Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ac64501a-6b4e-43ed-9f6c-a3d7391824cf/0dcd19f68b827e63dcadf51513cf189f064e4b66.roa
File:                     0dcd19f68b827e63dcadf51513cf189f064e4b66.roa (raw, json)
Hash identifier:          YaJWM+8quutohOj309GZOx02Q9VpJhCyO8SEydgf2xY=
Subject key identifier:   EA:F9:C7:8B:46:E1:9B:B3:0D:F7:35:45:52:AA:EF:82:12:5F:95:34
Certificate issuer:       /CN=d3eef1937df6fdd69dc9fc7ce2c008cf13179427
Certificate serial:       0442
Authority key identifier: 4C:77:91:54:A6:24:8C:FD:F6:84:3F:69:7E:99:7F:F3:ED:4B:61:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3eef1937df6fdd69dc9fc7ce2c008cf13179427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ac64501a-6b4e-43ed-9f6c-a3d7391824cf/0dcd19f68b827e63dcadf51513cf189f064e4b66.roa
Signing time:             Fri 07 May 2021 17:00:58 +0000
ROA not before:           Fri 07 May 2021 03:00:00 +0000
ROA not after:            Sun 07 May 2023 03:00:00 +0000
asID:                     266741
IP address blocks:        45.232.16.0/22 maxlen: 24
                          2803:2b20::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1090 (0x442)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3eef1937df6fdd69dc9fc7ce2c008cf13179427
        Validity
            Not Before: May  7 03:00:00 2021 GMT
            Not After : May  7 03:00:00 2023 GMT
        Subject: CN=0dcd19f68b827e63dcadf51513cf189f064e4b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a2:4b:c6:53:89:4c:85:3e:13:d6:a2:e7:a3:
                    bd:af:00:e8:f2:fd:e3:ce:bd:60:9d:5b:a9:3c:8d:
                    d2:7a:b0:4f:ee:ec:e5:5a:9e:9a:3f:d6:07:a9:15:
                    12:fe:9b:23:44:2a:f5:cb:fd:fe:b1:63:99:50:73:
                    40:2e:e4:61:8c:a2:8b:63:56:fc:b7:52:c4:c5:58:
                    5e:2b:2f:d0:ae:d5:c4:d1:5c:50:57:67:28:93:39:
                    9f:5b:dc:e2:d8:97:ad:e9:99:aa:41:ae:67:98:15:
                    9b:88:e8:cf:d5:dd:2c:91:ed:f0:89:5c:ef:97:21:
                    96:74:dd:16:23:fa:6e:c4:e8:e2:f5:44:88:f7:c3:
                    e9:be:2d:19:17:c4:bd:b2:12:0a:b0:89:36:4f:25:
                    bd:18:2c:2e:0e:de:97:1e:f8:46:44:e3:2b:35:66:
                    f8:fb:0b:a7:3f:ca:68:e9:84:4f:81:f4:fa:aa:a0:
                    2d:45:f8:2f:78:c1:27:c5:46:18:b3:f9:34:34:ae:
                    ef:ba:b4:bb:6b:ea:39:a9:f0:98:ee:f9:b7:99:61:
                    cd:12:3a:f8:2c:69:e3:91:73:fe:e1:65:16:c1:7e:
                    67:a8:83:65:ab:10:aa:1f:18:c0:7f:38:b0:ad:ee:
                    b6:ee:eb:3b:c6:31:d4:ab:47:08:b3:19:7a:8d:7e:
                    79:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F9:C7:8B:46:E1:9B:B3:0D:F7:35:45:52:AA:EF:82:12:5F:95:34
            X509v3 Authority Key Identifier:
                keyid:4C:77:91:54:A6:24:8C:FD:F6:84:3F:69:7E:99:7F:F3:ED:4B:61:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3eef1937df6fdd69dc9fc7ce2c008cf13179427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ac64501a-6b4e-43ed-9f6c-a3d7391824cf/0dcd19f68b827e63dcadf51513cf189f064e4b66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ac64501a-6b4e-43ed-9f6c-a3d7391824cf/d3eef1937df6fdd69dc9fc7ce2c008cf13179427.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.16.0/22
                IPv6:
                  2803:2b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:66:7c:af:3f:69:c3:bd:2a:4f:a5:04:8f:22:9b:7a:eb:48:
         63:3f:d2:3b:da:77:04:21:00:a4:22:e6:13:0e:39:79:e7:a3:
         0a:24:83:cf:bf:3e:b1:49:47:2d:b3:5f:80:80:c9:4a:34:fa:
         7c:b4:e2:52:e4:f2:87:c2:7d:0a:d7:a0:25:78:da:95:62:56:
         89:27:ab:8e:2c:19:08:91:03:44:ec:b8:98:78:7b:8e:43:09:
         4e:60:89:fe:ac:5c:62:d9:cc:67:dc:a7:f1:cf:9d:8c:44:7c:
         7c:c2:49:1e:29:f6:64:e2:e3:ad:0a:90:c8:59:8e:48:47:cc:
         92:64:4a:c8:8d:d0:7b:22:5a:4f:17:b3:f3:34:44:28:0a:8a:
         6f:f7:a4:10:3a:11:cd:c7:63:6e:f8:e5:d5:0e:aa:e7:64:eb:
         4b:05:52:2a:20:35:71:2b:ec:17:f0:c1:ce:b1:2d:5c:eb:3b:
         65:7d:74:1d:b6:6e:05:86:07:df:b9:2f:f3:d2:81:d3:8f:73:
         9f:9e:59:04:59:0a:ac:be:4a:ac:aa:79:d7:7f:bb:c4:a2:2c:
         f2:60:88:5e:50:90:4d:ee:73:0a:10:9a:88:6b:db:24:c2:e0:
         04:73:dd:55:97:57:0f:6f:da:49:5e:b7:f4:95:26:93:45:d4:
         1e:7e:50:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----