Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/8d3be0ffd2b36c25e9a7a99103e47e900c0242d3.roa
File:                     8d3be0ffd2b36c25e9a7a99103e47e900c0242d3.roa (raw, json)
Hash identifier:          et25pJrFjU08kgTDBoaiO+1ZRcMnnDFY9cfBOMWmtoM=
Subject key identifier:   51:F9:74:D8:1E:44:03:60:70:2D:DB:43:20:6B:FD:DF:82:32:2C:CD
Certificate issuer:       /CN=39c565bbc1beca70ca953d23feff753b392a17a7
Certificate serial:       0D2D82
Authority key identifier: 87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/8d3be0ffd2b36c25e9a7a99103e47e900c0242d3.roa
Signing time:             Wed 24 Mar 2021 14:35:02 +0000
ROA not before:           Wed 24 Mar 2021 14:35:01 +0000
ROA not after:            Tue 24 Mar 2026 14:35:01 +0000
asID:                     27951
IP address blocks:        170.246.112.0/22 maxlen: 24
                          2800:490:4800::/40 maxlen: 40
                          2800:490:4d00::/40 maxlen: 40
                          2800:490:8400::/40 maxlen: 40
                          2800:490:e000::/39 maxlen: 40
                          2800:490:e800::/39 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 863618 (0xd2d82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39c565bbc1beca70ca953d23feff753b392a17a7
        Validity
            Not Before: Mar 24 14:35:01 2021 GMT
            Not After : Mar 24 14:35:01 2026 GMT
        Subject: CN=8d3be0ffd2b36c25e9a7a99103e47e900c0242d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:87:c5:21:95:d5:d1:cc:9d:4f:a5:70:d2:
                    c7:db:71:8d:76:fe:ef:d2:54:b8:6b:6c:d6:c7:16:
                    90:eb:ee:d9:ba:c6:63:2e:01:f4:5b:f6:b0:23:12:
                    82:26:b8:72:21:c9:c0:de:7c:08:86:91:65:47:70:
                    3e:52:58:b5:e6:da:c4:fe:6f:5d:91:6e:19:78:48:
                    5b:2e:99:be:de:46:86:97:66:23:1c:bd:43:46:28:
                    89:34:b6:01:ab:80:62:8f:81:16:ad:7f:82:cc:da:
                    cf:e8:4f:b0:0e:56:0b:02:28:88:96:a0:f6:52:1e:
                    69:08:fe:35:15:c4:5b:ff:14:d5:04:65:71:20:e3:
                    49:0e:da:4d:9e:f6:e0:63:d6:0b:42:98:56:0a:90:
                    aa:b3:65:c1:1f:6b:d9:31:45:34:d2:46:28:b2:1a:
                    85:a2:88:61:de:28:6a:66:fc:bf:9e:b0:a0:35:77:
                    72:e7:ed:78:b6:c2:e4:9a:b5:13:36:16:be:4c:ba:
                    7b:14:c8:43:0f:07:b8:0e:97:07:47:dd:e8:6c:5f:
                    cd:e5:c6:14:c8:5a:b3:69:a5:cf:29:4e:b5:8a:55:
                    3b:4c:2d:95:d5:7e:62:07:7b:c0:b3:24:a9:b8:24:
                    8c:87:ca:97:5c:bb:d4:01:0d:23:45:aa:cb:9e:4f:
                    18:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F9:74:D8:1E:44:03:60:70:2D:DB:43:20:6B:FD:DF:82:32:2C:CD
            X509v3 Authority Key Identifier:
                keyid:87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/8d3be0ffd2b36c25e9a7a99103e47e900c0242d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/39c565bbc1beca70ca953d23feff753b392a17a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.112.0/22
                IPv6:
                  2800:490:4800::/40
                  2800:490:4d00::/40
                  2800:490:8400::/40
                  2800:490:e000::/39
                  2800:490:e800::/39

    Signature Algorithm: sha256WithRSAEncryption
         4e:93:be:4b:6f:bd:f1:4d:50:28:d7:40:65:03:75:1a:c9:67:
         9f:43:4b:69:0a:82:6a:e8:ab:cb:66:2f:a4:24:b4:df:33:2b:
         70:51:bc:80:1a:60:fa:43:1b:9e:46:95:9a:c0:cb:3f:47:c6:
         dd:48:11:6a:37:da:d4:80:4a:c5:84:62:b8:da:10:32:d8:d1:
         80:29:6a:03:23:86:61:5a:e0:a7:6d:48:dc:a0:fd:f1:66:53:
         6c:c4:ca:6b:b2:1f:f4:01:4b:c7:78:c8:70:b5:89:a0:fb:81:
         cc:9f:ad:34:7b:6b:04:28:d4:1f:53:ac:ae:97:2d:db:2c:1b:
         0e:0d:b9:32:e8:11:b8:d8:4a:80:ef:04:6f:03:0a:03:89:82:
         54:c0:b6:4d:4a:f8:b0:92:bb:bc:82:c8:2d:59:f6:3a:b5:aa:
         bc:1d:f0:57:0d:a5:c1:f7:75:82:7e:98:6c:80:da:f3:b9:ac:
         7d:06:bc:f5:28:81:87:9b:ff:19:5d:b7:57:b3:c6:41:e6:1c:
         f4:62:d3:4a:47:69:4c:ac:72:4e:22:94:11:05:4b:52:2b:ab:
         82:e8:c4:db:5a:63:ab:b6:68:ea:2f:00:9d:8b:8d:50:db:d6:
         4f:86:27:92:39:38:a6:80:51:2e:5e:72:92:45:ce:3d:b2:85:
         f5:d9:d7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----