Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/ab926d6869dc3c9a54c7d9aac4bccadd175ea27c.roa
File:                     ab926d6869dc3c9a54c7d9aac4bccadd175ea27c.roa (raw, json)
Hash identifier:          yIS3YcO0zEcbHNlTOZY1gOKt4K3kSsK5eVYbAFlafH4=
Subject key identifier:   DF:CE:D2:59:35:76:12:1A:20:4B:7B:AE:5B:5C:5B:7A:14:35:CC:89
Certificate issuer:       /CN=a2f5abf58c957a2bfcf51b30227c2c814dce93e0
Certificate serial:       0CD136
Authority key identifier: B5:30:E3:C7:88:9B:B3:9E:2E:C3:55:6C:A0:36:10:01:7A:E3:A5:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/ab926d6869dc3c9a54c7d9aac4bccadd175ea27c.roa
Signing time:             Wed 24 Mar 2021 14:42:27 +0000
ROA not before:           Wed 24 Mar 2021 14:42:27 +0000
ROA not after:            Tue 24 Mar 2026 14:42:27 +0000
asID:                     263725
IP address blocks:        45.166.92.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 839990 (0xcd136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2f5abf58c957a2bfcf51b30227c2c814dce93e0
        Validity
            Not Before: Mar 24 14:42:27 2021 GMT
            Not After : Mar 24 14:42:27 2026 GMT
        Subject: CN=ab926d6869dc3c9a54c7d9aac4bccadd175ea27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:be:e2:de:87:4a:5e:e8:53:27:b8:04:9c:44:
                    24:0a:dd:84:fa:b7:21:2e:15:f3:f3:9e:d3:37:69:
                    22:24:29:b2:21:34:71:77:94:76:65:06:49:af:20:
                    ef:81:6e:e4:d6:b5:74:76:62:ad:d6:db:af:ff:0b:
                    73:e2:86:f1:6a:84:1f:b9:38:b9:8e:de:d3:a0:8f:
                    4e:da:15:52:d4:82:c9:d4:38:a6:c0:91:9a:97:08:
                    cf:2f:e6:9b:ad:7a:2f:a5:2a:f7:95:3e:ba:5a:c3:
                    e5:39:fb:96:32:85:4a:a4:1c:25:cd:fb:e4:91:d9:
                    a0:88:b4:b1:7b:13:25:d1:e6:0a:5c:b2:ff:2e:fa:
                    e8:f1:96:36:3b:a3:47:81:28:3a:27:77:9a:8e:19:
                    1e:2a:e6:54:1c:b0:dc:89:64:63:57:82:89:f0:b1:
                    c1:2f:8f:17:f8:90:77:30:31:6d:36:00:70:3d:b9:
                    e4:9e:53:d8:5c:09:1e:06:72:12:0b:5c:ed:65:64:
                    93:c5:cb:0a:1c:cf:d0:42:5b:26:93:49:af:2c:1c:
                    24:d6:dc:2c:84:25:82:df:9f:fc:e7:bb:61:93:7a:
                    d5:7c:ec:82:a7:5d:3b:c5:91:6c:8b:26:54:af:4e:
                    87:e1:7d:d9:4b:c2:6a:e9:54:c5:63:27:46:17:e8:
                    e6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CE:D2:59:35:76:12:1A:20:4B:7B:AE:5B:5C:5B:7A:14:35:CC:89
            X509v3 Authority Key Identifier:
                keyid:B5:30:E3:C7:88:9B:B3:9E:2E:C3:55:6C:A0:36:10:01:7A:E3:A5:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/ab926d6869dc3c9a54c7d9aac4bccadd175ea27c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:a7:a5:d5:14:8b:43:ef:61:bd:2d:ae:95:fd:a8:41:4b:43:
         c1:c0:e2:d3:53:cd:7a:92:4f:3f:c4:2c:63:db:0a:25:5a:29:
         10:39:28:af:d3:a9:c2:f7:be:b2:83:fb:0d:f1:d8:10:ac:f2:
         0b:92:bd:81:16:b0:3a:1b:ec:f6:36:36:49:26:a5:a9:62:71:
         4b:36:9c:f1:94:a6:c3:75:b4:72:98:6c:80:6c:c0:26:1e:f4:
         8d:6f:48:7c:28:3c:33:cc:65:83:9c:35:bc:f8:20:6e:01:87:
         18:82:60:0b:22:f9:49:ea:fc:8d:fd:3f:53:fe:24:4e:c3:94:
         93:41:6d:75:97:a2:2e:62:64:25:63:86:54:88:99:95:39:91:
         4d:ce:98:95:40:00:cb:bf:94:29:da:12:23:c1:23:2a:b3:16:
         7a:f1:4a:f1:98:27:6c:6f:d1:9e:4f:62:84:79:1e:f2:30:86:
         70:e4:97:b6:5a:a0:72:2d:21:30:54:3d:b5:3c:3f:12:45:fd:
         80:42:a6:26:ba:85:e1:2b:d1:7b:24:d1:14:1e:ef:0f:d8:27:
         f8:e6:1d:7d:ac:ee:4a:5d:4a:4e:3f:71:ed:26:c3:e1:44:29:
         88:02:39:26:7b:28:a4:f2:56:99:6a:e4:8a:23:c9:82:36:f4:
         36:df:5e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----