Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/e982f992778bb7c703feb242fa2ef4bcb95d7715.roa
File:                     e982f992778bb7c703feb242fa2ef4bcb95d7715.roa (raw, json)
Hash identifier:          kH9MzBRAVGl985OG1ABh3vKnE1XJFK/wh0sFCwfw+Zk=
Subject key identifier:   C5:FE:00:06:93:B1:C5:9E:9B:3A:44:80:DC:64:0E:23:C5:25:DB:E9
Certificate issuer:       /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial:       0D9D1A
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/e982f992778bb7c703feb242fa2ef4bcb95d7715.roa
Signing time:             Wed 24 Mar 2021 14:37:06 +0000
ROA not before:           Wed 24 Mar 2021 14:37:05 +0000
ROA not after:            Tue 24 Mar 2026 14:37:05 +0000
asID:                     52423
IP address blocks:        179.48.248.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892186 (0xd9d1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
        Validity
            Not Before: Mar 24 14:37:05 2021 GMT
            Not After : Mar 24 14:37:05 2026 GMT
        Subject: CN=e982f992778bb7c703feb242fa2ef4bcb95d7715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:32:0f:79:ad:f8:15:d0:fa:6d:3e:35:d8:07:
                    fc:ef:50:e6:77:26:1a:60:ac:10:49:7d:10:c9:d9:
                    25:fb:b7:1f:84:a4:1f:2b:54:ac:74:be:06:70:2f:
                    f2:db:48:0d:7f:65:40:9b:ae:63:38:a4:42:7e:35:
                    8a:98:c0:e1:a1:bb:aa:89:98:91:af:a7:a9:9a:82:
                    fe:8e:9d:3b:a8:0c:05:ae:aa:53:f2:7d:5e:ba:b1:
                    c9:33:33:d2:93:1d:f0:54:ae:d3:53:1e:6d:c0:ef:
                    8b:cd:b0:ac:0a:e2:20:6d:d8:5e:45:8c:f8:01:9d:
                    84:ef:78:ec:cf:f1:a6:bb:ce:85:bd:a7:e8:c3:4a:
                    16:22:82:41:b4:75:01:b2:8d:f8:ce:d8:9b:71:97:
                    93:59:99:89:63:ca:f2:a2:64:71:fb:ca:d8:11:e2:
                    a2:f2:a5:cc:be:39:48:a9:ea:70:fa:43:75:19:f9:
                    c2:ce:7a:a3:8a:8c:d3:07:60:c8:c8:69:82:ac:bb:
                    33:29:9e:e5:91:17:89:56:ea:61:24:e8:f9:02:9b:
                    33:e5:88:28:bb:08:d5:5a:67:fc:21:a8:39:3e:df:
                    cf:57:7b:78:5e:cf:7d:67:80:89:36:0d:94:e0:84:
                    6e:77:43:1a:82:17:02:66:e8:21:f6:5c:80:a8:23:
                    1f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FE:00:06:93:B1:C5:9E:9B:3A:44:80:DC:64:0E:23:C5:25:DB:E9
            X509v3 Authority Key Identifier:
                keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/e982f992778bb7c703feb242fa2ef4bcb95d7715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:ab:56:ea:3b:bc:45:f0:b2:ac:02:3c:b1:65:cd:59:e9:38:
         81:43:f5:45:ff:b6:d3:4b:34:3d:99:85:c9:5f:8f:aa:1c:5b:
         10:e5:35:0a:13:a1:9d:f6:4b:35:32:21:bd:10:09:ac:f9:ac:
         1a:72:6c:2c:27:f7:83:a2:44:98:00:b4:2a:df:f3:27:02:28:
         73:82:ba:43:cf:1c:68:f1:25:be:c1:f4:ee:11:0c:56:22:5f:
         d4:cf:3c:ce:c4:00:66:8f:26:31:91:5b:0f:d7:66:e5:30:9a:
         eb:80:c7:6a:31:b8:ef:34:0d:b3:50:88:ee:61:b8:a3:74:5e:
         2b:71:e6:b8:33:5d:d0:c0:70:65:ad:60:3f:b8:f9:37:db:c4:
         ee:63:8c:97:11:03:68:ae:66:fe:e9:65:92:92:4a:72:10:e1:
         d5:29:45:b1:e2:78:00:5a:bd:5d:63:29:87:75:67:a9:5b:e1:
         31:10:a7:1e:45:b1:7f:50:0d:87:db:d5:1f:1b:b8:87:a2:b1:
         c2:f0:9f:29:63:63:2f:d2:71:e8:3f:0f:0e:5e:50:97:96:29:
         86:bf:7b:b8:99:81:24:d1:6e:c5:ea:aa:fe:91:0d:0a:95:f8:
         ad:de:f1:b5:69:0e:77:e6:06:05:d2:db:e1:c1:81:01:4a:46:
         a0:54:a4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----