Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1fffbf97-8a9a-4261-8e1d-53b5264f45de/d7bc80ec33c3abae35ba3a4f154024d55d170991.roa
File:                     d7bc80ec33c3abae35ba3a4f154024d55d170991.roa (raw, json)
Hash identifier:          ek0fo7vPwcgdP4hMfTjN4FPafCl/eDQxh8T84WSWiAg=
Subject key identifier:   6E:73:DF:70:9C:F7:18:95:30:7A:0D:C3:9E:E1:79:8C:0B:65:54:BD
Certificate issuer:       /CN=e1129399c2c45f18c2b3360cd94263772f9d4bca
Certificate serial:       0DA268
Authority key identifier: 68:72:6E:76:C4:05:6B:64:82:2B:65:F9:D8:76:91:0B:87:40:52:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e1129399c2c45f18c2b3360cd94263772f9d4bca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1fffbf97-8a9a-4261-8e1d-53b5264f45de/d7bc80ec33c3abae35ba3a4f154024d55d170991.roa
Signing time:             Wed 24 Mar 2021 14:32:08 +0000
ROA not before:           Wed 24 Mar 2021 14:32:07 +0000
ROA not after:            Tue 24 Mar 2026 14:32:07 +0000
asID:                     28038
IP address blocks:        190.0.96.0/20 maxlen: 24
                          190.0.112.0/20 maxlen: 24
                          190.93.48.0/20 maxlen: 24
                          190.114.64.0/20 maxlen: 24
                          190.114.80.0/20 maxlen: 24
                          190.115.112.0/20 maxlen: 24
                          2803:5480::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893544 (0xda268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1129399c2c45f18c2b3360cd94263772f9d4bca
        Validity
            Not Before: Mar 24 14:32:07 2021 GMT
            Not After : Mar 24 14:32:07 2026 GMT
        Subject: CN=d7bc80ec33c3abae35ba3a4f154024d55d170991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:f0:1b:d2:1a:ac:03:e9:a6:4a:55:d8:15:
                    d5:da:3c:2a:83:1d:96:19:92:d3:a2:c3:3f:a4:f9:
                    93:09:d7:e2:35:1c:ad:ff:e1:6c:86:f8:2d:14:99:
                    b6:10:14:ee:7b:d1:29:4f:8c:7a:ce:d9:d2:15:92:
                    59:56:3e:b1:4e:19:7a:34:10:1c:08:77:6a:26:26:
                    42:29:0c:bf:a2:37:7e:c1:d2:df:69:e9:c9:7e:15:
                    c9:f9:0f:5e:30:6a:c6:4a:ab:84:6c:a0:75:af:58:
                    ae:43:98:56:bb:c1:c9:95:85:67:79:43:2b:bc:60:
                    6d:9b:b6:a8:d7:ca:16:55:70:8b:99:c8:1f:17:fc:
                    dc:0e:c7:8c:dc:56:1d:ff:9b:9f:8b:e9:60:0c:71:
                    86:78:bf:97:bb:9b:47:72:33:fa:e0:4a:a9:c6:f4:
                    b4:4f:78:2e:33:a5:0f:d7:33:6f:40:98:b3:40:73:
                    30:df:78:00:63:8f:0f:43:57:5e:04:28:1c:20:17:
                    87:35:16:a5:56:51:7c:ad:25:14:dd:25:4c:93:99:
                    67:7f:be:8d:e3:87:ec:34:23:bd:08:f6:eb:8b:b7:
                    ce:33:6d:94:9b:00:d0:07:91:b5:4b:83:52:5d:c5:
                    88:10:cd:1a:03:04:c3:50:f7:2e:57:96:c0:d2:30:
                    7c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:73:DF:70:9C:F7:18:95:30:7A:0D:C3:9E:E1:79:8C:0B:65:54:BD
            X509v3 Authority Key Identifier:
                keyid:68:72:6E:76:C4:05:6B:64:82:2B:65:F9:D8:76:91:0B:87:40:52:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e1129399c2c45f18c2b3360cd94263772f9d4bca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1fffbf97-8a9a-4261-8e1d-53b5264f45de/d7bc80ec33c3abae35ba3a4f154024d55d170991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1fffbf97-8a9a-4261-8e1d-53b5264f45de/e1129399c2c45f18c2b3360cd94263772f9d4bca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.96.0/19
                  190.93.48.0/20
                  190.114.64.0/19
                  190.115.112.0/20
                IPv6:
                  2803:5480::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:39:ac:d7:61:3f:1b:28:e9:ea:12:74:97:6d:1d:71:6e:32:
         38:2c:6c:74:cb:00:9e:fc:88:00:48:6a:3e:c4:92:d9:31:81:
         91:cd:dd:11:ef:10:10:89:8f:e9:8a:a0:67:39:97:4e:a7:3b:
         93:12:30:61:0f:3b:74:35:9b:49:44:56:f3:a8:f3:8c:62:83:
         e2:c6:06:79:8a:37:d7:6e:55:ad:32:b0:5b:66:26:2d:d0:3d:
         8b:fd:4f:6d:1f:7d:39:3e:a8:bf:b1:3a:58:71:57:1b:34:b0:
         d3:5e:a7:ed:b7:ea:ff:23:90:db:9f:63:53:af:93:72:e9:a5:
         a6:57:51:99:63:f2:73:83:3d:e5:a0:62:5e:a9:17:b1:91:4b:
         ef:df:75:56:aa:e9:0c:eb:48:e8:de:8e:62:b1:68:91:d1:b1:
         ae:16:18:47:a5:e5:15:40:88:29:1f:d5:a2:70:16:65:5e:46:
         1c:aa:82:0a:ef:01:d7:07:51:a9:7c:bb:40:3d:3c:ed:27:55:
         fa:9d:c8:32:c7:57:be:9b:69:29:62:94:90:61:27:30:c0:d5:
         ae:0e:56:24:b3:2a:4d:19:a5:48:2b:91:51:ea:6b:ea:b4:0f:
         0f:24:a2:4e:cf:d4:0f:47:85:10:66:2e:c5:10:8f:07:d1:10:
         49:3a:75:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----