Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0ee2469-83ea-41e8-9535-dc1609caacc7/38bff4747fdcc7ce92681ea89c67e6c3811db028.roa
File:                     38bff4747fdcc7ce92681ea89c67e6c3811db028.roa (raw, json)
Hash identifier:          Z6CauMMQruhZKOUw7wCtG7xIJLmCUMKK7sRWA+Y6CWQ=
Subject key identifier:   75:E5:B0:74:64:2B:16:A1:FC:72:0E:3F:01:A6:42:6E:FF:D3:3A:94
Certificate issuer:       /CN=7d4b649384481a70163fa549e8ceb813fed96d9d
Certificate serial:       0C249F
Authority key identifier: 62:51:BF:3C:FB:DF:EB:83:4A:5C:2C:DD:97:5C:02:2F:18:86:D1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d4b649384481a70163fa549e8ceb813fed96d9d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0ee2469-83ea-41e8-9535-dc1609caacc7/38bff4747fdcc7ce92681ea89c67e6c3811db028.roa
Signing time:             Wed 24 Mar 2021 14:34:18 +0000
ROA not before:           Wed 24 Mar 2021 14:34:18 +0000
ROA not after:            Tue 24 Mar 2026 14:34:18 +0000
asID:                     267733
IP address blocks:        45.167.192.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795807 (0xc249f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4b649384481a70163fa549e8ceb813fed96d9d
        Validity
            Not Before: Mar 24 14:34:18 2021 GMT
            Not After : Mar 24 14:34:18 2026 GMT
        Subject: CN=38bff4747fdcc7ce92681ea89c67e6c3811db028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:71:9f:c3:d6:b1:75:a6:73:ca:48:1b:6d:2f:
                    cd:8f:a5:1e:6c:57:3e:35:a5:01:14:f6:58:c8:46:
                    7b:be:28:3e:83:52:84:e9:41:83:1e:13:89:5c:f6:
                    d9:93:e8:5e:73:0a:51:42:0e:4e:16:8b:47:5c:15:
                    db:e4:6e:1f:a7:e2:41:73:59:0e:40:b5:e1:00:e9:
                    bd:ba:35:57:a6:9a:e5:77:b1:30:20:d4:39:22:e2:
                    34:83:35:1b:00:fb:26:54:75:c5:79:b1:b8:82:a4:
                    b1:7f:85:0b:27:b0:bb:c4:4e:de:8e:06:f0:a3:c9:
                    99:ef:9e:1d:ff:44:fb:ba:bd:f6:8a:b2:23:02:e0:
                    8b:53:23:dd:d9:9a:61:33:93:93:7c:b4:ba:b0:d2:
                    a7:7c:0b:be:a7:de:2b:98:4f:a6:13:9b:6f:08:e4:
                    07:eb:04:82:d9:d1:97:8a:e9:e4:2e:e1:d5:92:35:
                    1e:6b:69:b6:52:8b:72:17:78:66:36:e6:96:67:18:
                    04:cf:50:cd:13:17:21:1a:2c:6b:df:8b:64:fe:d0:
                    db:3e:b2:f7:02:e0:75:e0:be:a3:be:1f:cf:11:59:
                    bf:02:1d:86:8b:24:4a:6f:9a:b5:07:c9:79:6c:59:
                    3b:ce:ed:09:aa:cf:dd:73:88:54:8a:9e:5e:d8:1a:
                    1a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E5:B0:74:64:2B:16:A1:FC:72:0E:3F:01:A6:42:6E:FF:D3:3A:94
            X509v3 Authority Key Identifier:
                keyid:62:51:BF:3C:FB:DF:EB:83:4A:5C:2C:DD:97:5C:02:2F:18:86:D1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d4b649384481a70163fa549e8ceb813fed96d9d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0ee2469-83ea-41e8-9535-dc1609caacc7/38bff4747fdcc7ce92681ea89c67e6c3811db028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0ee2469-83ea-41e8-9535-dc1609caacc7/7d4b649384481a70163fa549e8ceb813fed96d9d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:b2:07:9e:a8:1c:b3:ae:e3:0b:6b:b0:7b:be:7c:92:57:f6:
         63:ec:5c:31:ce:f6:03:a6:2e:51:1e:a2:01:0e:ed:18:01:8c:
         d3:b6:25:60:bc:5e:41:8b:f4:ea:09:1e:6a:2f:2e:d8:f3:cf:
         89:b4:d0:ed:f8:f8:0a:3c:da:28:98:b7:1c:3b:cf:99:73:e8:
         aa:d2:89:c7:92:b3:5f:00:d0:de:af:b0:f6:d5:4f:7e:8e:64:
         d2:37:8b:2a:2d:82:a0:89:d1:8c:04:cd:5b:45:df:a5:be:77:
         2b:27:c2:9c:b0:f7:c9:ab:3c:6e:1d:02:62:be:57:46:39:2d:
         cd:48:38:cd:e2:b7:b9:66:b6:57:0d:f4:e1:78:75:d5:fe:44:
         f9:da:0a:fe:b0:ed:29:49:f4:38:08:9b:ed:52:30:0f:c4:0d:
         01:3a:34:5b:85:b6:d0:ba:7b:01:11:ef:7d:31:b7:76:1c:7f:
         6d:1e:52:06:62:7b:0f:2c:f2:88:bc:3e:25:84:44:28:0b:e7:
         cd:4a:7a:31:51:f0:8f:28:6f:d8:ca:72:7e:07:01:38:6d:21:
         d7:c1:d1:6d:65:8b:28:e4:94:57:26:2c:fe:10:ed:a8:42:65:
         e8:51:3e:ce:b0:51:9a:f9:31:33:bc:83:9f:65:3a:e4:81:8f:
         fb:54:dd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----