Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/015e1a22aac415ad12b2a8b02ec51869e99cec5f.roa
File:                     015e1a22aac415ad12b2a8b02ec51869e99cec5f.roa (raw, json)
Hash identifier:          WComyGp8II9AI7hwZsKvbKUheFoXgYOM/84vC5NhU2Y=
Subject key identifier:   6D:63:09:7D:E3:01:65:FF:74:D6:D0:7F:CA:8F:4F:AC:8A:3F:1A:BF
Certificate issuer:       /CN=2bee98b52bf99165b867835f5390295e9317bb56
Certificate serial:       167761
Authority key identifier: 87:A5:C2:9F:E4:B7:C1:E4:BD:3A:BD:43:2B:17:A8:47:60:1D:4E:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bee98b52bf99165b867835f5390295e9317bb56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/015e1a22aac415ad12b2a8b02ec51869e99cec5f.roa
Signing time:             Wed 13 Apr 2022 03:42:55 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     3549
IP address blocks:        170.83.76.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1472353 (0x167761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bee98b52bf99165b867835f5390295e9317bb56
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=015e1a22aac415ad12b2a8b02ec51869e99cec5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c1:f9:1d:90:6a:08:30:b9:26:16:4a:80:1e:
                    8a:6e:6b:0d:29:f6:5d:24:7d:11:46:47:c9:2b:9a:
                    06:84:a7:7f:1e:15:6b:ec:1d:2a:68:07:8e:24:cd:
                    fc:be:5d:3b:a3:f9:62:fd:41:0f:61:fe:58:54:8f:
                    a1:a3:70:2e:6f:ec:b6:9d:67:96:55:9d:db:b9:96:
                    ab:8c:ae:a1:8f:36:d3:ef:51:17:e3:5d:64:88:c8:
                    2a:5a:f9:3a:3f:f8:5b:76:4b:2a:f9:38:56:e1:96:
                    98:2a:27:fa:bd:0e:15:af:c1:d0:cb:02:82:b2:d2:
                    6c:b2:6f:fb:73:a3:d9:f4:f9:3e:ec:2e:05:5b:c1:
                    f6:45:bf:3a:d7:8c:31:f6:9e:08:9b:8c:43:28:3c:
                    9f:cc:ee:5c:ef:27:71:a4:93:8d:03:a7:e8:07:3e:
                    14:e5:59:c7:93:68:ed:e6:ef:67:a1:41:f1:3e:43:
                    4e:67:3f:75:c9:fe:7e:f8:f5:bc:d9:5e:58:28:3c:
                    4c:ce:b1:9a:0f:6a:93:7a:ff:39:cb:e6:a7:de:6a:
                    6a:52:68:ef:58:a5:47:fa:52:f1:a4:8b:ba:af:8a:
                    5b:5c:0d:41:a0:e8:62:0a:11:04:48:16:5a:52:5f:
                    43:2b:fc:c5:e7:a4:f4:22:ea:d5:f0:48:5c:8a:a0:
                    65:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:63:09:7D:E3:01:65:FF:74:D6:D0:7F:CA:8F:4F:AC:8A:3F:1A:BF
            X509v3 Authority Key Identifier:
                keyid:87:A5:C2:9F:E4:B7:C1:E4:BD:3A:BD:43:2B:17:A8:47:60:1D:4E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bee98b52bf99165b867835f5390295e9317bb56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/015e1a22aac415ad12b2a8b02ec51869e99cec5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/2bee98b52bf99165b867835f5390295e9317bb56.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:6e:82:59:00:d4:6a:40:c8:66:d0:74:f2:c2:08:13:6e:bf:
         c6:ec:52:98:c3:1a:0b:c9:a9:f0:c7:f1:f7:d0:33:66:dd:a6:
         07:57:71:df:e6:54:31:cd:55:9a:06:b1:d1:03:25:6f:2f:de:
         15:35:c6:24:26:3d:cf:22:c8:3f:37:6f:67:8c:d9:7e:67:32:
         7a:24:f1:59:eb:4b:3c:d1:fa:ca:65:11:d1:9a:2e:8f:cb:c4:
         f9:03:e5:7c:3e:c1:58:bc:1d:28:be:94:0b:7f:4c:dd:95:5a:
         c0:cb:49:3c:39:76:8d:3d:5d:3a:8d:74:44:e9:dd:77:9b:10:
         c4:76:14:1b:04:fb:3a:3a:81:44:5f:5b:95:38:3a:66:e1:9e:
         78:6a:95:bc:c8:17:44:6e:67:a6:2f:d5:35:e7:17:fa:4e:be:
         14:b5:69:0a:da:c9:60:7d:5e:69:c8:cf:6a:08:2e:cb:e3:be:
         34:bb:07:1c:81:35:1e:c2:82:33:36:24:76:c4:89:81:a0:3b:
         5f:5d:dc:cd:f2:52:4f:4a:44:16:c1:2d:51:dd:6b:01:93:47:
         45:d0:e9:13:39:50:83:e0:2e:a4:28:da:24:41:3c:a0:b4:83:
         4c:f4:4a:f1:b1:d9:db:2a:45:b5:b3:4e:10:6a:52:71:1b:db:
         fd:70:8a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----