Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5cc51dc8-ddeb-4374-a4aa-358bb2f1649a/7f1b7c5844f6796dbbf559e1ba69a9fa92112b98.roa
File:                     7f1b7c5844f6796dbbf559e1ba69a9fa92112b98.roa (raw, json)
Hash identifier:          C2Y9QwAVWae112YPQcbdD053zNM+qImF1FOIZWfQg4M=
Subject key identifier:   74:1E:45:E4:EB:D5:4F:2C:1D:43:55:56:02:94:18:EE:60:2F:56:0B
Certificate issuer:       /CN=cfba2f644c32a04220d0345745022ddbc3a8a05a
Certificate serial:       21697B
Authority key identifier: 9D:76:4E:19:9C:DE:89:A1:12:E2:95:76:1B:05:6B:AE:9B:79:D3:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfba2f644c32a04220d0345745022ddbc3a8a05a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5cc51dc8-ddeb-4374-a4aa-358bb2f1649a/7f1b7c5844f6796dbbf559e1ba69a9fa92112b98.roa
Signing time:             Mon 26 Jun 2023 14:08:33 +0000
ROA not before:           Sun 25 Jun 2023 14:08:33 +0000
ROA not after:            Thu 26 Jun 2025 14:08:33 +0000
asID:                     28007
IP address blocks:        131.255.104.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2189691 (0x21697b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfba2f644c32a04220d0345745022ddbc3a8a05a
        Validity
            Not Before: Jun 25 14:08:33 2023 GMT
            Not After : Jun 26 14:08:33 2025 GMT
        Subject: CN=7f1b7c5844f6796dbbf559e1ba69a9fa92112b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:67:53:a0:bf:44:88:55:d8:ac:93:36:ae:08:
                    5a:62:c8:ef:ec:1d:63:ce:54:bb:13:f5:12:b0:58:
                    48:f7:d6:c1:05:3a:e2:04:55:93:aa:ec:44:22:ef:
                    6a:3f:e7:bd:eb:ab:23:4f:e1:25:11:a4:10:37:22:
                    ed:54:87:be:20:04:f3:ff:7a:18:71:0d:77:95:78:
                    50:f2:57:a7:8e:e2:2b:e2:55:d0:83:6d:58:3b:2a:
                    b8:94:d5:ab:f9:6f:ba:65:c3:40:97:ac:2d:7a:1e:
                    69:b0:97:3c:8a:d8:5d:c5:81:5c:c5:dd:f6:09:83:
                    14:5d:4b:c0:07:af:a5:57:18:69:87:25:80:6f:72:
                    b6:49:ff:8c:99:8e:99:74:70:62:47:50:22:ae:ca:
                    c5:e4:04:2f:e8:73:14:5b:c8:0a:9d:7b:fe:75:59:
                    8d:d2:66:3a:2b:af:ca:6c:55:c5:67:8d:61:7b:f1:
                    71:6f:9d:93:48:ce:46:be:35:fb:dd:67:30:52:f3:
                    35:0d:ba:7c:2b:51:ed:02:8e:a3:58:e5:e9:df:69:
                    46:25:5f:08:53:b8:76:8b:db:fe:f5:ec:7d:04:7f:
                    fa:3f:70:d3:85:f9:76:d4:73:e1:b2:d6:79:9a:b8:
                    ca:3a:ef:6a:28:5b:8d:aa:60:30:ad:8e:c8:93:22:
                    db:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1E:45:E4:EB:D5:4F:2C:1D:43:55:56:02:94:18:EE:60:2F:56:0B
            X509v3 Authority Key Identifier:
                keyid:9D:76:4E:19:9C:DE:89:A1:12:E2:95:76:1B:05:6B:AE:9B:79:D3:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfba2f644c32a04220d0345745022ddbc3a8a05a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5cc51dc8-ddeb-4374-a4aa-358bb2f1649a/7f1b7c5844f6796dbbf559e1ba69a9fa92112b98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5cc51dc8-ddeb-4374-a4aa-358bb2f1649a/cfba2f644c32a04220d0345745022ddbc3a8a05a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:b4:e4:7f:50:93:10:37:83:45:4c:a8:ad:79:9d:a9:eb:61:
         59:b8:de:68:8e:24:8d:e4:7f:e8:f3:a5:32:ee:3a:23:07:b9:
         ae:a9:fa:52:16:32:dc:b1:74:ce:2f:03:aa:bc:5d:36:47:6e:
         f7:e4:de:ba:55:a8:a2:66:04:b3:df:82:c1:ff:39:ac:24:a9:
         3a:f5:29:5b:2e:49:ff:71:f7:3e:9a:95:b4:15:57:40:8a:b4:
         b1:4a:9f:60:83:a8:6b:a2:44:d6:a1:24:c5:70:bf:b1:b9:22:
         2e:d6:40:9f:22:a9:e9:35:40:73:07:cc:52:4b:37:49:92:8f:
         95:ce:1e:c0:68:40:ae:c5:0d:bc:1b:39:b2:0d:c3:e5:62:75:
         f1:7e:00:b5:97:87:ae:db:1a:1f:f0:4b:19:b4:f3:31:40:b8:
         f1:90:74:41:c4:ec:df:40:4d:81:00:0c:a2:08:f1:50:b9:bd:
         32:bb:3a:9d:1e:bf:c0:69:84:64:b5:36:75:17:75:06:ea:06:
         2f:d9:99:b1:7c:35:10:91:0b:9f:85:f4:34:06:af:d0:c6:df:
         0a:e5:3d:e9:7e:80:fe:87:3b:66:69:5c:f4:01:e6:f6:cb:78:
         bf:fe:37:c3:24:be:47:44:7d:71:65:35:2c:84:23:76:6c:cf:
         eb:e6:5f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----