Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/0b30f4fee5c5a273966bfeeacb2b4a6d72688ec0.roa
File:                     0b30f4fee5c5a273966bfeeacb2b4a6d72688ec0.roa (raw, json)
Hash identifier:          RU+SxiYBx5pQcetwymXR1VII768279gmMFVWaKxjLaM=
Subject key identifier:   72:F3:29:F9:D6:70:4E:53:86:98:F1:36:78:2D:13:4E:B7:85:43:82
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       0DD13E
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/0b30f4fee5c5a273966bfeeacb2b4a6d72688ec0.roa
Signing time:             Wed 24 Mar 2021 14:34:58 +0000
ROA not before:           Wed 24 Mar 2021 14:34:57 +0000
ROA not after:            Tue 24 Mar 2026 14:34:57 +0000
asID:                     32787
IP address blocks:        186.113.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905534 (0xdd13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Mar 24 14:34:57 2021 GMT
            Not After : Mar 24 14:34:57 2026 GMT
        Subject: CN=0b30f4fee5c5a273966bfeeacb2b4a6d72688ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f6:e3:2f:23:ba:7a:e7:e3:c8:63:9c:83:cb:
                    5c:65:18:06:4f:97:ad:a4:fb:fa:01:29:21:45:ad:
                    a0:73:d8:d3:e1:3a:02:ed:2d:c6:14:c2:be:c9:8c:
                    77:94:e1:2b:de:02:2e:15:9f:ff:a5:3e:b3:21:83:
                    f7:41:0a:b7:96:28:a8:88:59:59:95:07:82:41:60:
                    a0:4f:3c:8f:d8:49:60:f3:a4:91:d9:6f:cf:97:02:
                    21:aa:9b:a9:11:5d:12:02:40:d3:b2:a8:04:33:49:
                    55:b4:e4:6e:3a:cc:83:c6:85:e9:9c:0a:bd:84:35:
                    e8:b9:0b:0e:15:1a:fa:44:c8:23:e8:f6:0f:5c:cc:
                    44:fd:94:94:25:41:1b:00:bb:70:09:8d:75:65:08:
                    b4:5d:86:d3:34:d7:0a:22:c4:ea:3a:fc:45:73:e9:
                    98:17:ce:17:d1:e3:af:3d:c7:f5:0f:b5:4a:34:77:
                    6c:73:9f:95:31:83:7e:3a:60:4e:95:ca:58:33:0a:
                    92:e4:2e:a0:c3:f0:2e:fb:f3:20:a9:82:5c:25:a3:
                    f6:e4:90:f3:d3:5d:4f:71:5d:58:d2:4d:1f:8a:28:
                    8e:90:5b:bd:60:77:73:07:50:4a:d0:52:89:b0:23:
                    b1:20:8f:56:84:4e:df:1c:cd:f1:bb:74:54:e4:02:
                    8a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F3:29:F9:D6:70:4E:53:86:98:F1:36:78:2D:13:4E:B7:85:43:82
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/0b30f4fee5c5a273966bfeeacb2b4a6d72688ec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.113.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:56:d1:80:95:49:0b:42:84:24:98:d6:d2:da:85:c8:51:04:
         d1:5c:86:51:3b:06:73:b8:73:77:38:1b:d6:fb:38:89:f6:9e:
         f7:6d:7f:c4:23:72:e8:3f:c4:d5:1d:54:35:e0:eb:76:39:24:
         c1:8f:d8:0f:08:e2:a2:3f:32:ba:de:92:f2:5b:c6:9e:e8:d4:
         1d:0e:c9:d6:c9:a4:f3:df:59:62:d9:d5:d0:af:6c:ab:02:54:
         77:53:f0:78:77:54:df:63:54:cf:d7:52:ed:39:0a:02:ba:9d:
         25:8b:f1:0d:7b:35:84:cb:b8:15:aa:ee:49:bd:5f:c0:3b:d3:
         54:be:6e:f6:84:e2:39:ab:a6:21:3d:b4:80:36:a4:e1:22:26:
         c1:c3:6a:03:a3:1b:06:f2:ad:26:05:90:d8:95:34:b9:f0:9e:
         e0:bf:29:9c:45:b3:ab:06:bc:c5:51:39:d2:8c:81:3b:b2:68:
         2a:b0:2a:62:2c:ef:1a:14:e5:63:a1:ee:ee:79:e8:6f:a1:3a:
         0a:ec:13:16:03:87:85:0c:1c:2d:f0:a9:5b:71:df:ba:db:b0:
         aa:e1:3a:03:cc:d8:27:65:27:96:8d:1d:50:6f:72:96:83:48:
         11:c1:7b:00:2a:30:c2:f6:8d:64:31:63:a6:9b:54:1f:58:59:
         c2:51:75:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----