Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/cdc51bb0bc13bad4f2c99dd5da6890b03a5d24fa.roa
File:                     cdc51bb0bc13bad4f2c99dd5da6890b03a5d24fa.roa (raw, json)
Hash identifier:          gCLG4YMdyEIz9r+Abh9jxYUDg1MP3kso7jbr6zhU+JQ=
Subject key identifier:   83:5B:6F:9D:95:4E:77:BF:31:33:AD:8B:B4:D1:2D:48:03:E1:E8:08
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       0BE7BF
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/cdc51bb0bc13bad4f2c99dd5da6890b03a5d24fa.roa
Signing time:             Wed 24 Mar 2021 14:30:57 +0000
ROA not before:           Wed 24 Mar 2021 14:30:56 +0000
ROA not after:            Tue 24 Mar 2026 14:30:56 +0000
asID:                     18747
IP address blocks:        181.78.0.0/15 maxlen: 15

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 780223 (0xbe7bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Mar 24 14:30:56 2021 GMT
            Not After : Mar 24 14:30:56 2026 GMT
        Subject: CN=cdc51bb0bc13bad4f2c99dd5da6890b03a5d24fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:06:97:02:5b:eb:29:03:df:60:02:62:f4:
                    5f:53:09:b6:79:1f:36:e5:aa:8d:21:27:9e:f8:3c:
                    1e:ca:6f:d8:13:74:7c:fb:3e:9f:d5:3a:db:ae:d4:
                    c6:d5:f7:f1:63:a1:30:3f:8c:e6:7f:2a:3c:19:99:
                    a0:f8:b3:c7:c6:a7:1f:fc:10:e4:ab:7e:0e:46:1b:
                    55:96:7b:87:50:5e:8d:06:5f:a8:73:9f:e2:bf:3c:
                    1b:90:58:55:06:37:c0:8c:83:40:6f:f8:a9:c6:72:
                    28:e2:f8:75:61:8a:1f:a7:dc:30:f2:16:71:1b:ac:
                    0d:66:6b:b0:bb:58:32:54:e7:a7:b8:59:43:2b:0d:
                    0b:bc:9a:26:31:6a:72:e6:9e:9a:38:f5:ac:fe:f8:
                    f0:57:2a:12:b4:14:d4:1d:83:98:60:7f:d7:3d:55:
                    d8:71:d6:fe:16:15:7b:0b:83:a0:cb:26:73:08:17:
                    67:5f:ba:2c:84:14:87:8c:3e:59:73:71:dc:be:af:
                    b4:c6:44:f7:9a:de:84:5f:a0:e5:31:93:3e:78:4c:
                    e0:35:8d:79:fb:54:20:ef:ec:45:73:9d:fe:94:a0:
                    81:8c:58:38:98:75:90:27:c2:22:fa:8a:b3:ef:28:
                    4a:53:80:ac:4c:ad:ae:ea:8a:f2:39:32:b1:0f:0d:
                    0c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5B:6F:9D:95:4E:77:BF:31:33:AD:8B:B4:D1:2D:48:03:E1:E8:08
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/cdc51bb0bc13bad4f2c99dd5da6890b03a5d24fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         13:36:a3:66:aa:00:10:71:81:96:e0:83:e5:ff:b8:f2:f2:4b:
         84:69:ca:24:ba:f8:60:17:a6:42:18:1f:79:3b:b0:ee:bf:0c:
         bd:12:8d:e3:51:91:06:fd:c1:09:18:59:00:34:cf:9e:30:3f:
         32:8c:c6:80:94:ce:c4:83:71:ad:4c:2c:f8:76:fc:ac:67:6e:
         47:0e:af:25:15:c4:de:97:46:f9:7d:41:45:c5:f2:aa:13:61:
         ee:c9:08:5f:85:4d:13:28:9c:f3:ed:f9:d7:eb:cf:5d:bd:bf:
         48:23:d3:3a:aa:16:0c:a0:62:17:6c:9c:74:5b:9a:6d:52:9e:
         ef:83:2f:c4:da:27:2b:28:c8:49:16:c4:0b:70:90:56:97:c3:
         13:5a:33:de:49:18:7c:ab:cd:91:c1:75:95:6b:c5:d8:59:de:
         f3:52:bc:bf:c8:d2:81:b2:84:36:ca:36:e9:e3:5a:64:65:89:
         fd:44:3e:c8:f4:cf:48:2a:aa:be:6b:8f:08:05:ac:0c:f8:8c:
         4c:1d:e4:53:d5:5d:9d:94:24:cd:1f:1e:8f:df:fb:e4:eb:e3:
         67:48:ae:fb:d7:b4:9e:aa:26:9b:eb:43:95:53:47:73:bb:44:
         73:b5:db:3a:67:9a:23:09:19:e6:a6:8b:69:d4:b7:e6:6a:6c:
         88:6a:be:eb
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDC+e/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMy
Y2ZjMzIxMjQ1NTQ2NGNkOGY4NTZhMzQ4YjJkNWNhZjczZGNkNzMwHhcNMjEwMzI0
MTQzMDU2WhcNMjYwMzI0MTQzMDU2WjAzMTEwLwYDVQQDEyhjZGM1MWJiMGJjMTNi
YWQ0ZjJjOTlkZDVkYTY4OTBiMDNhNWQyNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArMAGlwJb6ykD32ACYvRfUwm2eR825aqNISee+Dweym/YE3R8
+z6f1TrbrtTG1ffxY6EwP4zmfyo8GZmg+LPHxqcf/BDkq34ORhtVlnuHUF6NBl+o
c5/ivzwbkFhVBjfAjINAb/ipxnIo4vh1YYofp9ww8hZxG6wNZmuwu1gyVOenuFlD
Kw0LvJomMWpy5p6aOPWs/vjwVyoStBTUHYOYYH/XPVXYcdb+FhV7C4OgyyZzCBdn
X7oshBSHjD5Zc3Hcvq+0xkT3mt6EX6DlMZM+eEzgNY15+1Qg7+xFc53+lKCBjFg4
mHWQJ8Ii+oqz7yhKU4CsTK2u6oryOTKxDw0MbwIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFINbb52VTne/MTOti7TRLUgD4egIMB8GA1UdIwQYMBaAFO2XYCMHZoB2YyKf
bUEoBQfvncIpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzJjZmMz
MjEyNDU1NDY0Y2Q4Zjg1NmEzNDhiMmQ1Y2FmNzNkY2Q3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGVmNTY4NmQtZmM2Ni00YzhlLWJlNGYtZGE2OWZi
YzJiZmI1L2NkYzUxYmIwYmMxM2JhZDRmMmM5OWRkNWRhNjg5MGIwM2E1ZDI0ZmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wZWY1Njg2ZC1mYzY2LTRjOGUtYmU0Zi1kYTY5
ZmJjMmJmYjUvYzJjZmMzMjEyNDU1NDY0Y2Q4Zjg1NmEzNDhiMmQ1Y2FmNzNkY2Q3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDAbVOMA0GCSqGSIb3DQEBCwUAA4IBAQATNqNmqgAQcYGW4IPl
/7jy8kuEacokuvhgF6ZCGB95O7Duvwy9Eo3jUZEG/cEJGFkANM+eMD8yjMaAlM7E
g3GtTCz4dvysZ25HDq8lFcTel0b5fUFFxfKqE2HuyQhfhU0TKJzz7fnX689dvb9I
I9M6qhYMoGIXbJx0W5ptUp7vgy/E2icrKMhJFsQLcJBWl8MTWjPeSRh8q82RwXWV
a8XYWd7zUry/yNKBsoQ2yjbp41pkZYn9RD7I9M9IKqq+a48IBawM+IxMHeRT1V2d
lCTNHx6P3/vk6+NnSK7717Seqiab60OVU0dzu0Rztds6Z5ojCRnmpotp1LfmamyI
ar7r
-----END CERTIFICATE-----