Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9197480f-a4b3-4e08-984d-c4521ac45094/89b23206408dd4534f800a2e23475121958d154c.roa
File:                     89b23206408dd4534f800a2e23475121958d154c.roa (raw, json)
Hash identifier:          4cr9tCH4kZE+J4NBwkmWF9byvmJiNdcPeQ4aPJGjd4E=
Subject key identifier:   16:AC:57:3E:09:7C:59:06:C1:E4:58:90:88:A5:B6:4A:A1:90:32:3A
Certificate issuer:       /CN=6e6c24239084f733054ec407015e5331b5b41b77
Certificate serial:       05934F
Authority key identifier: F0:BD:1A:66:94:93:90:C8:79:AE:50:22:2C:4C:6C:1A:CA:4C:77:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e6c24239084f733054ec407015e5331b5b41b77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9197480f-a4b3-4e08-984d-c4521ac45094/89b23206408dd4534f800a2e23475121958d154c.roa
Signing time:             Thu 14 Oct 2021 15:40:56 +0000
ROA not before:           Thu 14 Oct 2021 03:00:00 +0000
ROA not after:            Sat 14 Oct 2023 03:00:00 +0000
asID:                     52255
IP address blocks:        186.0.160.0/20 maxlen: 24
                          201.159.56.0/21 maxlen: 24
                          2803:f100::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365391 (0x5934f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e6c24239084f733054ec407015e5331b5b41b77
        Validity
            Not Before: Oct 14 03:00:00 2021 GMT
            Not After : Oct 14 03:00:00 2023 GMT
        Subject: CN=89b23206408dd4534f800a2e23475121958d154c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:db:80:4f:62:ab:d0:8b:24:17:69:11:76:3f:
                    9c:a1:10:ce:2a:80:22:88:7e:36:c4:33:7f:16:33:
                    ab:e4:f8:20:17:5b:d3:bf:65:e8:93:35:f6:c8:e3:
                    46:c5:26:80:9b:1e:9f:c3:9b:02:66:0e:6e:31:65:
                    ba:fc:50:4d:bd:45:26:05:8b:26:bc:6e:95:97:e4:
                    10:3c:87:9a:59:e0:f2:4b:11:fe:f6:8a:36:2f:2b:
                    91:a3:47:c4:61:18:72:f9:22:4a:55:0a:b3:8f:36:
                    e9:4e:11:c2:9e:94:95:ad:7f:d2:4d:f3:48:ed:ad:
                    31:a7:44:9b:2b:f5:04:70:d4:a5:57:29:1c:f4:c7:
                    89:b8:eb:6d:18:d2:21:fd:f4:d2:df:e3:34:7d:c3:
                    c8:c1:e0:5d:6a:ee:46:37:47:72:e7:4b:14:2e:3b:
                    c3:bb:40:81:70:c7:4d:70:44:9f:39:c2:3c:64:7b:
                    9e:94:26:bc:f2:03:d3:6a:c3:f8:64:80:1f:80:6d:
                    14:d8:40:b7:03:e3:91:ab:a9:3c:d2:a8:bf:a2:bf:
                    c8:70:09:6c:5b:fc:c1:40:da:db:09:66:5d:b2:f7:
                    de:56:df:bb:4e:e9:48:cf:44:43:96:ce:1a:85:cf:
                    89:c4:78:aa:97:3f:f8:f3:28:f1:bf:e1:14:83:b8:
                    57:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AC:57:3E:09:7C:59:06:C1:E4:58:90:88:A5:B6:4A:A1:90:32:3A
            X509v3 Authority Key Identifier:
                keyid:F0:BD:1A:66:94:93:90:C8:79:AE:50:22:2C:4C:6C:1A:CA:4C:77:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e6c24239084f733054ec407015e5331b5b41b77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9197480f-a4b3-4e08-984d-c4521ac45094/89b23206408dd4534f800a2e23475121958d154c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9197480f-a4b3-4e08-984d-c4521ac45094/6e6c24239084f733054ec407015e5331b5b41b77.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.160.0/20
                  201.159.56.0/21
                IPv6:
                  2803:f100::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:df:fe:c0:ff:c5:eb:28:42:56:cc:8d:03:71:7d:ef:0d:5d:
         b5:2e:cf:f3:bf:2b:7c:00:da:87:fe:f5:af:f9:60:04:05:f3:
         5c:d7:75:36:86:cc:04:b3:4a:85:0f:05:8f:72:ca:f9:56:c5:
         cf:b4:f6:9b:96:45:5e:88:30:8a:24:52:4b:20:91:4f:30:6e:
         c1:fb:03:62:ec:75:db:eb:fe:8a:39:fa:47:56:43:a4:1c:42:
         33:51:be:ce:ea:b6:c0:da:f2:fd:c7:c9:58:6e:88:49:e7:f7:
         1e:b1:cb:b4:3b:84:4d:23:61:52:24:5c:b6:36:b7:96:2c:fb:
         51:18:25:e7:dd:c8:1f:26:5a:5a:8f:42:0c:b8:20:f7:ab:99:
         f2:83:d2:d8:b7:d0:dd:b1:d5:ca:07:d8:c6:fb:23:d6:13:8d:
         8e:db:85:d7:a1:06:0f:66:f6:61:a8:9c:9e:3e:a4:da:e9:94:
         8a:99:82:21:7c:2f:83:63:a6:21:5d:b5:29:36:1a:4f:7f:b0:
         24:3c:b3:c3:be:1a:61:62:1c:e6:1c:55:5c:7e:3f:55:4d:5d:
         82:6a:eb:59:fe:17:b5:45:95:05:d3:3d:77:a1:34:8a:28:56:
         5e:ff:bd:a4:07:2b:0d:11:7f:82:21:77:79:fc:32:c3:f6:eb:
         d9:ec:d7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----