Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b75a2b49-1457-4d1e-a633-44115e86909a/4a80d1ff1c83440703c0d0a8dab9d377300c64fe.roa
File:                     4a80d1ff1c83440703c0d0a8dab9d377300c64fe.roa (raw, json)
Hash identifier:          Ahlc6RmYad6Tyw3T9PHCqNdc0sIUsHmqd5FPzUp7V3U=
Subject key identifier:   F7:84:09:DC:CF:D9:B6:9C:49:E5:CA:FB:58:C9:13:CC:40:2C:3A:C9
Certificate issuer:       /CN=b39e9213a27f038d3701817402c0abd4741eeae8
Certificate serial:       0D39D2
Authority key identifier: 99:79:99:98:C9:5F:87:1F:BB:3E:E7:AF:2C:AA:BF:1F:F9:F3:9F:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b39e9213a27f038d3701817402c0abd4741eeae8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b75a2b49-1457-4d1e-a633-44115e86909a/4a80d1ff1c83440703c0d0a8dab9d377300c64fe.roa
Signing time:             Wed 24 Mar 2021 14:31:42 +0000
ROA not before:           Wed 24 Mar 2021 14:31:42 +0000
ROA not after:            Tue 24 Mar 2026 14:31:42 +0000
asID:                     265781
IP address blocks:        164.163.56.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866770 (0xd39d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b39e9213a27f038d3701817402c0abd4741eeae8
        Validity
            Not Before: Mar 24 14:31:42 2021 GMT
            Not After : Mar 24 14:31:42 2026 GMT
        Subject: CN=4a80d1ff1c83440703c0d0a8dab9d377300c64fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:98:91:fc:f7:98:65:d2:ed:6a:92:c3:44:4a:
                    09:bb:dd:0b:1a:53:29:f6:fb:c6:14:05:8e:fa:74:
                    99:00:df:d6:78:b5:64:1d:58:8d:f9:76:66:12:d3:
                    ce:4b:32:65:63:f1:a3:76:e3:fe:a3:73:92:42:27:
                    11:38:9f:4c:79:cf:81:3f:63:a5:01:8d:94:fe:ab:
                    7e:27:e5:a0:bc:bc:1e:76:7f:ad:86:92:7c:ad:a0:
                    54:7a:c7:37:2e:d9:79:2f:61:6f:07:9d:68:e8:3b:
                    7a:19:48:33:29:dc:18:a4:8e:15:91:0a:18:f4:fa:
                    7d:4f:0c:ea:d0:03:05:6a:99:3b:34:1b:85:9e:ae:
                    04:89:d0:de:fc:2d:4c:5a:61:db:ea:b5:8b:ad:df:
                    89:de:99:27:ec:bf:30:e7:69:1f:b0:8f:b6:6e:db:
                    ae:18:eb:61:fa:a6:59:38:ec:b0:18:b3:37:ff:3c:
                    54:e3:c1:6f:b5:8f:d4:6e:bb:eb:96:53:f9:62:3f:
                    90:c8:18:ab:78:0d:4a:ba:bd:5c:39:da:8f:03:84:
                    7b:a7:3a:80:a8:19:46:dc:db:de:b0:c3:b2:24:51:
                    3f:79:94:94:62:f3:9a:fa:7c:3f:01:84:72:fc:3f:
                    ca:d1:cc:d1:4c:8e:ed:89:d0:3a:38:2b:7e:b9:95:
                    8e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:84:09:DC:CF:D9:B6:9C:49:E5:CA:FB:58:C9:13:CC:40:2C:3A:C9
            X509v3 Authority Key Identifier:
                keyid:99:79:99:98:C9:5F:87:1F:BB:3E:E7:AF:2C:AA:BF:1F:F9:F3:9F:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b39e9213a27f038d3701817402c0abd4741eeae8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b75a2b49-1457-4d1e-a633-44115e86909a/4a80d1ff1c83440703c0d0a8dab9d377300c64fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b75a2b49-1457-4d1e-a633-44115e86909a/b39e9213a27f038d3701817402c0abd4741eeae8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:c3:87:5d:69:6d:c7:b0:ab:51:c1:b1:63:a3:11:af:b5:5b:
         f2:70:3a:73:df:79:13:6e:a5:0c:6d:09:a8:6c:cb:aa:66:71:
         37:33:87:46:2d:c0:40:fb:33:bf:7a:0b:0e:6f:da:4d:c7:fa:
         25:c1:08:02:a4:67:c1:af:d5:79:71:c4:a8:33:54:41:14:6b:
         fc:76:87:70:9b:b8:87:b4:44:55:1d:de:e5:b7:36:52:8a:2f:
         af:43:2b:09:d8:d1:6e:52:30:6e:24:f4:3f:c3:01:77:c2:26:
         a1:80:63:a2:33:94:96:e3:4c:ea:c5:55:da:52:5b:05:f7:5e:
         7a:54:a9:96:6b:4d:b9:12:ac:83:65:ce:37:d3:92:be:58:39:
         c1:ac:d4:ab:a0:68:9e:b3:47:1c:5f:3f:96:a4:6f:d0:87:0a:
         1d:df:19:87:91:a5:ec:b8:2b:3a:16:64:a2:d1:4d:2c:08:98:
         db:1d:09:47:cd:0e:00:b4:61:02:a5:a3:24:30:bc:f1:b6:76:
         00:6c:e5:1a:bd:bd:72:79:59:3a:da:4a:15:fb:85:90:54:62:
         73:4c:3d:b7:d6:74:f4:15:e8:2c:ba:4f:8c:82:da:d3:7d:20:
         95:5d:e6:2e:ce:6b:21:e5:76:09:dd:cc:dc:bf:46:70:ed:da:
         4d:26:cd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----