Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48450b10-d61a-4251-a09c-4e42a7baf918/6474b3ce46419618c70edef2e9726b5e20efc84f.roa
File:                     6474b3ce46419618c70edef2e9726b5e20efc84f.roa (raw, json)
Hash identifier:          5ZDhoR7UwNMlr6fQ9AkH5Imf2UxUfSPNbJq4SVCpeQ0=
Subject key identifier:   41:0B:CA:E9:A8:C5:BB:EE:98:58:71:6A:58:6C:9B:93:D1:0A:37:34
Certificate issuer:       /CN=4256d043f0685eb4086d27801ca57dd4e1fc8876
Certificate serial:       0B8E53
Authority key identifier: 17:B5:19:33:05:4E:93:5C:93:B3:2E:C4:E7:53:D5:8E:BC:CB:AE:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4256d043f0685eb4086d27801ca57dd4e1fc8876.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48450b10-d61a-4251-a09c-4e42a7baf918/6474b3ce46419618c70edef2e9726b5e20efc84f.roa
Signing time:             Wed 24 Mar 2021 14:29:02 +0000
ROA not before:           Wed 24 Mar 2021 14:29:01 +0000
ROA not after:            Tue 24 Mar 2026 14:29:01 +0000
asID:                     264760
IP address blocks:        168.194.216.0/22 maxlen: 24
                          2803:20c0::/32 maxlen: 48

Validation:               Failed, certificate revoked on Sat 06 Apr 2024 15:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757331 (0xb8e53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4256d043f0685eb4086d27801ca57dd4e1fc8876
        Validity
            Not Before: Mar 24 14:29:01 2021 GMT
            Not After : Mar 24 14:29:01 2026 GMT
        Subject: CN=6474b3ce46419618c70edef2e9726b5e20efc84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ea:99:b7:ba:fd:0c:63:2b:5e:00:b1:ae:2e:
                    22:a2:2a:9c:4a:b1:b0:a3:fb:36:44:fd:87:6a:6b:
                    f2:54:43:67:40:4a:13:f1:52:2f:b2:fc:30:ae:14:
                    9c:d7:92:1f:21:b4:1e:01:bc:71:05:d6:78:54:59:
                    90:1c:44:16:38:7b:b1:88:4d:43:81:10:c7:fc:53:
                    38:9e:53:27:ad:2c:50:e4:f4:89:52:2e:8e:dc:b3:
                    e5:13:59:ab:df:01:75:91:ba:88:70:d4:3b:79:66:
                    e7:60:20:42:0b:45:e2:30:e1:67:e5:b2:ab:3e:83:
                    df:7b:4b:c2:35:2b:3c:c8:4c:1f:e1:69:97:6d:9b:
                    b8:23:50:3c:eb:1d:57:80:07:6d:c5:95:d1:79:80:
                    e8:7f:37:20:e6:ac:3f:8a:b4:86:dc:41:30:a8:c1:
                    0f:3a:e8:9b:b7:b6:c5:28:5a:dc:f7:3f:f4:e1:4d:
                    39:d2:2e:3e:17:3b:c6:1a:43:41:72:59:18:31:0e:
                    8d:2f:43:16:c9:81:99:cf:c3:38:aa:29:0b:9d:b2:
                    18:16:18:09:1e:61:4e:9f:da:fd:be:60:45:1d:5b:
                    95:42:0f:ef:66:14:59:be:37:87:0e:48:a3:09:c0:
                    f5:00:9e:7d:a4:95:3c:ee:80:03:22:21:c8:62:ab:
                    cb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0B:CA:E9:A8:C5:BB:EE:98:58:71:6A:58:6C:9B:93:D1:0A:37:34
            X509v3 Authority Key Identifier:
                keyid:17:B5:19:33:05:4E:93:5C:93:B3:2E:C4:E7:53:D5:8E:BC:CB:AE:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4256d043f0685eb4086d27801ca57dd4e1fc8876.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48450b10-d61a-4251-a09c-4e42a7baf918/6474b3ce46419618c70edef2e9726b5e20efc84f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48450b10-d61a-4251-a09c-4e42a7baf918/4256d043f0685eb4086d27801ca57dd4e1fc8876.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.216.0/22
                IPv6:
                  2803:20c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:59:b0:bb:2c:e5:ef:c8:35:3b:6d:6e:c7:38:79:b9:b9:2c:
         19:5b:06:b8:7c:9f:e8:0e:8e:9e:7b:f1:2b:ce:7b:23:fd:85:
         93:5d:42:e6:ac:95:6a:5e:9a:3d:e7:c5:47:c3:41:43:92:f2:
         bc:75:a3:db:5b:1d:84:0c:34:a6:01:2c:f2:ba:53:d5:70:4c:
         b7:3b:80:38:6f:52:9c:8a:5e:5f:56:d4:60:e8:a1:26:86:01:
         bd:bf:91:cb:e9:fa:30:84:86:06:c2:ff:85:c2:7d:67:2b:f1:
         09:15:ed:25:3b:81:99:69:69:38:33:8f:d5:cf:38:98:e6:05:
         13:11:9d:28:8f:0e:82:7e:85:07:bb:98:8f:80:da:e4:83:7f:
         10:9d:d7:2c:50:de:c2:8f:9e:45:12:b2:99:23:c1:a5:2e:77:
         a6:a2:49:ac:5a:da:bf:ae:0d:9e:3d:d3:65:3f:2b:83:8e:6b:
         c5:35:4c:c3:01:6f:d0:2a:6d:d5:be:07:67:b1:87:ea:af:e0:
         70:1b:2c:26:ee:bc:ba:1f:40:51:4a:e5:85:2a:44:a9:fe:36:
         bd:27:92:bb:d5:f4:46:6d:cd:d4:20:bf:b9:dc:a3:8c:e3:f8:
         13:5a:84:24:46:b4:83:1a:55:02:f0:be:7d:99:f5:a8:76:83:
         51:82:07:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----