Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e7fe4d8-a3dd-4a2a-8394-f2f2033f5abb/e36eeb47ec2dbf004eab932c3d9e18f5f4661d82.roa
File:                     e36eeb47ec2dbf004eab932c3d9e18f5f4661d82.roa (raw, json)
Hash identifier:          3/CP9wQphKYyBY7V1mp9W6/DLC3S7eAElHhJ8M8Vxcs=
Subject key identifier:   24:E1:99:78:BA:A2:CB:45:B1:10:84:BB:49:05:C9:72:28:43:BB:B5
Certificate issuer:       /CN=6ae79cea0993a29ea0f00ceb5d8b9be8e9cfadbf
Certificate serial:       0D4D19
Authority key identifier: 47:55:C7:65:5D:72:76:16:EF:5F:7C:59:7F:0A:43:0A:37:2E:2B:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ae79cea0993a29ea0f00ceb5d8b9be8e9cfadbf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e7fe4d8-a3dd-4a2a-8394-f2f2033f5abb/e36eeb47ec2dbf004eab932c3d9e18f5f4661d82.roa
Signing time:             Wed 24 Mar 2021 14:30:20 +0000
ROA not before:           Wed 24 Mar 2021 14:30:20 +0000
ROA not after:            Tue 24 Mar 2026 14:30:20 +0000
asID:                     20207
IP address blocks:        45.7.96.0/22 maxlen: 24
                          2803:1dc0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871705 (0xd4d19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ae79cea0993a29ea0f00ceb5d8b9be8e9cfadbf
        Validity
            Not Before: Mar 24 14:30:20 2021 GMT
            Not After : Mar 24 14:30:20 2026 GMT
        Subject: CN=e36eeb47ec2dbf004eab932c3d9e18f5f4661d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:77:05:dc:60:aa:3c:82:ee:b5:34:31:4f:
                    68:51:76:c9:af:41:32:30:07:fa:24:2e:e0:19:b7:
                    48:21:e7:dd:a4:d7:90:f6:40:ca:09:ab:fe:3d:f5:
                    de:ee:25:04:a1:d0:a7:11:9a:2a:87:dd:c1:21:1c:
                    7c:fc:08:67:a0:07:fc:12:4f:de:3c:7b:09:6d:43:
                    d3:b9:44:6b:f7:e6:70:2a:d1:cd:43:56:28:7b:26:
                    02:e1:c2:0f:8c:64:9b:92:e1:32:5c:53:ac:af:2d:
                    50:5c:c6:00:6d:39:90:d0:06:f8:2d:ef:82:6c:75:
                    a5:91:1e:f5:5a:d7:98:7a:5a:95:f3:c8:a3:66:11:
                    a9:62:66:69:bf:8b:3c:ee:8c:5b:bc:3b:fb:c1:29:
                    c8:5f:93:76:af:b9:7d:9c:8d:99:77:68:c0:95:5d:
                    55:43:e1:00:29:24:98:50:65:1d:ea:a8:e8:f3:fe:
                    cb:e0:4c:44:06:82:8e:89:70:62:dc:11:59:16:c8:
                    78:cf:f7:91:b4:76:02:b6:92:3f:4c:a1:d6:0f:1b:
                    3b:1b:54:42:99:84:1e:d1:25:96:0d:1f:bd:2f:82:
                    86:4c:48:4a:b7:c5:d1:80:27:e7:b2:5d:2a:99:34:
                    87:8e:fb:6e:5e:b4:03:28:8c:19:2e:81:20:ed:05:
                    da:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E1:99:78:BA:A2:CB:45:B1:10:84:BB:49:05:C9:72:28:43:BB:B5
            X509v3 Authority Key Identifier:
                keyid:47:55:C7:65:5D:72:76:16:EF:5F:7C:59:7F:0A:43:0A:37:2E:2B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ae79cea0993a29ea0f00ceb5d8b9be8e9cfadbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e7fe4d8-a3dd-4a2a-8394-f2f2033f5abb/e36eeb47ec2dbf004eab932c3d9e18f5f4661d82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e7fe4d8-a3dd-4a2a-8394-f2f2033f5abb/6ae79cea0993a29ea0f00ceb5d8b9be8e9cfadbf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.96.0/22
                IPv6:
                  2803:1dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:9e:7e:bb:ff:b2:33:09:f1:38:7a:8e:25:83:b9:c0:a2:15:
         94:42:a6:03:b1:d5:1f:98:c8:2b:ba:b6:6c:23:2e:b5:2c:95:
         47:35:75:8e:2f:62:51:8b:da:c1:69:6f:07:79:08:a7:bc:63:
         1d:4c:7d:88:83:e4:64:cf:4b:af:7d:78:81:3d:bd:d1:9c:f8:
         f0:2f:12:f0:12:91:43:d5:7f:57:d3:fa:0e:28:9f:9c:78:a6:
         31:2f:fa:77:49:f4:ff:19:0b:23:19:62:d8:65:67:25:20:18:
         9e:00:7f:38:c6:a0:8d:eb:a0:27:af:89:20:f2:96:b6:0d:61:
         35:53:93:a1:bb:6a:fe:1b:1d:2f:54:60:3e:0b:0b:be:d6:61:
         e1:71:e9:c1:31:5b:5b:bf:6b:8f:35:92:9b:26:35:e3:66:98:
         5b:98:c4:de:b3:66:ed:04:e5:a0:f8:09:63:9c:fe:74:0f:57:
         48:a5:4d:71:8c:e2:9f:ba:93:c9:8e:a7:04:31:95:c0:0e:28:
         3f:13:58:a7:29:de:63:40:66:44:94:8d:64:4f:ad:e0:50:d8:
         a3:eb:cd:f4:24:d8:14:f7:08:3c:a4:a7:10:cd:97:bf:2f:9e:
         b5:9c:04:24:31:02:4d:2f:78:c3:35:2d:28:51:6f:17:2f:b6:
         be:e6:38:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----