Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/55c5dfab334a43c1d36dc727effa96acf9830d40.roa
File:                     55c5dfab334a43c1d36dc727effa96acf9830d40.roa (raw, json)
Hash identifier:          /7mFwR9XRjlgJbhYe7Yo6d+oKJL5zknSoFXwEfyyG0c=
Subject key identifier:   E2:90:BC:A9:9C:C7:7F:3B:7C:2E:74:E7:7F:19:89:08:AF:05:1A:2E
Certificate issuer:       /CN=592c73df8a5ecfa22ed98642ab6ae2e46949dd61
Certificate serial:       0DD4E0
Authority key identifier: C6:A2:6F:94:DA:2F:63:72:B3:F2:37:16:F2:78:17:C3:07:A5:F6:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/55c5dfab334a43c1d36dc727effa96acf9830d40.roa
Signing time:             Wed 24 Mar 2021 14:41:04 +0000
ROA not before:           Wed 24 Mar 2021 14:41:04 +0000
ROA not after:            Tue 24 Mar 2026 14:41:04 +0000
asID:                     265724
IP address blocks:        45.6.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906464 (0xdd4e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=592c73df8a5ecfa22ed98642ab6ae2e46949dd61
        Validity
            Not Before: Mar 24 14:41:04 2021 GMT
            Not After : Mar 24 14:41:04 2026 GMT
        Subject: CN=55c5dfab334a43c1d36dc727effa96acf9830d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:9b:fc:47:6a:8a:c0:16:c8:e0:51:9e:aa:
                    97:c9:5d:93:a6:d0:f8:65:59:51:a0:5f:88:c8:87:
                    7d:dd:9b:ef:9b:3e:ba:95:d2:ac:e9:aa:00:61:54:
                    8e:cf:e7:19:e2:d3:af:a8:84:b9:37:5e:1e:ca:4a:
                    5a:ab:96:9e:6d:f2:5d:96:aa:89:0f:7c:5e:b5:28:
                    0a:d1:ed:26:27:da:af:af:00:c2:46:91:db:37:a8:
                    01:7e:ad:c2:20:2e:7f:35:53:84:5b:67:0a:7d:88:
                    9e:25:9b:9c:74:69:c3:03:da:ed:42:1b:7d:44:dc:
                    99:21:8a:01:65:b5:2c:2f:80:bc:16:c3:e7:f5:57:
                    73:73:7f:91:ed:4e:b7:23:51:cd:1b:e8:dd:85:51:
                    ae:b5:2c:2d:d4:bf:e4:1c:b5:e6:c9:12:2a:7e:f6:
                    fb:98:93:42:44:65:11:90:7c:9e:b1:34:c7:ae:8f:
                    8d:bd:29:bd:c1:23:5c:d8:bf:86:0a:ec:33:55:b3:
                    e8:d4:03:08:cb:54:35:61:a9:c9:a3:b5:51:6d:61:
                    ee:39:49:95:34:88:20:e7:1c:83:1d:0f:20:2d:c9:
                    1b:9f:68:32:cd:f8:c3:7a:62:2b:99:1f:8f:4d:bc:
                    c6:98:27:4e:6f:6e:be:75:f0:f9:df:4c:05:e0:af:
                    d7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:90:BC:A9:9C:C7:7F:3B:7C:2E:74:E7:7F:19:89:08:AF:05:1A:2E
            X509v3 Authority Key Identifier:
                keyid:C6:A2:6F:94:DA:2F:63:72:B3:F2:37:16:F2:78:17:C3:07:A5:F6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/55c5dfab334a43c1d36dc727effa96acf9830d40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:bf:84:bf:7c:91:c6:ba:42:90:50:95:29:0f:81:d0:93:52:
         2d:ea:48:1f:b3:dc:28:50:fc:8c:4a:85:41:55:2c:4d:66:cd:
         9f:07:f1:ce:fe:a0:23:67:59:64:64:2e:78:9b:b2:cc:de:50:
         3c:37:af:8c:6b:02:d3:40:97:f4:25:ae:9b:40:78:a5:95:86:
         25:d0:5b:a8:ce:d6:76:b0:3e:72:90:a3:f5:6e:71:c6:e7:21:
         cf:7c:f5:4f:7e:97:75:c1:a2:4d:37:21:1f:22:dd:2a:f5:13:
         d3:ef:76:c9:dd:64:33:71:8c:e1:8b:9d:3b:4a:d1:51:e8:25:
         a3:73:dc:bc:03:fe:38:ca:7c:79:22:b8:b1:91:03:16:c9:0e:
         9d:64:9b:05:35:3b:17:16:e8:a8:e0:2e:df:6d:e1:6e:1c:72:
         0d:1f:0b:e8:1d:86:fa:6b:79:a2:49:13:69:61:6f:3f:fb:7b:
         ea:c2:24:bc:8f:16:ee:51:00:95:1a:29:56:f0:55:ec:55:dd:
         a0:67:c7:c3:4a:2a:f4:0c:27:20:db:7f:0f:6a:e7:bb:41:3e:
         f3:05:5d:ad:25:6f:44:2d:3c:4d:d6:a3:b7:6e:4e:44:9e:c2:
         ab:ff:f3:9a:89:b9:2c:65:c0:12:f7:53:a3:75:06:9d:72:da:
         5c:9c:63:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----