Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/c6c471d2d5cb4d21243e2ba15ce9bd5300d2bf46.roa
File:                     c6c471d2d5cb4d21243e2ba15ce9bd5300d2bf46.roa (raw, json)
Hash identifier:          XqWoTolagiaby9QN1Kx0y2qevsttBtbAJrGOCuMBo2Y=
Subject key identifier:   93:23:29:92:4E:A2:72:CE:CF:39:42:E5:A4:2E:C6:0F:29:86:E3:52
Certificate issuer:       /CN=f2cbbb792ff42fa718619507a50663798055643b
Certificate serial:       0D6425
Authority key identifier: AB:74:D3:0E:36:78:C5:A6:07:68:46:AE:AB:D0:1A:A3:0D:AB:81:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cbbb792ff42fa718619507a50663798055643b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/c6c471d2d5cb4d21243e2ba15ce9bd5300d2bf46.roa
Signing time:             Wed 24 Mar 2021 14:28:40 +0000
ROA not before:           Wed 24 Mar 2021 14:28:39 +0000
ROA not after:            Tue 24 Mar 2026 14:28:39 +0000
asID:                     52308
IP address blocks:        181.174.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877605 (0xd6425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2cbbb792ff42fa718619507a50663798055643b
        Validity
            Not Before: Mar 24 14:28:39 2021 GMT
            Not After : Mar 24 14:28:39 2026 GMT
        Subject: CN=c6c471d2d5cb4d21243e2ba15ce9bd5300d2bf46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:58:38:32:ab:4d:2f:99:cf:ab:7c:87:a5:75:
                    f8:ee:ce:55:f2:53:32:b4:c9:b2:62:68:e1:14:75:
                    78:bf:e6:c6:24:c9:97:4f:ab:fb:4b:ab:52:b2:a1:
                    bf:92:f6:2d:8b:8c:a9:a4:56:e0:9e:2f:b3:4a:bb:
                    47:6c:20:07:4a:19:e1:5f:9d:5a:53:0d:13:fa:2a:
                    cc:92:e0:24:97:01:d7:c2:db:9e:32:15:de:7d:a5:
                    39:42:18:83:4a:11:ca:bd:77:07:68:e0:59:cf:1a:
                    3a:fb:1e:61:b9:0a:e7:2f:8c:5e:f4:d3:1c:3f:38:
                    21:8f:44:e3:cf:42:1b:9c:93:1a:b1:6e:07:ee:00:
                    ce:94:2e:9e:19:ca:40:be:17:bf:57:86:29:24:c3:
                    60:42:e3:6e:ce:db:0a:3f:f3:20:8d:b1:11:83:8d:
                    0c:ac:72:c2:77:98:92:fc:fa:1a:03:10:bb:8b:0a:
                    31:98:ac:b7:0d:6b:6b:cb:1e:61:0a:52:6c:e6:5c:
                    e3:05:ec:21:98:04:3f:17:13:a1:75:c9:03:6f:ad:
                    fb:5d:f4:04:70:98:ae:61:8f:57:cc:e1:30:8f:40:
                    0e:90:af:47:ac:11:72:bc:87:b9:79:8d:62:d9:eb:
                    66:8e:64:1d:8d:ac:f6:7e:32:38:0d:47:f9:94:73:
                    1f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:23:29:92:4E:A2:72:CE:CF:39:42:E5:A4:2E:C6:0F:29:86:E3:52
            X509v3 Authority Key Identifier:
                keyid:AB:74:D3:0E:36:78:C5:A6:07:68:46:AE:AB:D0:1A:A3:0D:AB:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cbbb792ff42fa718619507a50663798055643b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/c6c471d2d5cb4d21243e2ba15ce9bd5300d2bf46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/f2cbbb792ff42fa718619507a50663798055643b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:72:aa:44:c8:1a:2d:00:2f:4e:91:4b:88:af:33:49:17:d3:
         30:65:45:1c:9b:e7:07:4f:9a:33:da:b7:43:1b:c5:0e:13:4a:
         97:91:91:d8:ee:92:97:bb:04:ee:b4:77:83:be:a5:d0:8e:10:
         4b:ce:ce:4e:7b:7c:0c:82:b0:ef:0b:d8:37:3b:71:4a:f4:8e:
         53:0a:13:0c:d8:3f:00:e4:36:1b:98:ae:1c:d6:71:05:70:62:
         6e:09:50:67:32:cb:22:16:82:58:da:99:61:8e:a2:5e:2a:50:
         56:d8:ca:6b:9d:dc:44:31:38:98:4d:b9:61:35:25:fa:1c:ad:
         6f:9a:33:ff:c0:be:55:28:37:88:45:0a:4c:76:9d:cc:5f:ad:
         5f:f1:4e:c3:50:f1:2f:99:10:c9:85:ca:a9:4e:07:a2:d7:0e:
         15:af:e0:37:18:6d:89:fd:97:c5:64:63:8b:4e:5a:18:70:c7:
         a7:1b:16:78:72:b3:12:bb:2d:11:a3:b6:13:41:76:a9:e9:b4:
         77:dd:a2:ac:fe:93:c6:23:5b:53:f7:2d:d7:2b:d0:00:34:17:
         eb:da:8a:bb:35:c3:43:a0:63:6c:6a:ba:ae:60:3b:c4:01:6d:
         b0:71:9a:a5:d1:78:66:fe:0a:0a:79:ac:ac:db:8c:16:28:a3:
         a6:25:28:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----