Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21c8ed93-6fb9-42bd-86b3-7595efa88bfe/0a3f0ea6ce88f66f5933413a85d6facef5881fcf.roa
File:                     0a3f0ea6ce88f66f5933413a85d6facef5881fcf.roa (raw, json)
Hash identifier:          tw9OUuxB5+1YWvAxTAzLADX7duedEHHkQDg2q9TKzoE=
Subject key identifier:   97:E1:9F:75:A9:99:84:A8:C8:57:51:CD:7C:C4:A8:54:27:F8:12:82
Certificate issuer:       /CN=37043f262df2eb062b3237cb4f189b08823ce138
Certificate serial:       1D91C2
Authority key identifier: 34:D4:85:26:6C:78:F8:0C:9F:41:63:82:5F:3F:15:7B:E5:86:2A:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37043f262df2eb062b3237cb4f189b08823ce138.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21c8ed93-6fb9-42bd-86b3-7595efa88bfe/0a3f0ea6ce88f66f5933413a85d6facef5881fcf.roa
Signing time:             Mon 09 Jan 2023 15:51:54 +0000
ROA not before:           Sun 08 Jan 2023 15:51:31 +0000
ROA not after:            Thu 09 Jan 2025 15:51:31 +0000
asID:                     264814
IP address blocks:        170.238.200.0/22 maxlen: 24
                          2803:ecc0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1937858 (0x1d91c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37043f262df2eb062b3237cb4f189b08823ce138
        Validity
            Not Before: Jan  8 15:51:31 2023 GMT
            Not After : Jan  9 15:51:31 2025 GMT
        Subject: CN=0a3f0ea6ce88f66f5933413a85d6facef5881fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4e:88:2f:aa:3e:af:20:fc:d3:5f:20:bc:52:
                    6c:a5:40:63:d5:e7:c8:36:74:95:fb:c7:f7:f1:b9:
                    68:70:13:55:88:9a:a4:1e:06:7f:1f:19:40:ae:26:
                    44:48:63:2b:77:98:2f:74:ed:2a:d2:13:d8:92:04:
                    5f:37:f0:ed:f6:e2:ad:72:20:36:01:bb:1b:91:6e:
                    a1:6c:c0:60:7b:12:17:48:5f:e8:77:dc:a9:16:cb:
                    ee:78:e7:2d:09:d0:3c:c0:00:c6:3b:6a:72:15:0e:
                    92:b1:b2:a9:a8:d4:eb:8a:94:26:8d:d0:2b:84:36:
                    a6:d4:6f:c5:fd:ef:72:71:f4:3e:26:4d:bb:c0:79:
                    4a:b7:cc:fd:e5:72:b1:d6:1f:aa:f8:e3:ba:5a:fb:
                    fc:1b:2a:cc:b9:c2:c6:0c:3c:9a:b8:81:79:55:e6:
                    31:51:2f:56:25:6c:1d:13:78:24:42:eb:79:1f:b9:
                    e1:dd:c5:1e:1e:ed:6d:47:9b:8e:47:f2:6e:96:4d:
                    c8:fc:5f:df:cc:bc:c9:3a:98:17:28:66:0b:88:ab:
                    2b:24:fb:08:32:ba:20:f3:9f:6c:77:8e:c4:b9:9a:
                    f7:28:18:b5:7a:7d:26:c5:01:a9:83:c5:bc:10:be:
                    6f:93:71:c2:29:27:fd:b6:9a:94:e4:92:99:7c:b8:
                    2b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E1:9F:75:A9:99:84:A8:C8:57:51:CD:7C:C4:A8:54:27:F8:12:82
            X509v3 Authority Key Identifier:
                keyid:34:D4:85:26:6C:78:F8:0C:9F:41:63:82:5F:3F:15:7B:E5:86:2A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37043f262df2eb062b3237cb4f189b08823ce138.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21c8ed93-6fb9-42bd-86b3-7595efa88bfe/0a3f0ea6ce88f66f5933413a85d6facef5881fcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21c8ed93-6fb9-42bd-86b3-7595efa88bfe/37043f262df2eb062b3237cb4f189b08823ce138.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.200.0/22
                IPv6:
                  2803:ecc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:43:6f:e4:a5:e9:7b:bf:af:55:7e:e0:50:37:42:e9:25:0e:
         a9:9d:08:c7:ac:36:b4:bd:08:49:4e:aa:67:5f:4c:2c:da:fe:
         6d:84:3a:8c:1a:26:c0:3d:9d:26:ac:75:af:35:a4:6b:64:a1:
         5e:99:73:e1:68:a3:44:01:4e:b1:6e:45:af:78:41:78:49:4f:
         64:4f:f9:a0:58:e8:f4:cb:ae:dc:17:f6:6b:11:e2:f0:36:4c:
         f1:08:f1:7f:27:d2:5d:a0:45:80:eb:8a:bb:d2:a7:ca:52:cc:
         61:b8:d6:33:c8:f8:4d:16:d0:76:cc:47:b1:8c:cc:98:ee:dd:
         5b:77:31:f8:55:e6:99:a5:64:a6:bb:2b:93:c1:dc:cd:ff:5e:
         00:2c:30:6f:5b:8c:4b:4a:56:eb:fe:2b:73:c6:55:42:fa:a5:
         12:d4:8f:25:c5:ad:41:03:9e:ac:92:7a:a0:62:dd:7a:af:72:
         13:36:4c:7c:a9:e7:10:0d:8a:a2:8c:d5:96:6e:fb:e3:c0:a1:
         1f:a0:b4:e0:b3:ee:e9:6d:b8:3e:4b:1d:06:1e:8d:24:33:61:
         93:2a:a3:b3:74:36:5a:eb:72:2e:23:06:5b:c5:ef:3e:0b:a0:
         ec:ea:8f:86:81:0f:ba:b9:e6:da:a2:ae:7e:c0:2c:37:1f:16:
         77:62:d2:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDHZHCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM3
MDQzZjI2MmRmMmViMDYyYjMyMzdjYjRmMTg5YjA4ODIzY2UxMzgwHhcNMjMwMTA4
MTU1MTMxWhcNMjUwMTA5MTU1MTMxWjAzMTEwLwYDVQQDEygwYTNmMGVhNmNlODhm
NjZmNTkzMzQxM2E4NWQ2ZmFjZWY1ODgxZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArE6IL6o+ryD8018gvFJspUBj1efINnSV+8f38blocBNViJqk
HgZ/HxlAriZESGMrd5gvdO0q0hPYkgRfN/Dt9uKtciA2AbsbkW6hbMBgexIXSF/o
d9ypFsvueOctCdA8wADGO2pyFQ6SsbKpqNTripQmjdArhDam1G/F/e9ycfQ+Jk27
wHlKt8z95XKx1h+q+OO6Wvv8GyrMucLGDDyauIF5VeYxUS9WJWwdE3gkQut5H7nh
3cUeHu1tR5uOR/Julk3I/F/fzLzJOpgXKGYLiKsrJPsIMrog859sd47EuZr3KBi1
en0mxQGpg8W8EL5vk3HCKSf9tpqU5JKZfLgr3wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFJfhn3WpmYSoyFdRzXzEqFQn+BKCMB8GA1UdIwQYMBaAFDTUhSZsePgMn0Fj
gl8/FXvlhirsMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzcwNDNm
MjYyZGYyZWIwNjJiMzIzN2NiNGYxODliMDg4MjNjZTEzOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjFjOGVkOTMtNmZiOS00MmJkLTg2YjMtNzU5NWVm
YTg4YmZlLzBhM2YwZWE2Y2U4OGY2NmY1OTMzNDEzYTg1ZDZmYWNlZjU4ODFmY2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMWM4ZWQ5My02ZmI5LTQyYmQtODZiMy03NTk1
ZWZhODhiZmUvMzcwNDNmMjYyZGYyZWIwNjJiMzIzN2NiNGYxODliMDg4MjNjZTEz
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqruyDANBAIAAjAHAwUAKAPswDANBgkqhkiG9w0BAQsFAAOC
AQEAOUNv5KXpe7+vVX7gUDdC6SUOqZ0Ix6w2tL0ISU6qZ19MLNr+bYQ6jBomwD2d
Jqx1rzWka2ShXplz4WijRAFOsW5Fr3hBeElPZE/5oFjo9Muu3Bf2axHi8DZM8Qjx
fyfSXaBFgOuKu9KnylLMYbjWM8j4TRbQdsxHsYzMmO7dW3cx+FXmmaVkprsrk8Hc
zf9eACwwb1uMS0pW6/4rc8ZVQvqlEtSPJcWtQQOerJJ6oGLdeq9yEzZMfKnnEA2K
oozVlm7748ChH6C04LPu6W24PksdBh6NJDNhkyqjs3Q2WutyLiMGW8XvPgug7OqP
hoEPurnm2qKufsAsNx8Wd2LSTQ==
-----END CERTIFICATE-----