Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c7d332f-afb2-4848-9aed-a5da09f66ccf/c8d0e22812b9a063634e0aaa555bbcba5b7e98cf.roa
File:                     c8d0e22812b9a063634e0aaa555bbcba5b7e98cf.roa (raw, json)
Hash identifier:          UtrczNGr4uRLL3c7ugUI9ji7gO+eYqbQUtYDlozPzSI=
Subject key identifier:   41:80:CC:D4:28:67:E3:B7:7E:EE:47:4E:8C:1B:1B:18:64:7E:53:4E
Certificate issuer:       /CN=a9639b1f3b25de6401926fd200d3e7a73a364740
Certificate serial:       0DF238
Authority key identifier: B4:E7:A9:FC:24:99:08:D1:27:14:5D:7C:0B:1D:E4:1A:FB:B2:7C:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9639b1f3b25de6401926fd200d3e7a73a364740.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c7d332f-afb2-4848-9aed-a5da09f66ccf/c8d0e22812b9a063634e0aaa555bbcba5b7e98cf.roa
Signing time:             Wed 24 Mar 2021 14:42:12 +0000
ROA not before:           Wed 24 Mar 2021 14:42:11 +0000
ROA not after:            Tue 24 Mar 2026 14:42:11 +0000
asID:                     52468
IP address blocks:        201.159.112.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913976 (0xdf238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9639b1f3b25de6401926fd200d3e7a73a364740
        Validity
            Not Before: Mar 24 14:42:11 2021 GMT
            Not After : Mar 24 14:42:11 2026 GMT
        Subject: CN=c8d0e22812b9a063634e0aaa555bbcba5b7e98cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:48:f7:4b:52:37:19:46:a0:6c:19:aa:d7:0f:
                    c9:fa:06:0a:45:fe:84:99:1e:36:90:c5:6e:3c:26:
                    2b:53:3c:78:b7:fb:a0:47:ae:a7:ab:7d:e9:34:66:
                    74:55:7a:21:43:48:cb:16:3a:e0:fb:39:c4:55:76:
                    3a:52:26:5d:5a:38:3e:af:e7:d2:31:ff:37:98:51:
                    ac:2f:15:d9:fe:c6:08:c3:5f:a8:c6:5d:eb:2f:52:
                    d7:98:86:71:ac:55:4a:e5:19:f0:25:21:d1:17:10:
                    3e:ff:d5:54:f7:8f:12:cc:54:f9:4c:d9:51:2a:66:
                    ee:54:d0:80:da:73:52:67:d0:4b:13:17:49:0f:f8:
                    6f:5e:62:5a:27:39:b9:7e:01:e6:f2:2b:a6:a8:e0:
                    19:8c:9e:ea:05:25:c0:99:5d:39:47:77:3c:68:92:
                    fe:48:f2:af:95:b5:1b:2f:8a:ac:15:76:fd:75:eb:
                    39:97:f3:5f:ff:92:f3:df:75:8e:ff:a8:2e:b8:5c:
                    e7:53:c8:21:79:7e:0e:62:87:ba:06:c2:df:9b:be:
                    3f:70:ed:d8:ac:23:32:06:c8:c2:49:aa:22:7b:31:
                    f2:86:24:ea:50:f3:2c:3c:d4:f1:45:be:56:1f:d1:
                    00:29:a8:fe:b5:d7:8b:05:87:ed:fd:f9:91:14:e7:
                    17:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:80:CC:D4:28:67:E3:B7:7E:EE:47:4E:8C:1B:1B:18:64:7E:53:4E
            X509v3 Authority Key Identifier:
                keyid:B4:E7:A9:FC:24:99:08:D1:27:14:5D:7C:0B:1D:E4:1A:FB:B2:7C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9639b1f3b25de6401926fd200d3e7a73a364740.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c7d332f-afb2-4848-9aed-a5da09f66ccf/c8d0e22812b9a063634e0aaa555bbcba5b7e98cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c7d332f-afb2-4848-9aed-a5da09f66ccf/a9639b1f3b25de6401926fd200d3e7a73a364740.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:fb:63:b4:32:2b:96:59:90:fd:89:b8:3a:3a:d5:09:43:a3:
         01:33:e0:e1:93:c8:68:0f:99:57:dd:68:c9:89:d6:73:25:b6:
         ab:24:27:2a:44:88:21:a5:6b:4f:54:8d:3f:76:35:69:b8:4e:
         b1:2c:0e:79:f6:a9:16:99:98:c0:dc:fe:d3:a1:ec:99:35:3d:
         7a:a5:99:46:77:81:20:19:d8:06:25:8f:4b:db:a7:72:f9:3e:
         7d:1a:e7:89:ea:b6:c0:00:4a:bc:87:89:34:bb:8d:07:a8:b8:
         57:1c:ee:64:96:87:13:06:ef:71:5a:d5:1f:c1:55:b4:cf:ff:
         ea:81:87:1f:84:97:cf:a0:db:eb:28:73:2c:ad:3f:11:0e:a8:
         d4:68:56:14:b0:4c:6d:31:75:d4:0c:75:20:7b:3d:5b:c3:c2:
         5e:5f:db:2c:ea:9e:eb:f9:c3:f3:b3:9c:c0:e8:f9:b5:b7:bf:
         0e:3a:4f:60:98:09:d2:ba:34:d5:db:82:f7:97:cc:7b:71:48:
         92:0c:4c:bd:7f:9d:0e:e3:75:7e:18:1f:09:95:51:4b:84:a6:
         02:05:2f:9e:f7:23:92:c5:a6:be:8c:9a:7e:02:4c:20:ca:7e:
         79:ed:2c:02:9c:72:3f:e4:bf:b5:40:a2:f9:f3:3d:a1:1d:2e:
         bb:6a:ab:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----