Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/f76462697cfba1543da63ad161a57c7bde7983b2.roa
File:                     f76462697cfba1543da63ad161a57c7bde7983b2.roa (raw, json)
Hash identifier:          hf3eKajhVMKO/QHZnbehhwUm9iOmy/t7QO1lzD3p2V4=
Subject key identifier:   20:7A:80:C6:9B:2D:1F:50:9E:62:65:DA:ED:8E:C2:70:CC:3C:F6:B4
Certificate issuer:       /CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Certificate serial:       0D2BF0
Authority key identifier: AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/f76462697cfba1543da63ad161a57c7bde7983b2.roa
Signing time:             Wed 24 Mar 2021 14:43:09 +0000
ROA not before:           Wed 24 Mar 2021 14:43:08 +0000
ROA not after:            Tue 24 Mar 2026 14:43:08 +0000
asID:                     265575
IP address blocks:        201.174.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 863216 (0xd2bf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
        Validity
            Not Before: Mar 24 14:43:08 2021 GMT
            Not After : Mar 24 14:43:08 2026 GMT
        Subject: CN=f76462697cfba1543da63ad161a57c7bde7983b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a5:0f:5a:db:af:98:e4:34:fc:74:d8:51:b7:
                    2e:d7:a8:7a:d6:fc:dc:b8:59:b2:10:15:8f:a8:c7:
                    08:a8:4a:e9:6c:cc:3e:04:e7:f7:58:5d:19:b6:ec:
                    0c:de:40:e4:ef:35:3f:88:ac:ee:42:4c:11:fb:8c:
                    1d:d3:c3:a6:a4:8a:39:41:9e:2d:9d:6b:a9:ad:68:
                    64:0c:ed:82:c3:12:b3:7e:e8:8b:db:1a:bb:b0:21:
                    55:10:c6:64:c7:cc:28:38:f0:6d:a6:b3:1c:56:99:
                    2d:85:1b:2c:75:cd:0d:f9:79:d1:fc:83:2c:fa:bb:
                    30:94:18:70:69:bc:af:9f:7b:47:2f:9a:b2:dc:3b:
                    ed:35:de:06:76:2d:fc:fb:62:48:02:a1:9b:d1:1b:
                    0f:61:95:88:8e:cc:53:7b:f8:de:dc:45:b3:c8:4e:
                    eb:21:98:ab:cd:64:91:80:8b:0b:ae:1e:20:29:3c:
                    41:5f:e6:31:19:76:3f:4d:67:77:42:c8:00:39:9f:
                    69:80:30:1d:40:79:dd:a7:2c:d3:b0:c3:8f:08:ff:
                    00:28:e7:38:6d:a9:71:a9:23:67:24:62:92:95:3d:
                    ff:ef:2b:06:b4:3f:70:e5:94:4a:3f:bb:01:72:53:
                    0f:70:4d:ee:d4:aa:90:4f:cc:78:2d:08:3f:db:bf:
                    fb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7A:80:C6:9B:2D:1F:50:9E:62:65:DA:ED:8E:C2:70:CC:3C:F6:B4
            X509v3 Authority Key Identifier:
                keyid:AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/f76462697cfba1543da63ad161a57c7bde7983b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:36:85:e0:72:5a:05:b5:2b:18:08:ba:1d:24:fc:fb:56:60:
         3c:42:cb:ff:2f:5c:06:e9:43:79:51:34:53:81:37:66:64:29:
         20:fa:93:c7:4d:5d:07:97:5e:95:59:84:1d:83:82:a6:ff:18:
         ba:a6:4e:b5:4a:65:a2:4b:86:e2:7a:35:fa:1a:db:82:ad:fa:
         aa:5c:30:11:84:2d:cf:85:85:18:77:ec:8f:67:08:3f:b2:5d:
         be:5c:ce:a2:ea:2e:84:6a:3c:33:51:7a:a9:c1:84:a3:7e:8c:
         88:e7:64:e3:c5:4e:55:f5:7c:f4:a9:b9:3e:22:74:4a:f5:ef:
         f5:23:41:bf:9f:d0:b6:ea:2c:b2:05:30:84:a4:e0:01:93:1d:
         6b:30:5e:c9:43:a1:bf:51:3d:e2:48:2f:e5:37:89:28:1b:1b:
         ec:ef:34:89:b1:13:8c:a0:c7:28:18:8a:c5:39:14:35:b8:a9:
         e0:27:ed:de:05:71:04:fb:28:be:c2:d9:09:28:4f:05:b1:ec:
         c8:89:66:5c:92:d3:ea:ef:25:66:18:a8:6e:a2:0a:f8:e0:b6:
         24:89:29:de:97:5f:0e:25:3d:43:a5:ad:c5:ee:4c:2c:1e:0f:
         d7:54:60:c6:cd:15:06:c8:58:bc:6c:63:9b:a6:25:6a:67:d4:
         f6:b3:cd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----