Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/eb361a76a8a48dbd2217fb616eab90dc10a84446.roa
File:                     eb361a76a8a48dbd2217fb616eab90dc10a84446.roa (raw, json)
Hash identifier:          V7+563ttl1SS8yAU72DQ19OaryHzHMkF/9PhfB/Wl+0=
Subject key identifier:   68:E3:67:F7:2D:F5:9D:44:04:08:9E:18:7F:F3:11:D6:A9:15:20:BB
Certificate issuer:       /CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Certificate serial:       0DB1E7
Authority key identifier: 67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/eb361a76a8a48dbd2217fb616eab90dc10a84446.roa
Signing time:             Wed 12 May 2021 00:00:05 +0000
ROA not before:           Tue 11 May 2021 03:00:00 +0000
ROA not after:            Thu 11 May 2023 03:00:00 +0000
asID:                     264836
IP address blocks:        66.231.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897511 (0xdb1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce64e257eae04ee26d8eb339f148791b31cc0875
        Validity
            Not Before: May 11 03:00:00 2021 GMT
            Not After : May 11 03:00:00 2023 GMT
        Subject: CN=eb361a76a8a48dbd2217fb616eab90dc10a84446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a7:5b:c2:02:5e:35:28:68:20:67:95:dc:97:
                    f0:6a:14:ef:01:c3:93:d5:17:f5:7b:37:49:33:3b:
                    67:e4:9e:fc:e1:f5:85:9a:dd:ee:da:50:a6:15:55:
                    fa:d1:7e:f5:bf:04:4f:cc:06:ef:b9:6d:b3:26:5d:
                    61:11:6d:19:2c:63:50:71:3f:ba:16:c9:2f:ed:61:
                    c4:45:61:ce:98:fd:fa:cb:db:68:9b:e9:5b:b6:9e:
                    ea:79:4c:1f:03:b3:fe:20:9c:a1:1d:5d:ee:ea:c7:
                    69:5c:5d:0e:a1:99:b9:29:9f:61:af:f2:58:b1:2f:
                    b9:5d:16:a4:f4:86:7f:c2:54:50:c3:74:6d:01:3f:
                    74:7c:a6:98:4a:86:d3:90:30:cf:eb:db:84:50:70:
                    a2:e3:fb:28:d7:84:d2:97:5d:a3:a3:9e:62:53:6d:
                    40:b9:17:6f:9b:ed:57:58:87:48:8a:de:94:dc:89:
                    bc:f5:cb:4d:a4:bd:c5:c8:4c:6c:36:61:7b:ec:21:
                    15:99:03:2f:75:bd:c5:1e:c9:4e:e9:91:51:9f:e4:
                    b9:75:28:7d:10:ea:e3:e4:c7:e2:c3:07:c3:9a:5e:
                    c7:e3:d2:80:2f:3b:c2:2e:1a:2a:5c:0b:0a:0d:a3:
                    71:8a:dd:4d:82:1a:34:87:99:80:91:bc:aa:42:fe:
                    9b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E3:67:F7:2D:F5:9D:44:04:08:9E:18:7F:F3:11:D6:A9:15:20:BB
            X509v3 Authority Key Identifier:
                keyid:67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/eb361a76a8a48dbd2217fb616eab90dc10a84446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:89:47:2a:9a:60:0a:66:0c:62:9b:43:41:4b:34:d0:26:6a:
         c7:15:a5:c1:d7:14:60:33:fd:35:b5:54:3e:29:af:0d:4d:87:
         dd:d9:fe:11:1f:d6:d5:3c:08:5a:3a:01:e8:5b:25:7c:f9:3f:
         96:9d:66:bb:3c:72:4b:e2:f3:f4:a6:f5:52:c7:bd:b9:49:ad:
         e8:38:c4:a5:c1:6b:c5:e4:6a:f4:11:3f:bf:20:80:3a:bd:ac:
         4d:7c:43:91:b9:b4:d8:f0:d9:7c:03:47:ed:29:47:80:4b:e9:
         04:36:91:8d:ff:8d:1b:97:12:d5:45:19:03:5f:7e:f6:99:88:
         71:7d:8e:25:f3:f2:3e:0c:21:b5:07:2e:02:ce:82:67:d1:3b:
         64:da:f5:46:5b:8b:59:d7:c3:d4:8b:87:f5:37:f1:18:c7:70:
         5c:b4:c5:ea:9a:6f:8c:f3:cd:4b:07:ed:5d:b2:08:cf:33:4f:
         4e:d9:3c:26:33:8d:d7:cc:35:33:df:de:75:2c:86:31:79:2f:
         a8:12:e3:49:ce:61:64:7c:bf:14:34:1f:ba:ae:34:b2:0b:84:
         d7:e2:4c:20:df:39:ac:40:e6:e2:73:75:05:a9:36:4d:3a:73:
         62:e6:9f:fb:7b:cd:62:0c:b1:b6:5a:31:b0:3d:50:a3:6f:da:
         ee:1c:d1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----