Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/eb47559d139aacc93ccda7a2d5b925ecc7cad613.roa
File:                     eb47559d139aacc93ccda7a2d5b925ecc7cad613.roa (raw, json)
Hash identifier:          9/9ibe5TGmE5pc3sDlqXbXdh9D2NBbi14SG8LjOOQ7I=
Subject key identifier:   B9:15:19:2C:B9:67:65:AD:71:BD:AF:94:93:BF:81:4C:63:EC:F0:B9
Certificate issuer:       /CN=0127eff5fb89d4f04f362b89beb72d612147af7f
Certificate serial:       0C6CA9
Authority key identifier: F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/eb47559d139aacc93ccda7a2d5b925ecc7cad613.roa
Signing time:             Wed 24 Mar 2021 14:34:20 +0000
ROA not before:           Wed 24 Mar 2021 14:34:20 +0000
ROA not after:            Tue 24 Mar 2026 14:34:20 +0000
asID:                     265703
IP address blocks:        45.238.176.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 814249 (0xc6ca9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0127eff5fb89d4f04f362b89beb72d612147af7f
        Validity
            Not Before: Mar 24 14:34:20 2021 GMT
            Not After : Mar 24 14:34:20 2026 GMT
        Subject: CN=eb47559d139aacc93ccda7a2d5b925ecc7cad613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:62:53:82:83:b2:fd:0b:fa:62:1d:5d:32:02:
                    41:12:c4:06:c9:60:57:fc:27:7e:2b:3b:16:25:b8:
                    2d:c3:c6:f5:07:88:eb:15:09:71:70:0d:2c:66:8c:
                    cd:95:b5:39:10:ef:61:b0:83:52:ac:f7:95:7f:9e:
                    c0:70:58:6a:8c:92:d6:ca:cb:af:e8:ce:f0:75:2e:
                    65:6a:07:68:57:0e:85:7f:5b:ee:97:b2:73:16:c6:
                    9c:39:2f:7d:87:de:b7:71:83:5a:d9:a4:ba:63:90:
                    66:1c:56:27:7a:23:26:24:cc:cc:69:c9:4b:2d:36:
                    21:c7:2d:21:ec:91:52:21:36:e7:9d:41:1f:ac:50:
                    9b:c3:89:7b:79:e4:92:fe:06:d2:2f:04:ec:2d:80:
                    9c:52:89:0d:50:54:84:c8:0e:ae:9f:7f:29:f0:de:
                    5e:c3:f2:3a:60:02:69:ac:a2:87:9a:03:b5:5e:03:
                    34:9f:a8:20:e6:da:12:eb:e2:85:2a:16:2a:ca:cf:
                    27:26:04:7f:fb:b4:47:6d:a3:dd:6f:95:a4:f8:4d:
                    48:2e:76:50:c1:b8:f4:94:4e:0c:35:ed:e1:2a:3a:
                    93:9f:d1:98:f9:d6:8c:da:31:c9:38:df:46:47:77:
                    14:b4:b8:8b:f3:29:ca:61:fb:b8:af:8f:91:2e:cc:
                    bf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:15:19:2C:B9:67:65:AD:71:BD:AF:94:93:BF:81:4C:63:EC:F0:B9
            X509v3 Authority Key Identifier:
                keyid:F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/eb47559d139aacc93ccda7a2d5b925ecc7cad613.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/0127eff5fb89d4f04f362b89beb72d612147af7f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:ab:07:fe:e1:9c:ca:fd:8a:6a:47:c9:4c:e1:55:e2:81:9e:
         2c:05:2f:a8:35:96:94:33:c5:ca:d6:29:34:f5:ec:da:aa:97:
         53:b7:a4:e7:29:9b:83:7d:a2:34:a3:1e:b0:27:f9:8f:2c:6c:
         01:70:e6:08:e5:c0:ec:c6:86:06:07:c6:4d:23:c9:04:0b:13:
         e4:f3:58:22:0a:e1:e2:17:1c:cd:b9:d8:70:8b:3f:1d:2d:f3:
         60:70:73:4c:5a:a8:eb:0b:ee:8f:05:0c:18:13:69:86:40:a5:
         2d:bd:12:fc:49:0f:23:cb:9d:a1:e6:2d:a0:50:1b:8e:4e:07:
         a8:63:f9:b3:ed:d1:76:c0:64:b9:09:30:35:b1:02:4f:7c:6b:
         ad:2f:6c:12:a2:c9:7b:b6:5d:f5:f0:46:0e:08:2d:0b:47:9f:
         e9:57:04:b1:ae:c0:a9:ec:2f:c8:c1:4d:41:4d:bd:4c:c6:78:
         f9:37:ff:e7:ea:e5:15:6a:9d:14:05:32:dc:48:34:9b:5d:84:
         b3:00:e8:62:58:7c:4c:11:98:69:93:9b:4d:fd:b6:4b:3f:31:
         ea:54:1c:47:df:21:53:a2:5b:54:81:7a:72:ff:ff:f5:c5:68:
         e3:a2:45:fc:53:4c:2e:df:0e:ee:dc:30:e4:ef:18:cb:0e:02:
         e2:eb:0a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----