Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58d3d163-a739-40b5-9b27-f1b47377cdbd/92a501d9682d230d2d55898b35e0e6b79853c5b7.roa
File:                     92a501d9682d230d2d55898b35e0e6b79853c5b7.roa (raw, json)
Hash identifier:          fCzNuc8XlDWxs8RxgV0uIjvNSnwGUp7xpxMqGYIYrFo=
Subject key identifier:   9B:0C:78:74:33:1C:7D:6E:BF:C9:FF:83:2A:32:C0:D4:71:23:3E:1D
Certificate issuer:       /CN=8d08412c92e8d5501e7998fc5a31502fa8932a9e
Certificate serial:       056A41
Authority key identifier: 0E:AF:EA:93:3B:30:D4:7F:74:93:FD:41:6C:EE:45:60:0D:D1:DB:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d08412c92e8d5501e7998fc5a31502fa8932a9e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58d3d163-a739-40b5-9b27-f1b47377cdbd/92a501d9682d230d2d55898b35e0e6b79853c5b7.roa
Signing time:             Wed 24 Mar 2021 14:41:18 +0000
ROA not before:           Wed 24 Mar 2021 14:41:18 +0000
ROA not after:            Tue 24 Mar 2026 14:41:18 +0000
asID:                     270074
IP address blocks:        2801:1b:2800::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 08 Jan 2024 14:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354881 (0x56a41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d08412c92e8d5501e7998fc5a31502fa8932a9e
        Validity
            Not Before: Mar 24 14:41:18 2021 GMT
            Not After : Mar 24 14:41:18 2026 GMT
        Subject: CN=92a501d9682d230d2d55898b35e0e6b79853c5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a2:53:24:c7:b2:fd:39:02:48:38:17:87:3f:
                    cc:0b:be:31:5e:db:d4:c5:17:c1:9f:99:80:f8:eb:
                    9e:2c:5b:64:e6:39:7c:bd:97:ee:be:2b:6b:d7:f8:
                    3e:6f:73:58:1c:98:5e:4c:7e:fb:f4:fd:5d:30:c6:
                    80:6c:ee:e7:dc:34:95:8b:e3:d3:19:45:0d:cd:cc:
                    aa:77:1e:de:eb:eb:01:55:3d:20:d6:b9:8c:64:91:
                    73:59:64:ca:45:4c:0c:22:b4:a1:ef:60:b2:60:a7:
                    e5:cf:22:cc:f2:d5:ee:ca:25:b9:57:de:80:71:af:
                    42:10:fb:44:d0:5f:f3:4d:81:b3:8c:6b:b8:95:1e:
                    42:2e:59:bf:4b:33:15:99:72:8a:c9:c6:11:7c:fa:
                    a7:16:15:26:36:21:80:e5:42:c5:73:b9:19:91:bb:
                    5b:2a:a7:fe:ff:b4:6c:6a:23:f0:1f:67:0a:12:9a:
                    e4:45:82:b2:ea:0a:4e:40:0a:54:58:69:cc:cf:b0:
                    02:1a:a4:89:18:96:5e:2b:b4:13:0c:3f:a8:9f:50:
                    c6:8c:a9:c9:1e:02:df:ce:60:25:2a:6b:8b:1a:07:
                    24:63:cf:f0:80:52:dd:6d:54:51:11:fb:27:03:47:
                    55:b8:a8:66:fc:ef:49:d0:ec:e2:29:8f:7b:09:bd:
                    03:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0C:78:74:33:1C:7D:6E:BF:C9:FF:83:2A:32:C0:D4:71:23:3E:1D
            X509v3 Authority Key Identifier:
                keyid:0E:AF:EA:93:3B:30:D4:7F:74:93:FD:41:6C:EE:45:60:0D:D1:DB:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d08412c92e8d5501e7998fc5a31502fa8932a9e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58d3d163-a739-40b5-9b27-f1b47377cdbd/92a501d9682d230d2d55898b35e0e6b79853c5b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58d3d163-a739-40b5-9b27-f1b47377cdbd/8d08412c92e8d5501e7998fc5a31502fa8932a9e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:2800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:82:9d:48:64:6b:0e:45:1a:1f:74:b2:e1:93:d8:89:21:ff:
         35:89:cb:7e:e3:b1:0a:96:09:72:47:b1:8c:b5:1a:bc:6c:02:
         89:d4:90:c6:17:ea:7d:50:14:31:13:56:41:9e:25:2c:3d:79:
         56:44:4e:42:15:52:bc:71:8b:83:1c:85:22:68:aa:fb:c6:1f:
         48:9d:db:8c:79:c8:c8:53:66:f8:a7:6d:51:3f:b1:70:ec:2c:
         51:ca:98:ba:25:df:f0:de:2d:2d:50:11:ca:72:4c:b7:a3:ff:
         0f:d2:58:51:42:be:7d:9d:6e:91:64:ec:cf:26:53:c3:6d:67:
         25:2a:97:f5:ae:8c:39:77:70:d4:92:ce:b3:03:3a:af:e9:c4:
         c9:ea:8c:7a:48:41:d9:35:2e:57:68:c5:5e:d3:f8:4d:d9:93:
         83:38:bc:d5:86:7f:59:36:2c:12:31:72:21:92:81:b8:60:44:
         99:8a:fc:95:e5:a6:41:9f:b9:e7:a5:f0:13:5c:39:37:eb:58:
         8f:29:f9:be:7a:8f:e5:0d:5d:b2:57:e2:fb:8e:01:56:34:5a:
         bd:b7:1d:78:36:b6:6c:a4:29:7c:c4:50:e1:fa:0e:7c:73:28:
         4b:67:93:74:9e:20:dd:76:86:5e:0a:ad:ab:27:8f:b0:53:cb:
         80:2b:5c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----