Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d8a8aa86-e86b-4ffa-92f9-b565404f4659/5094a7b95ebfb1ccc00c4aa7b4479abc7dff8193.roa
File:                     5094a7b95ebfb1ccc00c4aa7b4479abc7dff8193.roa (raw, json)
Hash identifier:          BjPuERLo4d4qsbcANS+1sQJLr7uTstRjGYCIuaIneV8=
Subject key identifier:   CC:52:B0:90:9D:20:A7:37:B9:09:C0:D6:49:D1:64:93:1B:D1:C5:F2
Certificate issuer:       /CN=ebedcbcfe1c07143badb5838ff5d6bc181610b63
Certificate serial:       155BBA
Authority key identifier: 25:53:59:E0:40:45:3E:61:A0:1A:06:3F:37:00:E5:35:C3:07:D2:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebedcbcfe1c07143badb5838ff5d6bc181610b63.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d8a8aa86-e86b-4ffa-92f9-b565404f4659/5094a7b95ebfb1ccc00c4aa7b4479abc7dff8193.roa
Signing time:             Thu 01 Dec 2022 17:45:02 +0000
ROA not before:           Tue 23 Mar 2021 14:31:09 +0000
ROA not after:            Tue 24 Mar 2026 14:31:09 +0000
asID:                     52409
IP address blocks:        190.120.176.0/20 maxlen: 24
                          2803:9100::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1399738 (0x155bba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebedcbcfe1c07143badb5838ff5d6bc181610b63
        Validity
            Not Before: Mar 23 14:31:09 2021 GMT
            Not After : Mar 24 14:31:09 2026 GMT
        Subject: CN=5094a7b95ebfb1ccc00c4aa7b4479abc7dff8193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:e0:06:bc:b5:f4:43:b3:26:60:ed:3c:f9:
                    2e:5e:c0:b8:9c:74:c5:88:85:c7:13:52:30:f3:9a:
                    e5:30:6c:52:84:d4:c0:2c:af:e7:14:1c:3f:91:3f:
                    e7:bd:e8:2b:15:01:7c:04:94:84:bc:c5:95:5f:f7:
                    2a:b0:fb:ea:76:d5:97:f0:44:39:3d:ca:9b:ae:b3:
                    9f:77:74:4c:75:37:ef:46:cc:80:c5:67:4b:92:68:
                    d9:34:2a:c3:a1:9f:a3:83:8c:b6:16:e8:ae:40:3f:
                    93:e7:43:93:fd:9e:ca:fa:96:c1:18:db:af:37:09:
                    67:33:98:f5:81:99:b1:2d:d4:b5:00:c6:92:5f:73:
                    8b:61:0a:eb:8f:4e:f0:a7:7a:b0:a4:6f:3f:09:df:
                    cc:1d:65:a5:44:87:f9:cf:c7:65:d9:a4:f1:05:b7:
                    b6:d7:21:9c:b5:cf:f3:8d:6b:2d:c7:b3:33:6c:c0:
                    8f:9e:ac:df:39:0c:96:09:61:86:a2:f5:6f:6b:c9:
                    59:c6:bd:51:00:cd:99:0e:46:c2:c1:df:62:a7:42:
                    92:0c:df:0f:a0:cd:bb:30:cd:7f:8a:c4:4c:92:98:
                    9e:70:f1:b0:9a:1b:46:a0:2f:bb:a9:1e:24:26:a6:
                    1e:4a:ad:da:99:89:63:b6:c4:df:de:64:24:35:08:
                    9e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:52:B0:90:9D:20:A7:37:B9:09:C0:D6:49:D1:64:93:1B:D1:C5:F2
            X509v3 Authority Key Identifier:
                keyid:25:53:59:E0:40:45:3E:61:A0:1A:06:3F:37:00:E5:35:C3:07:D2:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebedcbcfe1c07143badb5838ff5d6bc181610b63.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d8a8aa86-e86b-4ffa-92f9-b565404f4659/5094a7b95ebfb1ccc00c4aa7b4479abc7dff8193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d8a8aa86-e86b-4ffa-92f9-b565404f4659/ebedcbcfe1c07143badb5838ff5d6bc181610b63.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.176.0/20
                IPv6:
                  2803:9100::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:9a:71:87:c7:41:18:c3:ec:ca:3f:69:0d:11:78:f3:d0:96:
         79:55:ac:d5:e5:ab:42:f5:e4:77:ac:ca:d7:70:79:bd:0c:df:
         4b:2f:0f:e5:e3:76:40:90:eb:0b:d5:83:0e:2a:fb:d3:73:d4:
         02:5a:44:73:25:95:db:e2:fd:77:5a:c7:b3:15:e4:08:11:26:
         04:02:00:2a:e9:47:83:f6:1c:0f:5c:05:1b:92:ef:b4:a9:a9:
         26:f9:3b:74:4c:8a:dd:69:b1:d0:da:4b:2a:20:27:b3:71:0a:
         51:ad:84:ea:e5:cb:e0:9c:04:b9:77:c7:f5:22:65:1e:85:87:
         83:a7:82:6d:9b:81:62:79:ec:ba:dd:c9:40:11:4f:3f:fb:59:
         c8:0a:32:32:82:bb:db:66:5f:46:12:56:5a:e0:70:59:5f:ca:
         32:8e:1f:59:d8:c6:ab:85:20:da:06:6b:50:e6:6a:d3:5b:4a:
         4c:b2:6e:a8:4e:70:54:f4:e6:a9:63:3c:92:8e:d4:4a:e7:14:
         fb:22:c0:37:72:b4:42:fc:d0:71:d6:f0:b5:a4:1b:ea:76:8b:
         bc:f1:a7:42:be:0d:94:45:4e:45:e2:41:3e:78:e9:5e:80:f1:
         22:e7:b4:31:06:ed:8e:f8:e1:31:02:4b:31:af:a9:bb:16:92:
         7a:30:c2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----