Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/cbbbe5b60083b6eb90f391062cd6c092c0f35074.roa
File:                     cbbbe5b60083b6eb90f391062cd6c092c0f35074.roa (raw, json)
Hash identifier:          q71GRNPBv5Z70JtC7uc7TVLY/faK6mxlhGD7ZnMTp3Q=
Subject key identifier:   29:2A:61:D7:2F:E6:5C:CD:07:35:E9:70:AC:A4:29:5C:44:31:12:7E
Certificate issuer:       /CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
Certificate serial:       0ABD6D
Authority key identifier: B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/cbbbe5b60083b6eb90f391062cd6c092c0f35074.roa
Signing time:             Wed 24 Mar 2021 14:35:38 +0000
ROA not before:           Wed 24 Mar 2021 14:35:37 +0000
ROA not after:            Tue 24 Mar 2026 14:35:37 +0000
asID:                     27951
IP address blocks:        201.131.88.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 703853 (0xabd6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
        Validity
            Not Before: Mar 24 14:35:37 2021 GMT
            Not After : Mar 24 14:35:37 2026 GMT
        Subject: CN=cbbbe5b60083b6eb90f391062cd6c092c0f35074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c1:35:36:c9:92:df:ed:83:d1:26:6f:93:e5:
                    91:33:b2:dd:8a:e6:61:c1:5e:82:69:72:57:d9:e5:
                    a0:d8:7e:16:a5:8c:80:da:a6:d0:dd:5a:83:17:0b:
                    ae:9e:40:39:f4:40:74:0d:4e:df:1a:46:06:0c:ee:
                    2f:3e:fa:92:f3:76:93:cb:44:1f:db:f9:c0:1e:e0:
                    13:b4:11:71:5c:80:cf:04:91:30:83:3a:0e:31:09:
                    8b:51:16:8d:b4:63:e1:34:f6:08:ab:a4:49:0b:db:
                    81:11:ec:33:01:9c:ed:5e:df:4e:e7:cf:b8:9f:9a:
                    86:88:e3:4d:d2:01:dc:90:f4:94:ea:43:d1:a9:e6:
                    43:63:3b:62:c3:b4:85:a5:a2:a9:96:24:86:85:a7:
                    36:34:c6:42:78:11:b8:39:47:74:a0:f0:51:a4:08:
                    4d:15:bb:cb:76:02:d1:e1:5e:29:92:0e:10:74:5e:
                    7f:22:69:66:03:df:80:05:3c:35:bf:14:56:d3:9a:
                    fc:f2:18:e5:6b:6e:f4:45:c1:89:d6:b3:c1:12:b6:
                    e9:b2:07:db:ff:93:11:b9:17:ef:d9:25:e4:76:b9:
                    6d:e5:7a:96:5f:a2:b3:84:27:76:62:6a:15:0e:ba:
                    8f:67:7d:39:be:0c:b7:98:24:dc:5c:47:86:05:ae:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2A:61:D7:2F:E6:5C:CD:07:35:E9:70:AC:A4:29:5C:44:31:12:7E
            X509v3 Authority Key Identifier:
                keyid:B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/cbbbe5b60083b6eb90f391062cd6c092c0f35074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/71dea23d89f89e25e8692a6c0b1c413e909da1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:98:22:56:1d:b6:53:7f:36:a7:03:78:c0:df:1d:bb:34:c6:
         20:a4:08:63:bb:aa:ba:ad:f5:d9:2f:bc:c3:15:3f:5e:2c:48:
         cb:6c:de:d1:93:15:1e:b1:19:91:5b:96:97:6e:1e:53:04:e2:
         77:d5:9c:86:f7:ea:f6:2a:8d:08:57:27:a5:db:e2:0f:b8:1c:
         ab:31:12:1b:a3:76:1d:2f:16:a1:f3:3d:68:97:07:7e:51:f7:
         93:31:63:6b:2f:98:c1:68:61:99:75:3f:af:65:ab:d8:4c:04:
         58:bc:3f:fc:97:8c:74:4a:ec:b5:58:ae:97:5a:1b:13:e0:81:
         41:9e:c7:80:3f:bb:e5:e9:f2:85:ef:f8:8a:fb:f2:43:66:b3:
         39:f6:e2:b8:99:f8:c9:25:b4:b0:2c:53:63:1d:9d:eb:e7:b7:
         b5:20:87:5c:39:cb:c8:ac:b0:13:e5:3d:0c:d9:05:47:ab:88:
         38:93:c1:67:4d:34:15:b7:38:0f:8e:01:e1:0c:16:30:fe:f0:
         ee:a4:e9:9d:db:b2:16:44:d3:f0:49:a8:04:b2:24:4d:84:71:
         a4:60:c0:4d:7e:74:f1:90:2f:22:48:0e:ff:8c:0b:38:d7:63:
         83:77:e3:c8:0b:41:bf:d6:d3:84:e4:8a:3c:7b:0d:a5:c8:07:
         31:5c:db:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----