Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c7d332f-afb2-4848-9aed-a5da09f66ccf/d353fd5651e3971475bd66f04e9d3532e8e3f80c.roa
File:                     d353fd5651e3971475bd66f04e9d3532e8e3f80c.roa (raw, json)
Hash identifier:          xs1KjzMopyAIbJ+ucbhi5/WnuqyaDiS/MRDuHYlL2Og=
Subject key identifier:   DB:57:AD:B0:1C:EF:28:10:62:24:C9:49:55:E0:C1:5C:13:A1:A2:66
Certificate issuer:       /CN=a9639b1f3b25de6401926fd200d3e7a73a364740
Certificate serial:       0DE8D6
Authority key identifier: B4:E7:A9:FC:24:99:08:D1:27:14:5D:7C:0B:1D:E4:1A:FB:B2:7C:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9639b1f3b25de6401926fd200d3e7a73a364740.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c7d332f-afb2-4848-9aed-a5da09f66ccf/d353fd5651e3971475bd66f04e9d3532e8e3f80c.roa
Signing time:             Wed 24 Mar 2021 14:42:11 +0000
ROA not before:           Wed 24 Mar 2021 14:42:11 +0000
ROA not after:            Tue 24 Mar 2026 14:42:11 +0000
asID:                     52468
IP address blocks:        190.115.10.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911574 (0xde8d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9639b1f3b25de6401926fd200d3e7a73a364740
        Validity
            Not Before: Mar 24 14:42:11 2021 GMT
            Not After : Mar 24 14:42:11 2026 GMT
        Subject: CN=d353fd5651e3971475bd66f04e9d3532e8e3f80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:09:7d:64:69:da:17:1f:95:c1:82:05:1a:13:
                    59:c3:97:c9:7c:f9:6f:d0:90:75:f8:f3:7c:24:95:
                    54:74:75:47:e3:1e:7f:3e:9c:4e:5c:fc:c1:8e:13:
                    81:cc:f3:1f:7c:14:65:17:6c:55:e7:e1:01:5a:6b:
                    97:e1:0e:d7:01:c2:4c:d9:12:56:47:1f:73:51:57:
                    be:4f:86:a1:98:5b:71:df:75:e1:90:9c:95:f6:38:
                    c9:53:ef:cf:43:64:d7:64:fc:3a:78:4e:ea:83:0e:
                    4a:da:c8:a7:62:3c:08:7f:d2:89:f5:ee:65:e1:c1:
                    af:b4:80:c3:eb:ca:c5:2d:69:a7:5e:5a:68:43:32:
                    44:3a:22:e6:5f:98:c0:b2:cc:ce:b5:36:4c:83:79:
                    7e:fc:9a:91:74:e6:35:f3:9f:f1:9d:b5:33:4d:b4:
                    24:8f:d5:c1:80:ed:85:78:96:29:04:fa:e9:b9:26:
                    81:f0:a2:25:de:1d:91:0c:7f:98:07:4c:a9:aa:dc:
                    05:fb:ae:de:85:cb:37:31:f9:78:f5:e2:66:f7:3c:
                    fa:f7:f1:ec:c5:cb:f9:69:7c:a0:0b:34:c2:20:27:
                    76:0f:4c:62:ba:6f:44:58:2f:98:54:11:32:09:ea:
                    60:a2:65:7c:ab:3e:87:9e:40:b4:6b:57:9b:25:4f:
                    07:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:57:AD:B0:1C:EF:28:10:62:24:C9:49:55:E0:C1:5C:13:A1:A2:66
            X509v3 Authority Key Identifier:
                keyid:B4:E7:A9:FC:24:99:08:D1:27:14:5D:7C:0B:1D:E4:1A:FB:B2:7C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9639b1f3b25de6401926fd200d3e7a73a364740.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c7d332f-afb2-4848-9aed-a5da09f66ccf/d353fd5651e3971475bd66f04e9d3532e8e3f80c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c7d332f-afb2-4848-9aed-a5da09f66ccf/a9639b1f3b25de6401926fd200d3e7a73a364740.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:d2:68:83:be:a6:7c:3d:ea:63:da:e9:ef:d0:99:d6:ec:71:
         25:17:08:77:d2:34:4e:82:78:d7:a3:a8:e5:cb:75:ea:73:4a:
         74:c3:d4:e5:ee:04:fd:9d:3b:82:e2:41:b2:f4:96:44:7b:10:
         cb:d8:a5:6f:b4:47:0e:c2:ef:c2:69:3c:10:11:ee:c2:94:06:
         ff:1e:9d:95:a5:ab:24:99:ee:36:46:22:18:65:c1:82:55:ae:
         97:5b:71:0c:de:17:2a:12:26:4a:ba:f4:80:d2:20:07:18:98:
         f2:5d:91:40:20:ee:ac:f6:44:c3:36:54:12:3a:6d:be:61:e0:
         0a:d5:b4:4d:f9:d1:4a:d2:2a:51:f9:62:66:e7:e2:c5:aa:88:
         bd:06:e3:6d:f2:32:5c:19:89:f2:fc:04:68:0a:ec:fb:e8:6c:
         85:29:5c:d0:b7:11:67:7b:0f:a4:4b:dd:38:aa:af:fe:43:85:
         a9:d9:56:38:3f:94:3b:05:a8:c5:b6:7b:72:f4:32:df:47:3d:
         79:f9:71:74:f5:16:c5:b3:0f:00:53:75:b3:ec:73:3e:57:82:
         d1:1b:78:a4:ad:a7:0a:3c:75:b8:1b:de:3b:54:1a:17:09:00:
         c3:73:8e:80:dc:7c:4b:f8:db:bd:79:d4:7b:53:ec:ae:77:66:
         2f:ef:e5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----