Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/16c7650c466e39ad90a259d942c8b97c55ed9f5b.roa
File:                     16c7650c466e39ad90a259d942c8b97c55ed9f5b.roa (raw, json)
Hash identifier:          qF+8JZkKr58Yes0tnJin2f6tHzLQAW6AXCYAJl2lHHw=
Subject key identifier:   94:D9:AA:56:0E:BD:49:F2:FA:3F:29:00:4C:6A:50:5C:D0:B1:14:F6
Certificate issuer:       /CN=466e9c553c1e6136fda5fe5189aa28c81ce61dec
Certificate serial:       0D5A02
Authority key identifier: 44:97:A8:BD:7C:6E:64:1D:7D:8F:BD:1C:40:97:78:38:5B:7E:9D:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e9c553c1e6136fda5fe5189aa28c81ce61dec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/16c7650c466e39ad90a259d942c8b97c55ed9f5b.roa
Signing time:             Wed 24 Mar 2021 14:47:28 +0000
ROA not before:           Wed 24 Mar 2021 14:47:26 +0000
ROA not after:            Tue 24 Mar 2026 14:47:26 +0000
asID:                     264837
IP address blocks:        170.81.144.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875010 (0xd5a02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466e9c553c1e6136fda5fe5189aa28c81ce61dec
        Validity
            Not Before: Mar 24 14:47:26 2021 GMT
            Not After : Mar 24 14:47:26 2026 GMT
        Subject: CN=16c7650c466e39ad90a259d942c8b97c55ed9f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:62:8b:ce:04:01:df:db:13:f5:03:ac:96:85:
                    43:6a:66:f7:0e:ae:40:f7:d4:ef:75:34:0e:9f:ee:
                    09:e3:99:b7:e4:68:15:b3:b4:89:f5:cc:34:3b:42:
                    fb:39:02:a7:8c:e0:cf:d4:e0:dc:7b:d7:90:57:ce:
                    77:91:bd:63:ea:d1:24:17:3b:8e:68:a3:06:ce:b7:
                    dd:b2:a8:54:9f:85:a4:4d:a3:14:71:87:fa:42:09:
                    90:45:4a:b7:fa:60:d4:d6:bc:c5:c3:93:7f:53:c3:
                    03:5e:0f:1a:81:7c:cf:bc:b9:23:a4:78:45:80:2a:
                    f1:40:6d:88:3b:b5:5a:9e:60:48:00:57:90:2c:8b:
                    b0:3e:e3:bb:f1:f1:bf:c8:04:fa:3a:d7:3d:58:6e:
                    9b:e0:6f:c2:ff:5c:0e:f8:76:69:72:f3:f7:2b:73:
                    e2:c2:ed:d7:28:f0:a1:bb:70:d2:1e:d4:7a:e7:c6:
                    05:ad:e2:a1:43:e0:55:04:7a:2b:49:b9:e7:2d:e0:
                    f7:2f:f9:32:65:14:91:c7:1b:f6:3f:bf:67:64:02:
                    a3:1f:9f:87:8a:d8:da:dc:df:ae:a7:70:f0:21:15:
                    36:6d:fe:dc:33:ef:a0:84:71:fd:2c:c9:c8:e3:c8:
                    55:fc:d5:34:ee:b0:a3:8f:7d:f3:09:58:7a:e1:53:
                    59:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D9:AA:56:0E:BD:49:F2:FA:3F:29:00:4C:6A:50:5C:D0:B1:14:F6
            X509v3 Authority Key Identifier:
                keyid:44:97:A8:BD:7C:6E:64:1D:7D:8F:BD:1C:40:97:78:38:5B:7E:9D:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e9c553c1e6136fda5fe5189aa28c81ce61dec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/16c7650c466e39ad90a259d942c8b97c55ed9f5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/466e9c553c1e6136fda5fe5189aa28c81ce61dec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:d3:11:65:3d:3f:20:91:7d:f0:0d:d8:bb:0f:15:59:c1:e9:
         76:5c:ee:4b:f4:ca:f8:3b:e8:8b:e7:e0:8b:9c:e0:70:4a:32:
         4d:54:9f:ad:6b:53:5b:d3:59:1c:f4:39:3a:6e:bb:39:5a:e6:
         2f:a8:0a:c5:a8:64:a4:f9:84:48:aa:c7:4c:85:19:83:0c:58:
         db:6a:7f:58:1d:ef:4b:b8:a7:aa:e7:1d:63:af:7b:27:4f:3f:
         fa:c0:18:9d:dd:5c:50:e4:fa:d0:0e:b0:0d:73:e0:70:21:f9:
         57:a3:20:ce:52:76:ec:0a:dd:99:22:2a:6c:d5:52:30:4f:89:
         eb:2f:9b:1f:02:a0:06:d9:c5:be:3e:b9:8d:a8:7b:89:13:aa:
         46:0b:f9:72:ef:1f:5f:51:7e:76:e9:07:70:ca:fa:2e:af:8a:
         3b:65:3b:ab:b1:dd:3f:d7:e2:b3:6f:e4:1b:3f:b1:30:22:be:
         09:8c:9b:ec:6b:4e:b2:84:2b:31:48:33:c2:15:c8:e0:f0:fb:
         19:0a:c8:fc:6c:7c:6d:34:dd:38:9b:00:88:c1:3a:bf:10:83:
         0c:e9:fd:25:8f:96:4d:0d:e3:ee:3b:4d:8c:11:76:86:17:42:
         b4:95:d9:4b:84:1e:5a:59:c3:00:4e:c1:4d:ee:e1:ff:f5:5f:
         ab:9e:36:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----