Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/34dcdb1dfd21aefbae5640c44cf85df933ed7973.roa
File:                     34dcdb1dfd21aefbae5640c44cf85df933ed7973.roa (raw, json)
Hash identifier:          lcEJRTcvg09pYU4jJJvDUXT/k7qSWbQxRwL4SDTE61U=
Subject key identifier:   B7:A7:55:D1:88:9A:4C:74:39:88:F7:3F:AA:7A:FD:0B:A4:AD:82:59
Certificate issuer:       /CN=0a22b2d0a072d0d716973baadd546791926ae121
Certificate serial:       088C55
Authority key identifier: 2B:C5:A8:D9:B1:F6:9A:B6:46:AA:55:5F:AF:CA:37:5E:CF:67:8D:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a22b2d0a072d0d716973baadd546791926ae121.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/34dcdb1dfd21aefbae5640c44cf85df933ed7973.roa
Signing time:             Wed 24 Mar 2021 14:42:08 +0000
ROA not before:           Wed 24 Mar 2021 14:42:08 +0000
ROA not after:            Tue 24 Mar 2026 14:42:08 +0000
asID:                     269964
IP address blocks:        2803:96e0::/32 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560213 (0x88c55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a22b2d0a072d0d716973baadd546791926ae121
        Validity
            Not Before: Mar 24 14:42:08 2021 GMT
            Not After : Mar 24 14:42:08 2026 GMT
        Subject: CN=34dcdb1dfd21aefbae5640c44cf85df933ed7973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0e:9f:ae:3a:0c:d2:7c:43:09:9b:ff:09:8a:
                    36:be:71:eb:bd:6e:2d:5f:3e:f1:24:ec:e3:cd:b3:
                    c0:78:22:00:d2:dd:ef:3a:8d:03:97:01:ac:52:64:
                    ef:f2:b1:3f:df:ac:9a:ed:b2:b6:6f:fa:c0:05:ae:
                    97:ce:60:81:4c:9e:fb:4a:5c:40:83:8b:e8:c4:0b:
                    64:e8:40:bf:42:4b:67:26:f6:49:4f:b1:b3:c6:3d:
                    2a:0d:9d:84:c9:02:5e:3d:f8:9e:ad:62:f2:a5:82:
                    45:a9:8c:33:a3:37:cc:5c:41:93:b8:fa:ce:40:27:
                    db:9e:4c:f1:06:10:e9:c2:49:62:c8:84:e2:02:49:
                    c8:3d:06:c2:26:a4:12:be:af:d2:74:0f:d8:2a:3e:
                    cb:4a:e3:d2:0e:54:61:3b:c3:12:40:ad:13:21:b4:
                    a8:85:be:b9:e7:88:e3:45:42:68:8e:dd:9f:2c:ca:
                    90:e3:71:e9:ce:54:05:e9:3e:dd:01:2f:df:d4:43:
                    4b:85:83:4b:ea:01:bc:2c:c0:aa:22:f0:96:2f:a3:
                    de:ab:ea:3c:04:c2:ea:80:0e:0f:25:03:9c:6a:dc:
                    d1:e8:2a:2e:df:9d:42:3f:98:79:91:c6:5e:10:57:
                    fd:3d:66:51:97:2b:a8:98:a9:ae:76:de:dc:a7:c1:
                    71:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A7:55:D1:88:9A:4C:74:39:88:F7:3F:AA:7A:FD:0B:A4:AD:82:59
            X509v3 Authority Key Identifier:
                keyid:2B:C5:A8:D9:B1:F6:9A:B6:46:AA:55:5F:AF:CA:37:5E:CF:67:8D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a22b2d0a072d0d716973baadd546791926ae121.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/34dcdb1dfd21aefbae5640c44cf85df933ed7973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/0a22b2d0a072d0d716973baadd546791926ae121.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:96e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:ea:cd:8f:90:12:ef:d0:3d:c0:48:b6:ef:22:25:e0:93:d1:
         c9:67:c7:54:3e:4d:ce:3b:ff:f1:5d:8c:e1:cf:ef:04:44:17:
         d0:ae:90:3b:25:5e:94:40:32:ba:2a:a7:59:a4:ba:83:bf:ad:
         af:0f:88:34:31:52:ae:6f:a6:11:f7:b7:19:fa:a7:35:38:02:
         47:f0:84:ff:0f:20:fb:85:aa:d8:f5:6c:0d:8b:76:0b:5a:fe:
         91:39:d1:cf:a7:43:7a:43:b9:9b:cc:a6:b9:c8:4f:c5:e6:80:
         65:7f:e8:a4:ba:8e:54:ba:23:87:71:d4:54:63:09:18:79:df:
         01:51:95:8e:03:8f:be:53:5d:48:2a:92:bb:4b:53:04:ff:6e:
         83:77:23:69:28:77:7e:e1:88:4e:7a:66:f2:fa:47:63:ae:b1:
         16:a4:fe:3e:ca:38:8c:5e:d8:ea:6b:46:f3:25:7d:6a:83:3c:
         57:6c:81:0c:fa:7f:2a:ea:6b:7e:f8:b2:f4:07:fc:e3:f1:04:
         88:9b:d5:13:0d:d3:8c:7f:8a:97:3f:9c:1d:2f:10:a3:e8:53:
         ab:c3:fd:4a:68:14:19:39:d9:07:b7:06:de:51:af:06:9a:db:
         6c:08:9e:fb:46:26:23:d1:ef:b7:d0:4e:9a:c7:4e:9e:27:d7:
         a3:39:8e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----