Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/da9d007761f6b0d5cc022ad1358f928dc99abd24.roa
File:                     da9d007761f6b0d5cc022ad1358f928dc99abd24.roa (raw, json)
Hash identifier:          /w4L/D352aTNs7soVZNEuH75Dh/QYkDjR0Ea15gkknM=
Subject key identifier:   BB:C5:71:99:67:54:9E:E1:F1:46:76:F8:99:6A:A7:B8:AE:64:03:3A
Certificate issuer:       /CN=ca3e60b9e70de193811d28eb980481081c28545b
Certificate serial:       021D
Authority key identifier: 55:09:B7:31:90:C0:E4:9F:B0:D3:EF:04:90:F2:12:01:31:42:D4:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca3e60b9e70de193811d28eb980481081c28545b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/da9d007761f6b0d5cc022ad1358f928dc99abd24.roa
Signing time:             Sat 12 Mar 2022 11:17:36 +0000
ROA not before:           Sat 12 Mar 2022 03:00:00 +0000
ROA not after:            Tue 12 Mar 2024 03:00:00 +0000
asID:                     272062
IP address blocks:        181.232.156.0/22 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3e60b9e70de193811d28eb980481081c28545b
        Validity
            Not Before: Mar 12 03:00:00 2022 GMT
            Not After : Mar 12 03:00:00 2024 GMT
        Subject: CN=da9d007761f6b0d5cc022ad1358f928dc99abd24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:da:72:ad:ab:17:0c:3d:af:ea:34:d2:0f:1e:
                    04:53:68:ff:f3:cf:50:65:7d:66:e6:6c:8d:6d:8e:
                    e1:b2:d4:18:03:92:eb:bf:a1:03:fd:79:c6:d0:44:
                    3f:45:48:3d:40:cc:3e:e5:73:95:7f:87:a7:26:ce:
                    8e:49:bf:50:18:81:62:93:eb:91:52:79:e7:63:8e:
                    cb:7b:c0:46:4f:18:a3:7e:95:25:c5:98:e1:e2:62:
                    e2:59:fe:2a:ec:21:42:44:ac:80:1c:5a:c1:3a:1e:
                    27:7c:54:9b:1a:b1:10:5d:23:1e:02:b5:39:db:5a:
                    6b:19:16:bc:e4:43:f3:0f:2b:ef:79:02:66:77:08:
                    78:8f:d4:8e:ef:ad:6d:78:ac:18:e1:54:43:e4:8a:
                    1b:23:71:0b:0b:bf:96:53:8d:24:7f:70:6b:47:a3:
                    e2:40:ea:8b:ec:a5:63:4b:bc:26:04:37:ae:a4:bf:
                    db:15:57:cc:a4:d0:62:63:ac:f9:34:16:a6:f0:6c:
                    b1:2c:9b:71:e7:74:6e:8d:fe:ba:f0:ae:dd:b6:7f:
                    92:45:4a:ae:85:66:c9:6a:e2:81:78:2c:e6:39:9c:
                    3e:f2:c8:b6:09:26:85:95:ab:39:d5:fb:22:62:cb:
                    79:2f:13:53:53:8e:59:93:1b:50:d8:e2:fd:b9:0e:
                    03:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C5:71:99:67:54:9E:E1:F1:46:76:F8:99:6A:A7:B8:AE:64:03:3A
            X509v3 Authority Key Identifier:
                keyid:55:09:B7:31:90:C0:E4:9F:B0:D3:EF:04:90:F2:12:01:31:42:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca3e60b9e70de193811d28eb980481081c28545b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/da9d007761f6b0d5cc022ad1358f928dc99abd24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/ca3e60b9e70de193811d28eb980481081c28545b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:b9:58:7b:54:b3:c4:b5:43:04:fc:31:b5:47:3c:74:d8:3a:
         ff:25:48:1f:7f:72:62:51:c2:56:a6:5d:b2:55:16:48:e5:96:
         c8:e1:ab:df:15:33:34:49:e3:da:a9:83:c6:0a:c8:eb:eb:64:
         98:c3:59:a0:b7:0f:8f:e1:67:b3:38:61:8f:a4:f5:35:e0:1f:
         6d:46:fd:49:62:e5:c3:3c:11:e6:d9:f5:3a:ba:b1:7a:0d:88:
         76:4e:e9:5e:22:d5:f4:73:00:85:f0:0c:ac:25:b5:2b:b5:32:
         d5:ef:0c:f2:3a:24:43:b2:e5:be:70:30:38:0f:40:12:81:6f:
         f9:54:14:f1:97:64:9a:9f:fd:d8:c8:f8:c0:10:fc:23:9a:8d:
         a5:90:0e:1d:af:e9:d2:1e:72:a2:fa:a7:b6:46:42:56:a2:d9:
         ef:4a:04:e5:f2:c9:7b:25:55:94:6e:f2:8c:fc:a9:62:b8:00:
         3e:03:3e:9e:ef:a3:36:5b:e2:19:f1:33:02:ef:fb:b5:1d:58:
         e8:43:67:57:9d:04:4a:8d:1f:b6:ae:84:b3:2a:37:3f:3b:88:
         55:f7:f7:98:37:b6:f7:65:d4:6b:b9:e8:9e:63:5a:e2:47:dd:
         73:60:e5:f5:d7:f9:9c:20:15:dc:ea:ae:4e:71:3e:20:d6:cc:
         1e:f3:c1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----