Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/cfd4ddda5f0e9a11294940fe0a2d1959eb7a8cfa.roa
File:                     cfd4ddda5f0e9a11294940fe0a2d1959eb7a8cfa.roa (raw, json)
Hash identifier:          NeN2eWXiDFQLcpZbY4XXutB1V2SY51xeU3ND+RslTy4=
Subject key identifier:   90:CC:0B:B9:66:67:BB:9D:C3:72:57:C1:6C:09:F3:57:CA:93:61:81
Certificate issuer:       /CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
Certificate serial:       10E43B
Authority key identifier: A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/cfd4ddda5f0e9a11294940fe0a2d1959eb7a8cfa.roa
Signing time:             Thu 12 Aug 2021 21:22:48 +0000
ROA not before:           Thu 12 Aug 2021 03:00:00 +0000
ROA not after:            Sat 12 Aug 2023 03:00:00 +0000
asID:                     52362
IP address blocks:        181.174.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107003 (0x10e43b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
        Validity
            Not Before: Aug 12 03:00:00 2021 GMT
            Not After : Aug 12 03:00:00 2023 GMT
        Subject: CN=cfd4ddda5f0e9a11294940fe0a2d1959eb7a8cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:70:7d:53:e4:0b:88:47:5d:33:9d:18:9e:46:
                    08:34:88:0c:7a:1e:65:43:2a:05:9b:ea:1f:95:8f:
                    37:4c:c7:a2:ff:5a:58:a4:0b:21:23:42:c5:40:a1:
                    23:d5:d6:cd:cc:6f:00:39:7a:32:36:a5:8e:9e:b7:
                    41:08:9c:58:2f:f0:63:aa:dc:bb:cb:3d:7d:f0:00:
                    ea:9e:a7:46:31:bf:b4:80:25:fd:b0:3c:0a:21:dc:
                    3a:82:f6:af:78:6b:e3:09:65:b9:20:c5:57:4e:6d:
                    00:4c:ed:45:56:37:13:ab:e1:96:70:7d:51:0b:db:
                    d0:80:c5:64:a1:d9:6a:aa:40:f5:2a:9e:4a:70:a3:
                    42:51:dd:d4:9b:57:ea:4b:99:33:3f:df:61:70:62:
                    fa:49:66:ab:b0:0e:45:6a:ba:b5:a8:c8:db:31:19:
                    11:ed:56:e3:81:07:b7:f7:39:01:c9:34:71:74:5a:
                    74:62:4f:c3:6b:06:64:88:c3:00:a8:b0:e9:92:9c:
                    7f:22:3a:d2:8f:8d:cb:81:7b:16:2d:ec:ba:c5:f3:
                    b0:b3:51:42:44:5d:80:72:4b:b5:a0:2a:27:5c:a7:
                    c7:42:33:60:40:6d:97:62:f0:d5:79:6f:f9:4d:6a:
                    29:ec:34:91:dd:33:43:bb:57:b0:80:21:6e:67:51:
                    ce:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CC:0B:B9:66:67:BB:9D:C3:72:57:C1:6C:09:F3:57:CA:93:61:81
            X509v3 Authority Key Identifier:
                keyid:A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/cfd4ddda5f0e9a11294940fe0a2d1959eb7a8cfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/b12012502b7ca3b0da125f250315dfe19bfb18d5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:18:b2:bd:43:2d:1c:c8:ad:3a:1f:bf:7b:bc:11:0c:26:90:
         59:6b:60:0b:90:76:4f:4b:f2:47:94:ee:3d:2e:a0:08:23:93:
         69:32:ff:68:7e:33:c7:9b:dc:73:d2:0c:90:14:1e:d9:20:3b:
         cc:11:92:c8:7f:fc:f3:1a:5f:0f:d6:54:d1:77:27:28:72:b0:
         80:44:77:f8:7a:d4:4f:3e:a4:f6:08:36:89:eb:d4:be:f7:49:
         c8:4f:55:31:e4:de:a6:5f:3c:40:d2:e3:44:47:df:83:31:06:
         0e:40:86:a9:06:bb:a3:f3:ba:39:c7:1e:ff:43:b4:35:13:a5:
         02:08:7a:cb:98:5d:69:82:a0:3e:25:80:96:4e:30:fb:50:c7:
         8c:9a:7a:bb:54:1f:47:d5:c2:5f:65:e7:33:ba:a0:4e:ff:17:
         e2:b1:ea:99:65:ba:49:36:04:59:88:34:75:56:e7:2c:9c:a3:
         78:05:51:37:37:c5:3b:0f:b4:93:4c:1a:ee:5d:48:fd:6d:e7:
         20:28:f1:49:98:71:60:d1:9d:31:d8:d5:f4:de:ae:30:47:bf:
         7e:0b:d0:f6:9f:8c:ef:fd:98:98:9f:09:d3:80:3f:63:49:6c:
         0e:3f:5d:5f:79:99:d5:cc:d7:f8:7d:7f:6a:bc:7e:bd:c1:b6:
         9c:dc:6f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----