Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/162da22667fb053344c6eb902c7ac1e9f6e95f78.roa
File:                     162da22667fb053344c6eb902c7ac1e9f6e95f78.roa (raw, json)
Hash identifier:          GijY5Xlina2c9S4+aFcWHv1fkOOekdtbpZR/ouBwGgM=
Subject key identifier:   DE:59:5E:41:21:30:C1:8E:22:CB:99:04:C3:0B:C0:AA:23:83:97:69
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       0DF984
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/162da22667fb053344c6eb902c7ac1e9f6e95f78.roa
Signing time:             Wed 24 Mar 2021 14:41:09 +0000
ROA not before:           Wed 24 Mar 2021 14:41:08 +0000
ROA not after:            Tue 24 Mar 2026 14:41:08 +0000
asID:                     266688
IP address blocks:        168.197.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915844 (0xdf984)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Mar 24 14:41:08 2021 GMT
            Not After : Mar 24 14:41:08 2026 GMT
        Subject: CN=162da22667fb053344c6eb902c7ac1e9f6e95f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a6:1a:c7:b5:0d:9b:a1:e3:93:b1:d4:dc:ad:
                    82:82:c2:d0:f8:d4:19:e9:2a:0b:a0:0c:fa:44:dd:
                    dc:56:e3:4e:9b:1e:95:8d:a5:f7:86:3f:8d:d1:67:
                    55:fe:13:6f:60:e3:6b:75:40:51:8c:d9:63:c0:08:
                    10:fc:05:ca:b9:a0:7e:b8:1c:86:e1:97:fc:63:96:
                    eb:d6:69:ef:48:40:ed:d1:9e:54:0a:4f:71:62:ca:
                    bc:78:7e:ef:28:20:1d:24:72:15:fd:46:d9:3d:cf:
                    60:e6:0e:df:68:d6:03:be:eb:72:1c:ce:6e:10:47:
                    82:2c:86:99:59:21:df:6e:02:fd:4c:57:14:d9:8a:
                    94:68:35:a3:82:77:e7:5c:01:8b:d5:76:f3:4a:4f:
                    1a:69:d9:f6:0a:58:31:3a:54:74:a8:08:cb:cc:ee:
                    f6:5d:cf:df:75:00:75:ec:8e:45:57:be:7b:99:58:
                    78:cb:64:74:6d:41:ed:94:1d:71:c5:11:4b:f5:1b:
                    73:6e:73:c9:b1:d0:f9:f9:d9:6b:fd:9a:c8:10:47:
                    9b:fe:26:51:63:4b:c1:58:ab:47:bf:89:06:77:c2:
                    5c:a7:36:06:e6:89:5d:72:75:dc:1b:f8:89:f1:36:
                    5c:32:00:e3:e0:47:25:9a:ac:68:e0:4f:58:28:24:
                    37:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:59:5E:41:21:30:C1:8E:22:CB:99:04:C3:0B:C0:AA:23:83:97:69
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/162da22667fb053344c6eb902c7ac1e9f6e95f78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:98:a0:65:74:17:86:2b:ea:01:a4:47:55:6f:9c:c4:86:67:
         da:1e:68:3e:1f:eb:c9:80:f6:63:82:7e:84:8e:aa:e9:0c:97:
         e7:01:a4:0c:d2:34:fa:0c:df:6d:50:09:89:f5:85:ce:0e:6f:
         4c:74:e5:72:9c:01:b1:94:35:a9:11:2b:f6:fa:e0:5c:5f:76:
         14:1e:8a:d7:61:c8:85:f3:f8:f0:64:d1:a4:5f:e6:c3:9a:72:
         2a:6a:36:c8:78:6b:48:33:e0:1a:78:77:a4:57:11:aa:92:1b:
         1d:e2:c9:9c:73:05:91:bb:ba:6d:2a:62:5e:ca:93:42:3f:17:
         e1:cf:f2:7c:10:d3:38:11:81:5b:d3:06:34:dc:84:ed:8f:bb:
         f2:be:c0:de:c5:a4:f9:75:b3:f0:63:86:03:c1:a7:bc:09:86:
         28:69:6d:82:f5:d8:99:18:96:30:30:46:c4:b4:3c:0a:2d:27:
         03:6a:5f:e7:de:c4:0d:53:20:1c:da:dd:f2:e4:3d:db:f1:31:
         b9:42:14:06:c5:7b:a0:9b:82:fb:bc:be:b9:a9:40:bf:6d:e1:
         be:9e:21:bc:ba:c3:69:70:04:dd:5f:17:f4:df:e5:de:48:4c:
         73:6f:f2:8f:5a:a7:74:35:6c:e6:ad:80:f8:4f:68:2a:10:4b:
         8b:39:54:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----