Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/f6236f87da7ca4fc9d5a8e78b03f426f94dc5bec.roa
File:                     f6236f87da7ca4fc9d5a8e78b03f426f94dc5bec.roa (raw, json)
Hash identifier:          vkEwsEgLcRlOlB8i/GtyxPFzl+DmmPt+iesSsCENLeI=
Subject key identifier:   87:34:C6:CD:41:2C:22:9A:58:19:61:0F:9F:9C:10:2F:81:AD:04:DD
Certificate issuer:       /CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
Certificate serial:       119221
Authority key identifier: 09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/f6236f87da7ca4fc9d5a8e78b03f426f94dc5bec.roa
Signing time:             Mon 02 Aug 2021 22:27:45 +0000
ROA not before:           Mon 02 Aug 2021 03:00:00 +0000
ROA not after:            Sun 02 Aug 2026 03:00:00 +0000
asID:                     61449
IP address blocks:        138.186.160.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1151521 (0x119221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
        Validity
            Not Before: Aug  2 03:00:00 2021 GMT
            Not After : Aug  2 03:00:00 2026 GMT
        Subject: CN=f6236f87da7ca4fc9d5a8e78b03f426f94dc5bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3a:0c:7f:58:68:df:d9:75:07:76:c8:b8:1e:
                    88:3f:6e:00:3e:fb:d7:5a:f1:ab:b4:a5:0f:6f:a4:
                    57:df:79:ca:57:6b:ff:34:6a:53:72:ef:03:3f:f3:
                    61:13:17:0e:6f:f0:2c:07:18:db:ad:15:83:50:a2:
                    08:ae:f5:83:a9:d1:70:f7:ac:99:8f:80:8c:47:84:
                    87:cf:dd:77:17:a4:93:85:cf:5a:50:5c:17:d9:c8:
                    b4:66:84:26:a9:67:34:e0:ff:79:d0:33:2a:ec:d3:
                    6e:df:ff:27:19:7d:0c:2b:d5:cb:2f:a1:2a:9b:0e:
                    28:42:75:b0:57:95:48:d8:1d:81:a0:38:cb:d6:5a:
                    bb:79:52:e9:3e:0e:e0:1e:4e:1d:74:24:0d:d3:1b:
                    3e:b2:6a:7b:64:30:99:c8:3e:89:67:e6:97:4e:5a:
                    df:15:ee:75:9b:8f:44:c5:b3:81:ef:9a:9e:24:be:
                    af:d9:05:ab:8e:be:a6:a9:ef:fb:49:68:bd:d6:e8:
                    a8:fc:c5:27:2c:2c:39:6c:32:2c:6e:ce:ae:b7:f4:
                    00:f0:35:3c:70:7c:97:17:66:1c:06:c9:fa:bd:a0:
                    f7:aa:6e:ec:90:50:0c:30:68:40:14:c5:d9:60:c8:
                    ff:6e:a9:bd:a5:41:2e:8d:bf:1d:52:d8:e7:b7:3a:
                    c2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:34:C6:CD:41:2C:22:9A:58:19:61:0F:9F:9C:10:2F:81:AD:04:DD
            X509v3 Authority Key Identifier:
                keyid:09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/f6236f87da7ca4fc9d5a8e78b03f426f94dc5bec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:5a:a4:8f:6b:fb:d4:8e:fc:15:8e:b7:11:0e:f0:ad:5b:13:
         76:d6:ab:12:7a:10:cd:19:db:94:bf:f0:b7:e0:aa:48:d9:19:
         84:ab:8c:c6:75:57:cc:12:58:a3:c3:29:fa:42:7c:33:a5:9f:
         df:15:17:ed:86:03:b3:8f:06:5e:d9:5d:b8:58:4d:ab:bc:82:
         f5:6a:c5:86:10:96:77:41:bb:d5:9c:92:5a:7b:3f:2d:3b:f0:
         fe:07:31:17:fa:db:a5:b8:21:70:36:7a:b3:e8:c0:84:1f:2c:
         83:bd:98:cf:16:56:f8:a9:f9:c7:39:fd:52:9a:06:3e:2b:01:
         a2:b7:cf:3d:45:01:f2:84:54:c2:b4:cd:ec:bb:01:1c:19:21:
         16:07:56:ec:d0:8b:00:4d:15:6c:95:df:bd:8e:d4:ef:b3:97:
         e4:5f:6c:eb:e2:e2:5b:bb:a3:a1:41:55:a6:60:9d:0e:0f:26:
         a2:12:c4:7a:26:d7:c5:e8:98:bd:1b:a8:09:5f:18:a2:44:a7:
         17:ad:62:29:6e:2f:52:ac:ff:71:b5:3c:76:bf:8d:67:2a:79:
         11:96:44:d4:d0:2b:1c:6f:46:6a:b4:41:8d:30:25:93:d0:00:
         b3:5f:e9:d5:9e:03:6e:e6:17:dd:af:97:37:dc:92:eb:9a:78:
         82:38:8a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----