Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/c9e2e30f9976855664b9fa2a70a8547ec13bf9cb.roa
File:                     c9e2e30f9976855664b9fa2a70a8547ec13bf9cb.roa (raw, json)
Hash identifier:          qjNuPMROCUl72w55pIVOuokI68gPj2QAsnmOiEbg7nU=
Subject key identifier:   D5:E6:A4:46:C0:F2:1B:B9:94:00:A0:A2:6F:5A:64:42:55:EB:ED:BF
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       0DE303
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/c9e2e30f9976855664b9fa2a70a8547ec13bf9cb.roa
Signing time:             Wed 24 Mar 2021 14:34:59 +0000
ROA not before:           Wed 24 Mar 2021 14:34:57 +0000
ROA not after:            Tue 24 Mar 2026 14:34:57 +0000
asID:                     27817
IP address blocks:        186.113.12.0/25 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910083 (0xde303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Mar 24 14:34:57 2021 GMT
            Not After : Mar 24 14:34:57 2026 GMT
        Subject: CN=c9e2e30f9976855664b9fa2a70a8547ec13bf9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2c:a9:75:ba:ab:20:09:59:c9:70:d3:69:48:
                    f9:f8:50:6a:5c:f8:b8:77:cd:21:84:a3:3b:db:ea:
                    54:54:48:03:3c:5f:2f:eb:5b:fe:a0:ee:cc:5d:a9:
                    0e:57:b5:0a:58:1b:12:35:ae:83:33:5b:af:71:07:
                    17:4b:45:dd:c1:5b:3b:6f:83:82:d7:60:82:04:0d:
                    91:1b:67:84:33:38:9f:5b:78:7c:34:04:d7:a1:b6:
                    f7:6e:84:bc:99:89:07:9a:6c:d1:5e:91:0d:f5:7a:
                    a5:d8:d9:58:0d:88:92:c3:bd:ce:06:91:d8:e4:59:
                    d7:59:d1:bd:42:42:6f:5e:f7:96:18:3d:72:3b:93:
                    d9:d9:ab:a4:3e:52:3e:70:8f:5e:d6:36:0b:2f:52:
                    64:3c:f9:7e:ce:46:b0:a7:17:eb:1e:de:87:f7:ea:
                    98:c5:63:6b:89:2b:d6:e5:01:e9:d0:1e:ff:58:54:
                    00:13:cb:8f:7a:b8:fc:b1:c9:01:ca:71:fd:77:61:
                    0c:e2:b4:a6:92:e0:da:5d:2a:46:9c:2f:93:e1:19:
                    9f:a0:7d:d9:bd:ce:e4:24:2c:23:77:39:bf:b0:1d:
                    9e:38:63:35:b6:ec:26:7a:e6:3f:85:22:28:e7:62:
                    77:74:39:4d:24:44:5a:8b:4d:f9:13:00:4b:04:2e:
                    2c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E6:A4:46:C0:F2:1B:B9:94:00:A0:A2:6F:5A:64:42:55:EB:ED:BF
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/c9e2e30f9976855664b9fa2a70a8547ec13bf9cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.113.12.0/25

    Signature Algorithm: sha256WithRSAEncryption
         7f:35:80:52:c4:3f:8e:e3:00:02:f4:49:83:cf:27:16:29:00:
         bc:90:40:31:78:90:02:47:c7:ba:ab:b2:09:b5:31:14:82:45:
         f9:f5:f5:2f:49:a6:05:2f:fa:e3:c9:e8:a1:5f:26:23:7a:d4:
         f2:e5:ad:1d:5a:0d:9e:11:4b:77:d8:f0:04:49:40:6e:f9:33:
         0d:57:63:d3:f1:e6:de:69:25:3b:67:0c:19:44:a6:ec:b0:1e:
         38:cd:8f:df:ff:0b:0f:32:29:71:76:37:d0:cc:cc:a8:e8:ed:
         4d:6c:0f:60:05:a8:9b:86:6e:a2:47:dd:f9:e1:e4:8c:7e:af:
         cb:91:a7:48:bd:ad:d8:4a:24:70:ea:82:f4:fb:43:48:41:ec:
         7d:b7:48:2c:95:41:c7:d6:a4:87:df:9d:50:70:d1:1d:2f:c7:
         43:20:e2:a6:4b:00:34:eb:68:48:9b:5b:2d:ef:59:01:90:ee:
         b0:5a:53:b6:24:18:05:23:0d:b2:0e:7a:41:ff:d2:d8:63:c2:
         78:61:d0:a8:c2:3b:81:8d:0e:d3:9b:0c:d1:d8:07:e4:82:e3:
         41:4f:cc:67:2c:0f:fc:40:4d:20:28:5a:95:77:63:67:75:2f:
         ce:fc:89:34:e5:ce:63:5c:ec:34:24:2d:39:96:45:8a:db:da:
         33:c9:f5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----