Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ea89f0b8187e8ff8fe01d677307e49a5810e75e6.roa
File:                     ea89f0b8187e8ff8fe01d677307e49a5810e75e6.roa (raw, json)
Hash identifier:          R7i8u19Y8gfzEJHSZ1+dI6xgT5AAQ0PK6JUhwoDm4IE=
Subject key identifier:   BA:C2:CB:7C:6B:1F:C8:18:EE:06:0A:0B:9C:67:62:89:B9:F8:06:B6
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EC319
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ea89f0b8187e8ff8fe01d677307e49a5810e75e6.roa
Signing time:             Wed 24 Mar 2021 14:29:31 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.209.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 967449 (0xec319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=ea89f0b8187e8ff8fe01d677307e49a5810e75e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1d:b6:9b:13:5f:f5:cb:73:4f:dc:a7:18:78:
                    38:81:43:95:d1:70:0c:14:fb:74:30:27:8e:44:ee:
                    f1:0d:8c:e6:c2:88:53:5a:02:98:26:2f:9a:d8:48:
                    34:0a:0f:dc:1c:cc:a6:3b:f9:ec:ab:a4:22:f5:47:
                    7e:bb:af:3d:a4:8e:0f:08:f7:a6:e1:0d:39:d9:54:
                    b1:45:2e:b8:70:dc:34:63:37:f3:7d:cc:ef:75:5e:
                    63:43:df:90:d3:34:63:34:0a:06:42:d0:57:be:b6:
                    71:f2:f9:d3:e0:df:d4:6f:66:42:c9:db:98:5e:73:
                    9b:ca:dc:26:73:20:c4:3d:48:6d:40:8a:57:44:9c:
                    68:32:94:e2:54:22:44:79:b0:ee:f8:9f:2a:84:da:
                    4a:93:00:91:55:8c:26:bc:d0:6b:14:36:9c:63:39:
                    40:9c:79:d3:23:d2:b7:4e:60:d4:6e:72:98:f0:3d:
                    cd:04:59:2b:bb:63:c6:e1:69:0b:52:16:cc:4b:90:
                    2e:e3:08:f6:ba:55:af:af:81:e5:65:29:51:04:72:
                    7c:15:e9:21:7e:83:1b:77:47:c3:d7:1d:f1:a4:c0:
                    fb:a9:c7:c4:aa:bb:ca:4f:cc:15:8b:a8:7f:3d:a7:
                    cb:94:a5:10:4d:ce:94:1d:89:5c:b1:0c:77:02:ee:
                    ee:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C2:CB:7C:6B:1F:C8:18:EE:06:0A:0B:9C:67:62:89:B9:F8:06:B6
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ea89f0b8187e8ff8fe01d677307e49a5810e75e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:14:69:cf:67:17:c7:99:ca:e4:50:f7:be:5a:5f:15:50:71:
         0f:40:9d:ad:fe:44:c2:cc:5c:43:59:63:a9:7a:c8:9c:32:62:
         50:01:2d:64:ae:43:eb:cd:4b:e0:96:4c:2f:f7:f1:23:b7:2b:
         5d:dc:68:96:f8:34:81:d4:c2:15:f4:ce:98:19:a4:bf:b6:45:
         71:4d:b3:aa:4e:48:c8:5f:c2:b6:90:ba:90:c0:2a:8a:d6:5c:
         72:a4:ff:13:b3:2e:01:7f:fb:41:68:8d:ea:7b:f4:d7:5b:29:
         79:d2:79:75:97:ed:cf:85:85:08:c0:8d:ae:c4:88:06:38:12:
         32:0e:23:18:9f:05:ba:85:e3:ed:b9:44:6f:b2:83:f7:d1:04:
         3c:5e:71:c3:0b:cb:1c:da:14:ce:9a:8e:fd:05:1c:18:aa:d5:
         99:6c:e3:63:8f:69:b6:6c:7e:2d:b8:cf:0c:b7:df:09:6c:16:
         a5:85:7c:8d:1d:11:92:05:e9:2a:22:68:4c:02:a1:95:a6:17:
         29:f3:3c:e0:33:70:9a:d7:1c:52:c7:76:30:4d:03:10:3b:d7:
         f6:85:0b:87:0e:fe:12:3a:71:80:a8:12:16:65:d2:b0:b6:fe:
         43:24:98:3f:1d:97:bf:1c:6a:2f:fa:cf:75:b3:e1:64:d2:e5:
         65:27:30:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----