Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cc3b477-c542-443e-a0c0-eadb548c361c/a3d873d6a70c8992c5277bede57fe5f318c5c847.roa
File:                     a3d873d6a70c8992c5277bede57fe5f318c5c847.roa (raw, json)
Hash identifier:          bG6pLIyH4+T9amtNZ9lvVZf5W2h3yKE7+wbENKzzVHc=
Subject key identifier:   7A:F3:66:19:E5:E6:FA:51:9E:C5:3A:CC:2A:1B:71:95:37:AE:96:0E
Certificate issuer:       /CN=4e26de49cdf671c8caceba8adf635148030505f5
Certificate serial:       04EFE7
Authority key identifier: B6:10:37:DE:0E:94:04:7D:4A:C0:0B:7B:97:FC:4B:D0:84:AE:ED:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e26de49cdf671c8caceba8adf635148030505f5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0cc3b477-c542-443e-a0c0-eadb548c361c/a3d873d6a70c8992c5277bede57fe5f318c5c847.roa
Signing time:             Wed 24 Mar 2021 14:33:17 +0000
ROA not before:           Wed 24 Mar 2021 14:33:17 +0000
ROA not after:            Tue 24 Mar 2026 14:33:17 +0000
asID:                     265831
IP address blocks:        200.63.96.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323559 (0x4efe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e26de49cdf671c8caceba8adf635148030505f5
        Validity
            Not Before: Mar 24 14:33:17 2021 GMT
            Not After : Mar 24 14:33:17 2026 GMT
        Subject: CN=a3d873d6a70c8992c5277bede57fe5f318c5c847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:db:35:63:8e:e5:4e:bd:e8:c2:63:aa:48:
                    3d:a9:45:7e:0f:0c:cf:31:c1:19:dc:b9:d6:30:59:
                    77:dd:85:35:59:d7:fd:3f:27:0f:98:6a:69:dd:0d:
                    d1:10:88:30:96:5f:6f:1f:ee:b5:8e:ee:66:39:8b:
                    7f:73:c5:37:c2:59:0e:56:b3:a1:e3:8e:e2:d1:78:
                    aa:4d:56:e9:67:e4:7a:46:f2:9c:7c:bf:7a:15:85:
                    fe:a6:ac:ac:09:18:bf:57:66:fc:62:19:6a:9f:4c:
                    ca:14:6a:af:75:0f:fa:81:23:9b:6a:4a:f6:58:d5:
                    ea:73:48:f3:b2:74:17:fe:6f:e5:59:f2:c9:94:4c:
                    cf:c2:a5:4c:fe:84:ab:60:28:09:c2:44:19:39:7d:
                    1f:cf:e4:90:db:53:a8:57:32:9a:01:36:38:a1:5c:
                    49:04:95:77:d1:7f:ea:79:83:be:03:14:63:2b:a7:
                    fb:da:97:3a:46:83:0a:14:4d:a1:d7:31:d0:18:5e:
                    e4:4b:70:50:5c:31:ce:16:4e:ba:cd:cb:2c:ef:6a:
                    a5:b0:41:42:b6:ca:cc:7a:c5:d3:c0:bd:8c:5b:a0:
                    c3:86:2c:6e:0e:2f:81:ae:3c:5c:1a:8f:ce:06:ed:
                    9c:d2:9c:3a:a1:ce:b4:a1:9a:ef:7c:15:df:98:57:
                    42:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F3:66:19:E5:E6:FA:51:9E:C5:3A:CC:2A:1B:71:95:37:AE:96:0E
            X509v3 Authority Key Identifier:
                keyid:B6:10:37:DE:0E:94:04:7D:4A:C0:0B:7B:97:FC:4B:D0:84:AE:ED:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e26de49cdf671c8caceba8adf635148030505f5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cc3b477-c542-443e-a0c0-eadb548c361c/a3d873d6a70c8992c5277bede57fe5f318c5c847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0cc3b477-c542-443e-a0c0-eadb548c361c/4e26de49cdf671c8caceba8adf635148030505f5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:24:a7:62:96:2b:e2:29:07:35:1d:5e:88:4c:be:ed:e4:41:
         ca:9f:d2:64:7d:46:64:a0:2c:50:16:13:19:05:7c:20:4c:a2:
         8f:e2:fc:38:13:6b:74:e0:ac:de:f8:40:d9:99:3f:1f:0c:4e:
         30:14:1a:5a:bc:ce:3b:0b:37:ad:17:78:e0:65:c0:2a:e1:50:
         5c:19:f3:36:30:a3:19:5e:97:e5:f6:be:b6:af:38:a6:32:60:
         e7:2e:43:f6:2d:de:51:81:1a:d1:d8:32:4d:a3:9f:d0:32:a3:
         1b:1f:ee:ce:9a:46:1e:31:86:ba:b7:4b:a9:ce:ed:47:5c:e1:
         cb:f9:46:72:3b:b6:82:7e:6f:84:6d:6d:60:6b:30:8f:cf:b0:
         7b:a2:34:58:22:7b:14:93:6f:6e:db:36:3f:6d:8c:ff:c1:fa:
         f1:11:ba:14:c3:5a:f8:90:79:26:f3:7e:53:0d:62:bb:03:5d:
         f0:bf:70:08:47:4b:c5:13:6a:0a:38:f7:02:36:06:f0:0f:37:
         91:f7:fa:ef:63:a9:d4:5e:88:28:bf:07:f5:24:c6:08:10:31:
         d9:2a:63:4c:c4:cc:ea:65:d3:b1:5e:27:86:ed:31:2c:20:85:
         e5:b6:5d:6b:0f:fd:95:27:e4:1a:4b:05:a3:7b:f2:de:49:b3:
         10:aa:d0:69
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBO/nMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRl
MjZkZTQ5Y2RmNjcxYzhjYWNlYmE4YWRmNjM1MTQ4MDMwNTA1ZjUwHhcNMjEwMzI0
MTQzMzE3WhcNMjYwMzI0MTQzMzE3WjAzMTEwLwYDVQQDEyhhM2Q4NzNkNmE3MGM4
OTkyYzUyNzdiZWRlNTdmZTVmMzE4YzVjODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAubTbNWOO5U696MJjqkg9qUV+DwzPMcEZ3LnWMFl33YU1Wdf9
PycPmGpp3Q3REIgwll9vH+61ju5mOYt/c8U3wlkOVrOh447i0XiqTVbpZ+R6RvKc
fL96FYX+pqysCRi/V2b8Yhlqn0zKFGqvdQ/6gSObakr2WNXqc0jzsnQX/m/lWfLJ
lEzPwqVM/oSrYCgJwkQZOX0fz+SQ21OoVzKaATY4oVxJBJV30X/qeYO+AxRjK6f7
2pc6RoMKFE2h1zHQGF7kS3BQXDHOFk66zcss72qlsEFCtsrMesXTwL2MW6DDhixu
Di+BrjxcGo/OBu2c0pw6oc60oZrvfBXfmFdC8wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHrzZhnl5vpRnsU6zCobcZU3rpYOMB8GA1UdIwQYMBaAFLYQN94OlAR9SsAL
e5f8S9CEru1WMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGUyNmRl
NDljZGY2NzFjOGNhY2ViYThhZGY2MzUxNDgwMzA1MDVmNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGNjM2I0NzctYzU0Mi00NDNlLWEwYzAtZWFkYjU0
OGMzNjFjL2EzZDg3M2Q2YTcwYzg5OTJjNTI3N2JlZGU1N2ZlNWYzMThjNWM4NDcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wY2MzYjQ3Ny1jNTQyLTQ0M2UtYTBjMC1lYWRi
NTQ4YzM2MWMvNGUyNmRlNDljZGY2NzFjOGNhY2ViYThhZGY2MzUxNDgwMzA1MDVm
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA8g/YDANBgkqhkiG9w0BAQsFAAOCAQEAjSSnYpYr4ikHNR1e
iEy+7eRByp/SZH1GZKAsUBYTGQV8IEyij+L8OBNrdOCs3vhA2Zk/HwxOMBQaWrzO
Ows3rRd44GXAKuFQXBnzNjCjGV6X5fa+tq84pjJg5y5D9i3eUYEa0dgyTaOf0DKj
Gx/uzppGHjGGurdLqc7tR1zhy/lGcju2gn5vhG1tYGswj8+we6I0WCJ7FJNvbts2
P22M/8H68RG6FMNa+JB5JvN+Uw1iuwNd8L9wCEdLxRNqCjj3AjYG8A83kff672Op
1F6IKL8H9STGCBAx2SpjTMTM6mXTsV4nhu0xLCCF5bZdaw/9lSfkGksFo3vy3kmz
EKrQaQ==
-----END CERTIFICATE-----