Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/0e6b0c419af5c451ae142914413beb2b8d8703d7.roa
File:                     0e6b0c419af5c451ae142914413beb2b8d8703d7.roa (raw, json)
Hash identifier:          40ISQiFhAZVmuVtqnMIBAj/7FNgcpbImeIUDPnAbmlE=
Subject key identifier:   A0:EB:75:F1:2E:60:E0:34:FF:47:5E:62:08:E3:7B:E9:6F:3E:57:5F
Certificate issuer:       /CN=1c011c49ef045ef0e106ad87280aa70643378a03
Certificate serial:       04745C
Authority key identifier: 75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/0e6b0c419af5c451ae142914413beb2b8d8703d7.roa
Signing time:             Wed 24 Mar 2021 14:34:47 +0000
ROA not before:           Wed 24 Mar 2021 14:34:47 +0000
ROA not after:            Tue 24 Mar 2026 14:34:47 +0000
asID:                     270035
IP address blocks:        190.108.76.0/24 maxlen: 26

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291932 (0x4745c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c011c49ef045ef0e106ad87280aa70643378a03
        Validity
            Not Before: Mar 24 14:34:47 2021 GMT
            Not After : Mar 24 14:34:47 2026 GMT
        Subject: CN=0e6b0c419af5c451ae142914413beb2b8d8703d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fc:d0:52:dd:c6:2b:21:2c:12:cd:2c:e1:4b:
                    80:b6:47:34:2f:ba:50:fb:78:64:cd:7a:d1:6c:be:
                    1a:36:50:bb:e3:fb:84:8e:9a:c0:09:d9:4a:ee:b8:
                    1e:e8:24:ed:ba:92:c6:d1:13:77:0e:0f:b1:f4:ae:
                    6c:e7:94:52:4d:54:4a:ee:81:ff:df:6b:dd:81:1a:
                    86:50:aa:34:21:b9:90:bc:ed:31:15:b0:5d:83:a5:
                    3a:6a:5e:1d:60:8f:e7:a5:46:8c:74:67:d9:0a:a0:
                    53:0c:55:6a:3e:c6:61:42:ab:e6:4d:8b:e5:55:da:
                    76:e7:71:80:78:25:50:30:80:08:89:4a:c6:e0:24:
                    57:aa:44:a0:c0:57:1b:0c:5f:14:a1:4b:31:d3:42:
                    4e:66:b2:4b:e2:40:d5:25:68:00:95:f4:1e:66:d1:
                    29:de:47:0a:fd:86:67:b0:c3:14:0e:01:01:20:55:
                    b1:64:ec:82:c8:5d:f2:67:34:3c:ab:d7:de:c1:8e:
                    0e:52:7c:a0:38:7a:d8:06:ab:c9:14:1c:8b:ef:61:
                    17:3d:e0:5f:94:c0:47:62:af:76:61:40:2d:48:c1:
                    15:b2:e6:03:9b:3a:9d:e7:92:dc:09:5f:10:8b:30:
                    21:29:38:eb:c3:53:0c:2c:c5:cd:58:53:af:29:a6:
                    0a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EB:75:F1:2E:60:E0:34:FF:47:5E:62:08:E3:7B:E9:6F:3E:57:5F
            X509v3 Authority Key Identifier:
                keyid:75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/0e6b0c419af5c451ae142914413beb2b8d8703d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c011c49ef045ef0e106ad87280aa70643378a03.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:a6:4d:1c:de:c3:05:96:a6:6e:be:8b:ee:73:2a:49:b9:ec:
         bb:78:1b:2b:27:e0:62:2c:d9:e4:ef:fa:6d:4a:20:8f:0a:e6:
         77:db:35:ed:d1:03:f5:30:27:15:df:73:4a:03:ee:f2:8f:5f:
         12:2a:cf:e3:0c:54:34:bd:d9:7a:15:35:d1:73:72:0b:62:0f:
         91:ec:3f:c2:75:e1:39:7b:64:1e:29:69:28:f1:fd:f0:45:a7:
         40:f3:64:a5:31:86:3c:1d:6f:ff:d7:ab:7a:5d:b2:b0:fc:19:
         8a:86:21:9a:f0:4d:d7:e3:64:b3:ba:f8:4e:c9:52:61:d4:a2:
         da:c4:ac:8d:af:39:03:45:a0:3a:ce:34:24:da:a1:68:21:db:
         f6:08:f9:78:99:f0:d2:e9:42:e4:06:1a:5e:ab:b2:93:d8:09:
         a8:84:2b:c6:36:79:a5:e7:94:dd:fc:b1:b9:b6:9a:70:da:9e:
         f5:de:67:6e:22:a8:40:3f:5a:29:aa:30:a6:c9:a3:a1:d0:44:
         e5:2a:5e:a2:96:44:9e:6c:c3:27:bb:70:da:e5:4a:cc:cf:2c:
         b2:b9:1f:68:98:37:36:81:01:90:41:dc:6c:5d:38:32:3c:42:
         ff:88:55:91:e9:f2:5b:76:05:09:4a:10:3d:25:62:7e:dc:6b:
         44:d5:49:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----