Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/c2838271a373c062b1b467a4f7a08b7a9a2844bb.roa
File:                     c2838271a373c062b1b467a4f7a08b7a9a2844bb.roa (raw, json)
Hash identifier:          eoxBnk8AYrvW/WFuNzLKTdk0OHFcDbu8ibZ4Njq2JW0=
Subject key identifier:   2B:A8:69:2D:C6:42:9F:C7:75:ED:A4:38:2A:61:41:36:96:BB:7A:CF
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       0D152D
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/c2838271a373c062b1b467a4f7a08b7a9a2844bb.roa
Signing time:             Wed 24 Mar 2021 14:29:20 +0000
ROA not before:           Wed 24 Mar 2021 14:29:18 +0000
ROA not after:            Tue 24 Mar 2026 14:29:18 +0000
asID:                     64105
IP address blocks:        138.204.252.0/24 maxlen: 24
                          2001:13c7:601e::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857389 (0xd152d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Mar 24 14:29:18 2021 GMT
            Not After : Mar 24 14:29:18 2026 GMT
        Subject: CN=c2838271a373c062b1b467a4f7a08b7a9a2844bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:cd:58:04:17:fd:fc:6e:0c:15:20:94:56:
                    05:24:29:95:76:b4:e7:0b:ad:25:b8:05:11:f9:2b:
                    d6:a0:2d:78:56:25:36:c0:dd:b3:07:db:63:24:8b:
                    38:cd:9d:31:da:56:4d:13:1c:07:05:c2:67:38:3c:
                    ff:fe:4f:00:0e:06:ac:25:64:05:69:2d:29:fe:28:
                    02:3b:72:28:06:8b:44:71:db:35:71:eb:41:12:1f:
                    51:70:76:a4:11:91:9f:6f:7a:cf:a3:88:54:4c:bc:
                    00:52:c0:fc:df:8e:f2:e2:1c:2d:4d:00:ac:d4:be:
                    56:71:1f:67:b8:9d:74:bb:8f:d8:04:c2:0e:c9:b4:
                    7c:c0:57:fb:93:41:a4:46:a4:49:d1:b9:ac:6f:67:
                    53:95:49:a0:a0:13:3f:35:f7:df:6f:b0:89:6e:99:
                    1c:ba:1d:61:7d:fd:26:9a:b9:c6:a5:7b:a8:07:3c:
                    ab:ba:75:e2:1c:69:23:84:8d:07:a8:9f:ac:16:86:
                    c6:a2:f5:fe:0f:4c:38:e2:01:f7:34:fa:8a:c0:c3:
                    cf:63:05:3a:4b:01:95:6c:98:3c:cb:ea:83:37:f3:
                    77:32:50:23:e2:a4:07:ea:7c:7c:20:f7:9c:5a:f0:
                    5a:ce:e9:73:1e:1e:2f:95:e7:30:6f:aa:05:dd:04:
                    1a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A8:69:2D:C6:42:9F:C7:75:ED:A4:38:2A:61:41:36:96:BB:7A:CF
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/c2838271a373c062b1b467a4f7a08b7a9a2844bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.252.0/24
                IPv6:
                  2001:13c7:601e::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:9b:24:94:49:43:71:94:d0:13:5e:f2:ab:0f:2d:1b:b7:d4:
         3c:e3:a4:43:54:fd:92:b8:23:42:02:6c:4e:a6:f7:19:ff:e8:
         aa:7f:26:46:b1:a9:4c:3f:1d:e9:b8:13:68:5f:52:9c:04:02:
         c7:69:1d:f2:4e:51:c8:67:cf:28:6a:99:f7:35:74:2d:24:68:
         bf:4e:87:1b:70:7b:aa:53:87:e0:80:b2:6f:de:bd:55:b7:34:
         21:c5:b8:74:6f:e1:eb:21:d6:26:dc:91:d3:0e:f3:14:67:44:
         9f:73:bf:ca:32:45:91:23:57:9d:92:82:6e:69:a2:89:05:8e:
         98:90:0c:83:5a:13:ba:d6:8d:90:95:e0:f7:53:5b:00:7b:d2:
         33:b5:90:05:c9:3d:92:e4:65:68:43:55:0c:80:78:7a:b2:12:
         a2:56:0b:1e:2a:de:83:db:66:de:f1:1e:4f:ee:8c:4d:ce:37:
         ac:da:33:91:7e:2f:e7:44:b5:ad:dc:c1:48:1b:45:58:ec:e4:
         7d:24:7a:94:5f:77:e2:ec:7e:8a:e4:2a:ba:8d:04:4f:3e:84:
         7f:69:50:bf:4f:d5:bb:5d:d4:42:14:36:df:1b:de:94:9c:a5:
         67:2b:13:56:94:23:62:45:c9:14:79:5d:8d:5b:91:f2:dc:4e:
         a2:9c:ac:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----