Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/97fd215153881de1bc984d95fb79b26053fa14d5.roa
File:                     97fd215153881de1bc984d95fb79b26053fa14d5.roa (raw, json)
Hash identifier:          whSZdHqvfHjINAPmruRXXnwtl5Tp2e9AAtAKZ1t23hk=
Subject key identifier:   F5:B2:E4:6F:E0:22:D3:24:7B:17:E6:A7:D9:77:65:FF:F2:1A:59:BB
Certificate issuer:       /CN=3ac6d50ad5d743ef654e5c1f20e5c7a056198d62
Certificate serial:       027B21
Authority key identifier: A3:40:75:67:C3:D0:0C:42:20:3F:05:11:5C:20:28:A9:A7:FF:81:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/97fd215153881de1bc984d95fb79b26053fa14d5.roa
Signing time:             Tue 04 Oct 2022 02:16:40 +0000
ROA not before:           Thu 30 Jun 2022 03:00:00 +0000
ROA not after:            Sun 30 Jun 2024 03:00:00 +0000
asID:                     271814
IP address blocks:        164.163.184.0/24 maxlen: 24
                          164.163.185.0/24 maxlen: 24
                          170.246.56.0/24 maxlen: 24
                          170.246.57.0/24 maxlen: 24
                          170.246.58.0/24 maxlen: 24
                          170.246.59.0/24 maxlen: 24
                          2803:8810::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162593 (0x27b21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ac6d50ad5d743ef654e5c1f20e5c7a056198d62
        Validity
            Not Before: Jun 30 03:00:00 2022 GMT
            Not After : Jun 30 03:00:00 2024 GMT
        Subject: CN=97fd215153881de1bc984d95fb79b26053fa14d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:37:fd:19:f7:26:d8:02:33:95:2d:d5:9e:
                    e5:fd:7a:10:d1:e1:5e:b1:fe:8c:c4:63:c1:67:e1:
                    b2:40:c1:4a:86:7c:6e:bf:8f:be:be:88:78:40:61:
                    ed:95:c4:c2:d4:bc:14:cf:d5:85:ab:0b:94:5c:c0:
                    ec:56:d1:ae:cf:f4:4a:b8:78:89:48:d1:84:07:06:
                    42:c6:fd:fa:bb:ba:b3:f9:45:4c:d2:47:e7:5f:64:
                    94:a9:fd:a8:22:4c:d0:e8:79:07:66:99:70:d5:87:
                    7f:17:ff:19:a0:8d:e5:f2:e2:74:7b:2b:e4:c1:2b:
                    d0:d1:c2:e8:4d:e5:20:53:bb:00:e4:09:03:c5:3f:
                    49:c6:04:21:6b:b8:e5:1b:06:69:f1:1a:ff:41:9d:
                    40:b2:33:f4:b3:86:22:d8:db:60:9a:25:f5:66:06:
                    fc:b3:4a:47:f3:70:1d:99:b0:c4:52:5f:16:65:3f:
                    66:a4:2d:50:7f:d3:49:08:93:3f:97:01:ab:02:91:
                    dc:58:15:bb:01:94:fe:9f:ed:79:e8:35:43:9c:eb:
                    b9:70:bc:a6:b9:1f:a2:a2:c8:73:cd:ee:b5:27:fe:
                    54:bc:a1:1e:08:3e:06:be:9a:42:50:95:18:4a:77:
                    ee:27:70:65:b5:d9:8a:9e:2a:ac:22:6b:58:0b:57:
                    9a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B2:E4:6F:E0:22:D3:24:7B:17:E6:A7:D9:77:65:FF:F2:1A:59:BB
            X509v3 Authority Key Identifier:
                keyid:A3:40:75:67:C3:D0:0C:42:20:3F:05:11:5C:20:28:A9:A7:FF:81:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/97fd215153881de1bc984d95fb79b26053fa14d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.184.0/23
                  170.246.56.0/22
                IPv6:
                  2803:8810::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:46:78:a3:17:9b:99:37:46:83:15:12:88:ea:49:07:8d:d7:
         a2:3e:1b:71:d6:bd:52:bd:36:fe:1c:09:2b:1c:93:b3:62:52:
         9b:65:b8:e9:a4:e8:2a:1a:b3:fc:28:fb:4b:c9:a6:e4:fe:22:
         62:7e:e3:f2:f0:c5:2f:58:46:4f:6d:26:65:1a:b5:ae:d1:03:
         1a:cb:6c:0f:24:f2:0d:41:fd:e0:74:a1:a4:57:d4:e5:77:e0:
         31:0b:ae:fa:f8:38:93:07:8d:f6:25:81:40:c6:ad:49:b5:c0:
         54:15:3e:d0:c9:68:9b:aa:74:4d:eb:34:c8:bb:65:47:04:1c:
         e0:a4:1b:47:60:0e:e5:37:90:66:58:ce:67:cc:ec:7a:a6:3a:
         a3:ad:e6:d9:ed:1a:4c:1c:08:d5:b7:9c:d0:ef:33:ab:be:c1:
         a4:0f:77:7c:f1:8b:60:83:c7:75:8a:b1:da:fa:10:f1:af:5f:
         6f:29:1e:a8:13:d0:e5:44:e4:2c:df:0b:27:d7:2c:e6:c6:cb:
         78:b0:c0:a8:5e:f7:38:c6:2c:e9:52:71:e3:ad:2c:d5:c4:9f:
         ca:75:75:49:2f:32:99:17:44:17:43:dd:57:1d:25:08:7a:7a:
         46:77:a2:56:cc:e5:3d:af:3e:75:5a:b1:03:b0:e1:39:2a:8d:
         bb:0c:f9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----