Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/36acfd55ac67321c32af9078ac91e8006f42c5a7.roa
File:                     36acfd55ac67321c32af9078ac91e8006f42c5a7.roa (raw, json)
Hash identifier:          a3gujXR8pfPT3SCeWvoPGTpfC7Otn37MNOvM8yzXo7o=
Subject key identifier:   96:AE:DF:97:54:79:7B:D0:CB:D1:8E:8C:ED:FB:BB:BF:9E:3E:F1:FC
Certificate issuer:       /CN=39c565bbc1beca70ca953d23feff753b392a17a7
Certificate serial:       0D3C77
Authority key identifier: 87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/36acfd55ac67321c32af9078ac91e8006f42c5a7.roa
Signing time:             Wed 24 Mar 2021 14:35:02 +0000
ROA not before:           Wed 24 Mar 2021 14:35:01 +0000
ROA not after:            Tue 24 Mar 2026 14:35:01 +0000
asID:                     3816
IP address blocks:        190.121.137.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867447 (0xd3c77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39c565bbc1beca70ca953d23feff753b392a17a7
        Validity
            Not Before: Mar 24 14:35:01 2021 GMT
            Not After : Mar 24 14:35:01 2026 GMT
        Subject: CN=36acfd55ac67321c32af9078ac91e8006f42c5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bf:b7:11:64:08:01:ff:5f:82:07:48:7d:27:
                    eb:ac:b1:21:85:9c:cc:dc:13:5e:f4:d1:02:21:43:
                    f6:1a:05:57:9b:14:1b:20:20:f4:eb:60:48:ca:dd:
                    bd:ad:33:b4:2c:18:5d:bb:31:18:70:82:5f:53:98:
                    80:64:a0:37:57:1d:cd:0d:84:20:6c:a4:d9:3e:c1:
                    be:74:80:6f:1c:43:a9:91:ff:8f:96:17:b7:e5:32:
                    53:c0:15:71:97:db:44:f3:ca:b6:3f:29:89:b6:46:
                    4f:d1:c8:ad:0a:13:c7:d5:9d:d8:ad:27:57:e7:19:
                    00:6d:0d:74:1b:46:a3:18:b8:33:fd:fb:6b:f0:50:
                    4f:38:fe:6f:f1:97:eb:e6:4f:bd:63:42:8d:29:75:
                    3f:f5:14:d7:f9:e4:1a:ff:30:a5:a6:dd:2e:20:66:
                    d3:c5:f1:8c:fc:3f:44:75:36:81:62:b3:4e:36:10:
                    6e:4a:c8:66:83:a8:8d:d2:df:81:e4:60:48:c3:92:
                    67:de:56:67:4d:ab:d6:51:f6:0b:98:1e:db:64:9a:
                    b9:08:b3:fc:b8:9e:26:f9:6f:00:4e:ec:7f:7d:ee:
                    44:e9:d2:e2:68:96:44:d6:60:ab:e8:ae:64:36:62:
                    15:2d:50:59:c9:14:c1:1d:55:97:f7:49:6f:65:dc:
                    35:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AE:DF:97:54:79:7B:D0:CB:D1:8E:8C:ED:FB:BB:BF:9E:3E:F1:FC
            X509v3 Authority Key Identifier:
                keyid:87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/36acfd55ac67321c32af9078ac91e8006f42c5a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/39c565bbc1beca70ca953d23feff753b392a17a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:14:86:b4:93:b3:ca:24:32:df:a4:4e:56:3f:6b:78:5a:db:
         59:a8:0b:53:5b:0d:47:b6:da:cf:3a:14:f0:67:35:8d:66:3b:
         1b:db:8c:a8:7f:e3:ff:00:f3:0f:3f:bf:94:2a:4d:a1:e7:a4:
         a1:29:dd:0d:8a:50:f9:fb:8b:33:76:26:eb:c2:47:c1:e7:d6:
         cd:85:9e:6e:66:17:61:f1:e6:54:e6:d0:e0:60:7e:73:99:42:
         08:57:b9:0c:af:bb:28:35:e6:02:9e:9e:6d:7b:d2:4c:cf:5c:
         ef:0a:ed:93:fd:0e:f1:bf:d4:7d:c5:b5:1c:e7:c1:81:e5:8d:
         63:ee:66:31:16:9c:10:56:dd:dc:4f:75:f8:03:ab:fb:fa:71:
         a9:e2:03:0b:5a:1c:62:92:fc:19:72:ec:3a:9e:e2:e7:55:a7:
         64:97:c7:6b:57:8d:3f:d8:c6:13:d9:42:c4:df:eb:ad:28:75:
         c1:32:fc:c7:0a:53:58:1f:fa:94:70:d8:04:83:81:0c:94:c8:
         67:1d:1a:b1:1a:8d:cd:39:7f:8a:2c:bb:e6:af:68:fc:1e:d3:
         b8:7d:b3:eb:08:a7:4a:08:9f:3f:f0:bc:9b:86:30:e6:78:c7:
         1c:14:a8:e7:d6:9a:1d:ed:27:60:68:5b:6b:5a:4f:56:a2:f8:
         44:a8:18:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----