Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/b0e08081257ca919422095ce392340a42362cd38.roa
File:                     b0e08081257ca919422095ce392340a42362cd38.roa (raw, json)
Hash identifier:          fj009TyNRvzS6H4HhYNN0il+oRNdRc8aMOSv6UbZzAg=
Subject key identifier:   22:92:60:DD:BC:7F:E4:5F:A7:30:4E:97:C7:7D:9B:47:A6:3A:64:29
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       0E14D8
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/b0e08081257ca919422095ce392340a42362cd38.roa
Signing time:             Wed 24 Mar 2021 14:45:11 +0000
ROA not before:           Wed 24 Mar 2021 14:45:09 +0000
ROA not after:            Tue 24 Mar 2026 14:45:09 +0000
asID:                     27944
IP address blocks:        201.218.240.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 922840 (0xe14d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 24 14:45:09 2021 GMT
            Not After : Mar 24 14:45:09 2026 GMT
        Subject: CN=b0e08081257ca919422095ce392340a42362cd38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4a:2b:8c:e5:ce:2a:17:ab:e1:0a:84:2c:ee:
                    72:54:99:77:f5:9e:f0:a9:6b:1c:55:f5:77:36:c8:
                    6b:3a:e2:d2:9e:1e:a0:77:e8:f6:96:2e:b8:6c:eb:
                    34:29:0f:0f:dd:76:8c:ab:3c:30:c7:b1:65:b0:33:
                    93:81:e5:f5:0b:e3:49:5f:6b:c5:88:fc:f4:c2:dc:
                    5b:34:a1:b7:54:2d:c8:29:92:8c:d1:b4:7d:a9:e4:
                    47:a9:d6:7d:f2:8f:a8:88:49:b5:ef:d5:a7:f3:0e:
                    d6:e5:36:57:d4:1b:f7:a7:96:9b:75:b1:e3:42:be:
                    72:71:4d:6f:8d:ce:fb:bc:ce:f8:f6:78:c7:1e:93:
                    bc:44:06:f5:fb:19:77:b8:44:84:63:fa:6b:90:dc:
                    a1:1c:38:a1:68:77:58:13:00:7d:c4:e3:cb:eb:94:
                    d2:5f:40:4d:ad:ac:46:ca:cc:b4:03:e2:5b:21:bb:
                    a5:7a:81:ef:d2:f3:f6:72:8a:0f:ea:e9:18:e6:a8:
                    a5:ed:35:e2:c1:a8:7a:8f:08:24:10:1b:b3:52:5f:
                    58:94:46:fa:47:07:db:f3:c4:a0:1a:db:81:55:c9:
                    88:ac:5c:e8:12:56:de:02:55:9b:6e:68:52:0c:ea:
                    e1:13:6f:62:c4:c7:4e:b0:9d:4f:96:a5:14:04:3a:
                    18:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:92:60:DD:BC:7F:E4:5F:A7:30:4E:97:C7:7D:9B:47:A6:3A:64:29
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/b0e08081257ca919422095ce392340a42362cd38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:23:9f:9f:11:0a:e7:4b:b3:f2:c5:97:52:e6:81:68:03:06:
         2c:e1:51:01:82:21:79:ae:1e:44:e3:dd:cb:1c:15:bb:4e:c9:
         72:ea:57:ea:60:64:f2:c4:63:d7:d8:2b:58:da:82:f3:a2:b2:
         96:30:14:61:03:45:f0:2c:a4:da:9c:0d:93:55:21:c1:f1:25:
         b2:63:e0:4e:19:56:ba:7c:eb:f5:ca:53:d8:43:32:70:a1:84:
         88:ee:11:a0:c9:64:4f:d9:15:84:61:0e:1d:a9:49:88:41:2a:
         2a:87:5a:33:a1:aa:8a:22:10:60:7d:12:e0:e7:cb:f7:97:21:
         1c:fb:b5:01:2d:50:72:7e:e2:d5:f9:52:49:47:1c:9f:3c:32:
         4b:30:ff:05:bd:da:33:0e:57:dc:1f:49:66:c2:07:45:3f:fc:
         6f:2c:c5:46:8e:03:06:00:5b:8d:a6:28:61:da:48:8d:30:80:
         61:13:db:46:c5:51:d2:d7:5f:5d:5b:91:8b:f6:db:8f:0a:27:
         1b:ed:77:dd:b1:b7:74:36:7e:d1:14:b2:fd:04:09:cd:ad:c0:
         a1:62:b5:95:56:15:07:c5:4e:a8:17:41:33:71:a3:65:0e:e3:
         a0:cd:42:f5:0b:e8:c6:94:d4:d7:bb:18:8c:f3:cb:4b:4b:54:
         0d:fb:c8:03
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDhTYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4
NWRhMzA0MzM0ZmIzNjIwNGEzNzBlOTUwNDg3Njg5ZTgxMWEyYzgwHhcNMjEwMzI0
MTQ0NTA5WhcNMjYwMzI0MTQ0NTA5WjAzMTEwLwYDVQQDEyhiMGUwODA4MTI1N2Nh
OTE5NDIyMDk1Y2UzOTIzNDBhNDIzNjJjZDM4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl0orjOXOKher4QqELO5yVJl39Z7wqWscVfV3NshrOuLSnh6g
d+j2li64bOs0KQ8P3XaMqzwwx7FlsDOTgeX1C+NJX2vFiPz0wtxbNKG3VC3IKZKM
0bR9qeRHqdZ98o+oiEm179Wn8w7W5TZX1Bv3p5abdbHjQr5ycU1vjc77vM749njH
HpO8RAb1+xl3uESEY/prkNyhHDihaHdYEwB9xOPL65TSX0BNraxGysy0A+JbIbul
eoHv0vP2cooP6ukY5qil7TXiwah6jwgkEBuzUl9YlEb6Rwfb88SgGtuBVcmIrFzo
ElbeAlWbbmhSDOrhE29ixMdOsJ1PlqUUBDoYiwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCKSYN28f+RfpzBOl8d9m0emOmQpMB8GA1UdIwQYMBaAFJWonEF2ARCODpgC
PQcm9Ep8UQ9LMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDg1ZGEz
MDQzMzRmYjM2MjA0YTM3MGU5NTA0ODc2ODllODExYTJjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWNjNTQ4ZmYtOGYwYy00ZTc1LTgxMjUtNWUwOTVm
YmYyNGMwL2IwZTA4MDgxMjU3Y2E5MTk0MjIwOTVjZTM5MjM0MGE0MjM2MmNkMzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xY2M1NDhmZi04ZjBjLTRlNzUtODEyNS01ZTA5
NWZiZjI0YzAvZDg1ZGEzMDQzMzRmYjM2MjA0YTM3MGU5NTA0ODc2ODllODExYTJj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMna8DANBgkqhkiG9w0BAQsFAAOCAQEAGCOfnxEK50uz8sWX
UuaBaAMGLOFRAYIhea4eROPdyxwVu07JcupX6mBk8sRj19grWNqC86KyljAUYQNF
8Cyk2pwNk1UhwfElsmPgThlWunzr9cpT2EMycKGEiO4RoMlkT9kVhGEOHalJiEEq
KodaM6GqiiIQYH0S4OfL95chHPu1AS1Qcn7i1flSSUccnzwySzD/Bb3aMw5X3B9J
ZsIHRT/8byzFRo4DBgBbjaYoYdpIjTCAYRPbRsVR0tdfXVuRi/bbjwonG+133bG3
dDZ+0RSy/QQJza3AoWK1lVYVB8VOqBdBM3GjZQ7joM1C9QvoxpTU17sYjPPLS0tU
DfvIAw==
-----END CERTIFICATE-----