Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/0fd9e777f4b6efbd194a84adf346e3b434b3e668.roa
File:                     0fd9e777f4b6efbd194a84adf346e3b434b3e668.roa (raw, json)
Hash identifier:          b/qDijbTwdTWer+P6zN5huoPnQsBa+egBS4IY3EivqY=
Subject key identifier:   F3:7D:23:A5:76:AA:AA:83:46:A6:32:B5:88:A1:51:85:70:00:9F:18
Certificate issuer:       /CN=bd9e7183ffaa02803fe68e22a1e77851adb2eb28
Certificate serial:       0D4A92
Authority key identifier: EA:6A:E3:33:73:C2:63:42:3A:F7:72:55:2C:65:79:D6:C9:B2:02:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/0fd9e777f4b6efbd194a84adf346e3b434b3e668.roa
Signing time:             Wed 24 Mar 2021 14:46:14 +0000
ROA not before:           Wed 24 Mar 2021 14:46:13 +0000
ROA not after:            Tue 24 Mar 2026 14:46:13 +0000
asID:                     266784
IP address blocks:        2803:a0::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871058 (0xd4a92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd9e7183ffaa02803fe68e22a1e77851adb2eb28
        Validity
            Not Before: Mar 24 14:46:13 2021 GMT
            Not After : Mar 24 14:46:13 2026 GMT
        Subject: CN=0fd9e777f4b6efbd194a84adf346e3b434b3e668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d6:0c:28:ae:4f:03:57:2d:81:ee:55:68:36:
                    8f:8a:62:43:08:6b:50:1f:a1:0b:00:b1:61:43:e2:
                    b0:4a:13:24:1a:e8:d0:bd:35:54:53:91:b1:22:19:
                    d0:2a:6d:f6:41:82:b3:ca:71:f1:36:6b:49:f1:34:
                    31:20:9e:5e:55:a9:1f:1d:00:75:f9:2e:74:f7:73:
                    5d:ae:c6:61:c1:bc:32:e4:be:7a:46:61:ac:ba:4e:
                    46:d1:10:a9:d2:2d:45:e3:71:29:62:5c:6a:73:e2:
                    61:e2:59:f5:a5:f7:ca:74:35:43:cd:ae:c9:0d:a1:
                    30:58:cb:38:ab:a2:81:59:ac:cf:b8:14:63:e1:7f:
                    7f:5c:d5:87:2c:b8:92:b2:1d:15:25:a8:ff:3f:f8:
                    33:6e:08:76:4a:3c:0e:4d:da:d9:1b:02:36:bf:41:
                    5d:56:3d:0c:8c:d7:05:14:48:f3:b0:c7:46:eb:c6:
                    a0:94:08:16:ee:3c:70:2a:2e:04:e4:3b:99:af:ca:
                    41:b3:f2:ee:cd:ed:10:80:56:41:85:43:32:d6:e5:
                    42:e1:74:37:3a:fe:5e:17:63:8c:28:d2:83:75:00:
                    59:d5:ca:82:cb:5b:0f:fe:33:29:cb:70:42:ea:9c:
                    59:69:04:8a:81:33:aa:ee:76:a2:00:3e:39:b0:9f:
                    00:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7D:23:A5:76:AA:AA:83:46:A6:32:B5:88:A1:51:85:70:00:9F:18
            X509v3 Authority Key Identifier:
                keyid:EA:6A:E3:33:73:C2:63:42:3A:F7:72:55:2C:65:79:D6:C9:B2:02:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/0fd9e777f4b6efbd194a84adf346e3b434b3e668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a0::/36

    Signature Algorithm: sha256WithRSAEncryption
         46:2a:9c:4d:69:17:20:5d:4e:f3:77:c3:b9:1b:34:6d:42:ea:
         ec:89:af:08:d9:47:8b:22:25:90:d9:b2:3d:6f:8f:bd:24:57:
         2d:a3:0e:a6:7f:80:eb:91:86:4d:7f:78:39:5f:b8:db:de:ca:
         a4:db:7d:16:fb:12:e1:e3:75:e2:b3:ca:72:f5:14:ff:d3:9a:
         e2:c2:0e:ec:ef:fe:c7:ca:fe:f2:94:5d:c5:a3:93:91:42:51:
         af:22:18:fe:d5:68:14:f8:8a:de:08:9e:80:74:87:11:57:ae:
         de:90:3e:08:22:48:41:85:6f:d0:5c:70:32:f3:f2:68:5d:15:
         4f:83:df:f1:9e:0a:ff:6b:ba:3b:4a:e6:ef:90:70:29:7f:b3:
         1a:91:e8:b5:a8:51:08:1e:3c:9a:07:49:89:e6:ef:79:2e:f5:
         50:a4:55:ee:6f:bc:e5:dd:c3:fb:7f:9a:11:fa:25:9c:ce:e7:
         8a:39:ae:7c:18:40:ae:ee:22:f0:c2:dc:9d:17:90:8b:68:6f:
         19:02:d4:c1:92:48:65:33:6a:b5:3b:d4:33:ee:13:d7:75:a7:
         75:95:40:36:1d:57:0d:95:cf:78:0e:1b:52:c1:b3:41:ca:a9:
         8b:e3:55:2f:da:27:2f:0f:33:10:dd:0e:7b:d4:d3:90:a9:5d:
         1b:1c:e7:fa
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDDUqSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJk
OWU3MTgzZmZhYTAyODAzZmU2OGUyMmExZTc3ODUxYWRiMmViMjgwHhcNMjEwMzI0
MTQ0NjEzWhcNMjYwMzI0MTQ0NjEzWjAzMTEwLwYDVQQDEygwZmQ5ZTc3N2Y0YjZl
ZmJkMTk0YTg0YWRmMzQ2ZTNiNDM0YjNlNjY4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxNYMKK5PA1ctge5VaDaPimJDCGtQH6ELALFhQ+KwShMkGujQ
vTVUU5GxIhnQKm32QYKzynHxNmtJ8TQxIJ5eVakfHQB1+S5093NdrsZhwbwy5L56
RmGsuk5G0RCp0i1F43EpYlxqc+Jh4ln1pffKdDVDza7JDaEwWMs4q6KBWazPuBRj
4X9/XNWHLLiSsh0VJaj/P/gzbgh2SjwOTdrZGwI2v0FdVj0MjNcFFEjzsMdG68ag
lAgW7jxwKi4E5DuZr8pBs/Luze0QgFZBhUMy1uVC4XQ3Ov5eF2OMKNKDdQBZ1cqC
y1sP/jMpy3BC6pxZaQSKgTOq7naiAD45sJ8AHQIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFPN9I6V2qqqDRqYytYihUYVwAJ8YMB8GA1UdIwQYMBaAFOpq4zNzwmNCOvdy
VSxledbJsgKxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmQ5ZTcx
ODNmZmFhMDI4MDNmZTY4ZTIyYTFlNzc4NTFhZGIyZWIyOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzZiOWU3ZDQtMWIwNi00ZmY2LWE4OTYtOGJjOTVl
ZWU4NTJkLzBmZDllNzc3ZjRiNmVmYmQxOTRhODRhZGYzNDZlM2I0MzRiM2U2Njgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNmI5ZTdkNC0xYjA2LTRmZjYtYTg5Ni04YmM5
NWVlZTg1MmQvYmQ5ZTcxODNmZmFhMDI4MDNmZTY4ZTIyYTFlNzc4NTFhZGIyZWIy
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGBCgDAKAAMA0GCSqGSIb3DQEBCwUAA4IBAQBGKpxNaRcgXU7z
d8O5GzRtQursia8I2UeLIiWQ2bI9b4+9JFctow6mf4DrkYZNf3g5X7jb3sqk230W
+xLh43Xis8py9RT/05riwg7s7/7Hyv7ylF3Fo5ORQlGvIhj+1WgU+IreCJ6AdIcR
V67ekD4IIkhBhW/QXHAy8/JoXRVPg9/xngr/a7o7SubvkHApf7Makei1qFEIHjya
B0mJ5u95LvVQpFXub7zl3cP7f5oR+iWczueKOa58GECu7iLwwtydF5CLaG8ZAtTB
kkhlM2q1O9Qz7hPXdad1lUA2HVcNlc94DhtSwbNByqmL41Uv2icvDzMQ3Q571NOQ
qV0bHOf6
-----END CERTIFICATE-----