Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/a7ffe63b04758470de697ffa2a84e14f44f7a8a0.roa
File:                     a7ffe63b04758470de697ffa2a84e14f44f7a8a0.roa (raw, json)
Hash identifier:          xJp9T/bP1Ts2geuOgz4MZMhoqaAiWhFJtg1HSW9GGro=
Subject key identifier:   73:8D:34:CE:A8:0D:8F:45:21:7F:94:6E:DD:83:0B:73:76:6E:EC:E2
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       0D9E71
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/a7ffe63b04758470de697ffa2a84e14f44f7a8a0.roa
Signing time:             Wed 24 Mar 2021 14:35:13 +0000
ROA not before:           Wed 24 Mar 2021 14:35:11 +0000
ROA not after:            Tue 24 Mar 2026 14:35:11 +0000
asID:                     19429
IP address blocks:        186.28.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892529 (0xd9e71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Mar 24 14:35:11 2021 GMT
            Not After : Mar 24 14:35:11 2026 GMT
        Subject: CN=a7ffe63b04758470de697ffa2a84e14f44f7a8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5f:b9:99:52:70:b3:7e:74:b4:08:38:02:f4:
                    de:ce:18:dd:7f:d1:d4:29:24:09:b6:66:c6:32:51:
                    89:d1:33:e3:62:aa:38:33:8c:21:c3:93:d2:af:75:
                    48:a0:b6:e6:4a:b5:ed:37:1a:a5:44:3a:e8:d8:f8:
                    18:aa:51:74:31:50:bd:fc:d6:81:2b:28:83:bb:f3:
                    1a:d5:a8:e5:49:cd:c2:31:ce:28:f0:4d:aa:47:cf:
                    d8:cf:c1:61:97:a8:39:77:7e:78:9c:5d:14:fb:8b:
                    75:d3:be:bb:d7:47:ff:7c:6c:e0:3c:92:64:9f:9a:
                    d5:a1:27:7e:ab:2c:9d:04:34:21:19:e5:0a:76:7f:
                    2c:85:b0:f9:d5:c1:ea:ba:ee:d4:07:3d:b3:c0:db:
                    5f:0a:04:75:39:16:e2:7e:86:11:a7:3a:86:2d:42:
                    aa:b8:f7:41:d4:be:81:99:06:09:7e:f9:5d:ce:d4:
                    c5:4a:d2:55:4d:7e:4e:f9:11:17:2d:0f:74:c2:e4:
                    8c:d5:cd:32:7e:52:8f:3c:7d:1e:dd:a5:30:c7:e9:
                    19:7b:fb:64:bc:b0:76:bb:d3:29:c7:0d:aa:76:9f:
                    cb:fc:20:4a:75:ff:0f:be:6a:35:c2:36:67:ba:4b:
                    b9:10:88:be:ee:af:8a:42:ee:cc:29:65:91:03:82:
                    e1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8D:34:CE:A8:0D:8F:45:21:7F:94:6E:DD:83:0B:73:76:6E:EC:E2
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/a7ffe63b04758470de697ffa2a84e14f44f7a8a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.28.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         95:e4:c4:1c:9b:1e:0a:3f:ac:00:12:76:fc:23:e8:28:5f:19:
         9a:62:65:a1:9e:77:49:f4:4e:b5:0c:c3:5f:3a:36:3f:bd:e8:
         f9:8e:36:b1:c8:e8:f6:e8:66:10:50:4b:8e:83:57:e3:71:77:
         7c:b6:ac:bd:d9:8a:aa:1d:99:1e:39:5c:1d:49:ec:cd:63:e6:
         22:5f:08:3a:be:fe:e8:0b:09:29:69:51:ac:11:ec:d5:d2:08:
         cc:7f:f9:49:22:5b:55:aa:b2:7a:09:cd:12:6f:06:f1:00:2b:
         9a:c0:65:2e:13:e8:b8:ab:56:28:4f:a3:52:29:74:da:61:7b:
         a9:95:d8:00:41:c5:1a:3b:7e:2d:2b:fd:a8:d7:97:61:6b:cf:
         e4:1d:f1:2b:99:e7:21:31:d0:97:60:cb:50:00:b6:fe:56:b5:
         8b:56:bb:cb:52:ef:94:89:1c:e3:40:cc:df:ff:0f:13:74:77:
         19:e0:99:08:24:57:cf:d2:1d:27:b4:f1:b0:20:b2:c5:d6:1d:
         e9:f1:1e:4c:ee:45:47:da:aa:ea:d0:ed:0f:4d:43:49:6e:a0:
         b2:18:f5:fb:57:22:e1:a4:5f:4d:45:b8:ad:94:ed:c4:44:04:
         38:76:85:1f:00:49:f9:60:85:85:05:f7:33:9f:13:17:49:21:
         a9:5f:df:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----