Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/7a7a3e4a9655524235a878ced6943ca691cae02f.roa
File:                     7a7a3e4a9655524235a878ced6943ca691cae02f.roa (raw, json)
Hash identifier:          oxhkJRR3c4c2hShbqYFl3gkCgyTjeq82+o8GAeEl1Ec=
Subject key identifier:   74:70:6A:59:94:3B:01:14:2F:83:74:BC:E8:06:BD:3B:D6:F4:3E:2E
Certificate issuer:       /CN=0a22b2d0a072d0d716973baadd546791926ae121
Certificate serial:       088B9C
Authority key identifier: 2B:C5:A8:D9:B1:F6:9A:B6:46:AA:55:5F:AF:CA:37:5E:CF:67:8D:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a22b2d0a072d0d716973baadd546791926ae121.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/7a7a3e4a9655524235a878ced6943ca691cae02f.roa
Signing time:             Wed 24 Mar 2021 14:42:08 +0000
ROA not before:           Wed 24 Mar 2021 14:42:08 +0000
ROA not after:            Tue 24 Mar 2026 14:42:08 +0000
asID:                     269964
IP address blocks:        24.152.52.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560028 (0x88b9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a22b2d0a072d0d716973baadd546791926ae121
        Validity
            Not Before: Mar 24 14:42:08 2021 GMT
            Not After : Mar 24 14:42:08 2026 GMT
        Subject: CN=7a7a3e4a9655524235a878ced6943ca691cae02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:63:86:09:59:e6:5e:92:83:c4:f5:28:af:89:
                    12:68:27:50:d2:11:a7:ab:88:a6:17:b8:9b:12:0d:
                    31:72:28:b1:a0:6b:ca:37:ca:74:a6:67:3c:7b:95:
                    e8:78:1b:63:24:ab:60:35:11:b2:45:53:0d:54:a7:
                    c4:f6:db:a0:1f:a2:16:3e:87:40:b7:7d:19:08:79:
                    f4:6f:0c:7f:f5:95:f3:e1:3d:b6:ae:b6:d3:82:48:
                    a1:86:f3:26:ca:af:9d:7b:31:15:91:26:e3:26:f8:
                    ad:8e:bd:04:bd:4e:54:da:39:94:97:86:77:c1:e3:
                    60:59:ec:57:e9:70:a8:22:7f:a7:5a:57:ea:fc:85:
                    cb:3e:26:e4:51:3d:18:b8:cf:2c:4e:eb:d3:5f:6a:
                    d1:6e:2a:c5:35:a6:20:e1:a6:a1:8d:29:a4:4a:6d:
                    5e:a6:43:41:de:f7:70:2b:2a:e6:39:85:df:f5:0d:
                    51:b7:20:19:82:1c:35:e3:a0:ba:fc:1f:62:86:d8:
                    02:4e:22:2d:a1:9b:5e:ce:fc:fb:78:19:3e:83:f4:
                    26:12:f0:3a:20:a5:be:8b:0a:1e:00:ec:0a:02:f9:
                    86:de:23:f9:8d:4e:8d:e5:41:d2:56:50:47:9d:5d:
                    3f:dd:6e:9f:95:27:9d:81:30:26:08:50:6a:b8:74:
                    f4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:70:6A:59:94:3B:01:14:2F:83:74:BC:E8:06:BD:3B:D6:F4:3E:2E
            X509v3 Authority Key Identifier:
                keyid:2B:C5:A8:D9:B1:F6:9A:B6:46:AA:55:5F:AF:CA:37:5E:CF:67:8D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a22b2d0a072d0d716973baadd546791926ae121.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/7a7a3e4a9655524235a878ced6943ca691cae02f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/0a22b2d0a072d0d716973baadd546791926ae121.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:83:33:52:c1:0a:1d:68:c9:b9:da:71:09:88:fa:29:51:a9:
         60:d4:2c:f9:5f:96:ef:9d:14:d1:32:87:5f:4a:58:35:47:dd:
         5d:84:78:e6:9c:8b:f6:69:91:92:29:cb:27:ad:61:7a:fb:34:
         7c:e9:8f:61:3a:ac:ee:75:93:e9:6a:aa:36:77:72:7a:f6:8c:
         cb:5f:94:af:5e:00:65:79:42:84:87:bc:ee:29:8d:00:96:b8:
         07:a4:c2:98:81:4d:07:fa:e8:ab:65:de:5b:24:56:e6:8d:44:
         76:8c:f1:e8:75:15:b6:cb:1c:01:14:38:d6:1e:26:ca:51:3e:
         3a:ea:ca:05:e9:7c:69:b7:37:ab:76:cb:9e:ea:a6:ee:40:42:
         6d:f3:67:af:19:e6:f1:87:ee:ac:e1:89:55:4d:c4:ac:79:3c:
         8d:11:38:26:b5:47:fb:28:8b:21:12:d1:8f:88:85:09:76:7e:
         76:32:da:90:28:0e:62:96:dd:5d:f3:b5:ed:3b:c6:c8:67:f0:
         ef:5b:ab:cb:45:92:ee:36:0c:d3:bd:c5:da:33:81:88:1a:fd:
         05:ca:a6:a6:86:8d:2f:9b:59:eb:14:74:b6:b5:09:70:8e:07:
         f8:c3:93:a4:2a:12:e0:69:29:ed:f9:c6:e3:cb:01:d9:a9:95:
         1c:16:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----