Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/9c67b3183e69dfb7b6230f8ab6cf2b184d7f2623.roa
File:                     9c67b3183e69dfb7b6230f8ab6cf2b184d7f2623.roa (raw, json)
Hash identifier:          8CvdfgA/ua6oSy1/AX3KJgRMI8ijiJWgMEIFGyT4svY=
Subject key identifier:   4E:89:58:6F:3B:D2:DA:F4:98:63:39:07:A6:FE:7F:3F:9E:28:9E:9F
Certificate issuer:       /CN=5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845
Certificate serial:       16079A
Authority key identifier: 0A:EC:2A:D9:A6:7E:C1:FC:DC:41:66:E8:0F:84:57:90:EC:13:FE:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/9c67b3183e69dfb7b6230f8ab6cf2b184d7f2623.roa
Signing time:             Thu 21 Apr 2022 20:58:39 +0000
ROA not before:           Thu 21 Apr 2022 03:00:00 +0000
ROA not after:            Sun 21 Apr 2024 03:00:00 +0000
asID:                     52471
IP address blocks:        138.99.236.0/22 maxlen: 22
                          168.228.232.0/22 maxlen: 22
                          170.244.40.0/22 maxlen: 22
                          179.51.64.0/20 maxlen: 20
                          186.148.88.0/21 maxlen: 21
                          191.97.104.0/22 maxlen: 22
                          201.49.186.0/23 maxlen: 23
                          2803:ab00::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1443738 (0x16079a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845
        Validity
            Not Before: Apr 21 03:00:00 2022 GMT
            Not After : Apr 21 03:00:00 2024 GMT
        Subject: CN=9c67b3183e69dfb7b6230f8ab6cf2b184d7f2623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c2:6e:58:f8:b9:9b:e8:da:d4:30:3d:7a:4c:
                    b4:a6:9d:5e:89:f3:1f:e8:79:0c:bb:85:48:5e:38:
                    c8:96:a6:c2:5d:cf:72:7a:56:cf:23:45:16:47:aa:
                    7e:88:c8:03:05:c7:dc:cf:32:76:84:f7:9e:1d:9d:
                    2c:a2:e9:2a:03:c7:d6:53:79:c1:03:2d:46:67:5b:
                    55:27:9f:6d:e6:86:a5:e2:f9:93:32:6f:3c:11:ab:
                    01:71:19:e5:ec:51:1d:5f:a2:cb:75:de:ef:e9:f9:
                    41:ec:29:34:54:20:1a:48:ad:d4:02:d7:6f:71:63:
                    ed:14:e9:98:13:03:07:ea:ce:b8:51:97:ee:33:90:
                    3a:fb:4c:09:1b:5b:f9:14:bc:76:61:a1:ff:cf:86:
                    37:a9:e2:5f:2c:a8:a5:13:90:77:bf:79:71:77:14:
                    1f:98:85:87:0e:29:1e:86:37:15:c7:1f:6c:40:d1:
                    05:5f:69:ee:34:8b:fb:71:22:a9:29:e5:25:57:e1:
                    b7:69:1e:48:20:40:84:b2:e3:df:03:89:5f:dd:ff:
                    b1:92:7f:3f:41:f7:83:3c:0d:9f:f5:ae:ef:d7:93:
                    e5:8a:ba:94:83:87:92:78:59:f2:07:41:c2:e5:77:
                    e8:ca:52:65:9c:e4:84:9f:73:48:c3:ba:8e:04:70:
                    de:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:89:58:6F:3B:D2:DA:F4:98:63:39:07:A6:FE:7F:3F:9E:28:9E:9F
            X509v3 Authority Key Identifier:
                keyid:0A:EC:2A:D9:A6:7E:C1:FC:DC:41:66:E8:0F:84:57:90:EC:13:FE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/9c67b3183e69dfb7b6230f8ab6cf2b184d7f2623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.236.0/22
                  168.228.232.0/22
                  170.244.40.0/22
                  179.51.64.0/20
                  186.148.88.0/21
                  191.97.104.0/22
                  201.49.186.0/23
                IPv6:
                  2803:ab00::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:66:75:9d:3d:73:0e:64:6c:79:49:41:38:33:14:95:69:7a:
         bb:c0:9e:0b:dc:b3:fa:ba:ca:04:37:73:95:9a:74:be:7c:d7:
         dd:a9:70:b5:fc:a5:d7:bf:f6:7d:4d:8d:18:7f:79:c4:a7:67:
         ad:cc:d7:b9:e3:f3:5a:17:5d:fd:15:76:85:10:7f:8f:2a:ba:
         ff:7c:9f:df:30:f4:05:f0:37:1c:4f:f7:5f:c3:31:6d:51:ef:
         5c:e6:36:8d:ce:c8:d5:84:87:1d:5d:68:6f:1c:08:ff:95:35:
         46:99:49:f2:50:4c:92:d1:97:d7:93:ba:36:87:ba:2c:8f:7b:
         02:b7:75:d0:6f:f9:f3:04:12:79:97:30:a6:82:2c:33:70:59:
         ed:cf:5d:00:c4:87:51:5a:e3:2e:ff:09:a0:9c:a8:6c:41:a0:
         3d:f5:01:ef:83:46:61:67:a6:0c:82:83:44:87:a4:2f:1c:53:
         d0:d8:18:0f:63:dc:80:7b:5d:a2:27:fb:43:8b:36:5d:40:59:
         f4:1e:13:2b:ae:82:14:ea:39:16:4d:57:63:dc:7a:c8:96:78:
         31:aa:f8:8b:c5:51:1d:3e:6e:ca:9f:65:59:2e:e7:83:38:d9:
         66:41:b3:b4:29:31:54:1f:24:68:ec:23:58:cb:27:eb:21:18:
         50:9d:14:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----