Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6721c4b-94c6-4f4e-a280-7c44be73f635/d027f5330e3dbcf5159adf7fd6480be4940bc81c.roa
File:                     d027f5330e3dbcf5159adf7fd6480be4940bc81c.roa (raw, json)
Hash identifier:          Pv9kc91LogEqmdhz2qF2YWsdzoPFN0t5NwVDEVzEZtA=
Subject key identifier:   14:77:AF:70:C3:15:69:5B:D8:41:D5:1B:32:C6:1A:C8:D2:31:58:33
Certificate issuer:       /CN=869f7d019a2cd350762d2696e9f2033d079fd988
Certificate serial:       12306D
Authority key identifier: 65:57:CF:54:48:13:62:4B:C0:98:B8:7B:5B:03:54:E8:F5:BA:20:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/869f7d019a2cd350762d2696e9f2033d079fd988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6721c4b-94c6-4f4e-a280-7c44be73f635/d027f5330e3dbcf5159adf7fd6480be4940bc81c.roa
Signing time:             Wed 29 Sep 2021 16:12:28 +0000
ROA not before:           Wed 29 Sep 2021 16:12:28 +0000
ROA not after:            Tue 29 Sep 2026 16:12:28 +0000
asID:                     265760
IP address blocks:        181.224.164.0/22 maxlen: 22
                          2803:9300::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192045 (0x12306d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869f7d019a2cd350762d2696e9f2033d079fd988
        Validity
            Not Before: Sep 29 16:12:28 2021 GMT
            Not After : Sep 29 16:12:28 2026 GMT
        Subject: CN=d027f5330e3dbcf5159adf7fd6480be4940bc81c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5c:62:fc:27:88:5c:16:90:66:58:ab:dd:19:
                    d8:6f:b6:fb:55:0a:b0:98:c3:8a:86:55:34:02:7e:
                    2b:8f:64:f8:88:ec:b7:ef:b7:c9:47:30:c8:9f:bb:
                    32:2c:56:4f:81:ed:d5:b7:73:20:90:45:bc:67:b4:
                    e6:a6:6e:c0:37:c0:b3:51:66:be:ac:5a:0d:46:fc:
                    14:2a:91:bf:8f:86:94:d9:cc:17:9c:8f:93:e7:d2:
                    4c:30:0b:81:55:7e:87:1b:8f:77:a1:cc:ba:9b:a5:
                    08:a7:7a:af:44:6d:68:a8:2a:c5:ba:d9:e1:2e:17:
                    a0:18:51:67:4e:ed:c6:53:a3:a7:7f:8c:53:a5:8a:
                    1b:31:09:1f:bd:64:c9:5e:86:39:4b:4a:83:b6:7b:
                    dc:77:61:0b:8f:09:e5:c9:ca:0c:37:9e:1b:fa:19:
                    54:4a:ff:f7:18:78:eb:ae:a6:88:9a:61:e8:8d:1a:
                    8f:26:6b:b7:cf:35:32:56:e0:2e:f3:ab:c3:a9:7d:
                    ac:9a:15:e5:56:0f:dd:f4:50:c3:66:ee:fd:ef:4a:
                    dd:48:05:33:ff:68:17:e4:cb:d2:bf:58:ab:a5:7f:
                    31:02:02:5d:b2:de:d2:ca:d3:90:38:b5:86:05:62:
                    16:79:1a:d3:d0:bf:9e:c6:ac:cf:bf:c0:7c:e1:9c:
                    ee:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:77:AF:70:C3:15:69:5B:D8:41:D5:1B:32:C6:1A:C8:D2:31:58:33
            X509v3 Authority Key Identifier:
                keyid:65:57:CF:54:48:13:62:4B:C0:98:B8:7B:5B:03:54:E8:F5:BA:20:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/869f7d019a2cd350762d2696e9f2033d079fd988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6721c4b-94c6-4f4e-a280-7c44be73f635/d027f5330e3dbcf5159adf7fd6480be4940bc81c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6721c4b-94c6-4f4e-a280-7c44be73f635/869f7d019a2cd350762d2696e9f2033d079fd988.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.164.0/22
                IPv6:
                  2803:9300::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:08:12:a7:2c:b9:42:3c:81:c5:82:13:23:cd:e8:15:4f:d5:
         d3:60:87:24:cd:12:0d:e7:ab:6d:4f:a4:92:91:eb:a5:55:12:
         75:10:08:88:50:34:04:06:1e:b3:41:44:2d:da:f3:b0:8a:94:
         c9:bf:7b:d2:28:70:d6:98:3b:9b:9e:7b:6f:fe:41:61:af:de:
         f8:13:0c:9b:58:45:88:29:d1:d7:94:b5:4b:30:85:2a:5d:21:
         75:2b:c4:97:72:38:f6:fe:03:d3:43:39:a6:02:d8:06:6d:ab:
         d8:4c:6e:b5:b4:97:d5:6e:77:92:88:46:2b:d1:93:97:ac:b7:
         b6:1b:14:94:79:b5:25:b3:70:40:b6:f4:ac:fc:96:51:02:0e:
         87:24:6e:2a:e7:d0:4d:fc:c2:dd:0e:4a:64:d9:8a:67:4a:05:
         68:c2:dc:46:20:08:ce:9c:03:6d:77:99:72:89:70:d3:00:a2:
         a7:21:6a:c3:0f:2c:75:65:0f:10:b5:b3:ac:37:2e:20:3c:97:
         09:ed:31:f7:1d:a7:38:cb:31:1c:2b:b9:2b:81:e5:76:9b:35:
         4d:66:9f:32:dc:ac:3e:fe:db:df:7c:29:ae:04:a1:4f:d6:a5:
         a0:35:8b:0e:24:11:11:1c:14:cc:bd:db:c8:c2:0a:73:38:46:
         de:0f:c8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----