Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/ec3f1e181bac2127c7c3ac076e88c362a950d4a0.roa
File:                     ec3f1e181bac2127c7c3ac076e88c362a950d4a0.roa (raw, json)
Hash identifier:          N7Wa/gUDL+rnYah7/LoR85O5m3E00ozNClRt2BhTE5w=
Subject key identifier:   B8:FF:8E:2C:1A:DC:94:E3:8A:4D:B1:66:30:00:43:9C:0D:36:30:20
Certificate issuer:       /CN=6a87731fd0e709e012a794d3f86ae26c7c73db79
Certificate serial:       171B23
Authority key identifier: D6:B8:8E:7A:F3:33:46:E0:95:C5:F6:4A:64:31:03:4E:5A:01:12:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a87731fd0e709e012a794d3f86ae26c7c73db79.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/ec3f1e181bac2127c7c3ac076e88c362a950d4a0.roa
Signing time:             Thu 16 Mar 2023 00:18:18 +0000
ROA not before:           Fri 01 Apr 2022 03:00:00 +0000
ROA not after:            Sun 02 Apr 2034 03:00:00 +0000
asID:                     52505
IP address blocks:        152.231.16.0/21 maxlen: 24
                          2803:ee80::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1514275 (0x171b23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a87731fd0e709e012a794d3f86ae26c7c73db79
        Validity
            Not Before: Apr  1 03:00:00 2022 GMT
            Not After : Apr  2 03:00:00 2034 GMT
        Subject: CN=ec3f1e181bac2127c7c3ac076e88c362a950d4a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0a:80:49:1e:09:ea:93:ee:9b:27:13:2e:c5:
                    ca:a8:31:3b:44:a4:d8:a9:bc:db:ab:89:7c:e6:43:
                    6e:61:a6:69:2c:b0:00:46:aa:2c:34:59:2d:0a:02:
                    6d:de:d2:9f:6b:60:be:89:03:90:20:58:6a:8d:38:
                    90:5f:60:b5:75:c8:42:50:e4:a0:f8:63:d9:78:9a:
                    b6:8f:78:91:0a:74:b2:31:fa:00:74:13:5f:3a:5e:
                    09:cb:58:91:48:9a:92:a7:a4:48:63:8d:e2:b7:31:
                    f9:ea:e2:28:ff:a7:1e:16:37:d0:7f:4f:2f:4f:41:
                    64:3d:2f:c8:a2:da:45:be:73:9a:e7:63:25:8c:8a:
                    6d:5a:68:19:1c:aa:5c:88:6a:1c:e5:78:af:bc:98:
                    d4:48:70:0f:2d:a6:83:35:ec:ee:72:da:e3:06:f3:
                    a3:12:d1:46:67:d6:69:c7:3b:fd:a4:aa:ed:eb:5f:
                    ba:d0:8c:a4:d5:ec:e3:df:31:5f:ab:74:29:3d:77:
                    8a:7c:0d:57:23:af:7f:b3:5d:4b:6b:bb:08:ec:a5:
                    9b:60:e1:37:bc:4b:58:37:a7:e2:6f:0e:9e:9e:70:
                    f3:78:85:1b:a2:a0:ce:4b:bd:4f:d1:ca:99:44:77:
                    f9:ef:07:7a:39:bd:25:5b:ab:84:77:1e:3d:b2:93:
                    00:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FF:8E:2C:1A:DC:94:E3:8A:4D:B1:66:30:00:43:9C:0D:36:30:20
            X509v3 Authority Key Identifier:
                keyid:D6:B8:8E:7A:F3:33:46:E0:95:C5:F6:4A:64:31:03:4E:5A:01:12:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a87731fd0e709e012a794d3f86ae26c7c73db79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/ec3f1e181bac2127c7c3ac076e88c362a950d4a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/6a87731fd0e709e012a794d3f86ae26c7c73db79.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.16.0/21
                IPv6:
                  2803:ee80::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:34:95:dd:d1:9b:a7:2c:95:1e:c2:fd:74:29:ab:1c:4a:78:
         01:b6:d9:32:b5:d7:00:fa:fa:c3:a8:93:5e:75:00:06:ad:b8:
         bc:21:b6:3f:d8:00:86:c3:f5:b1:38:60:33:6a:05:23:7c:f5:
         22:a6:4a:aa:5d:54:40:e5:0c:5d:41:b1:71:0d:66:ed:6d:44:
         88:9d:29:92:09:7e:5c:1f:4d:12:f5:86:33:82:75:03:d1:84:
         1e:ce:e9:0d:cd:7a:15:0c:4a:ca:f4:bf:d7:33:b7:e5:23:38:
         d5:fe:18:02:73:d0:c7:75:fd:20:5e:df:ba:1a:bc:8f:aa:84:
         34:34:50:e8:aa:69:cf:a4:dc:21:6b:ee:93:86:4a:00:fc:f9:
         26:29:65:2a:da:68:22:0b:a3:cd:11:ee:2f:c6:db:16:77:50:
         1f:67:41:86:02:f9:6c:3a:98:cb:52:1e:0e:dc:b3:00:16:67:
         11:3f:6f:22:20:11:c0:b5:2f:b4:e5:9e:bf:1a:63:2c:63:d6:
         13:2e:36:34:5a:ac:3a:94:50:59:23:9a:04:47:55:b0:21:00:
         dd:98:1d:1a:d5:be:f0:aa:ee:07:15:33:42:c3:83:36:f6:ea:
         cf:d8:43:4d:a6:d7:76:3d:c6:64:54:80:f8:c9:01:a7:b8:16:
         fa:32:ef:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----