Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/aa2162b5edafbc346446e3c6cbecaf3b5ff4673f.roa
File:                     aa2162b5edafbc346446e3c6cbecaf3b5ff4673f.roa (raw, json)
Hash identifier:          wgUEKJ+1SCwk6yW1Bn1UDtWGKJxwhktbvWRz5oym/O8=
Subject key identifier:   25:2E:EC:3A:0C:5B:3D:89:65:22:5D:78:2C:BC:9A:8C:9F:2C:54:DE
Certificate issuer:       /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial:       0E0CC9
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/aa2162b5edafbc346446e3c6cbecaf3b5ff4673f.roa
Signing time:             Wed 24 Mar 2021 14:33:17 +0000
ROA not before:           Wed 24 Mar 2021 14:33:16 +0000
ROA not after:            Tue 24 Mar 2026 14:33:16 +0000
asID:                     6535
IP address blocks:        186.20.0.0/15 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 920777 (0xe0cc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
        Validity
            Not Before: Mar 24 14:33:16 2021 GMT
            Not After : Mar 24 14:33:16 2026 GMT
        Subject: CN=aa2162b5edafbc346446e3c6cbecaf3b5ff4673f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:25:ff:2f:5a:58:cb:32:c4:ad:52:5e:f1:26:
                    08:bc:6f:cb:3c:f8:a2:07:37:79:ae:2c:72:22:ff:
                    41:27:94:45:e1:ff:46:f3:c9:2a:37:47:2b:a3:75:
                    69:36:47:a4:ef:d3:fe:55:99:00:b3:b1:9b:c1:e1:
                    a4:7f:03:47:ea:14:dc:74:18:da:6a:d1:e0:50:1a:
                    66:fb:17:c0:d5:eb:23:af:2f:68:dd:8d:67:58:85:
                    ac:6e:0e:6f:05:12:fa:27:f8:db:9c:a6:e7:78:7d:
                    bf:81:3b:57:be:3b:13:22:dc:2a:a7:f1:b4:fc:1a:
                    2f:f3:9f:c8:3d:72:64:8a:2a:c7:49:db:be:94:84:
                    a8:0b:5b:e1:37:c2:0e:38:f3:69:99:8c:89:af:fd:
                    92:fb:c5:67:b3:0b:01:8b:86:6a:e5:1d:d0:fd:a7:
                    5b:c5:fb:c3:92:f7:b4:d5:91:97:31:73:8b:30:49:
                    96:67:9f:8d:b5:c8:33:af:bf:79:24:23:14:12:98:
                    11:b0:38:2e:04:b8:d9:0c:fe:65:ff:96:90:f0:b5:
                    71:29:70:e7:9c:89:e7:bb:b1:bc:bb:68:62:c4:c2:
                    f7:95:fe:f7:3c:9c:2f:95:04:db:8a:5d:79:cd:d0:
                    41:a7:56:7b:37:75:64:2b:30:c6:ad:cf:35:8a:6a:
                    75:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2E:EC:3A:0C:5B:3D:89:65:22:5D:78:2C:BC:9A:8C:9F:2C:54:DE
            X509v3 Authority Key Identifier:
                keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/aa2162b5edafbc346446e3c6cbecaf3b5ff4673f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.20.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         6a:b9:25:d2:bf:4f:a2:53:5b:e5:5d:ac:24:14:b7:47:66:de:
         0e:08:ed:44:bb:8c:64:04:04:e4:9a:31:38:14:78:81:23:6f:
         4e:b4:4d:11:24:42:2d:4d:9f:a4:74:80:62:17:bf:6d:f8:e0:
         a0:d9:3a:77:ef:08:0a:51:70:68:08:c2:8f:23:a4:f4:56:f6:
         76:b1:b1:b7:59:53:7c:3f:8f:62:60:d9:26:5b:0c:2b:23:08:
         fe:58:f7:4a:2d:f8:68:8b:7b:27:7f:d7:a7:bb:15:f1:ea:71:
         3a:5b:6c:c5:db:54:4a:28:b9:cf:dc:df:71:d1:34:b2:9e:52:
         76:69:a0:f5:c6:86:50:ed:f2:55:2e:55:54:e2:71:d4:35:9c:
         82:c1:bd:12:5e:0c:05:38:a1:79:f8:06:8b:b8:7e:aa:1a:db:
         07:f5:1c:b0:b0:8b:47:93:2f:f2:dc:5c:77:6a:a5:fe:88:9d:
         16:2b:31:84:9c:3f:af:d2:71:10:59:eb:65:96:77:90:78:30:
         b8:a5:a1:8a:ef:5c:98:c7:94:a2:4f:ba:4c:57:47:f8:3c:fc:
         d4:07:07:91:47:f1:4f:a3:a6:79:74:27:8d:81:b6:fb:65:2d:
         74:98:9d:04:50:93:83:30:60:15:32:b3:b2:5f:e8:a4:02:b8:
         80:f2:41:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----