Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/085afc91bbca9fc22a15dbf494e5e9357471c74b.roa
File:                     085afc91bbca9fc22a15dbf494e5e9357471c74b.roa (raw, json)
Hash identifier:          lgN/cm4fTdm+Nidd9lHDt4O4HHLffj8vE1W+0FvbCf8=
Subject key identifier:   8E:53:1C:AB:84:24:F7:AE:51:85:99:3D:92:7A:0C:73:BC:66:4F:05
Certificate issuer:       /CN=1df9a14191089eaefc01526e171a2fc63b8cc044
Certificate serial:       0D6A1F
Authority key identifier: B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/085afc91bbca9fc22a15dbf494e5e9357471c74b.roa
Signing time:             Wed 24 Mar 2021 14:45:28 +0000
ROA not before:           Wed 24 Mar 2021 14:45:28 +0000
ROA not after:            Tue 24 Mar 2026 14:45:28 +0000
asID:                     19180
IP address blocks:        148.102.0.0/17 maxlen: 24
                          190.187.0.0/17 maxlen: 24
                          190.187.128.0/17 maxlen: 24
                          190.8.128.0/19 maxlen: 24
                          200.31.112.0/20 maxlen: 24
                          200.31.96.0/20 maxlen: 24
                          2001:1380::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879135 (0xd6a1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1df9a14191089eaefc01526e171a2fc63b8cc044
        Validity
            Not Before: Mar 24 14:45:28 2021 GMT
            Not After : Mar 24 14:45:28 2026 GMT
        Subject: CN=085afc91bbca9fc22a15dbf494e5e9357471c74b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2c:8d:2f:56:c1:fb:f4:a2:4a:b7:8b:44:2d:
                    79:a8:7d:ad:0b:75:19:db:05:80:be:ba:f4:07:ea:
                    bc:2c:f7:3a:9b:ac:09:16:9a:b1:4f:6d:57:04:ea:
                    a6:e8:f7:a9:12:7d:66:21:d0:3b:23:b3:50:d6:fb:
                    1a:06:78:f2:95:bb:3f:6d:7d:bc:01:82:fa:68:ec:
                    ea:08:b1:88:d8:32:93:34:57:31:d4:2f:35:59:a1:
                    d4:e7:f8:d8:48:49:c3:56:e7:9c:60:c4:50:43:0a:
                    57:32:4a:1e:7a:f2:6d:63:14:c3:71:db:60:d8:24:
                    d0:e0:61:28:36:ed:af:ba:45:ac:f6:3a:8d:21:33:
                    60:3b:8e:9e:a4:6f:be:08:a2:f7:66:35:c7:15:ad:
                    fa:dd:ca:70:db:b8:34:48:92:f0:96:c9:68:10:c8:
                    72:fd:33:0d:86:47:fb:6c:fb:5d:3a:f8:92:82:7d:
                    65:5d:06:47:bf:46:12:53:2f:d5:b0:45:69:c8:54:
                    6e:da:68:a8:ee:cd:53:33:48:4d:ed:41:a8:b9:ad:
                    6f:a4:94:2a:a6:e8:a9:a2:85:d2:80:9c:83:85:7f:
                    e2:12:8c:89:d6:81:35:38:db:0e:14:d3:85:9f:1b:
                    19:69:98:37:14:a3:c9:a3:10:82:0f:dc:dd:8a:8a:
                    f3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:53:1C:AB:84:24:F7:AE:51:85:99:3D:92:7A:0C:73:BC:66:4F:05
            X509v3 Authority Key Identifier:
                keyid:B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/085afc91bbca9fc22a15dbf494e5e9357471c74b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/1df9a14191089eaefc01526e171a2fc63b8cc044.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.0.0/17
                  190.8.128.0/19
                  190.187.0.0/16
                  200.31.96.0/19
                IPv6:
                  2001:1380::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:92:fb:4b:eb:be:92:92:e5:5a:33:70:3e:9e:6a:d5:49:66:
         5d:da:fb:41:15:e3:1a:89:b5:47:d5:96:49:aa:4d:9a:59:7d:
         ed:6f:2e:dc:43:5b:19:2a:b0:7b:1e:45:6d:bb:82:ac:33:af:
         b7:fa:00:9d:f1:39:96:9e:35:81:cb:6a:6f:db:00:e9:a6:9c:
         7c:cf:af:d7:83:24:45:8a:70:77:5c:70:48:10:e6:d9:f7:32:
         e7:77:d1:fc:eb:99:48:60:ff:1d:e9:1a:c2:7f:23:a1:d3:fc:
         1b:89:a6:9b:72:3d:55:43:22:07:59:c1:e7:0a:e8:41:f8:0f:
         0e:72:4c:0f:1d:f2:d1:7e:c4:7e:c9:5f:75:ed:24:f4:0f:46:
         2d:29:54:f0:92:fa:61:b6:b1:5e:b6:58:75:fe:de:01:c2:de:
         ff:69:ae:3a:ec:e8:14:97:af:68:50:13:9e:34:ec:df:54:29:
         fd:00:b1:c9:e2:63:28:72:46:04:75:5e:9a:69:24:36:cf:4a:
         21:ba:0d:17:81:4f:be:2d:37:9c:b3:94:56:55:2d:f0:da:83:
         37:7a:97:8c:a0:98:6c:43:5f:5b:09:9a:03:ad:49:36:8f:23:
         f9:1d:b2:23:a1:2c:16:14:05:39:ee:9a:32:56:0a:be:89:d3:
         f9:ed:8c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----