Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/18facd5e732fdd9ee3d6f5c5dc191d112ed79365.roa
File:                     18facd5e732fdd9ee3d6f5c5dc191d112ed79365.roa (raw, json)
Hash identifier:          PqK4f4Wiih/uD4jzh7dUUDFuJgZPZC0nUAGrQD9v434=
Subject key identifier:   AA:36:CE:F7:2C:AF:5D:A8:F7:23:55:7F:F3:50:C8:B5:EE:83:6B:9E
Certificate issuer:       /CN=4d7240514a9f4b2c9086b5e65e0ac43a9394b96e
Certificate serial:       0D7F84
Authority key identifier: 8A:BC:B8:10:CA:A4:CC:32:68:82:BD:79:48:6C:4C:E7:CD:2C:29:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/18facd5e732fdd9ee3d6f5c5dc191d112ed79365.roa
Signing time:             Wed 24 Mar 2021 14:38:23 +0000
ROA not before:           Wed 24 Mar 2021 14:38:23 +0000
ROA not after:            Tue 24 Mar 2026 14:38:23 +0000
asID:                     266734
IP address blocks:        45.230.216.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884612 (0xd7f84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7240514a9f4b2c9086b5e65e0ac43a9394b96e
        Validity
            Not Before: Mar 24 14:38:23 2021 GMT
            Not After : Mar 24 14:38:23 2026 GMT
        Subject: CN=18facd5e732fdd9ee3d6f5c5dc191d112ed79365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d7:35:6e:68:0c:8b:19:0c:03:a3:3b:54:4b:
                    b1:cb:bf:63:36:64:4a:6b:a3:d5:f3:73:3d:dc:3f:
                    63:d7:7d:88:e5:1f:be:94:15:79:3b:a4:80:fb:99:
                    bc:76:b1:b0:1a:d3:ae:56:0d:94:7f:78:50:9b:91:
                    53:ef:68:b6:64:a9:49:30:b3:58:95:e0:26:fb:26:
                    a3:db:ac:f1:df:30:c2:f0:a8:2a:a3:3b:6b:45:2d:
                    54:54:44:2a:b1:cd:6d:49:bf:88:d3:14:27:da:48:
                    c1:8f:f7:a6:19:1b:d7:0a:41:38:fa:74:23:63:94:
                    17:c1:6e:e6:c2:6a:38:31:22:fa:79:f7:7c:8c:1d:
                    18:73:5b:c7:76:f4:4a:1f:f1:e8:48:1a:6f:93:17:
                    68:ae:59:10:fe:47:81:f2:ae:ca:56:03:66:9f:c3:
                    b0:7b:4e:9b:4e:b6:7d:50:f5:34:01:59:18:bd:35:
                    f1:45:5a:6d:6b:87:9f:9a:8e:d7:59:06:d6:f3:4d:
                    12:7a:de:dd:92:58:60:dd:50:83:44:2f:66:ed:e0:
                    e4:c9:f1:12:49:29:13:c1:2a:4a:bb:16:11:33:31:
                    12:c7:8a:46:8c:d5:f8:be:9b:ae:8a:18:29:7e:6f:
                    14:77:b2:06:8b:6c:18:dc:43:b3:dd:8e:24:6f:a1:
                    a3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:36:CE:F7:2C:AF:5D:A8:F7:23:55:7F:F3:50:C8:B5:EE:83:6B:9E
            X509v3 Authority Key Identifier:
                keyid:8A:BC:B8:10:CA:A4:CC:32:68:82:BD:79:48:6C:4C:E7:CD:2C:29:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/18facd5e732fdd9ee3d6f5c5dc191d112ed79365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:ce:d8:b4:0e:40:5f:1c:35:67:6a:1b:69:eb:7f:6d:32:bd:
         99:5f:a7:b3:93:e4:4c:ad:d7:2a:e8:1b:b7:85:25:01:e4:a0:
         e4:21:a6:93:64:c3:05:4a:56:1a:ff:48:2b:e9:7f:ae:95:f7:
         07:cc:3c:41:92:3e:02:a0:72:d0:0d:3d:05:a0:0d:7a:48:33:
         6f:e2:d5:31:ce:d6:b2:11:e8:8f:97:c0:6b:a4:d0:54:b5:92:
         af:b1:cb:84:b3:51:96:f2:32:32:13:3d:ab:77:69:e2:c8:70:
         84:2b:f7:d1:6b:23:6e:4f:c3:04:86:d0:5d:86:62:1b:bf:b0:
         6f:59:eb:6b:f6:5a:81:e8:b7:19:af:23:1f:35:7d:c5:0b:d6:
         73:cf:15:ef:2e:e7:ca:7c:58:24:c5:6f:2b:8c:f1:5d:e8:d1:
         56:7b:4d:ad:6e:d1:87:75:0e:13:c5:c6:67:0f:f9:5a:2f:0a:
         79:e4:fd:84:f9:a4:9c:65:83:63:f4:e7:3d:d4:9b:4b:33:5e:
         dc:44:2e:37:fa:27:6c:41:c3:59:27:ff:dc:14:ff:8e:aa:85:
         98:11:03:1b:1a:d0:b7:9f:87:11:64:dd:20:d0:89:49:30:10:
         9b:e1:01:ec:97:01:ab:d7:15:79:4a:ce:ed:96:9f:08:5b:c0:
         fc:f1:45:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----