Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3f7d255-8da2-4a22-b327-761c4c752239/85206ba4f5e026e665590b4d274e400627074f80.roa
File:                     85206ba4f5e026e665590b4d274e400627074f80.roa (raw, json)
Hash identifier:          3A2T4A8O3O+0jzDh1WCAAmFgiysEe/URtFFTlbG8oTA=
Subject key identifier:   53:57:FF:01:60:C8:58:DF:F3:C5:BF:09:39:B8:A4:A8:2C:C7:AE:E4
Certificate issuer:       /CN=9e7d975858e57eba8aa9f3546843c2ca4ff98a40
Certificate serial:       1BA8D3
Authority key identifier: DE:BC:71:7F:74:DB:DD:C0:04:1E:52:07:60:20:BD:59:47:54:E2:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7d975858e57eba8aa9f3546843c2ca4ff98a40.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3f7d255-8da2-4a22-b327-761c4c752239/85206ba4f5e026e665590b4d274e400627074f80.roa
Signing time:             Thu 27 Oct 2022 23:55:02 +0000
ROA not before:           Tue 23 Mar 2021 14:42:30 +0000
ROA not after:            Tue 24 Mar 2026 14:42:30 +0000
asID:                     52262
IP address blocks:        191.103.92.0/24 maxlen: 24
                          191.103.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1812691 (0x1ba8d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e7d975858e57eba8aa9f3546843c2ca4ff98a40
        Validity
            Not Before: Mar 23 14:42:30 2021 GMT
            Not After : Mar 24 14:42:30 2026 GMT
        Subject: CN=85206ba4f5e026e665590b4d274e400627074f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:24:e4:30:02:dc:f5:69:4c:99:d4:ad:99:
                    bf:59:46:e4:7e:c1:14:dd:80:25:ab:84:be:a4:f9:
                    d0:a0:eb:e8:99:33:31:49:59:f9:f2:c6:d3:98:97:
                    1c:52:c6:60:21:2a:ab:ba:43:cd:2a:4c:7c:6a:8f:
                    70:fa:53:4e:12:55:e5:c2:43:93:01:28:c9:29:33:
                    71:00:6b:45:d3:8d:37:ad:ef:93:a1:07:02:ed:10:
                    0b:3d:2e:98:44:dc:ca:a0:0b:1a:f1:09:d8:a6:fc:
                    d2:5a:a5:1f:00:b3:16:a9:0a:63:f6:2f:4b:b6:97:
                    a0:3f:5c:db:9c:32:6d:ca:62:84:11:2b:a7:a5:d5:
                    a6:89:37:b8:c5:3b:1d:aa:de:91:f2:57:37:32:b9:
                    7b:7c:db:0e:0f:03:5e:c0:9c:4d:86:a9:3a:75:13:
                    22:72:e3:7d:76:02:f4:dc:2c:a8:12:3b:76:e3:47:
                    ed:2c:a3:31:05:d4:f0:96:8e:1d:10:28:5a:f1:50:
                    ad:01:1b:52:1e:56:8f:61:f9:17:33:8e:e1:cd:86:
                    a8:2c:bc:ab:96:cc:9a:34:56:68:cc:bc:6a:35:6e:
                    3f:69:94:7b:a5:05:40:49:c5:35:08:0d:f6:a8:13:
                    9b:e3:61:9b:00:f9:43:f9:33:a6:fb:e0:d1:c3:1e:
                    83:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:57:FF:01:60:C8:58:DF:F3:C5:BF:09:39:B8:A4:A8:2C:C7:AE:E4
            X509v3 Authority Key Identifier:
                keyid:DE:BC:71:7F:74:DB:DD:C0:04:1E:52:07:60:20:BD:59:47:54:E2:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7d975858e57eba8aa9f3546843c2ca4ff98a40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3f7d255-8da2-4a22-b327-761c4c752239/85206ba4f5e026e665590b4d274e400627074f80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3f7d255-8da2-4a22-b327-761c4c752239/9e7d975858e57eba8aa9f3546843c2ca4ff98a40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:a1:f6:d0:ae:71:5b:64:c6:37:92:85:e5:37:bc:46:80:39:
         e3:a3:c5:c7:a4:66:a0:d6:b0:7b:62:a0:35:a1:de:81:f3:c4:
         b4:15:5f:3f:2a:66:c1:6c:ed:05:95:5e:7b:69:7f:d5:b2:91:
         06:84:15:05:fd:7f:a9:52:88:53:bb:7d:c8:37:9a:fe:3d:c9:
         d9:7d:24:c4:55:ad:d5:e3:0d:75:da:b7:94:4e:c7:aa:be:c2:
         bd:09:9a:a2:93:4f:9f:44:03:b2:cd:46:2d:68:40:e5:18:33:
         45:4a:5f:8f:f0:6b:0b:d6:2b:ef:4f:e2:b7:26:da:3e:53:21:
         99:72:64:af:99:30:5c:18:d1:80:31:65:77:dd:b5:57:87:12:
         52:2c:ef:be:1b:d0:f6:d9:6e:3b:fc:f6:53:52:d0:7e:87:96:
         e0:09:96:e8:3d:7d:0e:a9:1b:4b:b2:4b:13:f4:ff:08:d6:1c:
         e9:9c:99:96:1f:45:09:e0:bb:90:50:d9:cd:1a:43:81:a9:55:
         59:dd:0f:ca:5c:fe:e1:f0:9b:c4:c0:66:ca:56:8f:a5:d9:6b:
         20:29:6d:da:a3:28:a3:4f:1b:7e:dc:49:49:0d:57:85:72:2a:
         bb:23:86:e3:1b:e5:45:e6:a4:0a:d3:20:6b:45:6e:16:6b:34:
         c1:5f:d9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----