Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/229a81a0270797648ea06402e806bf7421b846b7.roa
File:                     229a81a0270797648ea06402e806bf7421b846b7.roa (raw, json)
Hash identifier:          Cf7rVx4GcK14fGbDhGi1Fs77DvAxKPq4etcIrFxhDqU=
Subject key identifier:   AC:1A:BF:76:5B:6D:9A:8E:61:7B:D3:9B:4F:D6:B7:43:03:2D:7F:56
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       0D9857
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/229a81a0270797648ea06402e806bf7421b846b7.roa
Signing time:             Wed 24 Mar 2021 14:35:13 +0000
ROA not before:           Wed 24 Mar 2021 14:35:11 +0000
ROA not after:            Tue 24 Mar 2026 14:35:11 +0000
asID:                     19429
IP address blocks:        190.25.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890967 (0xd9857)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Mar 24 14:35:11 2021 GMT
            Not After : Mar 24 14:35:11 2026 GMT
        Subject: CN=229a81a0270797648ea06402e806bf7421b846b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d9:dd:24:09:55:30:91:53:77:d1:7d:39:cc:
                    d9:7b:90:c1:c0:6f:4f:d1:9c:d6:39:d2:a7:2b:35:
                    70:1c:23:e2:6f:38:d6:62:d4:70:1a:47:b8:80:50:
                    01:95:71:d8:4a:30:b1:70:a3:d6:af:1c:fc:08:8f:
                    50:ff:87:1a:d3:cc:09:46:72:43:72:ed:11:b2:47:
                    cc:43:c7:23:93:9b:a4:30:33:1b:05:c3:c8:75:ea:
                    ad:da:3c:19:a6:5c:ac:a1:8b:ec:52:8f:3d:e5:2b:
                    2b:4c:7f:8a:1f:d6:c2:45:ab:71:7e:50:bb:28:e7:
                    21:e9:66:07:f0:25:29:8b:3c:8c:dc:11:92:7b:7a:
                    60:fd:16:f7:1c:42:f7:65:2f:7a:1a:54:4c:d3:ae:
                    67:30:d5:7f:92:1d:26:de:71:89:c3:a2:3a:06:07:
                    f2:94:e5:4c:d6:a8:e1:6e:58:af:c2:7d:28:d2:fb:
                    40:f6:24:1f:94:e5:6e:89:60:16:51:62:e2:cf:77:
                    28:d7:84:a2:01:13:d3:6b:5f:46:dd:e5:2f:62:d3:
                    62:84:89:80:66:6f:47:1c:a6:88:61:dd:35:d0:a8:
                    dd:11:20:e8:db:f6:6b:07:9b:c0:71:03:f5:db:7a:
                    a1:c1:95:28:e8:ef:30:9e:ad:a7:11:80:5f:0f:0b:
                    14:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1A:BF:76:5B:6D:9A:8E:61:7B:D3:9B:4F:D6:B7:43:03:2D:7F:56
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/229a81a0270797648ea06402e806bf7421b846b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.25.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cf:fe:ed:f1:5a:5c:6a:af:4f:94:78:73:d9:3f:03:da:6c:30:
         53:6d:ca:51:2d:4e:48:c6:ee:16:6f:c4:3d:cd:c2:ef:b1:5b:
         93:90:5e:a1:22:6e:48:42:95:5a:09:56:aa:91:07:17:c0:f7:
         ec:0f:4e:11:d8:9a:1f:19:07:e1:2c:5b:92:65:b7:15:e1:6e:
         ae:62:37:99:de:52:66:26:94:4a:1b:e3:29:3f:bd:b0:09:3d:
         95:8a:a3:f2:24:38:47:80:76:00:88:b5:ac:a8:75:f7:c0:dc:
         1c:88:a6:cb:54:8f:16:e2:37:f5:3e:a7:80:29:58:85:0f:1a:
         da:60:10:e9:f4:63:a8:45:65:a3:01:36:73:15:45:65:51:2d:
         08:97:53:92:f1:ae:36:58:df:96:07:27:d0:4e:6d:96:46:5d:
         60:47:8a:50:2d:e2:34:9a:e5:f2:c9:61:81:bf:55:3c:22:9e:
         c3:b9:26:d7:5a:d1:49:c9:2a:7e:85:91:62:75:44:4a:e4:6a:
         20:0b:ef:63:c6:af:b3:ba:38:e7:ca:a3:49:2d:5e:4d:61:83:
         e4:bc:12:f2:f5:55:02:ec:91:bd:ac:68:26:47:ae:aa:56:18:
         07:83:8b:a9:c4:00:3c:ce:6f:d6:36:e1:a8:7f:e5:91:f9:7b:
         9c:c3:69:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----