Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a8328fa-7639-42a5-af2b-42bd3b4ef5fa/c0fd7f3f87f4e2e4a5f1af8f6d57fd04a6786c83.roa
File:                     c0fd7f3f87f4e2e4a5f1af8f6d57fd04a6786c83.roa (raw, json)
Hash identifier:          40cT6vCLs40QyVnh+00YrAYOwnLxUoehCMUcqCGKgQU=
Subject key identifier:   9B:0E:F8:35:76:A3:7D:D5:39:D8:22:3C:9C:01:E6:A9:35:A4:FB:BF
Certificate issuer:       /CN=f1e750e661607322fb98ea988d7624f49cbc68cb
Certificate serial:       0CD109
Authority key identifier: F8:B0:D5:31:73:34:5B:2F:37:5D:D4:B4:27:59:C7:B4:BD:4E:BC:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1e750e661607322fb98ea988d7624f49cbc68cb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a8328fa-7639-42a5-af2b-42bd3b4ef5fa/c0fd7f3f87f4e2e4a5f1af8f6d57fd04a6786c83.roa
Signing time:             Wed 24 Mar 2021 14:41:36 +0000
ROA not before:           Wed 24 Mar 2021 14:41:34 +0000
ROA not after:            Tue 24 Mar 2026 14:41:34 +0000
asID:                     21351
IP address blocks:        161.22.64.0/18 maxlen: 18
                          2803:1680:3000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 839945 (0xcd109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1e750e661607322fb98ea988d7624f49cbc68cb
        Validity
            Not Before: Mar 24 14:41:34 2021 GMT
            Not After : Mar 24 14:41:34 2026 GMT
        Subject: CN=c0fd7f3f87f4e2e4a5f1af8f6d57fd04a6786c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2b:38:16:cd:25:cb:03:ea:2b:c9:90:20:9b:
                    25:8b:89:11:86:a6:0b:98:1b:1f:e8:54:7f:5b:2b:
                    e7:d8:c2:7c:45:b9:87:a1:71:81:b2:2c:69:8f:75:
                    15:03:0d:75:c6:5f:64:22:d9:18:00:af:40:7d:c5:
                    0d:6a:f6:27:47:ce:82:80:b9:f2:c0:c6:4d:1d:b0:
                    d1:f0:2b:cb:42:61:b3:a9:42:8c:fc:a6:6d:74:ca:
                    36:4b:4e:72:3e:35:fb:d9:40:81:e4:54:31:e7:84:
                    c3:33:5c:5a:bd:ef:75:9c:e0:63:56:9c:15:3a:f0:
                    8a:d2:ef:f0:2a:56:aa:90:58:f3:1e:a8:f5:4d:8b:
                    36:ab:88:c5:3e:55:93:47:6d:1c:e7:16:b4:40:32:
                    9e:61:aa:9b:38:bc:40:e7:ca:3d:0a:7f:45:15:9d:
                    58:6a:44:10:91:06:c4:c4:47:4c:e5:ef:0f:7d:03:
                    dd:14:23:a9:fa:58:6e:e9:62:3f:42:d5:3e:9c:b8:
                    80:96:31:91:93:cd:11:1a:05:a2:c4:aa:8a:bf:b8:
                    c8:58:dc:7b:b7:4c:82:4f:08:fc:13:b4:57:c2:38:
                    8b:fb:fd:0c:6e:41:63:48:7d:d7:e5:75:20:d7:c0:
                    1f:6a:ee:be:00:76:c0:60:c1:5b:e4:38:c9:8d:36:
                    5d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0E:F8:35:76:A3:7D:D5:39:D8:22:3C:9C:01:E6:A9:35:A4:FB:BF
            X509v3 Authority Key Identifier:
                keyid:F8:B0:D5:31:73:34:5B:2F:37:5D:D4:B4:27:59:C7:B4:BD:4E:BC:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1e750e661607322fb98ea988d7624f49cbc68cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a8328fa-7639-42a5-af2b-42bd3b4ef5fa/c0fd7f3f87f4e2e4a5f1af8f6d57fd04a6786c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a8328fa-7639-42a5-af2b-42bd3b4ef5fa/f1e750e661607322fb98ea988d7624f49cbc68cb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.64.0/18
                IPv6:
                  2803:1680:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         50:03:69:90:66:40:d6:19:ab:6d:f4:0f:f7:63:2b:4d:1f:19:
         6c:29:9a:ea:44:22:47:82:bb:84:0f:0a:c3:a9:dc:d8:75:b7:
         5d:05:3c:31:6b:41:ad:8c:2e:de:62:18:e7:d5:0a:a9:33:c8:
         80:91:5b:81:fd:43:98:ed:34:12:a1:10:d3:7d:0e:de:c8:2b:
         df:6f:1b:58:7d:38:b3:a9:f3:66:ac:27:91:f2:cd:22:46:fe:
         ec:1d:d3:62:b8:f5:5c:e5:c3:70:58:57:82:81:69:7a:b0:09:
         63:ab:0f:2e:a7:fe:82:d3:7a:eb:f3:fe:47:96:c5:50:47:55:
         34:cb:09:01:0b:f5:42:3e:3b:4a:89:fc:26:32:41:81:7a:d1:
         2f:ae:26:51:9e:9a:26:ba:a8:91:1c:01:12:e0:64:84:2d:1b:
         51:7f:2a:c4:3e:f2:01:7c:47:a4:1e:ea:50:22:f3:ed:55:a1:
         00:3c:24:04:63:66:8a:a1:13:34:e0:17:aa:b0:68:c6:f5:f2:
         8c:3a:d4:36:37:ea:7c:1c:4c:73:5d:01:e3:15:d6:0f:3f:f1:
         71:75:b7:92:b8:4c:4e:56:89:2a:38:0e:55:40:29:43:64:dc:
         c1:1e:94:00:6b:d5:33:f3:cd:91:87:d6:7d:cb:ac:bb:52:26:
         62:34:97:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----