f49bfccc2ed8287dfb7d3c0ebd1b81.roa
Signing time:             Wed 24 Mar 2021 14:35:09 +0000
ROA not before:           Wed 24 Mar 2021 14:35:09 +0000
ROA not after:            Tue 24 Mar 2026 14:35:09 +0000
asID:                     13489
IP address blocks:        168.0.244.0/22 maxlen: 22
                          181.128.0.0/12 maxlen: 12
                          186.0.0.0/17 maxlen: 17
                          190.0.0.0/18 maxlen: 18
                          190.7.128.0/19 maxlen: 19
                          190.9.192.0/18 maxlen: 18
                          190.28.0.0/15 maxlen: 15
                          190.70.0.0/15 maxlen: 15
                          190.128.0.0/17 maxlen: 17
                          190.151.192.0/18 maxlen: 18
                          190.165.0.0/16 maxlen: 16
                          190.240.0.0/16 maxlen: 16
                          190.248.0.0/14 maxlen: 14
                          191.98.0.0/17 maxlen: 17
                          200.6.160.0/19 maxlen: 19
                          200.13.224.0/19 maxlen: 19
                          200.24.32.0/19 maxlen: 19
                          200.30.64.0/19 maxlen: 19
                          200.31.192.0/19 maxlen: 19
                          200.58.192.0/20 maxlen: 20
                          200.58.208.0/20 maxlen: 20
                          200.58.224.0/20 maxlen: 20
                          200.75.64.0/19 maxlen: 19
                          200.114.0.0/18 maxlen: 18
                          200.116.0.0/16 maxlen: 16
                          200.122.192.0/18 maxlen: 18
                          201.184.0.0/15 maxlen: 15
                          201.190.64.0/18 maxlen: 18
                          201.232.0.0/15 maxlen: 15
                          201.236.192.0/18 maxlen: 18
                          2800:e0::/28 maxlen: 28
                          2803:d80::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 830465 (0xcac01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
        Validity
            Not Before: Mar 24 14:35:09 2021 GMT
            Not After : Mar 24 14:35:09 2026 GMT
        Subject: CN=ed8d23b174f49bfccc2ed8287dfb7d3c0ebd1b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:4e:6a:23:45:15:ba:ca:b8:cb:88:f8:52:
                    76:29:e0:c7:b5:b1:85:5b:da:9b:98:89:33:9d:7c:
                    73:fa:63:4b:18:d4:bc:e5:88:ea:e2:2d:1e:c8:1f:
                    af:8e:a5:b8:cb:5d:de:fb:8b:16:ab:b5:eb:be:57:
                    c1:4d:75:e7:a7:2f:ee:01:0d:8f:78:09:cc:7f:e4:
                    be:05:bd:b3:05:ee:8a:f5:10:e7:65:88:2c:0d:50:
                    c8:aa:b3:47:e4:05:8e:0f:3b:c8:d4:d0:57:19:79:
                    f5:ca:a6:a2:bc:f2:e5:77:be:b0:93:cc:76:c4:d1:
                    31:3a:cd:c7:64:72:42:3e:ea:19:c8:92:f6:ec:d1:
                    1f:5c:c6:24:ee:92:84:8e:5d:56:44:5e:b6:9c:74:
                    ab:d0:1b:a8:e0:51:47:9c:83:60:70:9e:7a:4f:70:
                    09:bb:b6:39:91:3d:dc:9f:ba:c3:69:f3:da:cb:39:
                    8d:da:d7:c0:20:4f:fd:00:ed:8c:a8:46:eb:c0:5e:
                    67:3c:5e:cc:d9:a9:96:1a:71:ea:5d:ea:2f:06:e0:
                    4f:70:17:dd:7b:f6:21:fd:91:25:86:4e:ed:bc:7e:
                    ff:e3:99:a7:50:dd:96:ad:9c:88:90:8c:03:2f:5f:
                    2f:f1:19:0f:fd:8b:57:f4:74:ed:2d:f3:69:ae:8a:
                    3f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7C:C4:80:F9:61:C1:F3:EF:24:3A:3B:74:C4:A4:AF:42:9F:19:EB
            X509v3 Authority Key Identifier:
                keyid:2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/ed8d23b174f49bfccc2ed8287dfb7d3c0ebd1b81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/1159fdc4276fa3bfc64df717e4ca0a75249cf188.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.244.0/22
                  181.128.0.0/12
                  186.0.0.0/17
                  190.0.0.0/18
                  190.7.128.0/19
                  190.9.192.0/18
                  190.28.0.0/15
                  190.70.0.0/15
                  190.128.0.0/17
                  190.151.192.0/18
                  190.165.0.0/16
                  190.240.0.0/16
                  190.248.0.0/14
                  191.98.0.0/17
                  200.6.160.0/19
                  200.13.224.0/19
                  200.24.32.0/19
                  200.30.64.0/19
                  200.31.192.0/19
                  200.58.192.0-200.58.239.255
                  200.75.64.0/19
                  200.114.0.0/18
                  200.116.0.0/16
                  200.122.192.0/18
                  201.184.0.0/15
                  201.190.64.0/18
                  201.232.0.0/15
                  201.236.192.0/18
                IPv6:
                  2800:e0::/28
                  2803:d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         2c:4d:bc:46:47:ec:b6:25:ee:70:8b:99:53:2b:d9:12:ff:ab:
         b7:a0:23:e0:02:e8:23:9e:b6:04:a6:83:3c:08:29:70:ee:af:
         fd:7d:08:1d:50:d9:df:59:8e:08:57:d3:66:dd:16:40:f4:bc:
         e3:9b:83:fb:bd:72:2d:06:6f:61:d1:6d:f7:fa:5b:fb:fc:d6:
         05:36:d8:81:2f:ef:7f:b5:bb:3c:ac:bd:44:0b:63:db:95:34:
         cd:91:ba:c6:ce:08:55:82:03:ce:6b:96:53:1c:03:11:61:73:
         08:26:45:d2:8b:2b:d4:31:49:9c:3f:77:2c:78:f8:87:6f:cf:
         28:71:00:f4:c5:66:0e:9e:36:fc:8f:07:14:13:e1:d8:64:50:
         48:a8:80:9a:80:80:39:08:8d:4c:ec:95:c7:4a:d9:a0:09:14:
         d4:0a:75:51:ce:cf:4e:fd:5d:f4:74:4c:e0:f2:fb:e2:57:53:
         de:5a:83:ab:72:ab:cc:61:ca:d0:4f:c4:fb:a2:8b:f4:fb:8f:
         b2:26:28:84:b0:f3:89:72:e7:cc:33:b2:5f:90:38:a7:2b:d0:
         58:9c:42:9c:a8:46:9f:74:77:96:6e:6e:76:5e:b3:a2:62:62:
         c5:af:06:bc:5e:13:28:9e:72:ba:14:77:fa:99:cd:a0:bb:9f:
         9b:f8:cd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----