Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/e0fb2f807a580a9e4567825b437405af5b59e736.roa
File:                     e0fb2f807a580a9e4567825b437405af5b59e736.roa (raw, json)
Hash identifier:          Nx+4eSdgIN9e2M2alop6IlGw6vXQjTc+NdMC1UTT/lA=
Subject key identifier:   84:59:C9:21:49:42:24:E2:1C:11:E2:7B:38:DC:F2:1E:F2:21:71:8F
Certificate issuer:       /CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874
Certificate serial:       0DACC0
Authority key identifier: 20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/e0fb2f807a580a9e4567825b437405af5b59e736.roa
Signing time:             Wed 24 Mar 2021 14:42:15 +0000
ROA not before:           Wed 24 Mar 2021 14:42:15 +0000
ROA not after:            Tue 24 Mar 2026 14:42:15 +0000
asID:                     262234
IP address blocks:        179.49.112.0/21 maxlen: 21
                          2803:db00::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896192 (0xdacc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874
        Validity
            Not Before: Mar 24 14:42:15 2021 GMT
            Not After : Mar 24 14:42:15 2026 GMT
        Subject: CN=e0fb2f807a580a9e4567825b437405af5b59e736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:67:fc:f5:bd:ff:98:5c:f4:cf:80:f6:f5:03:
                    e1:62:9a:6d:2b:dd:f1:3c:a8:29:41:b3:4d:14:b4:
                    31:38:07:ab:14:0b:72:9f:bb:dd:0a:cb:38:0d:b7:
                    b7:bd:d7:d6:bb:dd:d3:4b:42:d8:74:fb:30:19:85:
                    4b:d9:5d:9f:b3:19:a9:9d:76:6b:b4:f2:52:da:b8:
                    a8:51:40:54:8f:47:0b:e7:e7:1f:9d:81:33:74:92:
                    ca:ff:62:0d:7f:a6:e0:87:4d:4b:5e:79:91:e6:b3:
                    72:90:17:ee:fb:d1:37:fc:95:fa:0c:3f:b2:6e:e8:
                    dd:a4:f5:39:2d:66:2f:d0:6a:8a:c5:88:68:6a:3b:
                    8c:47:83:96:8c:15:72:93:92:2e:d4:f2:e7:04:dd:
                    ee:d4:57:b6:de:0f:7c:6e:c9:f7:4f:e4:3f:9d:da:
                    76:5f:2a:13:07:d4:42:db:29:78:e7:d3:de:ab:95:
                    09:6e:26:3c:25:5a:c4:ed:b9:3f:80:9f:6b:09:ed:
                    30:ea:a4:e7:b7:04:7d:4b:cc:d7:0b:5c:7b:f2:12:
                    a2:06:3e:69:52:6a:e0:4c:d9:4a:30:ba:38:12:90:
                    ae:f1:64:56:3b:c7:9e:9e:16:1a:70:57:7b:7f:3b:
                    71:b3:98:0f:12:7e:c1:a2:ba:b0:0f:4a:92:81:23:
                    59:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:59:C9:21:49:42:24:E2:1C:11:E2:7B:38:DC:F2:1E:F2:21:71:8F
            X509v3 Authority Key Identifier:
                keyid:20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/e0fb2f807a580a9e4567825b437405af5b59e736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/50029dd9024c2c49dc8eb4a48df44bfd015f8874.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.112.0/21
                IPv6:
                  2803:db00::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:ee:a8:b9:26:53:16:e5:e2:57:5e:7e:97:8f:29:92:fd:07:
         26:2f:67:c7:ce:56:b2:92:f4:a9:df:91:34:3b:71:1f:18:5d:
         de:49:2b:b9:df:7b:c5:0d:7f:e6:21:02:29:c6:29:b8:5b:8e:
         4c:5c:38:fa:16:01:3a:ef:a3:57:66:45:a8:08:32:3f:5c:e3:
         3a:20:2e:77:9f:ba:8e:b9:be:90:f4:df:59:3f:b6:27:39:72:
         62:33:96:eb:b6:bf:c7:9b:cc:b6:41:2a:39:19:ff:2d:1f:d4:
         bc:47:12:4a:77:50:70:e5:1d:a3:37:36:80:52:7b:f7:ec:89:
         c9:e2:ff:03:f4:7e:5f:b0:f5:27:bb:c0:a0:47:27:27:d6:32:
         59:17:79:f2:59:b1:07:a5:09:61:6e:b4:7a:23:17:e6:3c:ae:
         b8:8b:45:6c:9c:04:da:b6:94:3e:4e:87:68:e6:c7:be:fd:f5:
         55:a8:e3:9f:9a:be:6f:63:6c:83:30:26:20:00:58:56:aa:bf:
         04:f9:51:21:c9:40:ec:98:8a:fd:e5:2e:33:52:7c:b5:e6:e4:
         e2:8c:43:90:ef:ef:c4:70:53:ad:11:52:b2:ed:2a:26:8d:e1:
         d1:4c:34:55:bc:50:ab:eb:22:0c:27:73:6a:b2:ed:b6:54:1d:
         e1:cb:11:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----