Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bee8f12f-d635-4504-8539-b62b3943b324/22722678b529d41f0697cc4de4e993cd27484b96.roa
File:                     22722678b529d41f0697cc4de4e993cd27484b96.roa (raw, json)
Hash identifier:          UICRJAwR6tDvtdxvvmrFaWQFNPf2TEK11lxBDjG9zoA=
Subject key identifier:   E7:BA:7B:75:07:A2:40:45:3A:72:E7:87:91:F7:9E:A8:3F:93:A5:8D
Certificate issuer:       /CN=72d171d8debd2ac10e765c7fc036618865729a14
Certificate serial:       0408
Authority key identifier: 30:F3:78:72:51:5E:4B:A9:1C:DA:8B:EF:F5:89:1F:40:13:81:49:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72d171d8debd2ac10e765c7fc036618865729a14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bee8f12f-d635-4504-8539-b62b3943b324/22722678b529d41f0697cc4de4e993cd27484b96.roa
Signing time:             Thu 03 Feb 2022 19:09:06 +0000
ROA not before:           Thu 03 Feb 2022 03:00:00 +0000
ROA not after:            Sat 03 Feb 2024 03:00:00 +0000
asID:                     27828
IP address blocks:        200.7.160.0/20 maxlen: 24
                          2801:104::/40 maxlen: 47

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1032 (0x408)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72d171d8debd2ac10e765c7fc036618865729a14
        Validity
            Not Before: Feb  3 03:00:00 2022 GMT
            Not After : Feb  3 03:00:00 2024 GMT
        Subject: CN=22722678b529d41f0697cc4de4e993cd27484b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:92:07:fa:f2:fd:bc:f9:16:4c:cf:78:ee:79:
                    5f:12:c1:8c:78:6c:c7:1c:13:54:94:b2:ad:4f:b6:
                    21:e8:2f:71:18:41:4f:52:e8:d9:47:51:c8:ab:eb:
                    ba:e7:a8:c9:f7:4d:c8:27:29:9b:bc:a9:d6:99:6f:
                    37:fe:ee:a4:cf:e5:12:96:a7:a4:ee:16:39:d2:db:
                    6d:30:94:cb:a1:26:0b:c4:bd:f3:57:0b:a6:5a:33:
                    2d:52:0a:1c:20:18:21:4d:ea:3c:ef:37:c1:46:53:
                    ae:35:85:0b:33:f4:ab:55:c4:c5:7f:ae:97:b2:66:
                    55:9f:6b:5c:8a:64:f7:d4:5f:8e:ec:f0:fe:7a:e9:
                    e1:09:25:95:77:be:76:4f:91:eb:ef:4b:64:63:4d:
                    9b:ce:22:db:35:dd:6b:d2:7c:9e:1b:66:95:98:d8:
                    ec:a2:53:9d:cf:2c:42:eb:f7:f4:be:3d:69:5f:6a:
                    63:02:54:2f:e2:74:58:b1:46:37:5e:9c:c3:29:ea:
                    d7:27:16:29:ca:d8:bb:e6:29:50:7d:fc:db:c6:54:
                    d2:80:4a:12:44:94:31:8d:9b:f2:94:3d:a0:1b:dd:
                    91:83:25:26:c2:dd:9e:2c:8b:a7:47:5f:18:70:09:
                    37:c0:85:16:35:14:85:25:b8:7a:49:90:64:0f:a3:
                    73:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BA:7B:75:07:A2:40:45:3A:72:E7:87:91:F7:9E:A8:3F:93:A5:8D
            X509v3 Authority Key Identifier:
                keyid:30:F3:78:72:51:5E:4B:A9:1C:DA:8B:EF:F5:89:1F:40:13:81:49:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72d171d8debd2ac10e765c7fc036618865729a14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bee8f12f-d635-4504-8539-b62b3943b324/22722678b529d41f0697cc4de4e993cd27484b96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bee8f12f-d635-4504-8539-b62b3943b324/72d171d8debd2ac10e765c7fc036618865729a14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.160.0/20
                IPv6:
                  2801:104::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:de:d6:06:18:41:69:18:47:2f:52:36:f2:65:89:70:8b:10:
         5e:6b:bf:c9:8b:b3:9f:a7:65:ec:99:c4:f1:9d:d1:40:57:cd:
         e8:ff:64:f5:84:3a:42:50:ac:d5:bc:84:6a:76:93:bd:fa:e1:
         83:f3:db:7b:f1:f1:45:b4:22:27:96:e7:eb:85:23:55:60:d2:
         b2:4e:7c:0a:8a:9b:17:8f:92:27:5e:77:34:44:57:bd:89:db:
         76:cb:44:3e:e8:18:24:c1:c5:05:4f:ec:4c:68:5f:11:28:14:
         d4:40:42:25:61:d6:b7:e3:b5:b9:92:3c:bf:a7:60:65:3d:f5:
         f6:34:b2:f4:3b:25:33:4d:f0:50:79:f0:f6:d9:07:c7:60:fd:
         3b:d3:4f:71:f1:62:7d:32:b5:b8:3d:e0:d7:d4:0c:81:03:79:
         34:60:bb:d2:0f:9a:e3:0c:d3:e7:17:dd:4d:ea:af:f7:09:2b:
         fc:32:df:fe:fe:61:56:4e:10:e3:52:f6:c7:7d:bc:1a:d9:74:
         fe:bf:e2:2c:8c:bf:b3:07:44:86:d5:d8:3a:c9:d4:5a:7a:91:
         a6:c9:70:bd:6f:f8:c4:32:f5:27:1e:47:d6:9e:98:9c:43:60:
         d9:e5:4b:8c:a8:3c:2b:9c:d7:dc:de:bd:bc:da:1b:b6:8e:f0:
         08:88:00:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----