Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7b8f22877088d4e32b9a0658d8d63cdbc9fa49a6.roa
File:                     7b8f22877088d4e32b9a0658d8d63cdbc9fa49a6.roa (raw, json)
Hash identifier:          hLIwhbOKDcBbZ83ElvCyy8AlckMsS9JzZnKURPVQu/k=
Subject key identifier:   D5:E8:74:9C:62:A9:5C:A7:58:02:76:89:8A:F5:3E:B4:15:67:71:2E
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       0D7C89
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7b8f22877088d4e32b9a0658d8d63cdbc9fa49a6.roa
Signing time:             Wed 24 Mar 2021 14:35:12 +0000
ROA not before:           Wed 24 Mar 2021 14:35:11 +0000
ROA not after:            Tue 24 Mar 2026 14:35:11 +0000
asID:                     19429
IP address blocks:        190.93.128.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883849 (0xd7c89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Mar 24 14:35:11 2021 GMT
            Not After : Mar 24 14:35:11 2026 GMT
        Subject: CN=7b8f22877088d4e32b9a0658d8d63cdbc9fa49a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:93:69:9d:d2:e2:a2:f5:3f:50:cf:29:6f:4d:
                    34:97:75:d5:87:f0:01:46:cc:ff:3b:d5:c3:df:7c:
                    5c:29:f7:07:fa:cc:7a:a1:1f:15:90:39:4d:26:a3:
                    d8:96:fe:f8:68:76:1b:70:7f:57:5d:fe:ca:b7:9c:
                    a9:94:38:26:e1:11:75:17:5d:fd:8d:37:c0:d9:5b:
                    55:95:19:b2:59:9a:97:eb:de:0d:4b:d6:f8:c4:2c:
                    a8:32:48:a6:a4:ce:09:44:cd:47:f2:55:b8:fa:c3:
                    de:ae:6d:e1:a3:be:eb:20:af:64:8e:af:67:db:11:
                    81:dd:e0:c4:f0:3d:67:ee:88:1e:c5:99:fc:0f:8a:
                    05:ac:b2:5c:15:a8:c5:37:0c:0a:09:63:b0:9c:5a:
                    06:da:c5:d0:51:f0:16:48:8c:f0:cc:be:11:92:7b:
                    e6:ce:3c:21:bc:34:31:42:2f:d2:dd:74:1b:9b:27:
                    03:c1:86:bf:c2:1e:81:f3:94:37:1f:0e:6f:f7:fe:
                    68:fc:cf:a4:33:18:3b:17:a1:c3:c5:7f:fa:5a:8f:
                    32:b4:c3:a6:4b:79:db:f2:01:3d:ce:cf:e3:7c:83:
                    83:9a:85:1c:46:bc:e3:1b:07:e4:b7:24:47:89:f0:
                    e3:31:76:53:4a:16:95:bd:26:38:e4:8c:00:d7:8d:
                    b4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E8:74:9C:62:A9:5C:A7:58:02:76:89:8A:F5:3E:B4:15:67:71:2E
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7b8f22877088d4e32b9a0658d8d63cdbc9fa49a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d0:ca:66:e0:8d:f2:fb:22:d5:2a:3d:bf:f8:6d:ab:f6:75:f6:
         53:7c:c9:2e:b7:f6:b1:82:bc:29:bc:60:a2:d2:2d:79:4e:ee:
         b1:21:28:3b:70:b1:a8:ac:8e:3a:5a:87:0a:89:55:bf:e1:30:
         22:59:75:4c:0a:ff:09:0b:fb:47:38:b4:62:94:e7:92:ec:38:
         c4:20:d1:a6:da:af:23:f3:a9:05:0c:59:48:16:a8:f7:31:d8:
         24:43:0a:bc:06:de:7f:55:e3:d9:3f:d3:0d:1e:0f:68:7f:04:
         26:da:31:9e:74:c7:e1:6b:da:3e:1b:21:3f:84:80:ba:13:ee:
         7f:f9:a0:aa:2a:e4:9a:ea:25:93:6b:a3:38:5a:9a:30:d0:cb:
         9b:1a:ba:dc:5f:0a:d2:f1:93:3b:2f:d4:15:f1:ba:5d:6d:42:
         68:a2:f4:7c:78:b6:26:13:3c:56:6b:d3:6a:1c:1c:49:fa:fe:
         a3:61:e8:97:a5:38:38:3e:d0:bd:1b:b9:bb:10:08:fd:3d:8a:
         6a:22:d6:25:3d:94:f2:b4:7d:3a:43:02:a6:d1:e6:34:bd:8d:
         10:c7:c3:32:48:f7:3a:93:35:7c:66:a5:d0:75:66:ac:c9:53:
         d7:2a:65:06:9e:de:ed:33:3a:0c:bf:6c:e7:79:c0:71:08:35:
         9e:fe:d4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----