Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/9a295f2d27d5ca943745cfa4a5ba1340675152bc.roa
File:                     9a295f2d27d5ca943745cfa4a5ba1340675152bc.roa (raw, json)
Hash identifier:          0CvifqUjnGNPudYCg6zpV7AGSwmF/4g+vE/cpvMCOt0=
Subject key identifier:   4E:21:7E:CB:86:9E:2F:1E:9C:DC:0E:A8:88:65:2A:E8:33:2D:71:81
Certificate issuer:       /CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
Certificate serial:       037D4C
Authority key identifier: 84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/9a295f2d27d5ca943745cfa4a5ba1340675152bc.roa
Signing time:             Wed 24 Mar 2021 14:31:02 +0000
ROA not before:           Wed 24 Mar 2021 14:31:02 +0000
ROA not after:            Tue 24 Mar 2026 14:31:02 +0000
asID:                     265639
IP address blocks:        170.246.88.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228684 (0x37d4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
        Validity
            Not Before: Mar 24 14:31:02 2021 GMT
            Not After : Mar 24 14:31:02 2026 GMT
        Subject: CN=9a295f2d27d5ca943745cfa4a5ba1340675152bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ba:39:dc:2c:33:9b:89:95:cf:e6:e2:30:c6:
                    ea:2a:0f:61:3d:68:d7:e7:18:df:5b:1d:a3:ce:56:
                    f1:97:90:0f:a8:b1:6e:5c:38:23:b5:2e:40:66:bc:
                    ce:09:c5:42:39:6b:69:68:a7:58:a0:6c:28:e8:b1:
                    29:ae:69:ad:78:f0:f2:ff:0f:a7:e9:e8:8c:25:63:
                    12:99:f2:d8:79:6f:9b:f2:c2:18:15:e8:b0:82:55:
                    1b:cc:0b:c6:2c:8a:7e:04:89:ef:c4:70:a9:6b:36:
                    c5:25:64:f6:04:c2:b3:76:93:2c:4c:c5:a2:79:79:
                    03:f0:8f:6d:6c:b8:8e:5b:17:6a:16:49:3c:a6:f0:
                    f7:66:b2:01:0c:c9:cc:d1:ce:a7:da:c0:bd:71:5d:
                    e0:96:5f:40:53:1f:13:eb:c0:82:0e:5f:ca:e6:b9:
                    95:83:de:b1:60:5b:89:af:e6:0c:e9:d5:7c:86:f1:
                    1f:37:20:51:ee:dc:fe:af:ce:14:21:94:ff:01:6d:
                    da:25:fc:f1:e6:d3:bb:d8:fb:cc:32:48:ea:4c:95:
                    28:e1:d2:aa:e3:00:bb:81:b7:59:fe:e9:46:9d:6e:
                    e6:45:44:91:06:28:24:44:9b:90:56:b8:61:c8:eb:
                    07:eb:21:fe:17:93:a8:a7:e8:d2:72:60:f2:0d:c1:
                    19:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:21:7E:CB:86:9E:2F:1E:9C:DC:0E:A8:88:65:2A:E8:33:2D:71:81
            X509v3 Authority Key Identifier:
                keyid:84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/9a295f2d27d5ca943745cfa4a5ba1340675152bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/501f1f0f3a2acdfd121143683d0a9cfc1657da67.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:2e:e3:a8:cf:0c:6b:d6:38:4c:68:3d:8e:4d:88:0b:87:d8:
         61:a8:85:87:59:39:e9:94:ec:02:3d:e3:d6:43:b7:1c:d6:16:
         d4:23:2d:fe:4e:d2:b6:6f:89:6b:8d:93:54:ad:d0:3c:b4:67:
         8b:c9:28:0e:e5:eb:9c:f7:4c:59:c1:02:0f:26:c3:4f:9c:1e:
         cd:68:db:e6:ec:76:19:b0:60:50:1d:2e:87:79:79:cd:07:84:
         b2:de:9e:0d:04:ba:be:7a:05:55:dc:44:7b:1b:17:2c:30:3b:
         3a:f9:c3:8d:ef:2b:91:a8:49:d2:f0:da:c3:84:2c:75:ea:a9:
         8f:16:ab:1a:52:ad:3f:df:e7:94:22:66:82:5d:77:3a:03:08:
         e8:7a:db:ef:03:af:23:0f:fb:9a:a8:ca:f5:6a:2f:1a:31:76:
         d4:c0:f3:b4:9c:eb:30:ae:cf:4a:43:bb:0c:5f:9d:19:59:47:
         93:02:16:30:bb:35:34:21:08:97:16:7e:ed:ba:09:1f:e7:6c:
         7f:bf:98:6a:07:fc:39:ac:3b:32:f3:8d:de:cc:65:a1:fd:f1:
         bb:17:62:63:09:a3:34:d6:33:c9:e8:66:85:6a:8f:02:13:53:
         ac:68:79:17:61:ae:71:ed:2e:0d:54:1c:17:f1:41:a3:bc:28:
         b6:48:f3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----