Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/a5d6b00fbdfaa3e198accd3a527ab4e82c01213e.roa
File:                     a5d6b00fbdfaa3e198accd3a527ab4e82c01213e.roa (raw, json)
Hash identifier:          thZjULYwRMcaU82dfU+qTAwp4yNQa/xRJaH4/RuI+h8=
Subject key identifier:   B1:B7:C8:08:64:14:13:51:24:97:83:C6:61:35:14:9D:AD:04:2A:C0
Certificate issuer:       /CN=30415e525ae2a6911d8229a69de6df7b5716b468
Certificate serial:       0DF6A1
Authority key identifier: AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/a5d6b00fbdfaa3e198accd3a527ab4e82c01213e.roa
Signing time:             Wed 24 Mar 2021 14:39:13 +0000
ROA not before:           Wed 24 Mar 2021 14:39:12 +0000
ROA not after:            Tue 24 Mar 2026 14:39:12 +0000
asID:                     265762
IP address blocks:        128.201.160.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915105 (0xdf6a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30415e525ae2a6911d8229a69de6df7b5716b468
        Validity
            Not Before: Mar 24 14:39:12 2021 GMT
            Not After : Mar 24 14:39:12 2026 GMT
        Subject: CN=a5d6b00fbdfaa3e198accd3a527ab4e82c01213e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:e6:26:4e:06:50:d5:66:ef:0d:73:9c:89:
                    26:27:6f:30:08:92:e8:0b:60:ef:dd:d0:71:47:54:
                    4d:a0:75:1c:e3:c0:c6:4c:4a:cb:ca:61:d7:2c:50:
                    1d:28:bc:c9:00:b3:62:5b:a9:bd:b8:40:14:fd:5c:
                    5d:76:e5:76:8b:a5:93:71:ed:c8:ee:9d:c1:d1:a3:
                    59:98:53:d0:fe:b8:a1:58:e9:3d:d6:9e:5d:dc:bd:
                    95:d1:f3:1b:75:50:32:da:b7:b1:0f:89:ba:5f:8d:
                    8b:03:2d:72:a8:c5:2a:d9:d2:8a:b5:73:d6:d9:82:
                    af:97:5e:25:63:5a:7a:10:89:4a:ae:8e:c0:c0:b1:
                    64:fd:e4:24:d2:d4:04:c4:4e:03:ac:b1:7b:11:63:
                    83:bd:a5:ef:8a:6e:b5:7a:ff:e9:15:91:28:3d:eb:
                    36:8a:aa:06:6d:e0:db:df:65:01:20:97:39:73:a7:
                    79:95:a2:a1:4b:ad:0b:fb:bf:23:09:7d:c1:27:86:
                    af:0a:79:a8:a6:73:e8:02:39:73:40:19:ae:c9:90:
                    72:9b:bf:86:89:68:90:95:b8:e8:41:4b:59:24:2f:
                    86:ac:4d:b9:d5:62:ee:b7:5a:6a:6b:2f:06:36:82:
                    1e:15:50:59:e0:0b:dd:94:af:b2:ba:f0:1c:38:4a:
                    15:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B7:C8:08:64:14:13:51:24:97:83:C6:61:35:14:9D:AD:04:2A:C0
            X509v3 Authority Key Identifier:
                keyid:AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/a5d6b00fbdfaa3e198accd3a527ab4e82c01213e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/30415e525ae2a6911d8229a69de6df7b5716b468.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:63:44:e3:f1:35:42:73:e5:9a:c4:88:e2:ba:6b:ff:37:76:
         70:d5:3d:ec:c8:06:11:23:b0:de:a9:f4:29:b5:25:35:45:38:
         e8:00:e4:82:82:0e:70:23:2b:c6:35:a3:50:26:63:db:09:dc:
         60:94:32:7b:08:43:d7:ea:9f:13:aa:92:86:00:28:f3:c3:a6:
         56:9b:a7:c8:d4:86:6f:61:91:0f:9d:c2:0f:6a:2a:5c:9d:66:
         61:68:91:29:03:8d:96:87:d5:a0:f7:a6:e8:87:d1:72:c1:44:
         8c:92:72:b3:a6:10:21:0a:14:a5:15:5c:b1:fd:3a:49:dc:7b:
         e1:96:f6:e3:32:cf:1a:10:cb:7f:9b:f9:13:56:54:99:d1:de:
         fd:12:e1:41:3a:0c:5e:62:f0:f2:d5:b2:09:19:ef:82:de:b9:
         7b:11:58:ef:1c:ad:00:95:ca:5f:4c:79:70:4f:15:1a:a1:90:
         6d:ad:70:00:1a:a6:23:fb:58:49:09:96:0a:d4:37:a0:ec:bd:
         00:79:27:be:ab:09:af:23:85:15:d2:b8:74:b5:46:8a:b0:c2:
         71:99:37:9e:35:c4:28:e6:e4:f5:b6:72:7e:fd:c0:c2:90:1b:
         20:8d:18:0d:66:4b:1f:c7:aa:f5:d2:63:6a:c9:7a:fa:2f:6f:
         ea:e5:bb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----