Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98779f99-e2a8-4f8e-ab86-6f6c9c2a79c8/88b9bff8189013998234ca1d7da63877d8bc16a5.roa
File:                     88b9bff8189013998234ca1d7da63877d8bc16a5.roa (raw, json)
Hash identifier:          t/p15SDCMzRFRnF42MuKi6lzVk0StcLt4VN23k5g0hw=
Subject key identifier:   FF:3A:71:44:8A:8E:EB:E3:B8:92:47:E9:B1:09:B1:E1:FA:A6:0C:53
Certificate issuer:       /CN=75ca6b0d77865de43b29133289fdba29f69c958f
Certificate serial:       0DD2A6
Authority key identifier: 23:CA:1E:E1:CF:08:73:D1:D0:CB:1C:C0:0A:04:65:2C:86:97:49:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ca6b0d77865de43b29133289fdba29f69c958f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98779f99-e2a8-4f8e-ab86-6f6c9c2a79c8/88b9bff8189013998234ca1d7da63877d8bc16a5.roa
Signing time:             Wed 24 Mar 2021 14:31:02 +0000
ROA not before:           Wed 24 Mar 2021 14:31:02 +0000
ROA not after:            Tue 24 Mar 2026 14:31:02 +0000
asID:                     264831
IP address blocks:        181.114.60.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905894 (0xdd2a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ca6b0d77865de43b29133289fdba29f69c958f
        Validity
            Not Before: Mar 24 14:31:02 2021 GMT
            Not After : Mar 24 14:31:02 2026 GMT
        Subject: CN=88b9bff8189013998234ca1d7da63877d8bc16a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:42:e9:cd:23:df:45:1f:fa:1a:47:94:3a:
                    e0:88:e2:cf:9e:e2:31:d5:77:d9:fc:f4:7a:96:d1:
                    c4:ee:d2:2b:02:e1:69:e9:44:3f:30:71:7d:69:2b:
                    e0:55:83:c7:57:52:f5:f9:fe:7d:df:b6:14:92:10:
                    5a:df:fd:a6:d8:f0:ec:6d:f6:4f:56:66:8e:e4:a5:
                    63:3a:77:81:98:7f:3a:d2:3f:b4:7a:c4:a7:16:c1:
                    a2:1e:e3:df:65:ea:c3:eb:c7:c4:93:6e:1e:7f:ee:
                    1b:fa:98:81:e0:58:9f:d8:f9:b3:4f:96:54:20:d1:
                    8c:1d:8a:ec:11:7f:6d:2b:c8:46:49:23:85:7a:e4:
                    25:1b:7b:88:07:7d:15:56:66:74:6b:3d:fd:c1:ac:
                    be:f8:4c:f0:57:c1:cc:f6:da:d7:0d:a5:79:1c:a5:
                    cf:e1:21:04:b7:63:ad:89:0c:b6:a2:ef:38:28:50:
                    de:60:1f:1f:01:20:17:77:8f:73:db:45:ec:b4:23:
                    f9:34:a8:ff:0c:05:07:0d:1f:b9:c7:ba:e4:fc:9d:
                    d8:32:75:67:cc:e4:c8:4f:93:97:34:72:77:0c:47:
                    3e:20:47:0c:ec:fb:27:bb:3e:7d:5e:4a:69:b7:fe:
                    82:68:f3:ef:db:d4:40:9c:49:8b:16:6b:0e:c7:ca:
                    3e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3A:71:44:8A:8E:EB:E3:B8:92:47:E9:B1:09:B1:E1:FA:A6:0C:53
            X509v3 Authority Key Identifier:
                keyid:23:CA:1E:E1:CF:08:73:D1:D0:CB:1C:C0:0A:04:65:2C:86:97:49:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ca6b0d77865de43b29133289fdba29f69c958f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98779f99-e2a8-4f8e-ab86-6f6c9c2a79c8/88b9bff8189013998234ca1d7da63877d8bc16a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98779f99-e2a8-4f8e-ab86-6f6c9c2a79c8/75ca6b0d77865de43b29133289fdba29f69c958f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:1f:37:53:63:81:7f:96:8c:25:40:bd:3a:2a:04:84:ab:97:
         1f:ad:eb:40:62:c8:67:65:c7:96:0b:23:e4:33:bb:c9:bc:21:
         21:97:3e:17:be:f5:ba:b8:f3:f2:8e:28:43:b4:4e:0c:a6:6c:
         fb:ab:71:a1:12:b0:95:28:56:f7:db:33:ba:b2:6e:99:81:82:
         63:c0:77:8b:91:d7:91:95:6f:c8:9f:e7:71:94:1d:05:4a:d2:
         ca:c5:35:34:d9:40:84:ce:18:57:90:87:ce:d4:0a:12:b4:8b:
         bd:aa:a6:97:7e:c4:93:b5:fd:0b:42:7d:a7:5f:d8:14:40:1d:
         34:9a:71:bd:44:b5:09:64:de:a2:e0:9b:d7:49:fd:b5:ca:a2:
         b7:9a:cf:8b:45:1c:9f:67:e9:de:c5:15:4d:fc:52:b9:81:99:
         2b:ea:8c:b5:18:af:86:56:83:87:88:f9:32:22:f0:0c:5d:50:
         fd:71:f2:0a:63:56:3f:af:8a:2e:76:85:02:be:a4:72:07:2b:
         93:f8:d9:b4:6c:d1:2c:03:ce:e2:2c:07:21:a1:91:8a:50:cf:
         87:7b:18:11:f9:6c:ac:ac:3b:d2:e5:e6:27:14:75:28:0f:83:
         83:fc:73:3a:72:07:07:d2:5c:46:c9:b0:78:00:84:ea:1c:8f:
         e4:ac:be:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----