Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/308e01559e1f9948244dd5efd49f76cc99e6ecb4.roa
File:                     308e01559e1f9948244dd5efd49f76cc99e6ecb4.roa (raw, json)
Hash identifier:          +qYUZLHoGeCSqzqYfB5ToCjfcgGRPiNTCRn7IOdZbI8=
Subject key identifier:   10:7B:AE:55:9F:6A:B1:98:1B:E2:8B:39:53:9D:4F:C0:68:8E:DD:6B
Certificate issuer:       /CN=2530e9633e4c0fd319edd31c24cbda0c0b19490c
Certificate serial:       0D9C41
Authority key identifier: 8F:74:5C:C7:98:D9:4E:C6:0E:5B:D2:9F:29:31:41:D9:84:27:A4:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2530e9633e4c0fd319edd31c24cbda0c0b19490c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/308e01559e1f9948244dd5efd49f76cc99e6ecb4.roa
Signing time:             Wed 24 Mar 2021 14:30:48 +0000
ROA not before:           Wed 24 Mar 2021 14:30:48 +0000
ROA not after:            Tue 24 Mar 2026 14:30:48 +0000
asID:                     266749
IP address blocks:        138.118.144.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891969 (0xd9c41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2530e9633e4c0fd319edd31c24cbda0c0b19490c
        Validity
            Not Before: Mar 24 14:30:48 2021 GMT
            Not After : Mar 24 14:30:48 2026 GMT
        Subject: CN=308e01559e1f9948244dd5efd49f76cc99e6ecb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:50:31:c7:81:ae:9c:0b:6e:3a:9d:ac:1a:c2:
                    f2:16:e9:f7:83:6d:51:7e:b5:a4:ad:98:66:87:3d:
                    7c:b5:61:d5:b1:e8:5e:62:ba:f5:6a:55:39:44:7e:
                    48:9f:82:cf:cd:50:ce:7d:d5:c2:2b:70:a6:2c:d6:
                    9d:c2:ed:7e:e9:db:34:1f:13:0c:47:55:3f:9e:00:
                    ac:ec:e9:86:ee:0d:da:03:18:8f:ae:e0:ca:a1:f2:
                    7f:0c:fc:21:f3:69:7f:92:60:d4:5c:26:e9:cf:30:
                    4e:78:96:84:8b:8e:dc:b6:d9:17:84:62:56:27:dd:
                    65:b9:90:76:05:c4:b1:68:19:b8:90:6c:b0:99:c4:
                    46:d2:b6:50:4c:52:5d:e2:7d:ec:cd:37:d2:15:e5:
                    50:55:fd:bd:33:d8:f6:38:17:49:78:d1:bf:7a:10:
                    21:94:c3:be:28:de:a2:07:b3:07:55:57:fe:b0:8a:
                    0e:0b:a4:d9:ad:84:23:b4:b6:56:6f:5c:4f:bc:af:
                    ca:4e:2e:e0:f3:60:86:e8:80:7b:45:8a:c5:fb:55:
                    8c:0c:1b:6d:32:8e:5d:87:cb:48:c3:96:d2:5e:af:
                    7d:68:dd:4b:17:e4:52:e5:0f:f0:ec:2e:12:e1:64:
                    79:25:45:c0:41:84:a6:a8:92:8d:1f:90:36:13:04:
                    74:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7B:AE:55:9F:6A:B1:98:1B:E2:8B:39:53:9D:4F:C0:68:8E:DD:6B
            X509v3 Authority Key Identifier:
                keyid:8F:74:5C:C7:98:D9:4E:C6:0E:5B:D2:9F:29:31:41:D9:84:27:A4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2530e9633e4c0fd319edd31c24cbda0c0b19490c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/308e01559e1f9948244dd5efd49f76cc99e6ecb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/2530e9633e4c0fd319edd31c24cbda0c0b19490c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:82:bb:5a:d6:9b:ee:a0:f0:d0:07:7b:23:2b:f3:88:bc:b1:
         1d:27:38:e4:68:f9:93:3e:24:ff:d5:25:15:1a:02:af:f3:72:
         dd:9c:64:c8:aa:73:32:86:84:8b:37:75:58:79:c2:16:f5:2a:
         a9:ee:c5:49:ca:c4:2f:6e:c3:fe:a0:8d:a4:3d:ec:3f:6e:fe:
         39:b2:aa:5e:ab:3a:4a:dc:84:54:54:d1:5d:87:59:b4:48:78:
         db:a5:88:dc:ec:69:78:b1:97:f5:dc:f4:6c:3c:58:63:51:20:
         19:59:38:4a:0a:3c:50:e7:eb:ce:45:40:3d:2c:85:a3:78:7c:
         4c:ec:af:23:22:65:ec:86:8e:62:5b:b3:07:05:61:21:0f:0f:
         47:13:1e:3a:1d:68:24:eb:4c:06:42:06:7a:b5:14:39:01:9e:
         2b:de:a9:87:58:84:58:dc:a8:cc:05:18:ee:7c:b6:3a:78:0d:
         b1:79:e9:a9:95:c5:24:4f:fb:f1:78:4b:bb:60:d4:cb:f4:3a:
         74:8e:93:3b:ee:4c:42:7e:f3:a8:63:1d:0c:99:d9:bd:60:39:
         c0:9e:d7:54:ab:69:6b:e9:34:57:c8:7a:15:ce:ef:61:25:e5:
         83:55:a8:7f:39:b2:a1:d8:3d:46:48:dd:f5:61:2d:9f:5d:fa:
         87:7f:a0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----