Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/fb9b8bef9b039e66ff195412db3618ab7a56a771.roa
File:                     fb9b8bef9b039e66ff195412db3618ab7a56a771.roa (raw, json)
Hash identifier:          +NwUrn4InnzdwSkGEciqBi1pwOWNNF/FizIkDMiSmrE=
Subject key identifier:   FE:76:DC:05:82:D5:8F:92:4D:05:16:2D:53:61:8F:5C:5F:64:12:7F
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EE003
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/fb9b8bef9b039e66ff195412db3618ab7a56a771.roa
Signing time:             Wed 24 Mar 2021 14:29:31 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 974851 (0xee003)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=fb9b8bef9b039e66ff195412db3618ab7a56a771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b9:97:40:ba:f9:40:fb:f2:69:5f:1a:9f:0d:
                    02:87:70:ad:e3:44:6a:fe:7a:18:86:a1:ec:09:f6:
                    12:b6:2f:3d:75:70:4d:a6:79:d5:eb:a7:a2:c9:12:
                    bb:96:58:63:66:81:63:18:0e:b4:19:55:a4:18:a2:
                    2a:56:9b:48:cd:d7:f2:d1:2b:20:be:00:ff:41:d5:
                    62:aa:e5:41:00:d6:32:50:6f:98:09:bb:d3:6a:f3:
                    36:b2:be:2b:3b:8d:24:11:c8:ef:4d:13:06:c2:ec:
                    0c:f1:42:d1:4e:45:a4:7f:8f:74:09:6c:1d:91:d4:
                    48:24:35:32:3e:e1:48:fa:83:9a:79:a8:39:68:d7:
                    7f:ea:cd:51:1a:05:66:ce:48:ef:45:65:d7:35:27:
                    46:b2:5c:ba:fc:fd:a8:ff:e5:e9:3c:1a:d2:17:0d:
                    49:36:c5:33:db:e5:5d:dd:ce:07:7e:2b:40:6b:cb:
                    dd:d9:4b:52:c4:41:d7:5a:13:99:9d:f8:9f:df:62:
                    b3:a0:7d:6e:ee:8b:64:bf:03:47:22:46:07:62:fe:
                    46:c4:57:92:b1:27:c9:56:08:a2:69:42:47:13:e1:
                    2d:18:a2:ed:cc:0c:a8:90:ee:63:cf:cd:df:57:6e:
                    31:bc:80:5a:b9:30:22:8c:7b:c8:8c:56:7a:0e:08:
                    a3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:76:DC:05:82:D5:8F:92:4D:05:16:2D:53:61:8F:5C:5F:64:12:7F
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/fb9b8bef9b039e66ff195412db3618ab7a56a771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:87:11:38:5c:82:71:93:26:f2:45:33:26:c5:0d:cb:b8:11:
         91:bb:c7:bb:55:30:95:d1:d1:aa:80:13:e8:cd:6a:0e:38:16:
         3b:10:56:82:c2:96:e1:7e:f8:6f:28:5a:87:44:09:0c:86:26:
         e2:51:2e:b6:62:1f:fb:6c:29:37:32:ff:dc:69:51:83:57:7d:
         58:33:3c:9a:95:f0:8b:ae:51:f7:1e:a5:dc:6e:50:f6:81:c3:
         5d:3e:f3:81:89:d3:3b:d4:6f:2a:c2:d1:3f:9e:f5:17:03:63:
         1c:fa:cf:26:d2:2d:c1:dc:2d:3c:b4:7f:61:cc:82:7a:1d:7f:
         f9:a0:f3:95:07:3f:68:1c:76:56:81:12:58:b5:8d:58:5c:a5:
         18:f3:2d:7c:58:fa:56:c3:16:4d:ea:23:c2:80:a1:8a:9c:67:
         f5:45:59:d2:7e:d5:61:26:ac:09:ae:28:09:1f:29:fb:9e:a5:
         75:b8:1e:1d:2d:e6:11:58:18:10:de:3c:84:0c:35:d0:99:68:
         ca:ff:3c:b2:e5:ac:03:f2:cf:89:73:c1:2d:1a:6a:97:5c:63:
         93:2a:ae:79:20:2e:35:3f:46:2f:fa:3e:15:96:43:6e:da:b4:
         0d:ce:a2:46:d6:57:d2:18:18:ab:2d:32:77:05:77:2d:06:d5:
         9e:52:78:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----