Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/0ffe7d51d70eec9f1062f812880d90c02a974129.roa
File:                     0ffe7d51d70eec9f1062f812880d90c02a974129.roa (raw, json)
Hash identifier:          ydt57dPHkt1lurFWuswcyMbNef9WxZtM6OG7akbBi8U=
Subject key identifier:   99:3A:25:26:DA:E7:A4:10:1F:2E:F5:26:51:26:CA:68:48:DD:D6:C1
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EEC67
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/0ffe7d51d70eec9f1062f812880d90c02a974129.roa
Signing time:             Wed 24 Mar 2021 14:29:31 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.202.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 978023 (0xeec67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=0ffe7d51d70eec9f1062f812880d90c02a974129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1f:44:99:ad:d0:14:87:d2:73:fd:fb:5c:b8:
                    74:04:59:dc:b1:16:69:67:f4:72:35:2c:15:ae:37:
                    5d:03:48:4f:2c:9f:50:95:98:ff:84:1d:63:91:95:
                    56:b1:23:48:62:16:21:94:47:22:4a:c9:a0:88:43:
                    f8:1c:f8:4a:de:26:61:cf:eb:80:4b:4e:05:ac:19:
                    25:33:30:20:8e:1e:c3:1d:41:ee:75:c6:ad:47:5f:
                    1f:ba:3f:fe:d3:b4:b7:1e:02:8b:b5:42:c8:c7:9d:
                    73:da:33:33:5b:a7:5a:cb:d8:95:8a:91:60:5c:93:
                    63:08:b1:b8:28:4a:d7:2f:87:ae:fa:fe:b9:a5:2a:
                    1a:31:4f:ce:7c:3c:63:ac:80:20:42:30:b1:75:91:
                    fc:fe:32:ef:06:12:ee:7c:2b:96:66:1d:6b:ac:48:
                    52:73:9d:bd:7f:28:db:c7:92:b8:06:53:14:09:a7:
                    bb:ae:69:65:19:c2:29:3f:69:c7:33:f7:73:9d:1a:
                    8f:57:26:d9:4a:46:0f:a9:e4:24:51:8d:bf:61:41:
                    0c:99:bf:5a:5f:40:59:d1:65:a0:e5:27:36:cf:0b:
                    42:5a:a9:08:90:0e:6e:3f:ce:25:49:90:cd:d8:14:
                    e9:71:bb:2d:44:78:97:cd:d0:a4:cd:5f:48:e1:f7:
                    8c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3A:25:26:DA:E7:A4:10:1F:2E:F5:26:51:26:CA:68:48:DD:D6:C1
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/0ffe7d51d70eec9f1062f812880d90c02a974129.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:c8:cd:e0:9c:62:1d:78:17:11:c6:28:f9:2e:35:4c:59:75:
         52:a1:ba:2a:d8:88:96:49:5b:44:64:8e:01:af:40:2e:d6:21:
         82:d9:85:1b:3d:8e:60:65:cb:ed:e7:7d:26:62:a3:1f:5d:7c:
         62:53:ca:1f:6d:b4:52:46:dd:35:e9:3d:70:1c:1a:21:82:00:
         71:42:be:94:74:2b:5a:b4:1d:f2:a7:1e:7e:36:84:0c:86:6e:
         17:1e:fc:47:cd:31:11:13:b0:09:54:f5:10:fb:9d:2b:da:0a:
         8f:5a:64:0c:ac:4d:d2:14:cd:e1:ee:4c:c0:2b:47:f5:a6:76:
         ce:4d:e7:11:b0:46:54:ad:a3:26:35:b5:2a:ee:9a:53:0c:41:
         1d:9f:bb:62:3e:a9:d6:5f:3a:74:35:d3:66:5b:95:2f:82:51:
         89:cb:c2:61:d7:69:9a:1c:c5:1c:93:00:c4:1d:87:ff:30:6b:
         65:00:76:1d:57:f3:a9:4f:62:24:45:da:36:8b:e0:83:53:3b:
         d3:6a:d9:50:71:35:3b:c9:49:1c:38:0c:42:8a:67:f8:ff:f4:
         6b:8a:2b:83:f5:d8:b7:26:e8:a9:40:63:bc:cd:25:7b:e9:8d:
         5f:3e:1a:b1:31:e7:cb:4f:d1:5a:11:95:86:59:99:57:cf:ab:
         c8:e7:cb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----