Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/5d3515f26bc6fae760acd4ef2944df1bdb97d48d.roa
File:                     5d3515f26bc6fae760acd4ef2944df1bdb97d48d.roa (raw, json)
Hash identifier:          YsdRm9p1LF/Eg//0dZ45d7hjkdRNV8w7oOgJZN9Lzsw=
Subject key identifier:   E5:82:58:6E:C3:CF:B5:A7:14:DC:D4:76:C2:A0:AE:9E:D7:84:6B:57
Certificate issuer:       /CN=1c011c49ef045ef0e106ad87280aa70643378a03
Certificate serial:       04733E
Authority key identifier: 75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/5d3515f26bc6fae760acd4ef2944df1bdb97d48d.roa
Signing time:             Wed 24 Mar 2021 14:34:47 +0000
ROA not before:           Wed 24 Mar 2021 14:34:47 +0000
ROA not after:            Tue 24 Mar 2026 14:34:47 +0000
asID:                     270035
IP address blocks:        190.108.77.0/24 maxlen: 26

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291646 (0x4733e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c011c49ef045ef0e106ad87280aa70643378a03
        Validity
            Not Before: Mar 24 14:34:47 2021 GMT
            Not After : Mar 24 14:34:47 2026 GMT
        Subject: CN=5d3515f26bc6fae760acd4ef2944df1bdb97d48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c6:f2:a7:26:f7:92:6b:d6:eb:34:75:2d:26:
                    a6:f8:72:40:72:94:c8:7d:18:2c:e9:e1:30:fa:e6:
                    ca:66:44:38:bc:d5:1b:6e:05:35:62:ce:a8:8c:28:
                    cc:ff:4e:da:0c:0a:ae:20:4f:9b:ba:a0:bf:ad:55:
                    ca:c6:90:cf:79:b8:55:b4:51:ac:a5:e3:c4:01:df:
                    1b:17:71:72:b0:2f:09:2c:00:be:36:f2:7d:6f:08:
                    3d:ad:fa:ed:70:cf:17:b5:ae:50:cf:42:17:a1:9d:
                    e7:4c:a3:3f:71:71:fe:16:cb:44:e6:d6:2a:fe:bf:
                    da:b3:31:e6:d6:08:85:2c:fb:ae:b4:60:c7:b9:87:
                    7e:68:49:aa:23:4d:fa:09:7b:e6:a9:02:9b:b5:f3:
                    78:c1:1a:82:c4:bf:f6:3a:e9:4e:a0:b6:80:96:4d:
                    f7:26:d5:5c:4e:46:c3:23:82:77:b1:17:79:3a:db:
                    4a:42:a9:85:6d:28:06:94:6b:31:77:35:35:c7:a1:
                    82:ba:2c:9b:1c:7a:2f:9c:a5:37:9f:83:39:22:bf:
                    c0:b0:4e:e5:55:28:ae:10:30:64:9d:07:2e:cd:9f:
                    8c:aa:b7:8e:2d:1b:e4:d8:17:ce:e1:e4:c3:89:61:
                    7c:a5:a3:c6:dd:fd:ff:52:ec:ac:83:36:3c:e2:d5:
                    fd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:82:58:6E:C3:CF:B5:A7:14:DC:D4:76:C2:A0:AE:9E:D7:84:6B:57
            X509v3 Authority Key Identifier:
                keyid:75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/5d3515f26bc6fae760acd4ef2944df1bdb97d48d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c011c49ef045ef0e106ad87280aa70643378a03.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:36:b6:48:f9:95:f0:eb:11:14:3e:fb:1e:08:c3:36:0a:3b:
         29:73:31:76:bf:86:ab:ac:8b:94:41:4a:74:7b:e0:cc:e3:10:
         58:1a:e3:83:60:34:69:1b:72:0c:ea:c3:fb:4d:d3:18:96:d1:
         32:bf:31:b7:69:a8:ce:f7:13:e8:20:22:25:45:11:30:b8:82:
         d5:dc:6c:49:c7:96:0f:3d:5e:31:b5:03:5b:0d:a4:4d:33:01:
         ef:b1:03:93:97:5a:7b:40:ac:d4:54:36:9a:3f:c7:e9:d7:17:
         41:12:81:33:a6:68:90:7c:b3:2a:0c:2f:56:90:4f:58:6d:20:
         48:ef:3f:62:30:70:b1:81:75:cd:a0:46:a5:a8:29:4f:f1:a0:
         77:a2:1c:6b:35:ce:e0:6d:ba:6b:1c:33:ee:1b:8c:bc:a8:a7:
         ef:78:49:1c:4b:60:28:39:03:81:45:04:46:ea:61:07:95:af:
         ef:53:b7:6e:5d:4c:7a:e8:2b:88:ac:e0:c2:e3:77:dc:8d:a6:
         b8:f4:ae:db:ce:3f:2a:8a:d2:ce:46:ba:79:c6:26:ae:31:02:
         56:58:87:96:94:c5:1c:e7:7f:c4:bb:49:8b:50:5d:06:fb:1b:
         aa:52:a1:8b:16:79:40:25:59:ea:fe:17:61:ae:49:c2:43:4e:
         b5:ac:62:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----