Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/2255781a770668be2d0fec8c06661722d2e5ed34.roa
File:                     2255781a770668be2d0fec8c06661722d2e5ed34.roa (raw, json)
Hash identifier:          BGhxfFc254B6PJGXLlzA3ppc6bYjT0sqSFcprLnwTZQ=
Subject key identifier:   EB:21:68:4A:FC:CB:69:99:9A:6B:8D:74:F1:C6:12:A7:B8:7F:1B:16
Certificate issuer:       /CN=415bbdadc090f33ec878e16eb6264e70c552a90c
Certificate serial:       0DC6E2
Authority key identifier: 75:66:62:AA:0A:9F:9C:45:99:93:29:65:92:C3:1F:6A:6F:23:CB:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/415bbdadc090f33ec878e16eb6264e70c552a90c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/2255781a770668be2d0fec8c06661722d2e5ed34.roa
Signing time:             Wed 24 Mar 2021 14:41:15 +0000
ROA not before:           Wed 24 Mar 2021 14:41:13 +0000
ROA not after:            Tue 24 Mar 2026 14:41:13 +0000
asID:                     27947
IP address blocks:        186.33.150.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902882 (0xdc6e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415bbdadc090f33ec878e16eb6264e70c552a90c
        Validity
            Not Before: Mar 24 14:41:13 2021 GMT
            Not After : Mar 24 14:41:13 2026 GMT
        Subject: CN=2255781a770668be2d0fec8c06661722d2e5ed34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:80:f1:16:50:35:08:97:8e:05:c7:86:a2:f1:
                    06:6f:e3:8d:81:f9:a2:97:1c:a4:3a:4c:1a:f3:a0:
                    09:8c:a5:64:1c:0c:c4:e6:c3:49:29:e5:d4:64:37:
                    dd:27:f8:c5:0e:79:c8:0f:25:c0:c4:7a:fc:9e:d5:
                    15:fc:10:1b:8b:2e:54:ca:bb:92:ec:bd:d0:db:12:
                    96:4b:03:67:f2:bb:3f:67:d6:7c:41:8d:2c:62:b5:
                    9b:f6:b3:b8:be:16:15:74:97:23:87:6c:bf:bc:0e:
                    a3:82:14:92:2c:a9:08:3b:01:dc:88:c7:ed:11:6e:
                    5b:e5:88:36:fe:c7:bd:48:3f:58:42:5e:9b:9b:35:
                    e9:fe:eb:8f:05:1c:eb:18:06:86:db:d5:0c:28:69:
                    04:53:31:a3:0b:b1:5a:98:02:d7:bb:c6:61:f4:af:
                    67:91:94:dd:72:80:67:2c:63:03:6f:f1:d7:3e:4c:
                    9a:7e:c3:b3:d4:21:4d:ff:7b:bf:81:dc:bb:ae:83:
                    bd:7e:d5:eb:b4:03:3f:b6:a6:50:bb:f6:08:6f:95:
                    ea:12:0b:f6:c5:66:bd:c1:a8:c8:94:d4:b1:62:c0:
                    38:5e:13:78:37:d4:cc:a3:39:9e:9d:26:05:35:a6:
                    a2:04:20:a6:44:f4:53:66:a6:40:76:0d:5d:ec:61:
                    7f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:21:68:4A:FC:CB:69:99:9A:6B:8D:74:F1:C6:12:A7:B8:7F:1B:16
            X509v3 Authority Key Identifier:
                keyid:75:66:62:AA:0A:9F:9C:45:99:93:29:65:92:C3:1F:6A:6F:23:CB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/415bbdadc090f33ec878e16eb6264e70c552a90c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/2255781a770668be2d0fec8c06661722d2e5ed34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/415bbdadc090f33ec878e16eb6264e70c552a90c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:08:f7:05:71:be:2b:3c:fc:b6:29:58:b0:d2:da:33:b1:03:
         79:a7:1f:6d:8c:71:af:39:09:e4:f6:e2:87:17:b0:69:9a:6b:
         ee:cb:4f:e5:26:f1:e5:5c:c3:e6:d8:9e:11:fd:7b:4d:72:05:
         db:b5:93:b6:18:58:6f:9b:f1:70:68:ca:96:66:83:1c:50:64:
         23:b3:26:87:fe:9d:d0:bb:4e:62:e5:dd:90:ed:d7:e0:17:45:
         06:5f:9d:ad:b4:2b:84:dc:e6:5b:67:25:f7:80:c7:cb:94:e1:
         0e:8a:34:72:54:97:73:51:e8:ee:d8:9b:d7:66:18:f7:81:ad:
         d9:98:52:9c:e5:7e:7e:e4:61:c1:15:33:c6:85:df:49:f9:c5:
         df:90:4e:e4:a8:fb:62:77:42:7c:31:d7:f5:ed:1d:7d:de:d2:
         c1:60:55:53:71:7f:61:0e:0c:e5:49:b2:5f:b4:90:8a:c2:6b:
         85:fc:f9:f6:e7:19:53:60:45:89:e0:8d:70:77:ea:32:f4:b4:
         1c:e8:3a:e8:a8:d8:c6:da:9a:01:ba:60:e8:b3:00:2d:ce:c3:
         cf:45:ec:ee:5a:63:d1:85:4f:52:3e:d0:8a:48:d7:1c:ea:94:
         9f:ea:ae:1e:7e:45:72:1a:a0:12:ae:08:7b:25:32:3e:b5:26:
         c0:6a:e9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----