Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/1a8fa35c202c7f8ec764a73fb407aac0eed9ddd4.roa
File:                     1a8fa35c202c7f8ec764a73fb407aac0eed9ddd4.roa (raw, json)
Hash identifier:          qGbIdwzhNo6p3n/Ab5XaDWqPiNsAOPR98AitFyDK6sw=
Subject key identifier:   84:A7:DE:CE:5F:94:1A:40:22:70:A5:E1:57:1F:E6:0B:C3:3B:1F:C4
Certificate issuer:       /CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Certificate serial:       0D4BD1
Authority key identifier: 77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/1a8fa35c202c7f8ec764a73fb407aac0eed9ddd4.roa
Signing time:             Wed 24 Mar 2021 14:41:43 +0000
ROA not before:           Wed 24 Mar 2021 14:41:42 +0000
ROA not after:            Tue 24 Mar 2026 14:41:42 +0000
asID:                     22869
IP address blocks:        138.117.142.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871377 (0xd4bd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5db578ddaaedcf4375740e85f5f51db4e193706
        Validity
            Not Before: Mar 24 14:41:42 2021 GMT
            Not After : Mar 24 14:41:42 2026 GMT
        Subject: CN=1a8fa35c202c7f8ec764a73fb407aac0eed9ddd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6f:0a:a6:ab:71:12:eb:db:92:6b:4b:21:1a:
                    fc:bf:1a:f7:fa:14:d6:b6:e0:be:18:b6:f9:ea:40:
                    4c:a5:8f:68:86:b3:33:84:8c:2f:5c:49:f0:33:1c:
                    c6:35:4d:27:27:d6:2e:e8:03:58:a6:71:a3:69:d3:
                    b4:ba:8c:db:f9:7b:5e:60:f9:f8:06:63:cd:41:2c:
                    2c:e0:63:95:59:86:82:15:30:d3:7c:3c:f6:aa:38:
                    a6:98:7e:10:bf:13:05:00:40:fc:c1:ea:36:20:47:
                    98:70:42:3c:8a:8c:8e:c4:4c:4c:66:6f:5e:22:f5:
                    64:a2:df:6b:26:30:88:c9:c8:d3:d7:52:08:92:5f:
                    da:8f:e3:fe:fc:52:b3:71:11:cb:68:12:50:c6:90:
                    9f:3c:62:b7:da:45:4a:8e:af:07:5c:94:e2:b2:6c:
                    50:77:8e:88:5a:b0:65:9c:3b:b7:ae:a7:91:df:07:
                    32:14:0d:5f:f0:5b:74:d8:d9:2a:98:ee:ae:c1:f3:
                    c2:ac:96:fa:7d:66:bf:11:9d:05:7a:7c:6e:ca:8e:
                    47:3a:f5:31:41:bb:8b:eb:c1:68:7c:f3:e1:d6:e4:
                    20:b6:3e:41:c6:e0:d3:10:6b:ba:a2:b5:ad:05:3d:
                    3c:44:68:c0:8a:f6:6d:b2:7b:8a:fe:56:cf:ff:40:
                    63:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A7:DE:CE:5F:94:1A:40:22:70:A5:E1:57:1F:E6:0B:C3:3B:1F:C4
            X509v3 Authority Key Identifier:
                keyid:77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/1a8fa35c202c7f8ec764a73fb407aac0eed9ddd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:bf:d5:ed:9a:cb:c4:54:8b:81:a4:58:bc:90:6e:b3:12:50:
         d8:af:9f:c0:b3:43:6e:fa:a0:de:ad:55:5b:d9:11:26:03:58:
         a9:7c:9b:58:9e:07:99:05:85:b8:cf:e3:96:b9:60:f2:48:3e:
         ac:32:87:f8:93:39:36:fc:89:55:87:86:46:de:fb:f9:24:bf:
         2b:64:29:fe:df:76:fd:40:94:6a:57:83:91:be:26:ed:c4:72:
         e8:4d:4c:d4:ed:2c:31:38:e0:d6:ea:d8:aa:91:93:b5:00:1c:
         cf:b0:5e:c1:f4:65:db:6b:6b:66:97:46:50:34:90:41:86:a8:
         fc:c4:bd:a1:54:b1:dd:e5:68:66:1d:92:b2:87:d2:2e:4d:f1:
         c6:a5:0e:c7:40:e7:55:82:41:c4:7c:50:c5:06:b0:7f:b7:4d:
         8b:bb:a4:fb:d0:bb:f6:36:3e:da:ba:ef:ff:f4:d8:16:b5:e8:
         06:31:c7:9a:7e:81:6c:f6:f1:ba:a0:f8:b6:b3:a2:61:dc:25:
         e3:60:2b:31:45:c8:75:bc:50:ff:7f:7f:ee:1b:31:03:d9:b9:
         46:dd:30:2a:06:fe:41:20:79:c1:c1:f5:72:7d:f4:f3:52:c4:
         9f:f8:5d:54:f7:54:c1:d1:b4:83:02:f0:7e:75:e7:43:e0:9b:
         1c:fa:64:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----