Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/b44e117139a5ea1d5b275de9f06e4e40ae51c1f5.roa
File:                     b44e117139a5ea1d5b275de9f06e4e40ae51c1f5.roa (raw, json)
Hash identifier:          7+Zqf4Isb8S/XTBXQu9HrUiJgdEZexu1+AsaJDNUWSQ=
Subject key identifier:   C1:50:83:3B:8D:53:23:59:B0:B5:4E:86:08:F2:91:E1:12:B4:43:18
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       123066
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/b44e117139a5ea1d5b275de9f06e4e40ae51c1f5.roa
Signing time:             Sat 19 Feb 2022 00:46:34 +0000
ROA not before:           Fri 18 Feb 2022 02:00:00 +0000
ROA not after:            Sun 18 Feb 2024 03:00:00 +0000
asID:                     18734
IP address blocks:        189.202.252.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192038 (0x123066)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Feb 18 02:00:00 2022 GMT
            Not After : Feb 18 03:00:00 2024 GMT
        Subject: CN=b44e117139a5ea1d5b275de9f06e4e40ae51c1f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9e:a3:32:ff:fb:ee:34:95:9c:6a:ee:c9:28:
                    cb:49:d4:a9:88:72:b6:e2:7f:b4:38:f8:80:4a:6b:
                    b7:42:48:63:ef:a7:60:6e:a3:1c:2b:c4:86:48:23:
                    d5:d6:3c:35:54:6a:96:af:d0:91:32:e5:e6:ab:a2:
                    43:6e:64:34:15:9b:4a:55:0e:17:96:c7:22:ef:c6:
                    74:ab:c3:20:75:ea:df:8f:5f:e5:01:f3:29:35:c3:
                    15:3f:e3:64:5b:89:86:37:19:da:fc:1a:ef:14:f1:
                    2e:d0:61:e4:85:b5:e0:bb:ba:77:dc:78:f1:3a:e1:
                    0b:5e:97:78:62:89:28:ad:bb:0f:c9:52:7c:37:3a:
                    e4:ad:74:43:12:b9:8c:eb:9e:7c:b8:4d:7c:b9:57:
                    49:96:09:df:61:01:53:f1:56:53:00:48:a2:79:f6:
                    15:02:66:22:46:61:24:44:34:89:36:e1:c8:16:de:
                    61:9e:f5:f9:5c:8b:38:68:10:55:65:fb:cf:25:89:
                    1e:23:6a:a5:69:b2:00:d9:1e:5d:13:00:d7:f6:ae:
                    51:7f:e7:c5:0c:fd:49:d7:2f:3b:a3:58:8d:e2:43:
                    e1:55:49:49:29:10:30:1d:4f:4b:db:19:1d:37:53:
                    1f:af:60:59:3b:f1:43:8a:44:09:e6:a7:ae:02:18:
                    7d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:50:83:3B:8D:53:23:59:B0:B5:4E:86:08:F2:91:E1:12:B4:43:18
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/b44e117139a5ea1d5b275de9f06e4e40ae51c1f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:8a:ae:4e:eb:45:9d:58:c9:fd:22:ee:9e:42:64:29:4b:c7:
         31:84:4b:1e:bc:b6:ec:3d:0a:e9:e1:df:c3:c4:ab:c0:1a:57:
         38:c9:3b:2d:aa:e6:59:b9:c7:03:51:ec:87:5e:8f:08:22:fc:
         ec:d4:e8:f4:c1:f2:80:c4:30:fd:29:ab:e6:b7:67:56:74:ea:
         16:51:62:13:82:54:44:67:3e:4e:a1:05:e4:ed:21:dd:e3:71:
         ba:62:95:89:7c:63:a6:88:78:3c:22:cc:75:a1:7d:3d:92:c7:
         c3:dc:d2:86:d4:ba:53:ed:2c:f7:2b:66:37:d4:7a:44:db:84:
         ee:f8:bb:90:1e:88:e5:9a:50:55:c8:e8:96:3c:ec:cb:1b:c9:
         5e:56:e9:87:f3:cd:ad:4e:e2:b1:f9:01:d7:c9:1e:96:d6:ff:
         e0:82:0f:16:ea:b3:12:b7:2b:15:0a:31:df:7f:36:98:9f:c1:
         b5:5d:fa:cf:67:29:e2:f4:2d:55:29:51:7e:88:28:8b:ce:b8:
         42:d8:15:66:37:96:ce:57:f0:bf:0e:11:7e:ed:5b:b1:44:d9:
         8e:61:09:aa:24:ad:65:79:13:b9:48:8f:a4:17:dd:c3:98:29:
         c6:85:60:7b:e7:fa:89:ba:67:de:6a:2a:a4:d0:2c:d8:51:66:
         50:94:34:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----