Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49c18d82-9a62-46a6-8470-be909cac4304/370431fe592012168e67ae4b7103c3e94f1dd958.roa
File:                     370431fe592012168e67ae4b7103c3e94f1dd958.roa (raw, json)
Hash identifier:          7gm9Ba8+ms4QtXv3+Gz2G+PFYP7sDQ8vuyRcXWpm3TU=
Subject key identifier:   05:15:77:49:84:25:CC:41:F7:3C:98:52:B6:95:A9:6A:DF:CA:58:51
Certificate issuer:       /CN=dffb95a77b596556dc922d7d59d7e123c2fec9b7
Certificate serial:       10C934
Authority key identifier: D4:7C:4D:55:EF:31:B5:B6:73:BE:CF:CE:F3:1F:AF:BE:A3:18:37:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dffb95a77b596556dc922d7d59d7e123c2fec9b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49c18d82-9a62-46a6-8470-be909cac4304/370431fe592012168e67ae4b7103c3e94f1dd958.roa
Signing time:             Sat 06 Aug 2022 03:23:58 +0000
ROA not before:           Sat 06 Aug 2022 03:23:38 +0000
ROA not after:            Tue 06 Aug 2024 03:23:38 +0000
asID:                     270158
IP address blocks:        170.78.208.0/22 maxlen: 24
                          2806:3c7::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1100084 (0x10c934)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dffb95a77b596556dc922d7d59d7e123c2fec9b7
        Validity
            Not Before: Aug  6 03:23:38 2022 GMT
            Not After : Aug  6 03:23:38 2024 GMT
        Subject: CN=370431fe592012168e67ae4b7103c3e94f1dd958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5a:2a:21:33:c2:e8:98:32:19:63:50:2e:75:
                    74:c7:ce:72:c7:96:b8:26:3e:40:8e:de:0e:50:45:
                    88:bb:98:c7:5c:ab:be:e4:89:6d:4d:13:e7:8b:1f:
                    9f:27:45:64:ce:e9:8b:bc:71:3b:2d:88:53:3a:14:
                    5f:ec:53:8d:01:b6:2b:22:34:a3:39:a2:a9:11:66:
                    f9:ad:63:85:64:fc:ce:9a:60:d3:f7:14:f5:81:22:
                    44:ea:b8:c8:33:a9:9a:5c:e9:45:d7:55:cd:cb:67:
                    77:60:7e:cd:6d:16:f4:f9:5e:5f:87:23:2e:9e:4f:
                    dc:fa:6e:4b:27:a9:25:21:07:3d:79:47:00:4e:d4:
                    d0:b3:93:4a:c6:0c:47:fe:d4:50:5e:77:a3:6d:c0:
                    0f:18:3c:66:8b:30:5f:4b:5c:57:68:5f:4c:ff:05:
                    b5:7b:43:7c:b1:f7:a8:27:39:1c:40:e0:c9:5b:b1:
                    12:66:a7:f0:40:91:ee:da:20:fd:a2:b9:21:96:7d:
                    c2:43:c0:7c:d1:75:dd:7c:c1:72:f3:02:c2:99:66:
                    fb:b0:87:db:24:e1:3a:7e:94:fc:02:84:2d:8f:a4:
                    00:1c:80:e3:e3:d0:21:8c:e0:2c:bb:30:a2:29:1b:
                    2b:d8:ff:71:f1:68:1e:ca:c2:9f:4b:73:32:ef:e1:
                    14:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:15:77:49:84:25:CC:41:F7:3C:98:52:B6:95:A9:6A:DF:CA:58:51
            X509v3 Authority Key Identifier:
                keyid:D4:7C:4D:55:EF:31:B5:B6:73:BE:CF:CE:F3:1F:AF:BE:A3:18:37:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dffb95a77b596556dc922d7d59d7e123c2fec9b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49c18d82-9a62-46a6-8470-be909cac4304/370431fe592012168e67ae4b7103c3e94f1dd958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49c18d82-9a62-46a6-8470-be909cac4304/dffb95a77b596556dc922d7d59d7e123c2fec9b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.208.0/22
                IPv6:
                  2806:3c7::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:0a:65:2f:4b:e3:29:39:d6:45:c7:82:eb:95:cc:2d:ac:d2:
         bf:d0:df:88:69:69:28:87:11:e2:93:13:37:ac:6c:82:7e:12:
         5b:64:eb:7b:4e:e7:2c:e8:ca:0c:81:96:1d:09:15:1a:38:b8:
         7e:0f:53:97:4d:6a:07:d4:3f:8e:34:a2:20:af:6b:ce:e4:e2:
         81:b4:2d:f5:54:63:6b:14:8f:e8:34:94:b7:2c:3b:3e:c2:fb:
         35:a6:8f:cc:6c:20:82:45:5c:f3:8a:1d:0c:7c:e8:db:c2:be:
         3f:6c:17:34:4c:bf:d6:93:42:c6:86:c1:c3:bd:cf:93:0b:6c:
         63:47:e1:b8:fa:34:ac:0d:0d:f4:ea:51:30:a0:1e:4d:27:b6:
         2e:dd:ab:1e:ab:73:73:e7:07:6a:01:1d:a6:bf:56:82:6d:d0:
         c6:31:22:d4:3d:08:83:a9:ae:f0:43:28:a9:03:19:a4:9a:68:
         2c:08:32:50:3a:40:06:0b:1a:20:eb:0a:5e:d6:b0:cd:ab:2d:
         20:d5:d4:36:ce:18:24:47:5e:c8:14:d1:5d:2b:1d:db:94:ec:
         2e:eb:4c:73:2b:55:69:35:14:53:fa:9f:6d:42:d3:df:ef:14:
         6a:50:62:ed:38:37:ce:f2:b5:c6:cb:c2:6e:4a:68:01:2e:6c:
         11:36:a7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----