Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/91f98ef1351efdd91de9003a387a369995ad387f.roa
File:                     91f98ef1351efdd91de9003a387a369995ad387f.roa (raw, json)
Hash identifier:          Q8k6f0bbeba7HytkpaMrPSvsMx6iFZH1Hyl4FKiq8OU=
Subject key identifier:   52:A9:94:46:CF:73:C4:EF:E7:A6:6C:AD:D5:2D:46:A4:41:2C:BB:1B
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       189057
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/91f98ef1351efdd91de9003a387a369995ad387f.roa
Signing time:             Thu 12 May 2022 10:01:22 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     264764
IP address blocks:        181.199.210.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1609815 (0x189057)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=91f98ef1351efdd91de9003a387a369995ad387f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:91:28:f7:e2:a0:5b:ee:c1:1c:bf:59:34:ca:
                    84:94:22:cf:f5:e6:ee:76:8a:af:46:e3:04:b5:6b:
                    3a:22:b0:80:02:a8:33:4d:11:bf:6a:0b:08:ee:92:
                    04:3a:53:5d:b2:20:72:09:e2:82:ff:54:60:2f:a4:
                    7e:77:a8:cf:7e:72:79:63:5c:bf:6f:81:49:96:61:
                    9d:80:1d:2f:ab:7a:82:79:f9:43:ed:83:04:67:7f:
                    f1:bb:17:28:bc:18:bb:0c:50:23:21:dd:f7:07:0e:
                    40:81:d7:99:58:75:91:24:bb:54:bb:d8:70:07:38:
                    36:7c:64:14:b7:39:9a:5a:f7:61:c8:41:36:f6:ec:
                    50:77:f5:58:34:50:ea:18:e0:90:12:1c:93:7b:40:
                    db:ea:d0:bc:e6:2f:6f:71:61:b5:48:5e:7d:ef:26:
                    0b:4b:fa:81:c1:74:38:44:4e:d3:41:0f:6d:2a:7e:
                    23:fd:a9:f4:c4:72:d9:7d:3c:d1:18:3c:8b:b3:da:
                    9a:83:7a:c1:a4:d2:41:6b:c2:2e:47:d7:e4:eb:07:
                    1a:73:df:48:66:81:6b:88:03:1b:bd:b7:89:6a:7a:
                    03:20:20:aa:fa:c3:92:b9:5d:4c:56:06:10:d3:67:
                    08:5e:95:fe:d7:02:68:4a:f7:91:1e:65:07:9c:54:
                    08:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A9:94:46:CF:73:C4:EF:E7:A6:6C:AD:D5:2D:46:A4:41:2C:BB:1B
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/91f98ef1351efdd91de9003a387a369995ad387f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:35:14:25:9e:9b:2a:bd:c9:9f:67:98:ff:07:2f:a0:f7:8c:
         93:52:bd:43:75:a6:6f:52:55:a4:ee:cf:8a:07:02:78:ab:a8:
         fa:47:f3:91:9f:bb:e5:41:ae:1b:88:8f:36:e0:c7:49:12:bf:
         14:87:1e:77:4b:0d:6a:34:34:bf:10:5c:11:e2:b6:bc:fb:a1:
         e8:b2:92:b5:e7:e6:52:9b:c4:50:27:32:2b:f9:eb:34:08:60:
         67:a3:4f:2c:e4:d2:fa:47:ab:1f:c7:48:4e:21:36:cc:1a:f6:
         21:e1:80:4d:99:2a:e9:63:ff:a0:a6:e8:01:d1:5b:51:a3:e2:
         56:c2:b5:ad:a2:e8:bc:6e:5d:45:fe:ce:65:7c:40:85:c2:0e:
         aa:b9:aa:a9:0d:c3:ef:04:28:51:d2:89:f8:61:ff:01:90:d7:
         14:a8:83:ba:42:36:78:0f:6c:c3:69:16:24:2e:5e:b6:f4:20:
         55:ef:4b:a5:fb:9c:0c:ac:e3:fd:e1:93:04:ed:26:3a:b7:69:
         8d:14:a9:7e:b0:4a:a1:4a:cf:36:94:0d:74:76:1d:4d:8a:cb:
         0c:22:7d:a2:6a:28:c8:90:89:96:b9:80:71:df:9b:40:93:44:
         0d:1c:ca:25:22:9c:4b:8a:92:a2:2e:2c:55:36:4d:ec:5f:b1:
         5c:e9:6d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----