Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/8784654d4995e57a8a0886cb37ad66de551c5f59.roa
File:                     8784654d4995e57a8a0886cb37ad66de551c5f59.roa (raw, json)
Hash identifier:          6vrSN/Ul9XaMRY55o5nL1Nf+ByTmuxCPIv/TPCwTP/Q=
Subject key identifier:   2C:00:46:5F:4F:9F:2C:E3:FB:7F:3F:30:14:55:4B:C5:83:67:D5:26
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EC675
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/8784654d4995e57a8a0886cb37ad66de551c5f59.roa
Signing time:             Wed 24 Mar 2021 14:29:31 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.140.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 968309 (0xec675)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=8784654d4995e57a8a0886cb37ad66de551c5f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2b:63:6b:79:7e:36:ee:0a:3c:d3:0d:f9:d4:
                    66:92:cc:5a:07:a9:45:ab:8a:58:49:c8:ce:52:94:
                    1f:56:d4:58:70:ee:f8:a5:73:71:8b:2f:91:64:b9:
                    d3:41:87:1a:26:b2:8a:1a:26:07:cb:e7:ff:99:b1:
                    1a:a8:fe:9d:f6:45:51:6e:39:8f:b9:1c:1c:32:9d:
                    1c:7a:06:ea:ec:01:ea:2d:ee:33:07:d0:63:61:da:
                    a0:48:5c:8a:85:6a:ba:a4:15:e8:2d:99:d2:36:2e:
                    97:77:c6:57:66:89:71:09:3a:f9:04:78:b7:4b:f6:
                    0a:70:c0:c3:0b:1e:04:a7:e7:3b:c3:b0:74:6f:9b:
                    51:4f:52:15:1f:95:d8:92:3b:fc:d0:49:61:b1:c6:
                    de:d1:f6:4f:fd:c4:39:c8:55:9e:69:d5:49:fc:2c:
                    b9:b9:9c:30:2f:96:69:a7:5e:f2:09:bc:45:1e:80:
                    13:17:d8:31:67:86:41:1c:a7:cd:9f:b1:ff:db:f6:
                    ad:4d:1c:97:c8:26:46:9a:d1:73:35:ca:0c:81:15:
                    ef:85:63:da:78:b9:67:d5:75:2f:b8:6a:c4:20:93:
                    9f:be:5d:80:ed:6c:bc:58:70:cf:4e:da:d3:cb:b1:
                    61:6c:f8:6c:2f:2e:3b:c1:bc:b9:c4:ac:71:32:f3:
                    63:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:00:46:5F:4F:9F:2C:E3:FB:7F:3F:30:14:55:4B:C5:83:67:D5:26
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/8784654d4995e57a8a0886cb37ad66de551c5f59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:a5:9d:93:cf:98:78:2a:a6:39:49:4c:b4:a8:0b:89:0f:28:
         1b:51:f6:1b:97:00:77:bc:78:ca:d1:34:20:42:08:b2:69:4e:
         37:53:68:b2:99:fe:e0:61:39:f4:8b:65:7c:ab:28:b8:74:9c:
         c1:a5:7e:4d:b5:b0:83:2e:0a:d4:1f:86:06:be:22:2d:26:69:
         2f:f7:19:b3:9f:63:c6:a1:69:58:38:5e:4f:fc:e4:6a:bc:d8:
         85:44:ad:27:05:97:12:c4:e5:78:0e:23:c4:60:cf:22:62:85:
         21:27:68:44:93:f1:fc:91:ec:e1:1b:bc:96:cb:66:6b:6f:5f:
         1a:a9:0e:7e:55:13:00:36:d1:a9:3e:e1:5f:bd:40:ef:2c:28:
         1e:c4:db:51:88:99:06:d0:2e:8c:6e:11:fc:84:be:22:08:86:
         fd:c5:e8:27:4e:74:71:7c:ee:04:eb:95:8c:68:2b:a6:5c:e8:
         58:1f:f3:70:95:84:03:05:50:bf:da:dd:89:7a:df:7f:0f:19:
         56:6d:d0:e7:61:5e:53:28:f8:66:58:1c:0f:03:79:dd:d6:ad:
         1a:cc:64:27:97:b0:01:62:aa:ed:b1:86:56:6d:b0:26:6f:78:
         08:af:d4:75:86:97:86:bf:d9:a8:ee:d0:57:73:4f:0f:8f:39:
         6f:85:e6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----