Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22f5880e-8064-481c-a14b-118dd439a8ca/7000e3753187ca10e2db876cb486ee173bdc8ae9.roa
File:                     7000e3753187ca10e2db876cb486ee173bdc8ae9.roa (raw, json)
Hash identifier:          p7GAJCQYafEkOJ9EqnuFLhQiqx4d+eCzaFvPDZsv5Hk=
Subject key identifier:   8E:09:10:5A:FE:D7:69:6F:74:2F:CF:6D:45:87:A6:1C:A8:6A:8C:87
Certificate issuer:       /CN=fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10
Certificate serial:       0C27C3
Authority key identifier: 78:76:9D:A7:C7:99:59:9E:F4:6F:DD:79:75:96:43:C3:76:83:7E:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22f5880e-8064-481c-a14b-118dd439a8ca/7000e3753187ca10e2db876cb486ee173bdc8ae9.roa
Signing time:             Wed 24 Mar 2021 14:31:21 +0000
ROA not before:           Wed 24 Mar 2021 14:31:21 +0000
ROA not after:            Tue 24 Mar 2026 14:31:21 +0000
asID:                     264712
IP address blocks:        170.150.8.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796611 (0xc27c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10
        Validity
            Not Before: Mar 24 14:31:21 2021 GMT
            Not After : Mar 24 14:31:21 2026 GMT
        Subject: CN=7000e3753187ca10e2db876cb486ee173bdc8ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:21:8b:d9:78:43:8e:58:0b:08:1d:2d:e0:6a:
                    5e:eb:37:60:e8:14:b1:1a:66:d5:1c:99:ca:d3:a2:
                    dd:a2:09:57:ca:b4:bf:75:5a:71:f3:46:1a:e7:f2:
                    89:51:ea:cf:ec:07:90:5d:a0:87:a9:df:3e:cb:44:
                    e1:97:83:23:79:1e:ba:a3:af:8f:44:8c:35:78:59:
                    65:8c:04:30:7e:f7:0b:89:64:c3:ed:03:2b:e3:44:
                    47:63:eb:1b:a2:56:fa:47:7c:5c:ad:a1:49:54:f5:
                    3e:f1:8e:79:38:22:e0:7e:4e:97:b1:d2:be:38:75:
                    20:ee:63:a5:02:9e:d2:91:26:68:79:75:ab:75:f8:
                    d6:59:5d:67:25:90:3f:07:70:c0:75:3a:c5:05:36:
                    83:26:14:37:1e:24:71:87:bb:70:7a:61:6f:7b:41:
                    e7:d9:4f:70:14:82:42:ff:a8:12:ef:94:dc:a6:ea:
                    1d:30:d3:c5:3c:63:c9:13:ad:90:f1:ea:84:fc:6e:
                    e6:62:61:3e:7f:86:ec:95:f3:f8:b8:c8:53:86:2b:
                    b5:f4:d1:58:9a:12:e0:10:a8:87:6a:0e:12:d7:38:
                    e4:f8:cd:e2:7d:aa:0d:5f:eb:6b:0c:f0:d5:c2:ba:
                    63:09:87:17:e4:22:72:81:0e:26:a5:ea:86:e7:d2:
                    d3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:09:10:5A:FE:D7:69:6F:74:2F:CF:6D:45:87:A6:1C:A8:6A:8C:87
            X509v3 Authority Key Identifier:
                keyid:78:76:9D:A7:C7:99:59:9E:F4:6F:DD:79:75:96:43:C3:76:83:7E:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22f5880e-8064-481c-a14b-118dd439a8ca/7000e3753187ca10e2db876cb486ee173bdc8ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22f5880e-8064-481c-a14b-118dd439a8ca/fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:53:57:22:67:32:af:2f:ea:44:f6:19:9c:7e:f8:d6:6b:c4:
         75:79:5a:5b:b1:d2:4f:3d:7d:b4:ea:f6:4d:19:74:fb:3f:1e:
         a0:20:1a:4b:7f:c7:33:99:37:f2:dc:ec:b8:56:2e:9f:f0:db:
         45:f6:cb:2e:ac:fe:d2:35:d4:a4:54:48:e3:43:a4:d2:c5:52:
         07:b8:08:ce:93:71:14:d5:77:40:94:fc:e4:33:88:f3:b6:08:
         d0:60:80:b8:61:92:a0:de:26:5a:e5:85:c1:20:15:90:cc:3a:
         0b:13:9b:e9:73:a8:63:9c:e6:8a:61:62:9d:27:3b:c6:db:2d:
         c3:a3:6c:26:51:d0:b8:21:8a:df:41:3a:45:67:5e:7c:eb:b8:
         ae:b7:d0:4f:bc:3e:29:85:33:19:96:1e:54:e6:65:ed:a6:a9:
         bc:f4:24:b4:bd:a8:13:11:eb:bf:4d:ec:c8:47:2d:4b:94:ca:
         82:e3:26:19:fc:5c:29:55:64:42:3a:91:91:39:b8:2f:ea:6f:
         c9:20:8c:f5:1a:4d:d0:6b:e0:e0:ad:e7:0e:4d:09:19:41:19:
         cd:e8:b0:1c:07:53:c2:d4:09:bb:89:ad:98:4e:1d:19:75:bd:
         95:2a:b5:ef:72:b8:cd:7a:b5:e7:38:cb:43:7d:75:7a:0c:04:
         db:45:16:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----