Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8751feff-30c2-4aaf-8803-54d8be3b004f/41d79cee7456695daf49b48c3efbc39cd0a1d0e8.roa
File:                     41d79cee7456695daf49b48c3efbc39cd0a1d0e8.roa (raw, json)
Hash identifier:          pIUeY7f2uEQSBqb+dCOftSAXKmP/GzLVK00/CUuWUo4=
Subject key identifier:   29:A6:26:B3:8E:CA:D9:24:67:AF:7A:C5:F3:D8:66:A2:21:46:A8:74
Certificate issuer:       /CN=9c0799877aecf01061f13687ad43c4c362608b6a
Certificate serial:       0CE2FD
Authority key identifier: 7D:31:54:64:61:5F:C9:6E:58:0B:0A:4C:5D:D1:91:03:D4:2D:58:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c0799877aecf01061f13687ad43c4c362608b6a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8751feff-30c2-4aaf-8803-54d8be3b004f/41d79cee7456695daf49b48c3efbc39cd0a1d0e8.roa
Signing time:             Wed 24 Mar 2021 14:29:37 +0000
ROA not before:           Wed 24 Mar 2021 14:29:36 +0000
ROA not after:            Tue 24 Mar 2026 14:29:36 +0000
asID:                     266781
IP address blocks:        45.233.140.0/23 maxlen: 23
                          45.233.142.0/24 maxlen: 24
                          2803:df20::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844541 (0xce2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0799877aecf01061f13687ad43c4c362608b6a
        Validity
            Not Before: Mar 24 14:29:36 2021 GMT
            Not After : Mar 24 14:29:36 2026 GMT
        Subject: CN=41d79cee7456695daf49b48c3efbc39cd0a1d0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:8e:69:8c:d1:90:aa:ba:2e:57:bd:f9:03:
                    86:1f:bf:6f:66:5b:05:ab:a8:8c:0d:8d:76:b2:05:
                    ee:ad:52:92:ef:95:7d:3c:7a:e0:08:1f:8a:a2:e0:
                    ca:bc:db:10:b3:88:6e:92:b1:a3:ab:92:76:1f:be:
                    de:19:39:90:85:cb:20:f7:e1:17:d2:a4:ba:c6:32:
                    de:26:5e:23:09:98:7d:1b:2b:2a:7c:a7:0f:8a:27:
                    25:37:82:65:2a:dd:8e:a4:7f:65:df:d9:4b:8d:06:
                    97:44:dd:05:4e:cf:6b:70:66:f0:cc:74:54:75:a2:
                    42:0e:61:33:52:08:a6:fa:95:4d:85:4f:33:e5:00:
                    25:8b:77:99:ef:4a:8b:bb:3f:3c:ae:dc:4f:1f:31:
                    10:71:77:ee:7d:ef:dd:e1:d5:2c:ad:92:56:1e:5e:
                    d8:d5:2d:40:2e:9c:75:28:ec:04:9a:28:9b:61:2e:
                    8c:6b:07:3f:f6:82:1f:0c:25:eb:55:31:95:a2:48:
                    4e:c9:77:f6:27:82:36:a6:0b:46:85:80:8b:e2:5e:
                    90:bd:ed:07:a5:73:ab:72:6c:42:88:a0:5f:10:f8:
                    d1:e4:06:c0:2a:82:fb:41:ff:19:39:18:04:2f:39:
                    50:4b:e9:80:59:1c:95:b2:ca:d7:57:ab:26:b0:e0:
                    aa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A6:26:B3:8E:CA:D9:24:67:AF:7A:C5:F3:D8:66:A2:21:46:A8:74
            X509v3 Authority Key Identifier:
                keyid:7D:31:54:64:61:5F:C9:6E:58:0B:0A:4C:5D:D1:91:03:D4:2D:58:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c0799877aecf01061f13687ad43c4c362608b6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8751feff-30c2-4aaf-8803-54d8be3b004f/41d79cee7456695daf49b48c3efbc39cd0a1d0e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8751feff-30c2-4aaf-8803-54d8be3b004f/9c0799877aecf01061f13687ad43c4c362608b6a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.140.0-45.233.142.255
                IPv6:
                  2803:df20::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:fc:05:4e:29:e5:24:19:f6:ab:01:95:78:dd:7b:b2:eb:52:
         01:ee:40:63:83:75:da:0f:76:83:17:a4:20:07:e2:07:ef:f4:
         22:22:0f:96:a3:5a:46:30:91:0e:63:ce:51:0b:2a:51:63:29:
         c8:1c:6b:4a:31:68:8f:a3:22:94:cb:49:c4:1d:76:c2:aa:e5:
         a9:2e:f9:ed:98:89:31:45:87:8d:41:ff:c7:2d:6b:ab:cc:2c:
         f1:72:64:16:d9:f9:9d:9f:7b:b6:b7:cb:d7:09:08:27:b8:ac:
         c9:d0:b6:1d:b8:2c:fe:e7:08:7c:b3:a5:01:57:3c:b1:7c:a2:
         b6:c1:09:a9:d6:d8:12:9d:fc:ac:3e:15:da:50:b6:83:cd:9c:
         20:3d:d4:20:0c:60:ce:d9:25:81:5a:6a:d4:69:96:5a:df:ea:
         32:ac:6f:d0:b3:9b:70:f1:65:76:32:26:74:d0:71:0b:aa:aa:
         32:d0:39:94:9f:ba:90:af:bb:1a:99:ff:b5:88:fd:da:6b:11:
         1d:1b:1c:d5:e6:48:81:46:c5:3c:6c:e0:92:26:2e:d9:3d:80:
         fd:90:75:67:22:ab:5f:0f:9a:21:86:ed:c8:d8:62:75:46:67:
         2e:5e:56:f4:db:a0:42:5a:fc:18:a2:d6:48:d9:37:9c:0d:75:
         31:bd:d2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----