Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9197480f-a4b3-4e08-984d-c4521ac45094/ec21cec2a64e40df4cff2ef8543ac0866c19a0e7.roa
File:                     ec21cec2a64e40df4cff2ef8543ac0866c19a0e7.roa (raw, json)
Hash identifier:          +roX6v/obRSRo8nJrdeerj0MqzYOPtQe8RaafuJozvk=
Subject key identifier:   6A:8E:64:1F:97:50:17:ED:2C:B0:63:2D:25:74:88:A8:1B:05:1B:02
Certificate issuer:       /CN=6e6c24239084f733054ec407015e5331b5b41b77
Certificate serial:       17C965
Authority key identifier: F0:BD:1A:66:94:93:90:C8:79:AE:50:22:2C:4C:6C:1A:CA:4C:77:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e6c24239084f733054ec407015e5331b5b41b77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9197480f-a4b3-4e08-984d-c4521ac45094/ec21cec2a64e40df4cff2ef8543ac0866c19a0e7.roa
Signing time:             Fri 13 Oct 2023 08:30:00 +0000
ROA not before:           Thu 12 Oct 2023 08:30:00 +0000
ROA not after:            Sat 11 Oct 2025 08:30:00 +0000
asID:                     52255
IP address blocks:        186.0.160.0/20 maxlen: 24
                          201.159.56.0/21 maxlen: 24
                          2803:f100::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1558885 (0x17c965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e6c24239084f733054ec407015e5331b5b41b77
        Validity
            Not Before: Oct 12 08:30:00 2023 GMT
            Not After : Oct 11 08:30:00 2025 GMT
        Subject: CN=ec21cec2a64e40df4cff2ef8543ac0866c19a0e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e7:84:0e:3d:da:74:0f:75:c4:e9:44:a9:7e:
                    14:b6:17:76:8d:51:ac:ef:06:30:3c:64:bc:5a:e9:
                    5b:b5:7f:fa:b0:94:62:26:d4:44:95:bd:be:89:40:
                    67:ff:5a:cf:3b:94:c1:85:57:5a:c6:99:cf:3e:7c:
                    cc:ce:b3:10:e3:31:36:de:8d:92:66:8c:9c:26:4f:
                    d2:f4:43:f8:99:09:a7:aa:7c:3b:91:3a:4e:e8:ae:
                    7c:9a:83:75:86:cd:31:95:13:8f:58:8d:20:1d:4a:
                    e6:62:57:bd:0a:ef:eb:f0:de:5b:57:c1:c2:ce:6e:
                    5d:59:f1:95:b0:24:79:97:ae:f4:27:af:c6:71:23:
                    df:c5:1f:6e:34:80:21:65:37:2a:d4:fc:f5:1c:7c:
                    dc:cf:8f:57:76:5c:5e:9e:8c:bb:18:e5:01:86:e1:
                    d1:15:15:48:0f:96:75:5b:02:58:cc:ab:29:fd:81:
                    79:c8:af:4c:e9:f6:38:8e:af:33:16:09:f5:c6:e3:
                    48:7a:1c:9f:7e:de:29:77:fc:a3:cc:9e:b3:be:0b:
                    ec:39:44:f3:ef:d9:1f:8c:28:d8:7f:82:cd:e0:8f:
                    e9:fc:d6:6a:00:6d:e1:aa:3f:93:b5:6d:83:19:23:
                    71:58:f6:ed:f8:75:03:75:f7:08:96:0b:37:fd:37:
                    98:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8E:64:1F:97:50:17:ED:2C:B0:63:2D:25:74:88:A8:1B:05:1B:02
            X509v3 Authority Key Identifier:
                keyid:F0:BD:1A:66:94:93:90:C8:79:AE:50:22:2C:4C:6C:1A:CA:4C:77:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e6c24239084f733054ec407015e5331b5b41b77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9197480f-a4b3-4e08-984d-c4521ac45094/ec21cec2a64e40df4cff2ef8543ac0866c19a0e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9197480f-a4b3-4e08-984d-c4521ac45094/6e6c24239084f733054ec407015e5331b5b41b77.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.160.0/20
                  201.159.56.0/21
                IPv6:
                  2803:f100::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:6c:a4:59:0b:4a:93:85:00:dd:14:33:c8:19:98:f2:fe:ea:
         25:29:9c:6b:1f:72:eb:33:95:d4:16:ca:5c:0b:fb:65:52:8b:
         80:88:3d:45:3a:02:21:c5:6a:f1:0d:87:c1:42:cc:40:fe:c6:
         6b:52:60:66:dc:31:6c:39:75:af:09:e6:5d:c2:e8:a7:69:81:
         2e:26:14:9b:52:ec:f3:bc:61:6f:9a:e4:db:5a:23:bc:00:8c:
         bd:da:6c:34:eb:79:49:78:d8:9b:81:2b:e1:4d:ee:61:4a:65:
         ee:df:b9:2a:4c:c3:68:0c:58:f9:0a:be:b1:44:08:05:c1:5d:
         38:be:b9:cd:69:0e:16:b1:98:99:fa:35:fa:2b:26:9d:af:04:
         9d:a0:ea:14:9f:a1:f8:13:b0:6d:71:3e:fc:1d:48:d0:db:ab:
         05:58:cd:72:fe:01:83:2c:be:1b:86:6c:18:ba:8e:69:60:7b:
         b2:01:87:2d:ca:b2:6f:fa:ac:ed:a0:60:64:40:28:22:12:47:
         e4:3c:dd:b1:d9:63:0a:4a:2e:24:43:ac:d4:d4:c7:e7:43:58:
         e4:4c:d1:2e:70:2a:12:15:74:e4:0e:82:59:9d:90:b9:26:61:
         36:d4:e3:7a:d8:13:c7:d4:82:ba:a4:38:7f:e3:20:16:53:88:
         70:ca:d2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----