Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/1629b4804a128803f13e79b590117deb5c532321.roa
File:                     1629b4804a128803f13e79b590117deb5c532321.roa (raw, json)
Hash identifier:          eA++G17INpb0JJwS1vkDLqdQ0HzAdGEwstWyXgdms2I=
Subject key identifier:   4D:42:9F:BF:89:B2:D9:7B:AC:BE:79:4B:E6:EB:EF:0E:5E:90:21:8A
Certificate issuer:       /CN=af916a8098c48f9f0fefd791512ee124a99ce09d
Certificate serial:       0CD850
Authority key identifier: 72:51:EE:4E:B7:2D:E8:EB:21:05:10:5C:13:54:28:D2:1B:65:6E:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af916a8098c48f9f0fefd791512ee124a99ce09d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/1629b4804a128803f13e79b590117deb5c532321.roa
Signing time:             Tue 17 Jan 2023 13:47:37 +0000
ROA not before:           Mon 09 Aug 2021 03:00:00 +0000
ROA not after:            Thu 10 Aug 2023 03:00:00 +0000
asID:                     20191
IP address blocks:        146.155.0.0/16 maxlen: 16
                          2800:1b0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 841808 (0xcd850)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af916a8098c48f9f0fefd791512ee124a99ce09d
        Validity
            Not Before: Aug  9 03:00:00 2021 GMT
            Not After : Aug 10 03:00:00 2023 GMT
        Subject: CN=1629b4804a128803f13e79b590117deb5c532321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:79:eb:2d:d1:99:a3:9c:42:a1:57:e4:26:ee:
                    f7:8d:aa:e5:a7:e7:d3:95:1a:0f:10:08:e1:f8:66:
                    e1:e3:23:d2:1d:ee:37:8b:2c:bd:7e:41:12:75:a1:
                    1c:f3:f7:80:a3:74:3c:2d:73:8c:c8:ce:3a:9d:49:
                    56:da:c2:6e:18:98:0c:9e:bb:ba:82:4c:5d:3b:b7:
                    31:54:68:36:fd:a9:46:b2:5b:ea:09:6c:eb:70:e0:
                    50:93:c6:39:c2:d2:18:d5:26:b0:67:51:c6:94:52:
                    1c:d8:5a:f1:ca:c7:0d:23:8e:5c:ac:49:e8:24:f1:
                    fe:c2:4b:c4:09:5c:ce:9d:2b:cf:8b:cb:8a:f1:e4:
                    1b:d2:d3:24:72:59:93:20:c2:1c:cf:74:77:00:43:
                    ef:97:dd:3f:ff:92:69:86:84:db:cd:34:49:98:27:
                    7f:ef:5d:ad:b6:85:7b:c9:98:5b:98:35:a6:57:8f:
                    ca:26:3b:30:33:7e:04:d6:eb:8f:27:ae:40:a9:ff:
                    38:24:1b:b3:4b:90:b6:cc:ee:a8:35:2a:6d:55:da:
                    43:fa:3a:18:75:34:18:77:34:4b:5b:d7:90:2d:0e:
                    fe:72:e5:5f:ec:6a:55:07:fc:18:b7:be:06:f5:91:
                    48:72:8d:5b:b4:50:f6:37:97:64:69:a5:26:db:9a:
                    d2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:42:9F:BF:89:B2:D9:7B:AC:BE:79:4B:E6:EB:EF:0E:5E:90:21:8A
            X509v3 Authority Key Identifier:
                keyid:72:51:EE:4E:B7:2D:E8:EB:21:05:10:5C:13:54:28:D2:1B:65:6E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af916a8098c48f9f0fefd791512ee124a99ce09d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/1629b4804a128803f13e79b590117deb5c532321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/af916a8098c48f9f0fefd791512ee124a99ce09d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.155.0.0/16
                IPv6:
                  2800:1b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:07:03:00:ef:3f:90:72:d7:fc:f9:55:0f:c1:a5:dd:ce:c2:
         c3:62:d9:ae:5f:4d:8f:93:ba:f9:69:8d:30:a0:a9:9b:6e:73:
         9b:30:74:74:fe:ab:fc:72:2b:13:b9:bd:87:98:91:2e:f3:58:
         8e:95:62:95:ed:b8:32:b7:ac:82:19:cf:77:7e:7a:0e:1d:01:
         4f:a9:94:6c:26:b3:ef:7f:8b:36:9c:d5:4d:55:30:ec:c8:fb:
         67:88:78:6c:18:72:43:c9:df:fb:7a:01:cd:ca:f3:29:a2:0b:
         7f:0f:7e:b1:df:2b:4f:49:ff:59:84:93:4b:4b:46:3d:78:d1:
         89:82:ba:80:b6:67:b9:26:13:85:bb:05:2e:cf:ac:74:a1:4c:
         ba:60:4d:bf:49:e6:e4:ec:18:f5:34:38:78:4c:b9:09:36:31:
         cb:d4:43:11:84:90:aa:b6:2f:ad:86:70:e2:3f:64:25:d0:dd:
         ba:8f:33:27:6a:7c:a1:f8:d3:e5:b5:43:6b:d9:9a:0a:0e:68:
         62:b2:b4:a5:03:6e:af:a6:3b:2a:0e:9e:63:4e:93:94:11:0a:
         49:a3:05:b0:bf:62:52:43:19:c3:d9:7e:93:b6:53:05:ee:2b:
         e4:79:21:d0:5d:5c:75:e0:58:77:83:10:ba:7c:8b:31:f9:60:
         56:55:b3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----