Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/addf9333ed91ef1a9f7a790ecdc5d45d53df27d7.roa
File:                     addf9333ed91ef1a9f7a790ecdc5d45d53df27d7.roa (raw, json)
Hash identifier:          JBaZikwWiMsCO67jWjaEp3ztSNeP8O8SS1s9mpGgyk8=
Subject key identifier:   7C:5D:56:23:15:AE:C5:12:B8:B3:AA:65:D9:1A:95:CB:85:34:92:B8
Certificate issuer:       /CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
Certificate serial:       196461
Authority key identifier: 08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/addf9333ed91ef1a9f7a790ecdc5d45d53df27d7.roa
Signing time:             Wed 20 Jul 2022 18:46:11 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     264731
IP address blocks:        186.167.248.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1664097 (0x196461)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=addf9333ed91ef1a9f7a790ecdc5d45d53df27d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:37:f1:bd:b2:ba:8d:b5:4c:ce:2e:f0:eb:e3:
                    a5:2c:ca:6b:76:f5:da:7c:e3:9f:09:95:d3:30:e6:
                    1b:19:47:cd:d1:bd:89:ec:23:fb:f8:28:d2:f1:60:
                    b3:9b:cc:f2:70:ac:db:ec:ff:4c:9b:33:75:52:ee:
                    ce:41:ea:23:da:44:f4:da:88:97:24:48:73:ad:af:
                    e3:a0:ef:9d:77:96:1f:1b:49:f9:df:0c:9c:63:88:
                    8f:59:ac:9a:ce:0b:c4:8f:8e:cd:3f:fc:7c:b0:d3:
                    55:f4:42:91:42:11:51:50:3d:b9:18:f8:36:1d:34:
                    12:1b:1e:b0:20:e4:6e:77:ae:ef:0d:8b:07:85:a3:
                    e1:5f:21:38:7f:f1:26:98:ee:83:69:77:eb:31:7b:
                    3a:ab:52:3d:a2:c5:47:f7:8f:12:e0:7b:6f:c1:db:
                    96:62:10:ae:54:26:7f:2d:1c:22:21:dd:9f:44:1e:
                    79:20:6d:db:54:56:2c:14:0a:c7:5a:83:29:8f:d9:
                    f2:e6:cf:2f:61:b0:3b:b7:78:0d:a3:4e:37:fa:38:
                    c9:b9:ac:d9:90:b4:59:57:ea:5a:60:02:9b:5e:eb:
                    73:08:5a:c4:90:1f:6d:0a:e9:da:d9:69:15:0e:0b:
                    53:7d:98:1a:e0:be:e1:07:b9:87:0a:35:f1:db:7a:
                    55:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5D:56:23:15:AE:C5:12:B8:B3:AA:65:D9:1A:95:CB:85:34:92:B8
            X509v3 Authority Key Identifier:
                keyid:08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/addf9333ed91ef1a9f7a790ecdc5d45d53df27d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/96fbc1b8c542f9384f9a2004e66a61080248cdc6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.167.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:fe:09:c5:a1:90:bf:f3:cf:90:0c:58:95:7f:f7:c7:ab:31:
         a7:c7:a1:16:70:04:15:a7:cf:1c:e8:88:ef:76:d0:4c:e0:01:
         86:55:38:d8:c8:f4:bc:9a:40:81:74:dd:64:3b:8f:2d:f5:04:
         b8:07:68:72:ad:c9:fc:3f:d5:ad:17:8e:40:12:dd:5d:47:a1:
         fe:51:8b:5b:11:c5:69:7f:f4:d9:67:23:65:64:ba:4b:85:d9:
         99:62:27:71:c1:47:95:5b:05:27:87:e5:58:f9:b6:88:69:4f:
         30:61:f8:ec:59:43:c9:ef:9f:aa:fb:0c:de:06:bb:0f:ca:1e:
         c4:c4:ad:a2:dc:68:83:a2:99:5a:cd:92:f9:65:16:9a:03:cc:
         5c:98:d8:1c:5d:31:4b:7a:2c:f8:69:3a:24:08:bd:57:cc:ca:
         f2:d6:79:c4:d7:6b:ae:4c:44:cd:d4:75:52:2e:a1:89:1c:fa:
         a9:eb:af:47:f6:74:79:21:71:c9:aa:48:11:80:f0:b7:8a:6e:
         2b:8d:d9:ce:69:93:07:8c:59:34:74:49:f4:f6:ac:a4:9e:cf:
         20:cc:34:2a:26:20:c6:ce:25:98:23:a3:1a:51:b5:f6:e6:9d:
         22:b4:75:3d:97:07:d6:42:e2:4b:fc:8e:b5:f5:74:85:22:60:
         15:7a:e7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----