Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228a9cc6-02be-4e3b-81c4-9b936602390a/0671f380dba4a44bac0090c495854f01a403e29e.roa
File:                     0671f380dba4a44bac0090c495854f01a403e29e.roa (raw, json)
Hash identifier:          Gy8GFAaeraCKbFIJsEhHsCVuH0Fz9HW6HwBog3+0fuk=
Subject key identifier:   B5:22:63:A7:35:E4:E3:89:49:A6:6F:28:33:5D:EC:2F:4B:51:A3:57
Certificate issuer:       /CN=8cecba4d06719b0701405567ea7739bad8040b51
Certificate serial:       10D54F
Authority key identifier: 80:CB:5A:5C:56:CC:08:65:09:95:00:14:30:A2:11:C1:AE:DF:A4:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cecba4d06719b0701405567ea7739bad8040b51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228a9cc6-02be-4e3b-81c4-9b936602390a/0671f380dba4a44bac0090c495854f01a403e29e.roa
Signing time:             Tue 31 Aug 2021 16:42:36 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     267788
IP address blocks:        170.247.0.0/22 maxlen: 24
                          2803:26c0::/32 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1103183 (0x10d54f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cecba4d06719b0701405567ea7739bad8040b51
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=0671f380dba4a44bac0090c495854f01a403e29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fc:90:82:31:9f:0d:91:f9:de:fb:c2:96:08:
                    09:2e:68:58:74:17:3b:05:eb:f7:b4:0c:f7:d7:f9:
                    3c:24:e4:d0:c3:70:f9:19:12:ff:cb:a1:6a:a5:f9:
                    d1:82:87:cc:92:9f:06:d9:44:c6:02:6e:c2:a1:b4:
                    1c:42:f4:5a:ff:b9:5a:3b:ff:d4:a1:51:4a:26:03:
                    af:9e:ec:f1:dc:a2:dd:a1:09:85:98:8f:26:77:ab:
                    f7:a7:53:fe:2f:99:bc:65:81:b0:53:65:7e:b1:fb:
                    93:0c:ec:5e:77:25:71:91:5f:0a:ef:f6:bc:1f:d5:
                    0a:65:73:a6:e3:0b:24:d5:5f:03:4c:66:73:aa:57:
                    9a:c2:11:04:65:d8:8c:b4:1a:3c:43:a8:80:9c:76:
                    23:e9:3d:fe:c1:71:67:a7:ed:a7:e9:52:8f:e6:72:
                    db:3e:f0:44:f0:50:8b:88:e6:d5:1d:1b:e7:22:98:
                    92:1d:22:f3:69:e3:22:9d:58:d5:27:fd:b7:3f:a0:
                    d6:c4:f8:be:d3:ba:2c:57:92:5e:f7:10:28:7f:68:
                    17:87:9b:04:e2:08:f3:81:4e:78:b9:a0:19:b0:4c:
                    19:24:1a:47:7f:c6:1b:e4:c3:3c:af:47:f8:b3:8d:
                    e4:51:43:99:1f:53:33:3a:c1:91:6e:c0:b7:6b:3e:
                    bd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:22:63:A7:35:E4:E3:89:49:A6:6F:28:33:5D:EC:2F:4B:51:A3:57
            X509v3 Authority Key Identifier:
                keyid:80:CB:5A:5C:56:CC:08:65:09:95:00:14:30:A2:11:C1:AE:DF:A4:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cecba4d06719b0701405567ea7739bad8040b51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228a9cc6-02be-4e3b-81c4-9b936602390a/0671f380dba4a44bac0090c495854f01a403e29e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228a9cc6-02be-4e3b-81c4-9b936602390a/8cecba4d06719b0701405567ea7739bad8040b51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.0.0/22
                IPv6:
                  2803:26c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:37:8b:69:3c:25:db:c3:bc:29:ff:c9:8a:34:e2:84:0c:f7:
         78:8c:27:eb:c4:7e:5c:6b:80:af:11:68:9f:85:d4:97:53:ae:
         9a:aa:8d:f3:8b:fe:3f:2c:ca:ff:b0:b7:d6:ea:5e:3e:83:ae:
         79:c3:90:70:b8:a2:bc:25:94:bb:7b:1e:65:e0:8b:2b:7e:0c:
         6b:c0:96:f3:96:df:55:03:97:37:f0:7a:5b:86:45:98:7e:15:
         7d:40:af:92:92:f2:57:60:19:54:9b:3a:cb:16:f4:e6:66:65:
         10:ac:72:bd:ab:f0:8f:b9:cd:cd:21:d5:b5:7c:84:e9:11:00:
         58:10:58:c8:6d:3d:c6:8e:50:11:66:f0:56:5d:c4:14:80:58:
         fa:ca:ea:b4:1b:c2:ff:31:f9:87:f9:0f:a7:78:43:5d:5a:46:
         3c:68:90:fd:d3:bb:c4:8f:f5:b4:f9:0d:1c:fe:6f:a0:8f:d2:
         ed:70:fb:92:f8:4e:63:f6:cb:0c:5d:7d:60:ab:47:8e:d7:5a:
         85:c5:b0:90:ca:3a:21:89:91:72:a9:55:f1:58:59:da:c8:3f:
         d3:22:4d:71:0e:fe:ae:67:e3:49:e3:b9:cc:a7:f6:2e:33:38:
         36:0a:ef:0e:4c:23:a5:77:c3:7c:8f:51:da:b3:85:37:76:fc:
         50:91:ee:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----