Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/985afd054fede471a8fa88eb13605c5358f04ca4.roa
File:                     985afd054fede471a8fa88eb13605c5358f04ca4.roa (raw, json)
Hash identifier:          nu5Bo+lZF0T45Wh8eszwtked9v0K1fTkSheawEfSsfE=
Subject key identifier:   97:11:89:35:32:AF:4F:5F:D3:73:4A:0A:7C:4A:12:7D:BE:BA:A6:32
Certificate issuer:       /CN=600a05248a907def76410027882b2f4a8085c07a
Certificate serial:       217B87
Authority key identifier: BC:3B:FF:4B:5D:A8:0B:F5:44:27:AE:25:A5:40:BB:0C:11:7C:D2:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/600a05248a907def76410027882b2f4a8085c07a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/985afd054fede471a8fa88eb13605c5358f04ca4.roa
Signing time:             Thu 13 Jul 2023 12:04:43 +0000
ROA not before:           Wed 12 Jul 2023 12:04:43 +0000
ROA not after:            Sun 13 Jul 2025 12:04:43 +0000
asID:                     27831
IP address blocks:        181.206.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2194311 (0x217b87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600a05248a907def76410027882b2f4a8085c07a
        Validity
            Not Before: Jul 12 12:04:43 2023 GMT
            Not After : Jul 13 12:04:43 2025 GMT
        Subject: CN=985afd054fede471a8fa88eb13605c5358f04ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:34:0e:ef:88:ee:1a:12:46:ac:1d:30:0e:87:
                    f7:c3:a5:b7:40:16:02:a0:ba:8f:31:07:d7:28:a6:
                    74:d9:5e:2f:91:12:77:bd:98:f5:b6:bc:d2:0c:8c:
                    8f:12:aa:70:2c:70:24:fa:fd:62:29:85:60:30:cb:
                    3c:1d:73:c3:43:53:d0:4f:33:6b:77:6f:82:4f:80:
                    0e:fa:b5:cb:f3:04:e1:b3:89:f0:6c:ab:84:b6:4e:
                    84:f7:91:87:57:75:16:95:58:12:3e:9c:43:79:ac:
                    52:1a:fd:b0:26:e7:28:e3:5b:34:16:dc:e1:b7:d3:
                    7a:ea:73:ae:32:ba:32:06:04:26:1b:46:c7:f0:af:
                    6b:e8:df:76:56:69:b4:d8:6c:9d:d8:07:8f:2f:2d:
                    a0:43:d1:01:45:ac:d1:61:a0:dd:59:d6:10:c6:0b:
                    8f:1d:cf:ec:6d:e5:9c:1e:08:7e:b2:b4:8b:5b:09:
                    63:57:4b:fa:5f:31:85:4a:2c:50:b4:06:a8:5d:a6:
                    c0:65:ca:10:af:73:fb:f9:61:68:72:d5:56:f4:39:
                    2d:2d:8d:f0:a2:3c:a4:fa:5b:0c:ab:76:9d:0a:d7:
                    f3:2d:03:10:23:4d:68:79:d6:85:b3:8e:e4:fb:3e:
                    4d:f9:27:83:14:55:65:41:09:fa:14:d4:92:54:f9:
                    8a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:11:89:35:32:AF:4F:5F:D3:73:4A:0A:7C:4A:12:7D:BE:BA:A6:32
            X509v3 Authority Key Identifier:
                keyid:BC:3B:FF:4B:5D:A8:0B:F5:44:27:AE:25:A5:40:BB:0C:11:7C:D2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/600a05248a907def76410027882b2f4a8085c07a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/985afd054fede471a8fa88eb13605c5358f04ca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/600a05248a907def76410027882b2f4a8085c07a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.206.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         68:f9:d3:25:5e:23:07:91:e2:22:a9:83:79:1c:64:6b:19:d6:
         d9:3b:5f:13:01:dc:68:f3:64:38:af:70:16:ca:73:96:12:6c:
         0b:eb:1a:2d:7f:c3:b7:27:ac:20:03:b7:fa:fa:36:f4:46:2a:
         ea:1e:0a:8f:ab:f9:b5:23:12:84:49:14:a9:f3:04:e1:09:82:
         54:ca:b6:c6:9e:4d:1a:83:cc:53:19:62:e1:65:bd:c1:24:71:
         b1:d8:1b:ad:d3:be:18:d8:0d:a8:62:ee:b8:fd:cf:84:28:54:
         7e:c8:56:d8:93:40:1f:19:75:e2:1f:9d:19:b1:bc:86:d3:41:
         e3:cf:41:5f:81:04:13:b1:05:35:b6:07:c2:ef:12:d7:b1:8b:
         6c:e0:c0:02:81:ef:c1:42:cf:88:97:67:f6:d0:53:57:57:b8:
         6f:c4:a9:4a:24:da:dc:8d:27:a1:58:5d:ab:b2:8c:bc:a6:fb:
         d9:ef:74:8d:a9:a2:e9:9a:d8:6a:34:22:44:39:a2:9d:83:c8:
         46:b2:5e:61:54:77:17:93:ff:77:e9:5d:40:c0:d7:7b:9d:cc:
         07:47:95:5a:80:53:51:d1:4d:28:c0:76:ff:dc:4b:df:93:85:
         24:98:02:f4:ec:cc:e6:ad:4d:60:36:ac:a9:4e:6b:0b:3f:90:
         ac:9f:da:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----