Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/ddbab0da71356bedef7f97e59430978726c77bfe.roa
File:                     ddbab0da71356bedef7f97e59430978726c77bfe.roa (raw, json)
Hash identifier:          XyhQ5f3K5Kg95wuryCi/aPEbKYPM3Vs7Hzd1oQAHJzk=
Subject key identifier:   89:2E:BA:CF:61:A8:7A:BE:FE:18:B4:C3:5F:DB:7E:35:51:6A:6A:8A
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       146692
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/ddbab0da71356bedef7f97e59430978726c77bfe.roa
Signing time:             Tue 14 Dec 2021 00:31:49 +0000
ROA not before:           Mon 13 Dec 2021 03:00:00 +0000
ROA not after:            Wed 13 Dec 2023 03:00:00 +0000
asID:                     262589
IP address blocks:        179.1.108.0/24 maxlen: 24
                          179.1.109.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1336978 (0x146692)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Dec 13 03:00:00 2021 GMT
            Not After : Dec 13 03:00:00 2023 GMT
        Subject: CN=ddbab0da71356bedef7f97e59430978726c77bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5d:77:fc:78:01:42:ea:65:03:eb:57:41:4d:
                    18:16:7c:78:a4:5e:bd:71:53:47:85:06:71:b2:fc:
                    22:f5:dd:51:31:ac:68:b8:f6:d3:f4:20:4c:11:34:
                    ce:61:e6:90:6d:73:bf:63:69:5a:4d:92:ef:97:a3:
                    f9:42:96:d7:89:0f:cf:d4:70:10:35:6d:87:37:c5:
                    52:04:3e:87:88:b5:40:14:61:ff:fe:f0:eb:fd:fa:
                    5c:a8:b6:42:91:42:e3:c9:59:d0:8b:e1:2f:db:f5:
                    d0:b6:38:7f:90:93:30:95:47:0e:b5:26:f4:c7:f6:
                    6c:a6:fe:f8:c5:66:9c:3d:b7:55:07:f2:f8:bd:02:
                    0e:25:59:7d:3c:79:94:59:c4:80:b6:d1:be:36:d3:
                    dc:49:75:e2:05:51:53:e6:8e:cc:ff:c7:aa:e3:00:
                    0d:fe:63:5d:c2:ab:ad:d7:99:4a:0b:14:1e:4a:7d:
                    4b:41:31:2a:35:92:99:74:a7:97:c4:67:88:1b:51:
                    31:2e:a2:c9:b1:56:ae:b6:87:d7:54:36:5e:3a:62:
                    4b:dd:6f:bc:3c:85:3b:13:3f:82:89:45:c4:aa:99:
                    bb:02:b4:0f:56:ae:24:6d:b5:b2:38:a7:84:81:10:
                    56:97:48:fa:c4:55:e1:12:2b:6b:66:21:74:3e:93:
                    ae:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2E:BA:CF:61:A8:7A:BE:FE:18:B4:C3:5F:DB:7E:35:51:6A:6A:8A
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/ddbab0da71356bedef7f97e59430978726c77bfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:ad:28:e4:e8:2d:8a:88:7f:0f:67:8c:6e:d6:7b:8d:8e:cd:
         0b:c3:b6:e2:94:45:a1:22:57:f4:53:48:6e:8c:7f:ec:3c:a4:
         41:e1:28:0c:76:27:6f:17:c4:d3:29:45:aa:40:60:c1:4a:a4:
         22:ca:3c:e3:bd:0d:c6:ae:fb:e0:5f:c9:30:d4:19:79:9c:4a:
         10:86:43:18:27:07:23:82:fa:05:d7:cf:20:43:5b:bf:3e:ca:
         83:58:bc:10:35:35:94:68:b3:96:a8:8e:9c:07:33:ba:f0:f7:
         b6:92:91:fc:7f:06:e7:8e:18:ce:77:6b:bb:8e:9d:36:7c:3d:
         57:29:c2:86:0a:d5:1c:19:d5:5b:11:4c:dd:35:55:7d:da:61:
         df:47:86:4f:76:fa:9d:14:31:b9:e9:24:ae:e6:91:81:86:17:
         69:ac:cf:33:c3:25:31:aa:c8:d6:bb:86:1b:20:6c:a5:48:27:
         28:fc:b9:cf:a3:12:ba:6a:d4:4b:2d:2f:00:45:7c:92:3f:cd:
         41:00:8f:ce:64:b2:1d:1c:ab:62:2d:36:34:5c:fc:ba:df:d2:
         30:3d:93:4f:16:35:07:48:42:56:05:25:fe:50:aa:93:94:25:
         26:3d:57:78:25:00:cc:d3:b1:25:36:b4:12:21:f6:b9:57:53:
         35:b0:83:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----