Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/04b73e6332142b4adc27d7394af6793811081663.roa
File:                     04b73e6332142b4adc27d7394af6793811081663.roa (raw, json)
Hash identifier:          gZk/wx/B7yRLDkm2nNNou9jF94sre4HoWbBWR8Dq7sY=
Subject key identifier:   02:8C:20:D4:CD:BE:F2:AF:7A:7A:CB:1D:09:9D:94:FC:3B:F4:71:7A
Certificate issuer:       /CN=fdfd425584dd260c812e3b649911e7753efa8f09
Certificate serial:       16FC96
Authority key identifier: BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/04b73e6332142b4adc27d7394af6793811081663.roa
Signing time:             Thu 28 Apr 2022 14:52:52 +0000
ROA not before:           Thu 28 Apr 2022 03:00:00 +0000
ROA not after:            Tue 28 Apr 2026 03:00:00 +0000
asID:                     1299
IP address blocks:        170.80.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1506454 (0x16fc96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdfd425584dd260c812e3b649911e7753efa8f09
        Validity
            Not Before: Apr 28 03:00:00 2022 GMT
            Not After : Apr 28 03:00:00 2026 GMT
        Subject: CN=04b73e6332142b4adc27d7394af6793811081663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:14:8b:83:c6:78:3f:16:a6:e4:df:7c:3f:9e:
                    75:a7:b0:b6:60:f1:39:a8:53:9f:1f:01:86:ce:ab:
                    5b:97:24:d9:b6:3b:18:d1:d9:9d:c0:33:78:98:5a:
                    b2:e9:de:d0:71:c3:1f:48:89:3f:5c:07:dd:e9:6c:
                    80:d2:6e:0d:41:2a:47:7b:39:17:e9:16:4e:30:0d:
                    2c:c5:79:37:80:4a:c2:09:ff:13:cc:6d:36:78:b7:
                    bb:21:07:35:3c:07:3a:af:a1:9c:c0:88:b5:82:99:
                    8c:76:53:f6:8b:94:a6:52:4d:a1:a7:ae:94:4a:4b:
                    12:d0:9f:6f:b6:ff:a9:da:f7:65:f4:45:01:a7:a8:
                    f9:46:57:41:a3:d9:68:b0:a5:67:4a:f7:f5:03:44:
                    2f:d4:8b:83:25:0c:2f:cf:56:01:d0:37:d4:3a:69:
                    af:2c:a1:02:3a:8a:8e:85:9a:2c:a0:ad:c9:22:24:
                    c0:b0:1f:75:2d:80:bb:b1:9b:e7:23:5a:a1:f6:90:
                    0b:0a:ca:45:cc:13:73:85:5a:4d:ab:2e:03:5e:3d:
                    7f:51:28:18:42:4e:80:36:8e:9a:46:b8:e0:99:d3:
                    df:1a:73:dd:83:9b:1a:69:3a:9e:61:bb:55:8a:b3:
                    8d:c5:c5:b2:31:93:7a:dd:df:0e:d6:14:93:cf:dc:
                    57:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8C:20:D4:CD:BE:F2:AF:7A:7A:CB:1D:09:9D:94:FC:3B:F4:71:7A
            X509v3 Authority Key Identifier:
                keyid:BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/04b73e6332142b4adc27d7394af6793811081663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/fdfd425584dd260c812e3b649911e7753efa8f09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:71:bb:65:cf:af:5e:73:fc:3a:72:11:11:93:88:0b:21:95:
         6d:2d:60:63:e1:97:ea:63:89:03:6f:79:25:3a:1e:cd:a2:1f:
         b1:53:16:76:b4:21:3c:fd:ad:02:43:82:19:f1:2e:cb:1e:a6:
         cd:57:18:97:97:7d:1e:7a:5a:e0:ec:34:16:88:2a:c1:5d:9d:
         ef:20:85:77:2b:a8:bf:45:6b:5b:79:b6:1a:33:dd:41:7f:90:
         c7:67:95:4f:b0:cc:3e:57:91:e8:5f:26:11:24:26:33:bc:68:
         be:d2:e0:20:6b:ee:22:9f:42:a5:54:b7:51:3a:14:50:dc:a9:
         88:76:5f:92:11:6c:42:3e:d4:a2:00:40:2d:44:59:90:75:7c:
         50:40:60:0e:f4:d6:46:4f:f1:8e:77:d8:f7:b4:8a:ce:20:71:
         ac:5e:2e:23:73:10:47:dd:11:53:34:62:02:a1:b0:66:dc:c1:
         74:68:81:23:f5:46:a9:03:3e:0d:55:e7:30:68:89:27:25:60:
         8a:93:3f:3f:1e:6d:e3:cd:21:27:79:d2:bc:0c:0b:56:fc:fb:
         3e:ce:6e:f8:d5:6f:91:15:58:36:fc:56:69:ab:f8:bc:01:0b:
         fc:7f:f4:5e:4b:95:27:4c:f3:51:9d:a4:cd:86:73:10:c7:b0:
         f6:0c:7e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----