Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/5ecdd34292f9ff9dfbdd3cbe8c13ece42a69f0a3.roa
File:                     5ecdd34292f9ff9dfbdd3cbe8c13ece42a69f0a3.roa (raw, json)
Hash identifier:          WusDm9+EkyCVODDjshWdHz0claflEuLuUAbOPOa9/WY=
Subject key identifier:   3E:C0:0A:B3:07:42:D7:97:55:E2:A7:A5:7D:0E:B5:EC:E6:39:4C:91
Certificate issuer:       /CN=be51756b3d6021dd6ee3d4415280c6f6b7603b86
Certificate serial:       174E61
Authority key identifier: 35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/5ecdd34292f9ff9dfbdd3cbe8c13ece42a69f0a3.roa
Signing time:             Sat 21 May 2022 21:50:06 +0000
ROA not before:           Sat 21 May 2022 03:00:00 +0000
ROA not after:            Tue 21 May 2024 03:00:00 +0000
asID:                     26210
IP address blocks:        186.121.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1527393 (0x174e61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be51756b3d6021dd6ee3d4415280c6f6b7603b86
        Validity
            Not Before: May 21 03:00:00 2022 GMT
            Not After : May 21 03:00:00 2024 GMT
        Subject: CN=5ecdd34292f9ff9dfbdd3cbe8c13ece42a69f0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:e8:e0:50:65:7f:5f:68:1a:0d:d0:74:6b:
                    f7:80:c6:02:28:9c:84:00:56:d5:cc:2e:ab:2a:c1:
                    b3:13:db:e5:41:38:e5:25:50:36:a9:44:a9:cc:d9:
                    72:3b:92:b4:9a:cc:9a:67:14:7e:b9:eb:fc:bb:17:
                    e4:4d:a3:dc:54:0a:73:9c:03:b9:40:e0:c2:7e:2c:
                    01:9b:e5:88:33:83:aa:d7:1a:aa:83:ee:76:54:2e:
                    e8:c7:a8:b4:9c:ff:7a:cd:b5:68:94:53:f7:c4:e3:
                    9a:bb:72:16:99:af:c2:d9:98:8b:87:7c:86:67:1e:
                    ac:e3:4a:14:d7:e8:98:a2:1c:60:ed:e4:4d:f7:ce:
                    5f:02:ba:00:fa:c9:4e:43:20:9a:13:2d:8a:19:41:
                    74:f7:56:1f:93:42:4e:3f:79:2e:3f:42:6e:2d:23:
                    18:8d:09:0c:56:e6:aa:93:2e:21:0f:13:b6:63:5a:
                    df:82:f6:70:8a:d9:dc:6d:a6:92:f5:47:e0:e0:fb:
                    fd:66:07:6f:93:53:02:04:fd:7b:02:0c:17:a1:2c:
                    16:4c:26:18:ce:95:b6:84:0f:50:0c:55:11:66:8b:
                    aa:4d:c0:d4:ce:9d:76:b4:29:d5:2d:b0:c9:a0:55:
                    d5:c2:fc:00:2f:84:24:40:bc:56:0f:21:2b:4b:31:
                    73:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C0:0A:B3:07:42:D7:97:55:E2:A7:A5:7D:0E:B5:EC:E6:39:4C:91
            X509v3 Authority Key Identifier:
                keyid:35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/5ecdd34292f9ff9dfbdd3cbe8c13ece42a69f0a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/be51756b3d6021dd6ee3d4415280c6f6b7603b86.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:95:15:f3:94:8c:33:f9:bb:c7:e5:93:55:c7:46:9e:e9:8f:
         35:05:79:23:c8:71:19:87:c8:b0:4f:e3:9c:cd:21:a2:8f:44:
         a8:05:fb:dc:63:ed:98:88:05:c7:e8:ee:60:83:ff:1b:43:e9:
         59:b7:17:4e:9c:d0:2e:0d:6f:1b:65:35:0b:e8:4e:5d:18:22:
         d2:3f:37:06:8d:4a:57:d3:ec:7e:a9:92:09:82:fb:c0:51:ca:
         e4:01:24:88:82:1e:ac:d5:6c:dc:b2:a6:eb:6b:ee:7c:aa:8a:
         59:e4:8a:f2:52:4d:00:3f:0b:6d:86:38:30:7e:68:88:85:3e:
         0e:0f:ef:1b:8d:73:c0:9d:07:21:e3:ad:d6:d3:dc:4b:e3:10:
         5e:58:3b:85:72:76:11:27:0e:e1:7a:0a:8a:88:ab:83:b9:dd:
         d3:92:2e:eb:c2:d7:cd:c6:92:8f:59:07:a7:f6:09:b5:73:09:
         7d:ed:ac:e8:c6:cd:dc:5d:ed:c3:d6:3d:13:d5:93:b3:d4:ad:
         c1:85:34:28:18:b6:a6:37:e6:ef:0d:2f:fa:5c:28:9d:07:12:
         c5:a5:7d:04:e2:d5:61:fe:9a:41:cd:0a:a5:c3:6a:31:0f:e2:
         82:9d:5e:78:80:2d:e1:46:5f:ec:0c:77:2b:34:cf:59:f2:05:
         5b:8a:37:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----