Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/6c8fb2b526c7be5af7a4c2423a47a036993e6401.roa
File:                     6c8fb2b526c7be5af7a4c2423a47a036993e6401.roa (raw, json)
Hash identifier:          D1Ppg5jToU/R6FFN1cQXuUo1m/yWCX7xl+0LVXoZ21k=
Subject key identifier:   A3:56:A3:E4:95:B1:1A:B6:15:87:49:9C:29:10:80:A9:38:90:65:2D
Certificate issuer:       /CN=9d44e5cc8623c5cdabd559bdad688e9f03759533
Certificate serial:       0DCAC0
Authority key identifier: 88:50:96:CD:A6:E7:72:8D:C1:9C:13:39:45:81:74:B5:69:6E:44:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d44e5cc8623c5cdabd559bdad688e9f03759533.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/6c8fb2b526c7be5af7a4c2423a47a036993e6401.roa
Signing time:             Wed 24 Mar 2021 14:33:50 +0000
ROA not before:           Wed 24 Mar 2021 14:33:50 +0000
ROA not after:            Tue 24 Mar 2026 14:33:50 +0000
asID:                     61506
IP address blocks:        138.204.229.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 Jan 2024 19:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903872 (0xdcac0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d44e5cc8623c5cdabd559bdad688e9f03759533
        Validity
            Not Before: Mar 24 14:33:50 2021 GMT
            Not After : Mar 24 14:33:50 2026 GMT
        Subject: CN=6c8fb2b526c7be5af7a4c2423a47a036993e6401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3f:28:67:ca:8f:7d:5d:f1:0a:f9:63:a1:75:
                    5d:b3:11:84:e4:81:98:01:fa:6f:fa:2a:c4:23:48:
                    d2:e5:b7:b8:3f:10:fe:39:66:be:2d:c3:5c:31:a8:
                    56:9b:d7:97:8a:43:2e:a3:13:5a:2d:cd:c1:61:9f:
                    65:a4:03:1f:7d:06:04:eb:84:60:d0:f8:b6:5d:17:
                    94:57:e0:96:e1:21:79:ef:65:a8:d4:d2:35:39:19:
                    7f:c7:df:c3:55:97:47:47:a6:09:ec:79:1c:ef:e8:
                    14:d3:b7:c1:02:3c:e2:31:01:2a:07:f3:3c:c6:78:
                    86:04:28:fa:65:76:5e:0e:eb:0a:53:03:ba:b7:08:
                    14:07:ba:48:7a:ef:fa:46:9a:2d:e9:a7:2b:1b:e5:
                    c3:6a:d9:38:1c:d5:68:5d:19:98:90:6c:6d:e4:69:
                    1b:80:ee:da:ee:92:51:2a:70:10:9a:e9:74:53:8a:
                    73:53:57:27:1f:f7:60:6e:78:14:a0:03:e5:c5:4d:
                    94:db:14:e6:ca:fe:27:5e:07:ff:77:0d:18:d2:fd:
                    3e:d7:af:2a:86:0e:d7:36:09:d4:7f:b9:d3:4a:6b:
                    49:e0:6f:43:57:46:30:e7:91:da:21:6d:a0:72:35:
                    47:43:ae:39:06:b4:4f:8a:48:55:b4:3a:e3:42:f5:
                    d0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:56:A3:E4:95:B1:1A:B6:15:87:49:9C:29:10:80:A9:38:90:65:2D
            X509v3 Authority Key Identifier:
                keyid:88:50:96:CD:A6:E7:72:8D:C1:9C:13:39:45:81:74:B5:69:6E:44:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d44e5cc8623c5cdabd559bdad688e9f03759533.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/6c8fb2b526c7be5af7a4c2423a47a036993e6401.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/9d44e5cc8623c5cdabd559bdad688e9f03759533.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:9f:d4:b8:cf:40:0d:d1:79:77:bb:f3:15:c2:d7:9c:6c:88:
         9c:44:89:d0:5f:e3:ce:b3:ed:58:dd:b7:4a:c3:f6:66:43:64:
         d0:70:c6:e1:b9:78:c7:a5:53:1a:08:1c:ca:00:b2:0a:47:14:
         73:e9:c3:2e:eb:53:c3:0a:73:60:47:e1:18:34:ec:cd:7d:77:
         5e:78:23:b1:bf:d2:22:b9:a4:ad:fd:3c:b9:61:21:d3:79:d4:
         ab:0f:2c:e4:cb:dc:23:ea:89:95:19:b7:85:e8:07:1d:7d:4c:
         9a:75:2d:d8:7b:3e:96:0a:25:95:c2:a0:e3:7f:e9:5f:cb:e1:
         e1:1c:6a:53:2e:93:06:2a:8e:9e:52:80:3d:d8:f3:c8:36:8a:
         65:93:ae:04:d9:66:c6:0e:9d:69:e5:62:bd:d1:73:54:9f:dd:
         ff:b0:af:16:2d:9b:fd:84:af:a3:19:c8:7c:d9:db:21:61:17:
         f8:39:fd:22:c1:77:aa:3d:e6:4e:c2:27:87:d6:7b:7c:7a:26:
         31:13:8a:c0:53:ec:19:8c:08:aa:ab:5e:08:23:94:47:9c:bc:
         77:10:a8:fe:51:28:43:27:3e:4d:40:6d:b4:bd:ae:85:b8:92:
         7c:51:a8:aa:7a:79:42:f6:3f:cb:b6:79:f7:9d:98:8b:e3:1f:
         27:b5:6f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----