Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/f00c368f4f26b97b93b4ee52feac42642b527a4c.roa
File:                     f00c368f4f26b97b93b4ee52feac42642b527a4c.roa (raw, json)
Hash identifier:          SmMD/OUq6AYYP6HMq/MRX9CeupXHrs7rRq7fKkhuXzU=
Subject key identifier:   5E:67:32:B2:55:73:32:37:98:BE:9C:70:06:B2:2B:78:19:7C:7A:DA
Certificate issuer:       /CN=36e192b55cb56ddb327e18a090fa757000686249
Certificate serial:       0D01A8
Authority key identifier: 75:D0:7D:9E:91:AC:51:2C:49:38:1A:C8:8E:68:5A:9E:77:AB:C3:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36e192b55cb56ddb327e18a090fa757000686249.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/f00c368f4f26b97b93b4ee52feac42642b527a4c.roa
Signing time:             Wed 24 Mar 2021 14:35:05 +0000
ROA not before:           Wed 24 Mar 2021 14:35:05 +0000
ROA not after:            Tue 24 Mar 2026 14:35:05 +0000
asID:                     262928
IP address blocks:        191.102.225.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852392 (0xd01a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36e192b55cb56ddb327e18a090fa757000686249
        Validity
            Not Before: Mar 24 14:35:05 2021 GMT
            Not After : Mar 24 14:35:05 2026 GMT
        Subject: CN=f00c368f4f26b97b93b4ee52feac42642b527a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:47:db:ab:9c:42:03:39:b4:52:db:bc:e0:94:
                    88:09:fe:f6:83:08:40:86:ec:2d:ea:14:b3:8a:07:
                    9d:5f:57:99:c5:a0:b8:ed:28:a6:58:fa:12:48:ed:
                    21:63:15:61:d0:38:1a:7a:9e:bd:46:f1:d9:35:93:
                    b4:b1:cb:e6:eb:51:80:9f:42:5d:96:23:c2:c3:1e:
                    01:95:a5:d5:ed:4d:3d:00:41:1f:c7:78:f6:b5:99:
                    30:0b:e5:20:16:71:cb:74:37:ce:1c:2c:43:84:31:
                    31:59:2a:97:57:a3:a3:87:b9:33:ca:d1:12:45:85:
                    cd:ef:2e:0e:d9:bd:db:3b:26:66:86:9e:19:7e:83:
                    b9:ad:f9:52:e0:32:57:3b:03:e7:a4:0c:3c:9b:59:
                    08:27:0f:5d:62:14:87:72:0e:f4:04:14:af:48:df:
                    6a:4e:94:c2:db:99:98:67:41:72:bc:6b:90:0d:1b:
                    9c:cc:e1:48:67:37:8c:6d:5d:ed:60:3a:c5:2c:83:
                    24:5b:f1:23:89:c1:ea:84:3b:ab:74:46:21:ba:bb:
                    ea:52:42:3f:24:7c:e9:63:bc:02:99:2b:d3:25:9a:
                    27:61:c6:50:d3:ce:46:72:ec:ee:36:f7:30:fe:01:
                    7b:d3:23:f8:29:65:fd:70:a7:90:ce:11:43:df:ff:
                    da:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:67:32:B2:55:73:32:37:98:BE:9C:70:06:B2:2B:78:19:7C:7A:DA
            X509v3 Authority Key Identifier:
                keyid:75:D0:7D:9E:91:AC:51:2C:49:38:1A:C8:8E:68:5A:9E:77:AB:C3:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36e192b55cb56ddb327e18a090fa757000686249.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/f00c368f4f26b97b93b4ee52feac42642b527a4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/36e192b55cb56ddb327e18a090fa757000686249.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:c9:ca:d7:fc:7c:90:5d:f9:92:61:63:42:f0:6e:e5:71:5c:
         7a:8b:d0:84:3f:18:e3:0f:15:b7:52:08:6e:78:35:a1:40:73:
         21:b6:02:15:6a:a2:27:0d:f8:ce:4b:4d:6f:81:23:f1:d7:84:
         6b:b4:ab:b0:71:03:32:d5:cc:a2:48:96:5b:c0:d8:0e:9d:d8:
         1c:4c:47:dc:03:03:37:7a:ed:ac:4f:f5:c5:94:4c:45:92:41:
         41:aa:53:04:cf:7f:64:99:c3:4d:a9:43:23:ee:d0:40:0d:3d:
         4e:0a:31:ee:66:c0:7d:68:5e:fa:26:f8:b8:5b:af:af:7c:f4:
         44:c9:4a:98:8f:55:f7:bb:cd:c9:95:70:8c:41:3a:34:49:f4:
         c9:a6:ca:ad:22:73:da:87:91:c5:45:dd:cc:10:a1:44:b3:22:
         45:9f:3d:5b:3d:90:cd:88:8a:13:24:96:a9:74:e1:c2:92:f9:
         0a:7d:19:20:4f:8b:eb:fc:09:19:48:d3:9f:d5:7a:2e:bd:1d:
         fb:5b:10:54:26:7b:09:d9:6c:21:93:34:89:5f:b4:e5:0c:8f:
         5d:38:b9:82:ba:32:ec:ab:5c:1e:1c:88:aa:63:b7:08:76:0c:
         4a:41:f9:73:5e:22:b4:3a:c5:55:60:93:1e:99:5d:e5:a2:cb:
         68:0e:54:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----