Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7faca3f9-1d8e-4ec5-b02a-e9cb1d49c59c/1a8d76b0441d0ea736be32ed11b34853cd3b0f3b.roa
File:                     1a8d76b0441d0ea736be32ed11b34853cd3b0f3b.roa (raw, json)
Hash identifier:          CFMASlv5vHZPwlCMR0z8pnNOy5yZS5kLAzrSyXaozEw=
Subject key identifier:   FF:A7:0F:5C:BB:EF:12:D9:BE:08:96:63:D4:53:06:AF:7D:0D:F3:2A
Certificate issuer:       /CN=8dae7cc9c123ea75c4abe43c62f030719d39ed8d
Certificate serial:       0CEEE0
Authority key identifier: C0:D2:E6:0F:10:A1:E0:31:E5:71:B0:4A:18:F5:EA:B6:73:BE:A3:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8dae7cc9c123ea75c4abe43c62f030719d39ed8d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7faca3f9-1d8e-4ec5-b02a-e9cb1d49c59c/1a8d76b0441d0ea736be32ed11b34853cd3b0f3b.roa
Signing time:             Wed 24 Mar 2021 14:29:50 +0000
ROA not before:           Wed 24 Mar 2021 14:29:50 +0000
ROA not after:            Tue 24 Mar 2026 14:29:50 +0000
asID:                     265884
IP address blocks:        45.71.5.0/24 maxlen: 24
                          2801:12:b000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847584 (0xceee0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dae7cc9c123ea75c4abe43c62f030719d39ed8d
        Validity
            Not Before: Mar 24 14:29:50 2021 GMT
            Not After : Mar 24 14:29:50 2026 GMT
        Subject: CN=1a8d76b0441d0ea736be32ed11b34853cd3b0f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f7:7d:09:39:b5:a4:4d:39:d4:a7:f5:16:62:
                    6a:60:44:d3:c1:87:be:50:24:a5:ea:37:08:ab:ab:
                    82:1e:0d:80:e3:00:e2:50:32:5d:11:f6:8c:82:92:
                    6e:3c:6a:a3:e0:bb:85:7a:19:9a:fc:de:f4:f1:34:
                    3f:11:68:ba:53:cb:b9:b9:02:34:6f:03:00:01:2a:
                    55:d9:2c:58:bc:aa:14:25:51:c7:d8:52:02:c4:f3:
                    da:4e:aa:6f:cb:21:a0:d9:68:c8:0a:75:db:14:10:
                    e7:c5:dd:b8:dd:ea:02:64:40:ff:4a:a7:28:26:cb:
                    bb:38:b5:9b:44:62:b3:ef:97:fd:8d:21:92:75:75:
                    5b:b0:35:2b:5c:d1:b6:5d:f6:27:13:6b:0b:08:62:
                    a6:45:de:8f:49:fc:ea:71:a1:2d:49:80:c4:88:84:
                    aa:6a:ea:3d:87:62:15:4c:ba:16:57:f7:df:41:51:
                    3e:61:11:3c:71:af:49:bc:ec:54:b4:f2:12:f0:33:
                    66:ef:2d:7f:ee:7c:57:9b:23:1a:c3:45:11:bd:f8:
                    f9:e6:0e:79:46:e9:27:ce:2a:80:cf:ec:b7:e0:2c:
                    6a:56:4c:46:99:33:0f:a9:e0:0b:b6:fc:87:91:54:
                    fc:a3:7e:aa:e2:3c:79:56:43:14:dc:a3:cd:a3:52:
                    74:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A7:0F:5C:BB:EF:12:D9:BE:08:96:63:D4:53:06:AF:7D:0D:F3:2A
            X509v3 Authority Key Identifier:
                keyid:C0:D2:E6:0F:10:A1:E0:31:E5:71:B0:4A:18:F5:EA:B6:73:BE:A3:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8dae7cc9c123ea75c4abe43c62f030719d39ed8d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7faca3f9-1d8e-4ec5-b02a-e9cb1d49c59c/1a8d76b0441d0ea736be32ed11b34853cd3b0f3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7faca3f9-1d8e-4ec5-b02a-e9cb1d49c59c/8dae7cc9c123ea75c4abe43c62f030719d39ed8d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.5.0/24
                IPv6:
                  2801:12:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:01:b8:27:85:ae:7e:b0:58:ad:2c:2c:8e:6b:a6:8d:e8:b0:
         92:2a:c0:d5:98:fc:b9:d3:c9:e9:8a:0b:19:59:3e:3e:f5:7c:
         fd:dc:4e:dc:fe:ab:61:18:70:c9:93:7b:0f:db:66:67:5c:7a:
         09:6a:68:f1:54:b1:cf:d7:b7:3f:a5:3b:9d:ba:be:53:da:4e:
         af:b6:ea:d3:77:39:1d:3b:d2:a1:88:80:db:c1:3c:fa:23:5d:
         47:e5:a7:3c:b0:41:ab:75:de:ea:22:24:8f:65:31:24:7b:50:
         7c:5b:a5:e5:68:d4:bb:94:73:fa:03:82:b4:cd:f4:9c:d1:bd:
         19:1f:3e:a6:e1:00:e6:20:4d:67:3e:bc:48:f0:b0:79:1a:be:
         51:b3:f1:37:c5:97:de:7f:56:34:77:52:a4:f8:ab:3e:d0:b5:
         13:42:c6:ba:5c:6a:9a:b4:e1:79:af:fd:21:74:cb:dc:76:9c:
         f8:77:35:ec:e1:64:23:1d:c4:b3:ff:c9:c3:f7:4a:3a:26:42:
         d1:af:d4:91:b6:bc:65:7e:f5:a9:49:a3:9b:52:f6:a6:0c:55:
         d4:2c:d5:72:53:3a:d1:23:d3:26:78:15:5f:a9:9b:b3:6b:83:
         4e:12:a5:35:72:fd:10:da:68:29:67:e6:c5:3e:f9:52:a8:c2:
         23:8b:95:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----