Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/901eb55c-e24b-4030-b7b8-fa4b8e3a6a30/e175333eaa18674642edc3b1125c85a66fc87480.roa
File:                     e175333eaa18674642edc3b1125c85a66fc87480.roa (raw, json)
Hash identifier:          LieO8c3oPYKCH85jGpSo6Xm6oY4K3gobywWA/G2MzfM=
Subject key identifier:   AD:B9:EA:3D:73:25:2B:C6:3B:C8:C5:77:D8:4A:98:00:90:2E:27:1D
Certificate issuer:       /CN=0ce734ab5bcb4d2ab5fe5de4290e5746296d58b7
Certificate serial:       0BDD7E
Authority key identifier: 0D:FB:6E:FB:13:28:1B:AA:C1:19:FD:C7:C9:50:91:48:87:0C:02:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ce734ab5bcb4d2ab5fe5de4290e5746296d58b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/901eb55c-e24b-4030-b7b8-fa4b8e3a6a30/e175333eaa18674642edc3b1125c85a66fc87480.roa
Signing time:             Wed 24 Mar 2021 14:48:02 +0000
ROA not before:           Wed 24 Mar 2021 14:48:02 +0000
ROA not after:            Tue 24 Mar 2026 14:48:02 +0000
asID:                     269749
IP address blocks:        45.182.140.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 777598 (0xbdd7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce734ab5bcb4d2ab5fe5de4290e5746296d58b7
        Validity
            Not Before: Mar 24 14:48:02 2021 GMT
            Not After : Mar 24 14:48:02 2026 GMT
        Subject: CN=e175333eaa18674642edc3b1125c85a66fc87480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:b4:08:f0:ca:7e:ff:c1:fc:52:f5:03:d7:
                    32:79:a4:0e:8a:82:f3:5d:a2:ce:b5:13:9d:1a:89:
                    ee:4c:06:77:37:c6:e8:3a:ab:24:8b:37:19:da:32:
                    70:43:60:d6:2f:f3:c8:c3:d9:59:12:50:a5:6e:6e:
                    58:05:61:12:5f:bd:47:5c:f8:7f:b5:ee:44:43:90:
                    2d:19:4f:b5:3f:c2:e3:80:80:51:f0:c3:2a:ec:56:
                    6d:0e:53:55:61:72:5d:e8:11:a7:7d:33:80:bd:52:
                    8a:59:79:99:6c:af:f3:01:9b:95:50:1d:8e:92:3b:
                    94:91:da:20:26:7d:69:df:e4:d4:65:fd:84:04:8d:
                    c0:8f:e7:1f:92:c1:42:c2:8f:c1:62:26:b2:62:6b:
                    49:d5:ee:c7:ff:ed:e9:d8:a7:fb:7f:c0:2a:74:34:
                    b5:75:6a:1b:15:f9:94:0f:e3:ba:2b:ca:b1:ac:73:
                    58:ae:20:4f:78:5a:19:36:e1:c3:42:bd:cd:0e:85:
                    f6:85:53:cb:1e:df:75:42:0a:83:c4:53:9c:01:79:
                    b0:fc:9c:e2:34:9b:57:e0:2a:ef:23:d1:84:dc:dc:
                    5f:53:96:fd:6f:08:0f:6e:fe:82:4d:4c:59:71:1c:
                    09:3c:ac:09:3c:80:09:11:7e:a5:58:09:46:7f:1f:
                    9b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B9:EA:3D:73:25:2B:C6:3B:C8:C5:77:D8:4A:98:00:90:2E:27:1D
            X509v3 Authority Key Identifier:
                keyid:0D:FB:6E:FB:13:28:1B:AA:C1:19:FD:C7:C9:50:91:48:87:0C:02:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ce734ab5bcb4d2ab5fe5de4290e5746296d58b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/901eb55c-e24b-4030-b7b8-fa4b8e3a6a30/e175333eaa18674642edc3b1125c85a66fc87480.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/901eb55c-e24b-4030-b7b8-fa4b8e3a6a30/0ce734ab5bcb4d2ab5fe5de4290e5746296d58b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:e6:31:ca:07:14:68:58:33:6d:d8:7b:6b:73:b4:cc:b9:4b:
         08:dd:7a:43:ce:8f:e9:97:ab:07:92:e0:10:cb:4e:bf:36:e0:
         33:6a:74:55:ae:f2:ce:64:7a:64:84:60:20:b8:20:b1:e0:64:
         3a:c2:2e:9b:a4:09:26:e4:4f:e9:0a:e5:b2:a2:16:17:ca:a5:
         1f:40:99:62:c2:2b:51:a4:39:05:53:35:40:bf:45:a3:2e:fb:
         35:bc:64:fd:4b:37:74:3f:2c:a4:8a:98:fb:ef:f0:5d:44:6a:
         70:a8:92:64:6c:b2:df:bc:de:ca:82:af:91:b2:ba:36:6a:b0:
         1c:80:63:cd:90:68:14:e7:8c:38:ef:46:38:1d:41:a9:d4:73:
         93:11:d6:79:46:64:3f:42:b6:d2:46:49:97:a7:41:1b:7a:ac:
         e0:66:03:ba:d2:52:cc:19:c7:9f:61:82:dc:3b:81:4b:5b:24:
         6e:7a:06:8d:c9:cc:bd:c0:ba:4c:03:4f:a9:45:88:e4:b1:74:
         97:dd:44:e3:8e:70:2a:38:59:58:8f:3e:4e:25:e4:20:7b:a9:
         88:e6:ab:a1:73:bc:12:ec:d4:6d:47:9a:b3:8e:9f:4f:44:8c:
         39:7f:ad:57:94:f9:dd:a1:ca:52:b0:aa:db:cb:0f:78:e8:23:
         99:31:fb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----