Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/5025c13b1b995246a78901c24246c28d68bed14d.roa
File:                     5025c13b1b995246a78901c24246c28d68bed14d.roa (raw, json)
Hash identifier:          OoXwKTjrsMUgsZ0G51dDyp1cxpOI118TivIAMjf8lbg=
Subject key identifier:   4D:C9:6D:9B:AB:6A:3B:FD:7B:AE:C2:A1:3B:EC:FC:86:84:C7:D9:F8
Certificate issuer:       /CN=5d6739fb330fec46825943b9c33eaee7782d7827
Certificate serial:       1468E6
Authority key identifier: 4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/5025c13b1b995246a78901c24246c28d68bed14d.roa
Signing time:             Tue 11 Jan 2022 00:28:47 +0000
ROA not before:           Thu 16 Sep 2021 03:00:00 +0000
ROA not after:            Sat 16 Sep 2023 03:00:00 +0000
asID:                     27951
IP address blocks:        179.42.172.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1337574 (0x1468e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6739fb330fec46825943b9c33eaee7782d7827
        Validity
            Not Before: Sep 16 03:00:00 2021 GMT
            Not After : Sep 16 03:00:00 2023 GMT
        Subject: CN=5025c13b1b995246a78901c24246c28d68bed14d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:25:d7:b6:ab:75:29:e6:02:a4:da:3b:f3:08:
                    5b:51:2f:99:41:3b:24:0f:f0:b8:7f:47:81:9b:c8:
                    6e:77:2b:39:1f:b8:29:2b:16:4d:08:41:37:6e:fd:
                    06:92:2e:b8:0c:72:8f:34:19:cc:7e:c0:28:89:6e:
                    f0:98:13:cc:8e:13:a3:d0:f1:ca:5b:d3:cb:94:f8:
                    7d:29:b0:fc:51:58:38:62:54:3a:2d:51:b4:45:95:
                    01:c2:51:bf:2c:65:e6:35:04:24:4d:84:21:61:07:
                    c2:81:17:17:7c:73:c4:35:bf:87:00:3b:66:dc:89:
                    59:83:3e:4f:a5:80:32:cd:15:25:13:99:0c:c6:d1:
                    b6:74:ee:bf:1c:82:fe:d0:83:e1:9d:f3:70:11:a0:
                    c5:33:aa:68:bf:d9:ff:1b:70:e3:e4:e2:d5:6d:3c:
                    06:c9:f5:6d:9d:0f:e5:b2:7c:cd:cf:78:94:d3:d0:
                    ac:0b:9b:1d:a4:49:64:92:c0:f6:aa:af:c9:0c:d4:
                    38:df:75:f4:75:19:87:d3:dc:cc:83:7e:f1:3b:ad:
                    0f:36:77:50:d2:0b:d1:77:67:2f:62:3a:ab:0d:82:
                    a9:f6:4f:29:cc:79:fd:d4:14:35:f9:ec:16:50:7c:
                    d7:4f:72:91:4b:3f:51:03:25:98:21:41:7f:66:a3:
                    0e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C9:6D:9B:AB:6A:3B:FD:7B:AE:C2:A1:3B:EC:FC:86:84:C7:D9:F8
            X509v3 Authority Key Identifier:
                keyid:4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/5025c13b1b995246a78901c24246c28d68bed14d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/5d6739fb330fec46825943b9c33eaee7782d7827.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:bb:cd:9a:a3:d6:77:bd:10:0e:76:d9:4d:7e:d1:44:8a:55:
         8a:6c:cf:04:b6:da:f0:ae:25:8f:30:20:f0:9e:40:cf:ed:57:
         25:60:c9:45:4a:a0:14:55:06:bf:1c:26:23:64:2a:c6:55:08:
         93:7b:f0:82:79:20:85:1e:8a:a3:d3:9e:dc:04:97:24:16:a6:
         1a:ef:50:16:55:d5:10:74:a6:9b:38:97:3f:e2:9c:0f:99:79:
         3a:a1:78:60:26:89:e5:24:6f:06:f9:76:c2:cc:2a:55:0a:b0:
         29:8d:81:25:8d:fc:9c:e0:fe:17:79:cd:c5:17:c6:53:35:e6:
         3f:48:6b:a3:80:e4:29:16:72:c3:44:62:9a:04:bc:1c:12:d1:
         fb:12:a3:f1:22:18:55:9f:a4:40:d3:21:8f:7d:52:12:46:0d:
         42:d1:40:13:c4:c2:aa:06:39:9b:cd:33:71:12:af:28:c3:e5:
         32:3f:97:b6:22:ee:01:ed:5c:7b:a4:5f:e0:c9:9b:03:4f:27:
         4a:e8:6b:20:a4:d2:0b:ec:d6:d0:9a:f3:2f:3a:2e:47:71:58:
         72:d9:c4:d2:ea:4a:ae:76:e6:17:ae:26:c7:ba:6f:32:3e:1b:
         e5:03:03:3f:74:2b:12:13:cf:8f:45:06:81:4a:f5:06:87:93:
         58:c0:e3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----