Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/83142b76f019161b1178818af727f4898faa16df.roa
File:                     83142b76f019161b1178818af727f4898faa16df.roa (raw, json)
Hash identifier:          4zlWE82JZKD1vzCtqAomG/KSYNmJyjVgRfi06K8xWcE=
Subject key identifier:   64:C9:C4:C1:E0:D6:19:94:2A:A1:89:6C:3C:7B:CF:9A:71:68:F8:D7
Certificate issuer:       /CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Certificate serial:       15493D
Authority key identifier: B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/83142b76f019161b1178818af727f4898faa16df.roa
Signing time:             Thu 17 Mar 2022 16:19:00 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     264668
IP address blocks:        157.100.52.0/22 maxlen: 24
                          157.100.56.0/22 maxlen: 24
                          157.100.60.0/22 maxlen: 24
                          157.100.68.0/23 maxlen: 24
                          157.100.71.0/24 maxlen: 24
                          157.100.72.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1395005 (0x15493d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=83142b76f019161b1178818af727f4898faa16df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9b:08:70:41:88:a3:5b:44:b4:25:0e:ab:36:
                    65:55:90:ea:a4:bf:cc:14:18:e7:7d:97:65:96:c2:
                    e0:aa:4c:2c:5c:57:d2:7a:ff:51:63:45:cb:f5:02:
                    09:a9:e0:bc:94:1d:86:58:df:4d:7a:6a:1f:2f:e1:
                    97:55:f1:7b:2d:ff:d7:3a:4f:5e:78:55:5e:59:26:
                    f3:16:3f:12:05:d5:fc:0b:3c:3f:d6:ce:55:c1:3c:
                    13:1d:a4:2c:8c:c1:a2:b9:a4:a6:d7:6a:2f:e0:ce:
                    9b:33:dd:a7:97:52:9a:94:9e:a1:78:17:1b:c0:d7:
                    c2:df:c0:ea:1e:65:01:7f:a2:25:d3:3c:82:17:68:
                    83:12:ad:71:53:8c:6a:d8:e3:5e:3f:55:de:41:8c:
                    04:0d:90:03:30:07:7b:c4:87:b7:cc:60:cf:37:15:
                    f6:64:8e:95:61:58:2b:fc:9f:d1:3f:b3:5f:75:ea:
                    05:3f:f7:21:5a:df:89:64:b6:8e:5f:b0:34:cb:2e:
                    b0:76:ad:37:d1:3d:80:35:09:5b:51:2c:52:90:7c:
                    d4:bb:2c:a1:e3:93:07:f7:b0:d8:b2:0f:2c:b2:64:
                    31:a7:08:c9:da:50:b8:ff:12:ac:1b:16:42:e4:a6:
                    34:84:2b:03:33:81:e9:01:9d:94:22:d5:63:57:f3:
                    ff:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C9:C4:C1:E0:D6:19:94:2A:A1:89:6C:3C:7B:CF:9A:71:68:F8:D7
            X509v3 Authority Key Identifier:
                keyid:B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/83142b76f019161b1178818af727f4898faa16df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.52.0-157.100.63.255
                  157.100.68.0/23
                  157.100.71.0-157.100.72.255

    Signature Algorithm: sha256WithRSAEncryption
         01:a4:21:81:9b:d0:1d:ce:df:14:bc:b4:bc:ba:fe:15:81:29:
         60:e3:8b:5a:15:5b:5d:1d:14:ff:6b:51:cd:9a:3b:2c:a1:7b:
         aa:de:6d:a0:f8:84:66:ba:de:c1:7f:79:a0:91:5b:d7:75:11:
         09:d2:cd:08:fb:e1:fe:28:47:d1:96:2f:fc:f5:f8:c5:af:85:
         7d:a5:84:aa:67:24:6b:27:9c:ac:51:ff:1c:16:03:f4:93:fd:
         12:d0:78:89:7e:fe:f9:41:9b:aa:63:b0:52:fa:08:ac:a7:45:
         8b:b8:7d:a2:c3:65:14:28:90:72:a6:d7:b5:b1:6d:4e:f1:db:
         01:8b:2b:5b:9c:b6:0d:4a:61:4a:71:66:7f:46:16:b7:13:60:
         03:41:d1:22:5f:cb:22:ba:31:13:52:3f:0d:b2:ef:85:2a:98:
         30:ed:75:6d:db:2c:ed:54:0f:11:0a:a5:fc:e9:73:67:4b:dc:
         0f:3c:f4:0d:75:57:9e:fc:4a:fd:1a:19:ee:91:4a:6f:a1:07:
         07:f0:75:36:2f:b6:61:56:a4:6d:89:c5:d7:85:ae:76:75:0f:
         24:7e:9f:d8:27:e3:c1:30:aa:7d:2c:0e:08:91:38:2e:ad:15:
         0c:e2:0a:28:8d:9d:bb:dd:f0:f2:b8:07:23:ab:08:af:7e:3b:
         5b:3e:a0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----