Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/454f81a14662bcd582927d39148b4f2c71657037.roa
File:                     454f81a14662bcd582927d39148b4f2c71657037.roa (raw, json)
Hash identifier:          uaVy+ISmbhm7+5QLWgfHygRuOFFwYKgAbH7KsvLtipY=
Subject key identifier:   20:93:08:1C:CA:B2:66:83:60:96:50:36:69:3B:86:3F:9F:B0:84:B0
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       0D4E16
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/454f81a14662bcd582927d39148b4f2c71657037.roa
Signing time:             Wed 24 Mar 2021 14:35:24 +0000
ROA not before:           Wed 24 Mar 2021 14:35:22 +0000
ROA not after:            Tue 24 Mar 2026 14:35:22 +0000
asID:                     262589
IP address blocks:        190.90.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871958 (0xd4e16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Mar 24 14:35:22 2021 GMT
            Not After : Mar 24 14:35:22 2026 GMT
        Subject: CN=454f81a14662bcd582927d39148b4f2c71657037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fc:49:21:de:66:06:ad:01:92:9e:fb:70:6e:
                    00:41:d2:3f:7e:c4:15:db:25:eb:19:12:4a:75:05:
                    6c:9c:49:7c:e2:99:c2:fd:71:d0:51:59:11:7c:43:
                    af:95:56:b0:5d:fa:7c:e9:a4:49:cb:8f:19:bb:63:
                    9d:6b:c2:f7:b4:46:93:47:81:1c:ea:05:4d:79:a0:
                    37:10:c8:01:10:97:49:1a:76:39:8b:9f:50:e2:ba:
                    1c:e0:5b:10:e2:b6:f3:65:80:67:42:9c:34:06:43:
                    a8:54:79:d8:15:99:a9:f4:59:b4:81:8f:98:cc:c6:
                    30:52:24:96:ad:59:30:d0:35:95:72:0c:69:21:58:
                    dd:3f:f7:64:61:20:d7:a8:bc:84:12:04:54:f1:0f:
                    c0:d0:d1:0e:2f:ab:51:67:c5:54:ce:c6:42:75:2c:
                    1a:8e:95:ed:70:1e:36:6c:0d:30:07:a1:12:42:d7:
                    57:36:e6:c1:68:75:a4:2a:12:cc:bd:3f:55:c9:7f:
                    ea:67:5f:de:6e:fb:d2:87:be:3e:30:1c:0d:b0:db:
                    ee:88:71:00:a5:0f:7d:86:bf:53:11:8f:b8:56:a0:
                    b3:71:99:26:29:73:8e:2f:40:82:1a:ef:11:36:cc:
                    0d:23:f5:b7:f4:25:96:83:d3:6d:95:d5:0e:7b:74:
                    2a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:93:08:1C:CA:B2:66:83:60:96:50:36:69:3B:86:3F:9F:B0:84:B0
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/454f81a14662bcd582927d39148b4f2c71657037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:a2:dc:b1:85:ba:86:1d:ef:db:df:97:22:69:5c:7d:6a:9a:
         01:fc:1a:20:3e:36:ba:2f:5a:d6:d0:52:6d:b8:90:20:78:fa:
         3c:28:c0:96:a2:b5:55:1c:e4:6c:f4:90:58:06:5d:45:82:45:
         7b:9f:d4:67:d3:b0:1c:7e:da:b7:2b:f6:cd:22:ae:3f:c5:e8:
         7f:66:5a:d6:26:7d:db:49:ce:50:0e:7e:ed:a1:40:4e:04:64:
         b3:84:d5:c0:29:3a:f2:22:d5:ff:63:a8:09:f8:2e:d6:ce:82:
         b0:37:75:e8:95:06:ea:9f:57:25:d7:f9:4a:24:f5:a6:21:42:
         a6:ee:08:74:2b:ff:db:f5:df:71:53:8f:df:64:79:f9:56:b2:
         5d:75:02:b7:41:93:9e:47:a0:6f:5c:4c:64:d1:df:c8:77:70:
         c8:48:01:f4:78:c7:17:76:5e:c4:ac:ee:71:32:32:ab:fb:ec:
         d2:37:3f:dd:ce:77:9b:64:76:4e:d6:12:b8:a6:fa:a9:9c:16:
         e2:32:6e:b9:72:91:55:a4:a8:5c:cb:db:12:e0:2c:06:2a:3a:
         a2:17:c2:09:86:8a:fd:f5:81:f6:97:2a:2d:05:e8:76:af:ac:
         03:eb:57:26:7c:8a:99:d5:60:dc:e1:a3:36:a9:36:43:fe:57:
         7b:a4:a1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----