Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/d620d4790be3127c8c4973af2a11ac4a23cad9a3.roa
File:                     d620d4790be3127c8c4973af2a11ac4a23cad9a3.roa (raw, json)
Hash identifier:          RpLWpePrwSE6Dt+/fEbTUXvb/7rfTQTkTkkrInIgkAY=
Subject key identifier:   4D:B5:29:79:AE:79:E3:DB:76:D8:BE:F2:F4:61:37:11:18:24:8A:F3
Certificate issuer:       /CN=fdfd425584dd260c812e3b649911e7753efa8f09
Certificate serial:       0CDFEF
Authority key identifier: BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/d620d4790be3127c8c4973af2a11ac4a23cad9a3.roa
Signing time:             Wed 24 Mar 2021 14:42:34 +0000
ROA not before:           Wed 24 Mar 2021 14:42:34 +0000
ROA not after:            Tue 24 Mar 2026 14:42:34 +0000
asID:                     264819
IP address blocks:        170.80.140.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843759 (0xcdfef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdfd425584dd260c812e3b649911e7753efa8f09
        Validity
            Not Before: Mar 24 14:42:34 2021 GMT
            Not After : Mar 24 14:42:34 2026 GMT
        Subject: CN=d620d4790be3127c8c4973af2a11ac4a23cad9a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9c:e0:61:7e:43:34:e9:ef:12:db:66:90:18:
                    4f:01:6c:60:69:77:4e:6e:e1:42:26:cc:4c:a4:65:
                    dd:5d:47:37:76:7d:81:84:fc:89:63:21:41:c0:39:
                    32:ca:8c:39:ed:6c:7e:37:dc:ba:42:12:d3:de:17:
                    37:b0:66:d7:91:da:06:2a:97:7d:ab:0d:d7:c5:06:
                    30:ca:a2:73:79:ed:85:99:87:37:08:5d:bf:8d:ee:
                    3a:35:3c:eb:5e:60:5a:f6:8f:56:23:f5:e5:1d:24:
                    11:a2:e9:e8:44:48:68:85:af:27:9d:33:6a:7e:ed:
                    c5:2a:3d:94:40:7e:2b:4e:2c:b7:82:1d:fe:80:bd:
                    08:ea:07:3c:e3:a4:45:37:3a:bd:9f:19:7d:de:53:
                    6d:cd:fe:ac:fd:83:e5:3b:ad:4b:9f:05:34:d3:46:
                    ff:15:0c:06:4b:e2:72:4d:6b:f2:8d:6c:6b:0e:3d:
                    39:98:e4:af:b2:9c:00:68:ce:26:df:50:15:5d:7c:
                    5d:8d:00:c0:60:b2:57:f8:2b:64:40:1b:ea:3a:72:
                    e4:bb:7b:a0:8e:89:6d:10:0c:00:98:f6:25:1f:51:
                    2f:d3:bd:54:82:91:e7:87:a4:f8:98:20:fa:d2:bd:
                    d3:1d:b6:7e:20:46:40:60:83:75:64:8e:33:0a:3e:
                    25:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B5:29:79:AE:79:E3:DB:76:D8:BE:F2:F4:61:37:11:18:24:8A:F3
            X509v3 Authority Key Identifier:
                keyid:BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/d620d4790be3127c8c4973af2a11ac4a23cad9a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/fdfd425584dd260c812e3b649911e7753efa8f09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:3b:ae:4b:2a:cb:df:ca:37:4b:cb:14:99:07:aa:98:ac:8b:
         4b:df:ac:44:7f:49:c6:14:9f:2c:03:a2:a2:76:05:db:99:f7:
         78:7a:57:5c:d5:73:67:1a:01:e3:93:e3:bb:f9:0d:99:0f:43:
         94:0d:e6:2c:11:41:f5:29:2e:a4:f1:ac:4e:1a:86:a7:17:0a:
         d6:0a:8c:65:12:10:94:78:b8:a0:15:7b:60:d5:52:1d:a0:ea:
         da:e1:68:f7:a1:87:51:31:7f:95:b6:78:65:ee:6c:ef:ad:47:
         7a:95:c3:db:6c:38:14:1c:ce:87:6f:c4:b2:d4:0a:3f:0b:91:
         39:b9:e5:ff:ea:d8:e3:31:25:da:27:ee:ed:24:da:93:69:3b:
         33:f3:10:7c:61:62:5c:e8:18:2b:8a:5a:5e:b4:a3:8b:6b:c8:
         2b:c5:67:d2:0e:c5:9b:15:5f:46:ca:81:f6:5e:81:7f:dc:7a:
         1a:dd:d0:4f:76:ac:d5:8e:5e:08:55:45:12:9b:78:58:06:e2:
         47:0e:37:cd:9a:f2:25:77:07:34:8d:60:d5:31:01:60:d2:ac:
         ec:97:d7:04:8f:37:91:82:45:eb:4c:46:7e:4f:e5:49:b8:88:
         3b:e9:86:05:7b:88:98:39:eb:94:b6:f2:fc:fa:9a:fb:1d:91:
         79:36:46:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----