Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4db983dd-bc09-46d5-89b9-e217ecbcfdd1/63bae2317d1b038ed8e5f4943defe9de565d52ea.roa
File:                     63bae2317d1b038ed8e5f4943defe9de565d52ea.roa (raw, json)
Hash identifier:          cuWNXHyMPLEMMdvFiBNFgClvv4jqDOr4rwCPA2ADqMs=
Subject key identifier:   C7:0F:C6:95:CA:6D:10:DA:19:90:FD:83:0A:1B:99:60:D8:80:B9:A2
Certificate issuer:       /CN=44d1fb45b2ba74749f3b3780a0a39138e86370e1
Certificate serial:       0DDF0A
Authority key identifier: C8:A1:58:9A:F5:F4:0C:D2:32:13:33:72:36:B0:DF:84:AE:F8:2E:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44d1fb45b2ba74749f3b3780a0a39138e86370e1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4db983dd-bc09-46d5-89b9-e217ecbcfdd1/63bae2317d1b038ed8e5f4943defe9de565d52ea.roa
Signing time:             Wed 24 Mar 2021 22:49:37 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     264744
IP address blocks:        168.194.148.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 909066 (0xddf0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d1fb45b2ba74749f3b3780a0a39138e86370e1
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=63bae2317d1b038ed8e5f4943defe9de565d52ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:77:e0:72:90:b3:4e:95:19:cd:33:ca:0d:
                    73:7b:d8:cf:98:cd:88:a6:32:80:31:4d:9b:d9:b6:
                    8e:0d:cd:63:99:89:aa:a0:94:6c:e1:4b:27:17:66:
                    17:70:cc:db:52:3e:a4:f2:a7:39:91:a1:37:35:a3:
                    22:ac:b2:e6:a4:ed:1a:7a:92:71:e2:f6:db:5f:c8:
                    e7:fa:af:0f:6d:e1:38:36:3a:a7:84:39:53:fb:b6:
                    29:30:9a:c5:f7:a3:07:c6:99:92:20:f1:6d:f0:45:
                    a7:e4:a5:f4:41:c2:90:87:4e:27:52:33:4f:3c:30:
                    ac:88:d2:a1:51:a3:3c:55:9d:38:14:8d:49:42:38:
                    88:69:d7:91:cd:63:94:ff:26:3e:27:36:12:71:e2:
                    9e:37:31:f4:9a:ca:ae:c5:1b:ae:69:13:88:d1:4e:
                    bf:bb:73:83:22:87:3a:67:63:33:7a:d2:4b:57:ca:
                    05:b9:28:f9:1a:05:75:ae:65:4c:82:31:fa:76:15:
                    7d:ad:87:d5:56:d2:1e:df:b0:eb:4d:dd:19:f7:88:
                    1f:98:1e:25:12:2d:32:d4:a9:98:1f:4b:9f:22:cb:
                    b5:b4:bd:57:39:fc:ff:a7:76:ca:0c:e3:80:2d:6e:
                    08:d6:b3:c0:35:2a:e8:ec:ce:e7:ce:47:e2:c3:8c:
                    a3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0F:C6:95:CA:6D:10:DA:19:90:FD:83:0A:1B:99:60:D8:80:B9:A2
            X509v3 Authority Key Identifier:
                keyid:C8:A1:58:9A:F5:F4:0C:D2:32:13:33:72:36:B0:DF:84:AE:F8:2E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44d1fb45b2ba74749f3b3780a0a39138e86370e1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4db983dd-bc09-46d5-89b9-e217ecbcfdd1/63bae2317d1b038ed8e5f4943defe9de565d52ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4db983dd-bc09-46d5-89b9-e217ecbcfdd1/44d1fb45b2ba74749f3b3780a0a39138e86370e1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:b5:fd:1b:06:d2:c8:ac:56:ad:44:50:44:7a:9a:67:7e:62:
         97:0b:b4:0e:d1:52:25:1b:30:b4:5a:65:a3:7b:84:76:07:41:
         60:9d:83:cb:6c:67:55:a3:5d:79:df:8d:47:c2:fc:8d:17:35:
         05:58:0f:3b:a1:c9:71:49:02:c8:d6:01:ef:16:0a:cd:60:c8:
         66:65:58:d9:c7:79:e2:6f:64:47:f6:e2:70:88:17:5d:e4:d9:
         a2:02:7e:f7:f1:63:de:ae:b6:b9:ea:e2:9c:5a:18:4a:b1:c5:
         e2:86:5c:63:1e:9a:af:93:3c:32:35:24:ff:bf:02:6e:d0:62:
         f6:5d:d8:3d:01:f9:65:a8:0b:86:bc:19:31:82:9a:98:61:ec:
         5f:38:e2:5f:09:54:d3:1e:31:97:1c:6e:f8:4f:35:22:f1:d5:
         fb:8d:8e:0f:5c:e0:bf:ae:7b:f0:b3:bd:60:a0:41:1d:64:37:
         c4:7e:e8:bd:96:14:0e:51:c8:76:d1:6c:02:d2:bd:ff:ae:ec:
         85:5b:a6:1d:75:44:88:95:d9:b3:1e:39:ba:84:03:23:77:21:
         70:5c:9a:26:90:2c:bc:c4:52:9f:53:c9:ff:76:6a:08:de:6c:
         6d:09:8c:39:58:2a:d4:b0:a9:93:a3:e0:c1:4a:d9:8a:ed:eb:
         0b:77:d4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----