Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/2d96e43aa20f38d41c8b1412c4ffc21b13a7e38a.roa
File:                     2d96e43aa20f38d41c8b1412c4ffc21b13a7e38a.roa (raw, json)
Hash identifier:          7F3ceJhl61zICIv77vyq+8ASmOs6LzKourxN4bvFbTg=
Subject key identifier:   62:BD:D7:2E:92:3B:66:C4:E4:01:61:95:93:E8:57:70:9C:B2:90:1F
Certificate issuer:       /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial:       0DFFA3
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/2d96e43aa20f38d41c8b1412c4ffc21b13a7e38a.roa
Signing time:             Wed 24 Mar 2021 14:33:16 +0000
ROA not before:           Wed 24 Mar 2021 14:33:16 +0000
ROA not after:            Tue 24 Mar 2026 14:33:16 +0000
asID:                     6535
IP address blocks:        179.4.0.0/16 maxlen: 18
                          179.2.0.0/16 maxlen: 18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917411 (0xdffa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
        Validity
            Not Before: Mar 24 14:33:16 2021 GMT
            Not After : Mar 24 14:33:16 2026 GMT
        Subject: CN=2d96e43aa20f38d41c8b1412c4ffc21b13a7e38a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bf:56:71:bf:91:8e:d7:2c:6d:f8:45:d6:3f:
                    4d:6d:d2:cb:26:d7:d3:20:f2:8f:54:ea:e4:a7:f6:
                    01:9b:f6:c2:39:aa:59:d5:ca:5d:fd:2b:a6:df:66:
                    33:c7:43:46:60:36:00:8d:0f:a5:23:6a:67:89:b6:
                    21:ba:26:32:01:ba:71:8a:b7:92:be:a2:ce:5f:cd:
                    6e:da:af:1b:f7:b8:ce:37:c3:0c:02:a8:ca:54:f2:
                    a8:93:62:8c:6a:09:7f:57:2f:ea:ad:6e:d9:f6:e8:
                    fb:14:aa:ea:ec:a7:72:69:ed:5a:75:22:6b:5d:95:
                    ce:c2:37:5b:4f:a9:09:5c:3f:68:91:f0:a3:e4:21:
                    cd:ba:5a:11:78:a8:63:47:76:24:d9:1d:9f:6a:0a:
                    fb:ad:cf:a3:1d:27:d8:37:e7:14:33:a5:ac:c2:28:
                    56:c5:37:cf:a4:b7:54:f9:fa:3e:3a:15:6b:53:20:
                    a3:15:41:a3:19:8b:f3:04:d5:15:cd:35:71:5a:ca:
                    a8:ec:9e:d1:f2:92:4e:24:17:5e:08:00:be:72:1c:
                    66:47:6f:4e:03:8c:d6:e2:e1:ce:29:a5:63:8a:23:
                    79:af:01:fb:60:79:5d:a8:c3:79:26:a9:84:50:78:
                    5e:c3:3a:01:c7:d7:33:67:05:0e:eb:34:b6:9d:15:
                    db:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BD:D7:2E:92:3B:66:C4:E4:01:61:95:93:E8:57:70:9C:B2:90:1F
            X509v3 Authority Key Identifier:
                keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/2d96e43aa20f38d41c8b1412c4ffc21b13a7e38a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.2.0.0/16
                  179.4.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         69:fd:3c:b4:60:58:bc:6e:5a:6f:28:88:db:15:ee:77:e4:26:
         15:03:08:80:ff:a3:f3:4f:07:bb:00:25:3f:ce:68:fb:9d:95:
         45:2b:7c:ce:af:90:79:c6:97:dd:7d:55:c7:9b:59:d7:39:41:
         9f:8c:65:ff:2f:f1:3a:8a:1d:5e:ae:53:28:8e:35:79:c6:50:
         14:71:68:09:d0:91:f2:68:ce:bf:59:b6:99:7a:1e:f5:a4:84:
         25:31:f5:5f:46:b3:12:d8:5e:1c:9d:ca:7c:78:1b:69:c9:b3:
         00:00:d3:40:bd:08:c1:68:ee:7a:ac:69:02:21:29:9e:24:eb:
         74:8e:9b:86:55:b9:35:be:0d:c6:62:b8:74:b5:8b:c0:96:de:
         41:fd:c8:8a:b2:d5:d1:04:03:ad:f9:da:98:3c:a4:27:f5:c9:
         ae:f8:90:c5:cf:6a:37:77:52:74:00:28:85:98:e2:76:22:01:
         9d:a7:97:d4:c5:80:87:92:ff:bd:aa:fe:54:40:13:d5:20:d0:
         3b:b0:04:c8:c5:57:a3:88:d9:25:82:69:8b:39:df:d1:c4:e6:
         b4:f4:d3:8b:40:f3:5d:26:be:e7:e0:7f:37:9f:4d:31:64:42:
         3e:5e:29:0f:88:4b:84:72:df:ad:f1:7b:ff:35:ae:54:fc:8a:
         25:a7:96:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----