Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/957e1c839ab3e529942a199743c73a953d7eff84.roa
File:                     957e1c839ab3e529942a199743c73a953d7eff84.roa (raw, json)
Hash identifier:          jK68fwmyccg7BgYph4Q5z5KS3sAmqqltBV/Ezfe3OS4=
Subject key identifier:   12:01:18:E4:64:46:0F:68:DD:0A:92:77:8E:15:0B:34:0B:5E:EC:E5
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       0D9628
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/957e1c839ab3e529942a199743c73a953d7eff84.roa
Signing time:             Wed 24 Mar 2021 14:41:28 +0000
ROA not before:           Wed 24 Mar 2021 14:41:28 +0000
ROA not after:            Tue 24 Mar 2026 14:41:28 +0000
asID:                     264668
IP address blocks:        45.71.252.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890408 (0xd9628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Mar 24 14:41:28 2021 GMT
            Not After : Mar 24 14:41:28 2026 GMT
        Subject: CN=957e1c839ab3e529942a199743c73a953d7eff84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f1:c0:84:57:52:a1:2a:26:2c:e4:7b:2f:4f:
                    7d:3f:d9:2c:79:fd:39:3d:cf:9f:e5:95:31:17:a1:
                    7d:f8:96:28:d9:bf:a4:ae:95:b9:81:64:54:c3:43:
                    93:d3:ca:98:26:f8:9c:7f:1c:c3:29:b6:8b:fc:7c:
                    5a:ab:ac:14:33:fc:c6:4f:24:91:43:3d:5c:9c:91:
                    b3:41:9f:04:33:d4:71:08:72:88:14:68:7e:36:85:
                    08:27:94:22:9f:71:89:74:5f:d9:28:32:f7:c3:5e:
                    38:1a:b6:0c:60:0b:eb:2a:91:32:ed:b6:b2:60:30:
                    90:d3:08:ed:65:76:7a:3a:14:a3:2b:00:a8:80:4c:
                    f9:51:52:07:48:3f:08:0d:93:ab:5d:9a:77:6f:f2:
                    a5:27:4f:99:a5:5e:9d:19:1e:b8:23:12:fd:69:45:
                    a7:7d:52:e2:22:c5:92:14:6d:ba:9d:de:c2:96:ed:
                    07:ca:4a:af:34:9c:21:1a:f9:4b:1c:7f:b4:c5:83:
                    1a:b7:dd:bd:5a:a7:17:d0:7e:4d:3e:3d:15:71:53:
                    35:72:03:2d:7f:f1:fb:5d:12:51:ce:31:00:2f:48:
                    44:72:ad:90:64:82:75:b4:e4:6b:1a:ce:aa:1b:67:
                    2e:5c:5e:51:27:8b:04:62:4c:e0:e6:e6:8f:4d:2b:
                    07:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:01:18:E4:64:46:0F:68:DD:0A:92:77:8E:15:0B:34:0B:5E:EC:E5
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/957e1c839ab3e529942a199743c73a953d7eff84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:33:6b:ea:01:90:68:bb:5c:90:94:5f:ee:61:a5:81:50:82:
         8a:67:c2:c6:18:2c:c0:84:fb:d6:ec:08:84:3d:ef:64:1a:5e:
         26:07:90:7e:04:91:a2:dd:1e:e9:e3:c1:8e:3b:81:3e:a3:27:
         08:c2:f8:63:4c:bb:c6:a2:f1:b7:83:7c:c3:e0:9a:e7:86:78:
         d9:79:7a:5a:03:75:a9:ab:3c:95:7d:3a:89:ca:1d:88:85:b2:
         ab:e5:17:93:14:7a:84:73:89:92:26:2c:40:22:a9:53:26:54:
         0d:1e:cf:67:3e:03:1e:1c:ff:49:33:29:e0:8e:2b:b9:1d:f4:
         bb:01:f1:95:5b:67:0b:38:23:19:ec:53:ff:f2:f4:08:c4:92:
         44:61:cc:1d:92:c7:b2:e2:03:78:f9:27:f9:ba:00:9e:d5:be:
         dc:ed:0f:7b:aa:4c:ef:5e:ea:f6:a3:c1:8f:b0:39:71:50:95:
         cb:9d:1f:46:86:84:b2:33:c6:20:f8:bc:fb:43:3f:7e:5b:50:
         e1:f6:35:90:45:a6:b5:94:b6:f9:3d:5f:09:e1:f8:98:c9:ad:
         ec:36:78:76:bd:c6:70:5d:81:79:d7:32:30:ca:9f:75:c2:e2:
         1a:9f:f3:72:00:82:39:7d:24:7e:3d:de:52:7c:1a:00:f3:ce:
         45:9c:ff:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----