Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/b4742b9752727ae99dfc1878dea12e57bcf0e32f.roa
File:                     b4742b9752727ae99dfc1878dea12e57bcf0e32f.roa (raw, json)
Hash identifier:          hMWXHFJmGKD/BzXn/04WuRhe4lZVm09pv4M/m1ff52Q=
Subject key identifier:   F3:FE:28:E6:50:F2:F7:BF:34:57:91:22:E7:9D:84:62:A1:ED:06:A1
Certificate issuer:       /CN=f2cbbb792ff42fa718619507a50663798055643b
Certificate serial:       0D5D0E
Authority key identifier: AB:74:D3:0E:36:78:C5:A6:07:68:46:AE:AB:D0:1A:A3:0D:AB:81:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cbbb792ff42fa718619507a50663798055643b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/b4742b9752727ae99dfc1878dea12e57bcf0e32f.roa
Signing time:             Wed 24 Mar 2021 14:28:39 +0000
ROA not before:           Wed 24 Mar 2021 14:28:39 +0000
ROA not after:            Tue 24 Mar 2026 14:28:39 +0000
asID:                     52308
IP address blocks:        181.114.192.0/19 maxlen: 19
                          181.174.128.0/19 maxlen: 19
                          190.105.176.0/20 maxlen: 20
                          190.108.32.0/19 maxlen: 19
                          2803:c400::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875790 (0xd5d0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2cbbb792ff42fa718619507a50663798055643b
        Validity
            Not Before: Mar 24 14:28:39 2021 GMT
            Not After : Mar 24 14:28:39 2026 GMT
        Subject: CN=b4742b9752727ae99dfc1878dea12e57bcf0e32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:00:67:25:39:06:74:c4:91:f6:b1:5b:f1:f0:
                    90:b5:2f:e3:9d:cd:89:9f:54:c6:e8:76:2d:c9:c2:
                    fa:1a:df:c9:86:5d:cf:89:f0:f1:6d:47:bc:b1:65:
                    79:aa:71:8e:ad:cd:7e:48:e5:61:49:9a:e2:ab:e3:
                    cd:c7:6f:e0:2e:55:36:0a:5a:28:79:a0:08:44:63:
                    85:6a:b3:f5:ab:5c:fa:99:d0:98:85:98:07:e8:72:
                    87:9a:83:92:46:62:44:ad:b3:b0:a2:cd:90:2e:3d:
                    72:16:d7:a0:9f:b9:cc:e6:66:8f:47:21:0f:1b:e5:
                    7e:9e:bc:3c:33:8f:3c:18:2c:f7:d5:94:8a:c2:8b:
                    ff:d9:e4:eb:43:48:1f:c8:46:a4:5d:6b:fa:09:ba:
                    ae:66:91:f0:93:7b:9d:b2:aa:76:04:d1:37:ac:b3:
                    97:09:c6:b5:ec:fe:fb:a9:a4:42:0b:5b:e6:0a:07:
                    66:f5:73:56:e6:d7:eb:eb:d1:89:4a:10:8f:bf:ad:
                    6a:fb:e0:10:d3:86:76:23:60:af:84:de:20:b8:82:
                    bc:99:8f:be:e2:e5:3b:64:5d:76:90:2e:65:22:bb:
                    01:42:a8:cd:98:a2:a5:2b:89:b8:80:8a:5b:fd:e7:
                    03:46:a1:c8:41:71:45:33:75:8f:d8:d7:c4:a2:d7:
                    b1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FE:28:E6:50:F2:F7:BF:34:57:91:22:E7:9D:84:62:A1:ED:06:A1
            X509v3 Authority Key Identifier:
                keyid:AB:74:D3:0E:36:78:C5:A6:07:68:46:AE:AB:D0:1A:A3:0D:AB:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cbbb792ff42fa718619507a50663798055643b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/b4742b9752727ae99dfc1878dea12e57bcf0e32f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/f2cbbb792ff42fa718619507a50663798055643b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.192.0/19
                  181.174.128.0/19
                  190.105.176.0/20
                  190.108.32.0/19
                IPv6:
                  2803:c400::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:46:95:17:b0:75:8b:d9:67:f9:f0:3c:bf:81:0c:5b:a2:36:
         af:8b:71:1a:18:90:03:62:62:87:86:31:55:08:43:ef:ec:a1:
         64:30:f8:16:36:1a:20:62:69:ae:66:96:6c:bf:c9:7a:87:7a:
         0c:43:70:05:7c:38:1a:bc:f5:b4:e8:b0:4a:7c:16:5f:2c:3a:
         f8:97:f0:42:ee:1a:37:f0:4b:57:11:0a:a4:0e:a2:62:88:76:
         44:50:76:07:ba:a9:55:68:91:2e:48:cb:65:4c:5e:6d:67:0b:
         2e:05:c7:76:03:ad:2c:93:ca:5a:71:40:d6:90:10:d6:7b:55:
         c1:90:36:d0:19:92:48:c8:ff:97:94:85:eb:7f:f2:c3:71:ee:
         d3:21:0f:b4:ea:a5:93:bd:78:00:d7:4e:48:81:56:63:00:4c:
         09:98:39:36:99:59:5a:ed:34:70:33:79:8d:1c:8e:51:54:60:
         6a:da:df:e8:1b:c9:ee:84:74:aa:a3:0e:50:5c:60:bd:90:26:
         59:d1:a9:1f:c6:bb:a9:bd:6e:90:ef:4c:13:d7:d2:b8:76:10:
         7a:88:41:99:31:38:bc:67:54:ca:fb:66:4c:2a:fe:1d:6d:c4:
         45:17:2c:48:4b:27:21:81:49:55:ac:5b:ee:c8:1a:a5:3a:c4:
         e0:90:52:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----