Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/963e31644abd362b63430d0ddc5ee919594e7e4e.roa
File:                     963e31644abd362b63430d0ddc5ee919594e7e4e.roa (raw, json)
Hash identifier:          9MS9vUVGDefm+fTpjrO1XWlwQnitzuotJ18mr9w1p2U=
Subject key identifier:   06:3E:ED:DF:69:42:04:AA:D0:31:CF:43:07:D8:1F:EB:56:71:61:6D
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       0DE6C3
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/963e31644abd362b63430d0ddc5ee919594e7e4e.roa
Signing time:             Wed 24 Mar 2021 14:34:59 +0000
ROA not before:           Wed 24 Mar 2021 14:34:57 +0000
ROA not after:            Tue 24 Mar 2026 14:34:57 +0000
asID:                     22368
IP address blocks:        179.33.108.0/24 maxlen: 24
                          181.236.176.0/20 maxlen: 24
                          181.236.192.0/21 maxlen: 23
                          181.236.222.0/24 maxlen: 24
                          181.236.224.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911043 (0xde6c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Mar 24 14:34:57 2021 GMT
            Not After : Mar 24 14:34:57 2026 GMT
        Subject: CN=963e31644abd362b63430d0ddc5ee919594e7e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c1:89:ae:ad:ae:51:33:84:4c:68:61:e6:ac:
                    3b:d2:64:74:02:08:c5:e8:b0:ca:36:5b:6b:36:ee:
                    4f:22:aa:e4:c3:00:07:d2:71:02:0d:e9:c8:db:8a:
                    13:9e:f3:e3:1a:e2:b6:5e:ca:08:be:67:c5:46:1d:
                    78:aa:22:63:e8:24:2c:ec:62:ad:05:48:a3:10:c1:
                    12:49:ac:b0:c4:2f:1c:f8:d5:c7:b9:e6:f4:9a:a9:
                    da:43:ee:1a:01:d3:ab:f6:2d:9b:92:79:fe:8e:93:
                    be:5d:86:df:aa:50:5a:6d:3f:5c:ec:08:e3:79:90:
                    5c:17:ca:38:f1:4c:d6:c0:e3:84:23:ef:2b:7a:99:
                    ed:cf:25:63:9e:e7:1d:67:84:74:8e:ad:ba:fa:e7:
                    c7:1e:98:20:63:ff:76:83:74:34:0e:da:ce:f6:b0:
                    7a:f0:34:4e:24:f5:ce:67:f3:bd:c2:7a:85:e7:92:
                    6b:b4:6c:33:8e:81:6b:0c:32:26:bc:65:92:1c:6a:
                    24:d2:08:19:cd:6e:c3:58:8c:ce:3f:e9:4f:26:ca:
                    6c:54:47:f9:ca:6c:ea:25:48:d9:02:a0:84:30:83:
                    d3:34:bb:9b:4d:0f:a8:56:f2:b2:2d:2a:47:e8:48:
                    37:42:82:65:ad:d4:4e:62:82:2c:4c:ba:c5:a0:19:
                    07:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3E:ED:DF:69:42:04:AA:D0:31:CF:43:07:D8:1F:EB:56:71:61:6D
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/963e31644abd362b63430d0ddc5ee919594e7e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.33.108.0/24
                  181.236.176.0-181.236.199.255
                  181.236.222.0/24
                  181.236.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         18:65:33:3f:d6:1e:d2:c8:ff:a6:60:df:78:78:df:67:f7:ac:
         77:c4:13:59:99:f6:90:30:d4:1c:5e:40:5e:99:dc:1c:9f:68:
         71:10:18:0a:69:72:a5:88:0d:42:f7:00:4b:ff:5d:0c:2b:d6:
         68:cd:fb:e7:ef:00:4a:51:bb:15:45:ee:04:8d:36:34:04:95:
         ff:f9:b6:e0:49:ad:8b:81:7c:5e:92:5a:6e:f0:fc:11:26:ad:
         b7:58:02:25:b3:54:75:c9:c8:c6:20:b7:77:06:30:a8:df:23:
         c9:14:ce:e8:37:e1:2a:55:d3:ff:4f:a1:de:f5:62:66:4c:da:
         23:60:b9:89:41:5d:c1:89:48:2c:eb:69:a7:8d:3f:ba:48:5a:
         c8:be:ec:04:98:21:dc:0b:6e:66:94:9a:65:91:c7:ca:a2:54:
         55:ca:3a:c8:9c:1e:bb:46:50:25:58:15:2d:f3:f5:72:b4:0c:
         60:64:45:56:7e:0c:d6:0a:7a:a6:60:ac:df:8a:06:8a:19:31:
         79:f1:af:de:3f:f1:de:bd:6d:58:f9:95:e0:00:66:7f:b0:a0:
         e2:81:75:bc:94:93:c8:d0:d2:9f:69:34:fb:0a:88:58:19:ce:
         82:d3:15:7d:1f:ba:9c:84:d8:1c:40:5d:14:f5:c5:78:87:37:
         5a:b9:3a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----