Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00434ddc-0b4e-4657-a86c-e3d95c749719/1c80d278d42e6d612bba8968f0f3e63dfef44ab1.roa
File:                     1c80d278d42e6d612bba8968f0f3e63dfef44ab1.roa (raw, json)
Hash identifier:          q8xNlWaJoaEHfIEDcyg99ar3znIkiPYMm9xYC8QS8V8=
Subject key identifier:   B6:38:1B:65:A9:2F:88:6F:17:3D:7D:9D:00:1E:78:A0:EA:7B:09:37
Certificate issuer:       /CN=385854f9fee954935903b58b4043860f6a590865
Certificate serial:       0C40
Authority key identifier: 4B:42:4D:D5:0A:E1:A8:BC:CA:D4:5C:03:13:07:A6:DF:87:F3:3B:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/385854f9fee954935903b58b4043860f6a590865.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00434ddc-0b4e-4657-a86c-e3d95c749719/1c80d278d42e6d612bba8968f0f3e63dfef44ab1.roa
Signing time:             Sat 06 Nov 2021 21:52:07 +0000
ROA not before:           Sat 06 Nov 2021 02:00:00 +0000
ROA not after:            Thu 06 Nov 2025 02:00:00 +0000
asID:                     265587
IP address blocks:        201.150.116.0/22 maxlen: 24
                          2806:3bc::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3136 (0xc40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385854f9fee954935903b58b4043860f6a590865
        Validity
            Not Before: Nov  6 02:00:00 2021 GMT
            Not After : Nov  6 02:00:00 2025 GMT
        Subject: CN=1c80d278d42e6d612bba8968f0f3e63dfef44ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:61:89:ee:de:ab:75:c2:69:af:dd:70:4c:cf:
                    47:66:6d:1e:14:92:b8:47:fe:89:a5:7f:f3:ef:02:
                    24:11:83:ab:c3:a2:83:ab:cd:e2:2f:e0:01:0c:97:
                    e8:dd:df:f7:ae:e4:3b:b6:52:c8:59:e8:13:f7:0d:
                    ad:71:63:93:e9:16:db:7d:4a:63:40:a0:f3:63:54:
                    0d:3f:f0:17:3d:2c:1c:40:37:85:b7:51:35:7b:8c:
                    da:ef:c9:07:5e:c9:f4:1e:0d:e8:b5:11:18:c8:03:
                    52:f1:e8:df:64:86:bc:c1:de:e1:4e:10:d2:ab:17:
                    83:bc:42:cd:74:1f:4d:ee:eb:71:9a:33:fe:cf:64:
                    20:0e:b3:f9:60:b8:4c:29:f3:19:ca:8e:44:d9:4a:
                    ef:58:b2:75:22:38:0a:95:a9:01:d7:10:6d:93:c9:
                    cf:2f:d9:09:a1:9b:f8:9b:48:d8:ef:7c:5a:3f:4d:
                    f9:47:6f:b2:9d:0a:b3:68:13:d6:59:16:59:9b:3d:
                    cc:81:b9:f5:56:64:33:43:85:1c:3c:be:8f:b6:95:
                    c4:9d:7d:98:e6:43:dd:99:3c:e7:48:2b:d7:cd:14:
                    b0:6e:a1:65:1a:c8:bc:00:bd:02:f3:af:4e:f1:23:
                    df:33:9d:19:b5:1b:ef:ae:41:60:a2:b1:e9:67:f6:
                    8e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:38:1B:65:A9:2F:88:6F:17:3D:7D:9D:00:1E:78:A0:EA:7B:09:37
            X509v3 Authority Key Identifier:
                keyid:4B:42:4D:D5:0A:E1:A8:BC:CA:D4:5C:03:13:07:A6:DF:87:F3:3B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/385854f9fee954935903b58b4043860f6a590865.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00434ddc-0b4e-4657-a86c-e3d95c749719/1c80d278d42e6d612bba8968f0f3e63dfef44ab1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00434ddc-0b4e-4657-a86c-e3d95c749719/385854f9fee954935903b58b4043860f6a590865.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.116.0/22
                IPv6:
                  2806:3bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:c6:6a:ca:cd:85:5f:ed:84:ea:80:fd:25:0e:4a:c3:51:e3:
         79:b8:e1:00:cb:04:c5:78:bd:af:d9:8c:67:b6:a0:34:91:14:
         bf:e0:4a:28:7e:f3:4c:cb:27:27:0d:16:7b:53:8e:34:91:a9:
         ad:0e:ef:be:2d:9a:72:99:26:f5:1c:73:c3:78:6f:02:30:15:
         f3:3f:c6:c7:21:35:5e:8c:b8:1d:a1:66:de:b2:20:6d:c1:6d:
         17:d4:af:ca:3b:d7:fd:b6:a3:8d:97:c7:e3:91:62:32:be:2d:
         6a:16:51:27:b8:ce:e7:ba:36:e0:1f:31:ae:65:51:20:c9:84:
         9b:4d:35:b1:c2:67:b9:f0:9b:05:91:d4:ad:32:9c:a8:41:ce:
         57:4d:3b:1b:66:de:64:5f:81:1c:01:b6:39:e7:5f:62:07:43:
         1a:d7:d7:94:38:36:a6:68:32:7b:d7:c7:11:05:49:91:2c:60:
         fa:0f:0b:17:66:0c:f6:d7:53:62:e7:1c:16:9e:fa:5d:eb:0c:
         c6:ce:cf:ae:fe:ad:52:0a:66:8c:8f:06:fd:8a:cf:45:56:5d:
         44:f4:76:f3:b3:b0:a8:a4:53:4b:d3:f9:5d:e5:7c:6b:df:f8:
         82:43:fb:f9:83:6e:67:d2:3d:8f:97:32:bd:fd:08:64:fd:40:
         0a:19:c0:9c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICDEAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzg1
ODU0ZjlmZWU5NTQ5MzU5MDNiNThiNDA0Mzg2MGY2YTU5MDg2NTAeFw0yMTExMDYw
MjAwMDBaFw0yNTExMDYwMjAwMDBaMDMxMTAvBgNVBAMTKDFjODBkMjc4ZDQyZTZk
NjEyYmJhODk2OGYwZjNlNjNkZmVmNDRhYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuYYnu3qt1wmmv3XBMz0dmbR4UkrhH/omlf/PvAiQRg6vDooOr
zeIv4AEMl+jd3/eu5Du2UshZ6BP3Da1xY5PpFtt9SmNAoPNjVA0/8Bc9LBxAN4W3
UTV7jNrvyQdeyfQeDei1ERjIA1Lx6N9khrzB3uFOENKrF4O8Qs10H03u63GaM/7P
ZCAOs/lguEwp8xnKjkTZSu9YsnUiOAqVqQHXEG2Tyc8v2Qmhm/ibSNjvfFo/TflH
b7KdCrNoE9ZZFlmbPcyBufVWZDNDhRw8vo+2lcSdfZjmQ92ZPOdIK9fNFLBuoWUa
yLwAvQLzr07xI98znRm1G++uQWCiseln9o5FAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUtjgbZakviG8XPX2dAB54oOp7CTcwHwYDVR0jBBgwFoAUS0JN1QrhqLzK1FwD
Ewem34fzO20wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8zODU4NTRm
OWZlZTk1NDkzNTkwM2I1OGI0MDQzODYwZjZhNTkwODY1LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8wMDQzNGRkYy0wYjRlLTQ2NTctYTg2Yy1lM2Q5NWM3
NDk3MTkvMWM4MGQyNzhkNDJlNmQ2MTJiYmE4OTY4ZjBmM2U2M2RmZWY0NGFiMS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzAwNDM0ZGRjLTBiNGUtNDY1Ny1hODZjLWUzZDk1
Yzc0OTcxOS8zODU4NTRmOWZlZTk1NDkzNTkwM2I1OGI0MDQzODYwZjZhNTkwODY1
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCyZZ0MA0EAgACMAcDBQAoBgO8MA0GCSqGSIb3DQEBCwUAA4IB
AQAqxmrKzYVf7YTqgP0lDkrDUeN5uOEAywTFeL2v2YxntqA0kRS/4EoofvNMyycn
DRZ7U440kamtDu++LZpymSb1HHPDeG8CMBXzP8bHITVejLgdoWbesiBtwW0X1K/K
O9f9tqONl8fjkWIyvi1qFlEnuM7nujbgHzGuZVEgyYSbTTWxwme58JsFkdStMpyo
Qc5XTTsbZt5kX4EcAbY5519iB0Ma19eUODamaDJ718cRBUmRLGD6DwsXZgz211Ni
5xwWnvpd6wzGzs+u/q1SCmaMjwb9is9FVl1E9Hbzs7CopFNL0/ld5Xxr3/iCQ/v5
g25n0j2PlzK9/Qhk/UAKGcCc
-----END CERTIFICATE-----