Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f382b92-f970-4d47-8d80-7b4255bd2a92/3fe444d7a1f16c509769be071cb7e6dd183cb1fe.roa
File:                     3fe444d7a1f16c509769be071cb7e6dd183cb1fe.roa (raw, json)
Hash identifier:          bPqH5/5CWIT0ldCjwVAR8F4mxpz6WvojSIUH1tOalzg=
Subject key identifier:   A1:95:5A:09:4B:88:00:74:5F:9F:43:D0:3D:9E:ED:F1:41:14:40:73
Certificate issuer:       /CN=83224a116c610d8fbb400355d82709d9c5e1946b
Certificate serial:       0B06CA
Authority key identifier: EC:05:27:23:42:39:9D:9B:DE:0A:53:2D:0D:6E:1A:64:2C:1B:B1:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83224a116c610d8fbb400355d82709d9c5e1946b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3f382b92-f970-4d47-8d80-7b4255bd2a92/3fe444d7a1f16c509769be071cb7e6dd183cb1fe.roa
Signing time:             Wed 24 Mar 2021 14:41:12 +0000
ROA not before:           Wed 24 Mar 2021 14:41:11 +0000
ROA not after:            Tue 24 Mar 2026 14:41:11 +0000
asID:                     269838
IP address blocks:        45.186.140.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 722634 (0xb06ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83224a116c610d8fbb400355d82709d9c5e1946b
        Validity
            Not Before: Mar 24 14:41:11 2021 GMT
            Not After : Mar 24 14:41:11 2026 GMT
        Subject: CN=3fe444d7a1f16c509769be071cb7e6dd183cb1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1d:c1:7f:1a:41:ea:24:23:e9:3e:bd:bd:fe:
                    27:a0:d5:6c:14:f0:87:13:ff:fa:bb:36:5f:a6:57:
                    c1:f7:47:da:dc:64:9c:b5:61:de:eb:cd:85:6d:8b:
                    88:29:86:5e:67:9c:4d:a2:b7:55:73:ce:1d:9d:8f:
                    a5:c3:91:6f:35:00:87:70:32:b4:95:5c:77:f4:c4:
                    07:c1:d7:4d:64:e9:6f:88:e4:d7:22:ff:3b:00:bd:
                    51:28:45:35:8b:d7:9a:3d:cf:e2:d1:c3:64:d3:02:
                    8c:86:e0:1d:70:0e:f0:0e:c7:4a:a2:46:b9:9d:d8:
                    09:60:74:d1:cf:ba:34:e1:da:0a:d9:e2:1a:eb:49:
                    45:25:4b:4a:17:7a:61:85:7a:d7:0b:5e:4d:a9:f0:
                    aa:fa:53:ac:42:77:77:f0:99:74:8f:14:ec:1f:e9:
                    6e:62:b9:43:1f:7c:0f:c3:2f:5f:23:bf:b4:b5:4d:
                    90:d9:ab:46:70:76:94:82:da:08:1f:3a:70:7b:f9:
                    d8:7c:0e:6d:74:1d:f4:2b:a8:93:30:1c:2b:1b:44:
                    07:67:ad:88:78:39:ec:e2:3a:85:75:98:35:1f:c1:
                    b1:c7:43:1f:bc:f3:6f:3f:30:31:6c:f3:6d:a0:f0:
                    a0:31:85:4c:22:f1:8e:c2:c8:26:8c:d6:2b:b2:11:
                    1e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:95:5A:09:4B:88:00:74:5F:9F:43:D0:3D:9E:ED:F1:41:14:40:73
            X509v3 Authority Key Identifier:
                keyid:EC:05:27:23:42:39:9D:9B:DE:0A:53:2D:0D:6E:1A:64:2C:1B:B1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83224a116c610d8fbb400355d82709d9c5e1946b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f382b92-f970-4d47-8d80-7b4255bd2a92/3fe444d7a1f16c509769be071cb7e6dd183cb1fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3f382b92-f970-4d47-8d80-7b4255bd2a92/83224a116c610d8fbb400355d82709d9c5e1946b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:a4:d0:22:39:9c:e5:92:59:0f:21:93:9a:83:b0:ca:9d:cf:
         a9:87:8c:3b:09:b6:39:27:06:2d:c8:01:3b:1c:e4:85:10:eb:
         8e:da:ba:76:10:42:c0:42:5e:8f:6b:2c:8f:5a:6f:47:34:ba:
         d7:d8:37:27:90:bc:8d:7f:36:24:0a:f4:dc:09:2f:73:b8:41:
         f3:4b:5d:5d:75:d5:2f:75:54:df:1c:2a:45:ff:0b:4f:86:3d:
         07:51:97:0c:d9:1f:d8:95:ac:c9:c5:b3:ac:f1:77:d5:d5:91:
         f6:0d:14:64:c5:15:6e:d9:f4:af:4e:21:17:ec:28:0f:b4:e4:
         4a:cc:60:0c:a0:f0:18:c0:f5:67:62:95:ff:c4:28:41:7f:8a:
         cc:27:88:7d:27:cb:52:eb:dc:5a:da:98:96:fd:77:10:a7:0d:
         e9:97:a9:d9:7d:b3:53:f5:b7:6f:21:08:db:52:1d:da:b8:d1:
         e3:0a:4b:30:13:f9:ed:1c:c0:53:80:7a:28:46:ec:d6:70:3d:
         7b:7a:c2:0a:54:7c:46:0c:1e:aa:93:6d:e0:19:5d:74:47:5d:
         48:23:72:94:ea:db:44:19:7e:22:57:03:11:cb:71:c4:83:2a:
         ad:9a:a6:80:0c:e1:e8:6f:19:43:3b:86:d9:9b:58:5e:6a:b8:
         72:aa:b0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----