Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebb9a9a9-8864-43db-9a4b-6df67c73fdee/dc2f5f4a3cfdd7370e40d1b8dbf09c27c3f932e1.roa
File:                     dc2f5f4a3cfdd7370e40d1b8dbf09c27c3f932e1.roa (raw, json)
Hash identifier:          zyM3+cDWSI5uUlymi0u5BoVz7q4jTyAiXJGwb55o8MI=
Subject key identifier:   91:F5:11:95:84:53:3D:5F:6E:C3:C4:14:1C:DD:30:B6:E8:22:8B:8B
Certificate issuer:       /CN=b698b12c769bcfc856d5f3728b1c9b42d5bf4724
Certificate serial:       05D9B8
Authority key identifier: D4:15:74:FC:9D:30:FF:74:72:33:D3:A3:20:4C:B5:E5:30:17:3D:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b698b12c769bcfc856d5f3728b1c9b42d5bf4724.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ebb9a9a9-8864-43db-9a4b-6df67c73fdee/dc2f5f4a3cfdd7370e40d1b8dbf09c27c3f932e1.roa
Signing time:             Wed 24 Mar 2021 14:32:00 +0000
ROA not before:           Wed 24 Mar 2021 14:32:00 +0000
ROA not after:            Tue 24 Mar 2026 14:32:00 +0000
asID:                     263726
IP address blocks:        138.36.96.0/22 maxlen: 24
                          2803:f80::/32 maxlen: 64

Validation:               Failed, certificate revoked on Fri 12 Apr 2024 14:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383416 (0x5d9b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b698b12c769bcfc856d5f3728b1c9b42d5bf4724
        Validity
            Not Before: Mar 24 14:32:00 2021 GMT
            Not After : Mar 24 14:32:00 2026 GMT
        Subject: CN=dc2f5f4a3cfdd7370e40d1b8dbf09c27c3f932e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:38:f3:66:4b:c9:f3:f7:ed:f3:69:c8:07:b9:
                    b1:4e:e3:7b:f2:c5:fd:74:a9:72:39:ae:ae:ed:15:
                    f3:9d:bf:a3:3f:40:08:71:4e:7c:3c:b5:d6:d7:b0:
                    b0:6b:a7:e0:be:6d:02:ce:63:8f:92:5d:87:9c:b8:
                    40:b9:e9:3e:de:8e:7c:9d:aa:e5:a6:ac:1b:5f:73:
                    cb:66:51:ff:b4:14:0e:d9:5d:83:f9:f1:d6:97:e2:
                    0e:c3:6d:91:2a:32:ba:45:66:9a:94:a1:76:a4:a5:
                    65:d9:cf:af:3b:3c:b9:96:6d:44:f5:ea:b0:44:76:
                    3e:47:c2:a8:f5:2b:bd:9a:ec:14:e0:a7:2b:89:0a:
                    e9:96:6b:af:41:ad:c5:13:32:ca:54:66:28:94:34:
                    52:57:8e:58:e0:c6:f3:5d:9e:74:52:0b:3b:69:1d:
                    32:38:96:88:80:dd:cd:1e:35:a7:ea:9f:c9:64:ba:
                    67:aa:1c:40:28:c0:7a:e4:0d:72:d3:f8:0e:97:e5:
                    4c:9d:0b:0b:88:88:fb:38:95:2a:6e:61:0d:83:98:
                    63:6c:2c:f3:50:a5:27:c8:03:65:5f:d5:92:a5:68:
                    eb:65:4b:6b:bf:c2:b1:02:79:87:f8:dd:11:a7:c6:
                    ed:6a:15:2d:45:90:62:ae:38:13:83:be:9f:98:5e:
                    e5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F5:11:95:84:53:3D:5F:6E:C3:C4:14:1C:DD:30:B6:E8:22:8B:8B
            X509v3 Authority Key Identifier:
                keyid:D4:15:74:FC:9D:30:FF:74:72:33:D3:A3:20:4C:B5:E5:30:17:3D:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b698b12c769bcfc856d5f3728b1c9b42d5bf4724.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebb9a9a9-8864-43db-9a4b-6df67c73fdee/dc2f5f4a3cfdd7370e40d1b8dbf09c27c3f932e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ebb9a9a9-8864-43db-9a4b-6df67c73fdee/b698b12c769bcfc856d5f3728b1c9b42d5bf4724.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.96.0/22
                IPv6:
                  2803:f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:05:46:ba:1f:70:6e:fa:9c:47:2a:73:b4:20:42:b6:7e:d6:
         77:1e:c1:da:dd:ba:2b:f6:51:b3:6c:52:7d:56:0c:0e:9f:e9:
         85:a7:a3:ef:2b:b3:30:3d:fd:48:9a:cb:9e:b9:0f:75:64:41:
         5d:b1:d2:a9:6f:4f:f7:e9:3c:8e:1d:bd:62:f0:65:df:83:89:
         a3:13:23:56:9f:ce:44:1c:70:4f:a5:b7:1e:71:12:d1:e8:f3:
         90:d4:0a:2d:76:ba:c5:5b:ab:81:eb:fc:88:20:7d:83:15:47:
         c7:6a:ed:73:ed:8d:8a:19:40:ba:26:58:da:a6:1e:28:73:69:
         f4:4c:54:78:b6:47:12:f5:34:a5:5e:15:0a:f2:e0:d1:ac:a1:
         5d:ee:cb:d0:df:d9:22:92:6c:ca:b7:f3:90:0d:bc:ad:83:7e:
         3d:9e:ce:60:89:f1:f1:50:63:8b:fb:fa:7d:37:57:1a:e7:76:
         63:74:61:a0:da:92:14:f7:67:b2:fb:0d:9d:d0:3e:f9:81:bf:
         4b:bf:cd:aa:dd:cb:12:64:7b:c0:63:50:d3:96:53:6e:b1:db:
         1f:04:89:c0:a2:73:92:92:05:4b:ca:3f:d6:12:78:a6:be:a2:
         48:d7:1d:f0:bc:6e:6d:81:20:8d:7e:f0:37:b9:8b:b9:69:d3:
         29:e3:77:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----