Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/ee16cb4c8a65dd707bba97a4b2d9a7a52705f79e.roa
File:                     ee16cb4c8a65dd707bba97a4b2d9a7a52705f79e.roa (raw, json)
Hash identifier:          YiBEOloLj0abcZhzLeXKasA3WyVdSMkLW4IDu8Pbk7I=
Subject key identifier:   72:B2:7D:64:D1:DF:BD:BD:73:69:8D:0E:0D:71:D8:EC:C2:75:24:D1
Certificate issuer:       /CN=73d66d1924e1166622ad12a1caea078bb4879ad0
Certificate serial:       0440F7
Authority key identifier: B4:AD:F4:8F:86:F1:31:10:20:F8:90:1E:AA:4F:EB:F5:7C:75:8E:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73d66d1924e1166622ad12a1caea078bb4879ad0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/ee16cb4c8a65dd707bba97a4b2d9a7a52705f79e.roa
Signing time:             Wed 24 Mar 2021 14:28:54 +0000
ROA not before:           Wed 24 Mar 2021 14:28:54 +0000
ROA not after:            Tue 24 Mar 2026 14:28:54 +0000
asID:                     264771
IP address blocks:        168.196.156.0/22 maxlen: 22
                          2803:30c0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sat 13 Apr 2024 21:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278775 (0x440f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d66d1924e1166622ad12a1caea078bb4879ad0
        Validity
            Not Before: Mar 24 14:28:54 2021 GMT
            Not After : Mar 24 14:28:54 2026 GMT
        Subject: CN=ee16cb4c8a65dd707bba97a4b2d9a7a52705f79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:52:2e:10:2f:37:dd:35:8e:8d:73:fc:3c:e5:
                    d0:2b:32:2d:e8:5a:83:d5:27:33:7e:db:3c:9d:cb:
                    9e:c1:c9:95:4c:0c:d9:56:14:b9:f8:c1:ee:7e:11:
                    17:33:e5:6f:c2:06:09:f7:5d:98:47:59:e7:a7:da:
                    29:b5:79:2e:3f:7e:9c:f6:0b:2b:ce:37:4f:9b:47:
                    98:b5:df:ed:cb:76:b6:e1:93:29:f5:cc:28:19:a4:
                    7e:bf:72:14:64:26:05:0c:51:2b:22:93:6e:87:70:
                    34:ac:b7:ce:6d:68:b1:a7:e1:24:51:95:6e:d2:b7:
                    ce:40:ff:47:d7:72:d1:f3:3d:aa:6b:9a:e8:12:a7:
                    a6:60:f7:74:49:8c:58:92:6c:e8:f2:2a:90:ba:30:
                    93:fe:ab:cc:1a:62:f4:9b:9f:6a:3d:45:22:e2:c2:
                    23:28:31:8d:e1:8e:6b:d3:78:f4:92:91:2e:2c:fa:
                    62:16:6e:15:97:5e:da:31:91:9c:2c:f9:d4:65:70:
                    33:4e:2e:ad:c4:df:97:d3:bf:2d:b0:5f:fc:1b:ff:
                    7d:e4:80:72:c0:ef:4c:0e:13:ca:9e:81:f7:52:04:
                    a2:a0:e1:e9:16:4c:40:38:e1:68:a0:87:9b:c8:d0:
                    b5:98:bb:48:74:d7:82:08:6b:6d:f4:ee:ac:2a:3d:
                    9b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B2:7D:64:D1:DF:BD:BD:73:69:8D:0E:0D:71:D8:EC:C2:75:24:D1
            X509v3 Authority Key Identifier:
                keyid:B4:AD:F4:8F:86:F1:31:10:20:F8:90:1E:AA:4F:EB:F5:7C:75:8E:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73d66d1924e1166622ad12a1caea078bb4879ad0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/ee16cb4c8a65dd707bba97a4b2d9a7a52705f79e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/73d66d1924e1166622ad12a1caea078bb4879ad0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.156.0/22
                IPv6:
                  2803:30c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:50:32:db:1a:56:13:37:ce:f4:9c:e2:80:1e:ee:c8:3b:cc:
         d5:31:4d:dc:ca:0e:39:c0:66:d1:d9:fd:fc:5a:96:40:e9:7f:
         ec:1a:73:53:0a:ea:7a:32:4e:4c:21:bb:72:a4:29:a1:fa:d8:
         cb:b3:a8:c1:44:aa:ee:2a:19:55:dc:65:09:26:97:28:60:f3:
         80:90:33:f5:21:57:c9:20:e5:51:a6:0b:47:30:b4:7d:e9:ca:
         68:10:97:af:a0:4c:c7:b9:3b:5d:71:ed:cb:d2:1c:55:08:52:
         d1:db:d0:cc:62:b2:14:af:32:0f:ee:07:ee:2d:c4:9e:4f:f9:
         82:2a:20:29:06:9c:54:c8:94:c8:20:27:e7:b4:50:2a:02:5f:
         0e:31:68:c0:05:71:82:b8:ce:cf:cc:85:2f:1f:48:63:96:b9:
         ca:cc:12:74:3a:10:18:fe:84:2e:c8:1f:a7:de:0a:07:b0:fe:
         9b:a5:12:85:f9:fb:72:ac:2c:af:68:a9:3e:cb:5d:bd:bf:91:
         01:3a:05:95:59:1f:04:cd:92:fb:87:de:b9:f1:0f:1f:59:9e:
         85:ad:91:7c:c2:64:4d:87:50:ae:16:3e:92:08:aa:81:d5:98:
         3b:f8:8e:14:39:2b:e8:d4:90:74:a2:50:4f:5e:7e:c1:b9:b4:
         84:98:a6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----