Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/9afd1f6503273693b3de5290a9c915ab9e1442b8.roa
File:                     9afd1f6503273693b3de5290a9c915ab9e1442b8.roa (raw, json)
Hash identifier:          WAeEhyYf1lRaT/2hHQm7FMqVQ9aAOC3PZDZ/t+Mx0XE=
Subject key identifier:   7E:80:67:EC:0A:22:BD:99:F1:09:2B:94:D6:C3:2C:55:E3:88:21:11
Certificate issuer:       /CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
Certificate serial:       0BD48D
Authority key identifier: 0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/9afd1f6503273693b3de5290a9c915ab9e1442b8.roa
Signing time:             Wed 24 Mar 2021 14:40:31 +0000
ROA not before:           Wed 24 Mar 2021 14:40:30 +0000
ROA not after:            Tue 24 Mar 2026 14:40:30 +0000
asID:                     267699
IP address blocks:        45.175.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 775309 (0xbd48d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
        Validity
            Not Before: Mar 24 14:40:30 2021 GMT
            Not After : Mar 24 14:40:30 2026 GMT
        Subject: CN=9afd1f6503273693b3de5290a9c915ab9e1442b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:a2:fe:66:6c:f3:d6:35:84:62:96:3a:c3:
                    62:7e:a4:bb:67:96:ef:29:44:c5:22:93:08:0d:db:
                    1c:d5:15:5e:af:da:b5:da:20:6b:e8:32:13:6f:a7:
                    ea:0c:22:3c:1d:78:e3:ab:77:11:df:1b:cc:27:9b:
                    4b:28:19:2e:a6:95:85:4e:55:cf:27:20:0f:ae:a5:
                    0a:d7:23:ff:44:55:87:e7:f8:b3:e5:dd:f9:51:8a:
                    f6:7e:8f:ea:3e:93:34:9c:1a:88:d4:c0:f3:72:6a:
                    96:96:24:60:9e:63:3c:b0:5c:3d:ee:6c:32:3b:9a:
                    fd:c2:2e:fd:4c:49:35:41:07:78:b0:6b:fa:a6:ac:
                    cc:0e:db:c5:12:7b:0c:79:5e:79:04:4c:a8:53:72:
                    e8:9e:91:94:e6:15:cb:b4:31:ab:e6:b6:ec:2d:11:
                    43:2a:c1:55:b6:34:f1:a0:2f:b2:04:e9:ee:59:9c:
                    e3:eb:39:d3:07:25:7d:e5:36:f5:f7:cf:ae:c4:20:
                    8a:06:18:2f:fc:37:68:0f:f6:de:10:d1:50:87:6c:
                    28:4b:93:57:97:18:33:87:f6:34:78:16:7e:54:5d:
                    83:65:07:d6:46:61:69:93:90:cc:a4:b7:11:c8:2b:
                    f2:92:6d:04:8b:3d:41:73:ae:e7:18:e8:a5:f9:f5:
                    a0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:80:67:EC:0A:22:BD:99:F1:09:2B:94:D6:C3:2C:55:E3:88:21:11
            X509v3 Authority Key Identifier:
                keyid:0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/9afd1f6503273693b3de5290a9c915ab9e1442b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/d53e5113cbffa42dda2928ee24c7eff1286a8644.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:69:13:ed:f8:c2:d1:5a:aa:dc:c4:03:94:1c:88:fb:48:20:
         d2:b9:68:24:52:18:1d:d1:67:b4:da:a0:34:89:16:b1:bc:48:
         08:24:3b:06:ee:ba:9f:eb:41:4e:c3:09:06:a7:d4:4d:86:12:
         e2:a1:87:fa:b9:3f:01:fb:90:32:bc:48:e2:04:57:41:18:32:
         d4:5b:f0:ba:07:3c:b3:63:07:5c:75:d9:28:33:09:73:a0:8e:
         b0:ff:aa:c2:16:ef:c2:30:2c:82:a5:eb:7d:b3:2b:1d:21:ce:
         00:53:5f:22:55:3b:c2:b7:75:1e:ac:61:09:c9:bf:1e:d6:9d:
         6d:5b:ed:fc:41:de:7f:41:b8:0b:49:97:fa:80:a4:7f:21:05:
         d4:a9:0c:68:43:d3:d1:96:20:63:8c:db:6d:ab:0d:4b:42:b1:
         7d:df:70:7b:71:0e:6f:22:1c:00:9a:18:35:a7:da:e7:d0:3a:
         99:d3:47:3e:49:e8:fc:18:2f:64:7c:e2:a6:0d:5a:32:36:ec:
         36:6b:97:a5:26:a3:43:71:59:9f:4a:8f:d7:e8:1e:8a:ec:9b:
         95:32:1a:78:72:61:36:06:79:e0:f2:07:b6:17:3e:f0:96:29:
         d9:ec:1e:73:8e:12:27:79:49:9d:32:1c:85:88:db:79:0c:c7:
         e8:19:66:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----