Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/1f3ccce7802ea898ed01bfcc7346d3b31692a543.roa
File:                     1f3ccce7802ea898ed01bfcc7346d3b31692a543.roa (raw, json)
Hash identifier:          BJXuiaSN6U999e368raebEHZqLQwRIB8CbsR61N0N58=
Subject key identifier:   4A:6D:6D:16:47:12:77:71:8C:CD:34:7B:E1:06:2F:D9:F9:DE:42:90
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       0E0221
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/1f3ccce7802ea898ed01bfcc7346d3b31692a543.roa
Signing time:             Wed 24 Mar 2021 14:32:25 +0000
ROA not before:           Wed 24 Mar 2021 14:32:25 +0000
ROA not after:            Tue 24 Mar 2026 14:32:25 +0000
asID:                     264764
IP address blocks:        181.199.210.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918049 (0xe0221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Mar 24 14:32:25 2021 GMT
            Not After : Mar 24 14:32:25 2026 GMT
        Subject: CN=1f3ccce7802ea898ed01bfcc7346d3b31692a543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ef:4a:2b:3a:e9:09:d3:57:71:c4:9e:bf:48:
                    86:cf:6a:e9:53:4b:28:4c:c4:95:83:4e:fc:7c:92:
                    c6:36:ee:c9:8f:2c:21:1e:63:61:7a:f0:ed:e1:01:
                    8f:f4:84:a2:7f:9e:61:83:13:6b:3a:38:cc:cd:a4:
                    24:94:d4:ca:1b:e0:f1:b8:19:95:85:49:dd:79:81:
                    51:50:e7:07:f3:28:8e:9c:1d:b3:62:61:b2:ae:1a:
                    88:f8:ec:0c:4c:18:17:32:74:27:1a:41:a7:73:1a:
                    b3:e0:26:df:f9:78:83:76:bc:d2:9b:1f:89:ce:b5:
                    6c:05:6a:99:be:6b:e3:68:14:34:be:9c:d5:dd:f6:
                    cd:b5:80:81:23:e2:f7:e8:87:08:c0:92:82:c5:40:
                    47:b6:66:58:d3:10:66:f1:64:18:21:79:db:e6:ef:
                    db:1f:aa:d9:f5:8a:d5:63:67:69:7e:5c:ae:71:75:
                    9b:dd:ab:25:f3:c4:40:0a:e8:f3:ee:c9:f6:44:56:
                    cb:59:59:f5:0b:8f:55:67:da:b4:75:d0:b7:55:f6:
                    e3:bd:9b:bf:e9:d8:93:e5:91:7d:50:34:6c:8d:53:
                    09:d5:ae:d2:91:39:cb:30:05:ae:4c:90:fd:fc:f0:
                    8a:6b:6f:28:10:74:89:6d:8a:8e:e2:18:6f:21:1d:
                    de:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6D:6D:16:47:12:77:71:8C:CD:34:7B:E1:06:2F:D9:F9:DE:42:90
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/1f3ccce7802ea898ed01bfcc7346d3b31692a543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:48:ba:dd:4c:e5:49:fd:12:c9:af:73:c2:91:15:dd:5d:8d:
         c7:e9:d2:46:10:35:21:72:ea:f1:bb:07:61:2c:a0:fe:e1:af:
         03:ca:3f:c4:7a:87:bb:04:1e:e8:ca:af:0e:bf:79:c7:ae:a2:
         c4:74:47:ef:8e:d3:88:22:8f:e8:a1:79:f6:65:48:aa:af:dc:
         d5:ed:2f:fa:d9:a6:32:eb:8c:20:8b:82:8d:65:68:13:f8:c2:
         66:f4:cd:7d:67:a9:ce:2b:1a:e5:90:8f:aa:1f:b2:16:7f:f4:
         2c:3d:d0:bb:89:bb:d4:eb:a2:83:ab:be:63:92:c1:7e:cf:5a:
         d8:8b:f7:1a:b1:f7:66:9d:68:12:da:a2:33:11:c6:6b:c6:6c:
         aa:0c:10:c6:ce:21:fe:06:71:2d:3c:e5:cb:6f:26:c6:27:ab:
         c0:17:7f:dc:07:d1:f7:ea:f1:b9:d9:17:7e:b1:e1:80:50:21:
         9a:f3:54:12:4f:5e:02:e2:b4:ed:a6:af:1f:63:c9:d0:f5:aa:
         f4:5b:ad:ca:8d:95:1c:99:22:11:5e:f4:c7:bc:ef:49:42:2a:
         e8:5b:51:e9:88:65:cc:36:fa:46:a7:d2:ab:38:88:b9:03:d4:
         f7:87:73:8b:aa:26:49:56:06:15:c2:ea:c3:3e:65:d9:aa:53:
         3c:f4:2d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----