Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/03391c9d4a0cd4b3fd04a34e91e0975e29955249.roa
File:                     03391c9d4a0cd4b3fd04a34e91e0975e29955249.roa (raw, json)
Hash identifier:          6wv8iPP/1esczs0lrlQbULQOLPHoGOwhFa3J9YpSvik=
Subject key identifier:   8A:57:73:2B:9C:61:35:AF:BA:A7:CC:9E:CA:F6:7D:75:0E:CF:C0:38
Certificate issuer:       /CN=239ac677d20da31c1af262c7528bd5cc25d5e101
Certificate serial:       0C7648
Authority key identifier: BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/03391c9d4a0cd4b3fd04a34e91e0975e29955249.roa
Signing time:             Wed 24 Mar 2021 14:29:10 +0000
ROA not before:           Wed 24 Mar 2021 14:29:10 +0000
ROA not after:            Tue 24 Mar 2026 14:29:10 +0000
asID:                     265853
IP address blocks:        45.224.188.0/22 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 816712 (0xc7648)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239ac677d20da31c1af262c7528bd5cc25d5e101
        Validity
            Not Before: Mar 24 14:29:10 2021 GMT
            Not After : Mar 24 14:29:10 2026 GMT
        Subject: CN=03391c9d4a0cd4b3fd04a34e91e0975e29955249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:45:7b:15:4c:ea:eb:c5:cf:e4:86:67:33:c8:
                    43:92:f7:63:22:3b:04:d3:78:eb:d9:ca:e4:33:68:
                    d9:9d:9a:5c:ad:58:ad:d7:ab:c3:83:6a:c4:97:0b:
                    2f:5a:97:57:77:0c:8c:6d:b0:bd:1f:42:13:a0:79:
                    6e:d2:a2:78:25:53:fc:1d:2a:d4:6e:0e:f9:81:5b:
                    47:45:44:97:10:e1:d5:21:7c:28:52:6d:38:15:cc:
                    9f:86:54:bd:c8:c6:5d:33:d4:d1:0a:43:45:0c:26:
                    ee:e7:8e:f1:4e:84:63:64:86:37:2d:61:15:c8:b1:
                    43:ec:51:c9:bd:31:81:51:5f:3e:a5:74:d6:91:e4:
                    3f:4a:d5:f0:d9:0c:ee:9b:3d:73:6b:5d:1f:0d:85:
                    4f:59:7f:36:a3:68:f3:e4:0c:85:14:e1:23:9e:9c:
                    47:31:2d:90:73:cf:11:73:f4:56:da:b7:de:12:a2:
                    f0:c9:80:e1:83:38:f7:a3:55:4d:0d:9d:3c:4e:ab:
                    cd:3d:01:a8:b1:8f:4b:09:22:a8:6d:0b:9d:26:6a:
                    43:6c:64:b0:a5:5b:18:c2:e0:38:ab:b9:29:73:91:
                    dd:d4:e5:d1:8d:1d:09:9b:43:b4:fa:92:76:b0:21:
                    b8:f3:50:d8:11:3a:93:63:ec:d2:36:31:12:b2:63:
                    be:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:57:73:2B:9C:61:35:AF:BA:A7:CC:9E:CA:F6:7D:75:0E:CF:C0:38
            X509v3 Authority Key Identifier:
                keyid:BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/03391c9d4a0cd4b3fd04a34e91e0975e29955249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/239ac677d20da31c1af262c7528bd5cc25d5e101.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:4c:aa:7d:f2:0d:4f:b4:3f:a5:69:70:e8:d3:13:d2:ac:c4:
         15:ea:f5:51:7e:67:7a:9d:36:93:5c:ee:66:a9:b3:15:23:6b:
         1e:df:fc:3b:90:73:ae:5b:4e:05:35:4e:6c:89:43:71:cb:79:
         ed:1b:5d:19:25:e6:25:2a:4d:45:9f:4c:0a:91:2d:48:fe:18:
         eb:38:2a:36:28:d3:19:4f:37:ab:84:78:30:86:f3:9f:5c:71:
         8d:f8:51:6c:06:12:11:fe:56:93:22:b8:75:4d:9b:f7:04:7e:
         a5:40:96:e8:7b:3b:03:8d:d1:65:74:4d:f9:6d:58:5f:5d:d8:
         c3:fb:27:44:a0:48:62:fd:ec:40:97:01:e0:c4:ff:64:c2:5a:
         e9:47:b8:d2:db:47:26:69:d4:15:ce:d8:0c:a9:57:7a:8f:cf:
         f7:08:05:65:ce:08:36:54:17:1e:2b:9e:67:b8:a8:8d:91:bb:
         3c:e8:f3:33:c7:e9:24:d0:cd:d4:24:bb:78:64:95:4f:c7:99:
         e3:61:9a:ef:0d:77:87:30:e3:12:fe:d8:d4:e9:3a:01:16:2a:
         d3:8d:7d:1c:18:43:76:de:cb:48:1d:e1:cd:4c:4f:61:eb:c4:
         2f:0b:78:4f:57:bb:10:24:d6:ce:24:d9:3e:78:69:c0:0c:47:
         3c:ae:ca:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----