Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/82e0f113457090bf75f8fae9dcff30aee3a01cde.roa
File:                     82e0f113457090bf75f8fae9dcff30aee3a01cde.roa (raw, json)
Hash identifier:          fU4ZLxlBlwkaS4sBP5NIG0+ymT56fztqGBsTGlBLfgk=
Subject key identifier:   14:4B:5A:D6:5D:E4:05:CC:B6:D6:DD:42:B1:A2:CD:3E:E3:BC:C7:5A
Certificate issuer:       /CN=9e6663fb5d62a6c45845d461b066de1127b3e069
Certificate serial:       0BFBB9
Authority key identifier: 4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/82e0f113457090bf75f8fae9dcff30aee3a01cde.roa
Signing time:             Wed 24 Mar 2021 14:30:12 +0000
ROA not before:           Wed 24 Mar 2021 14:30:12 +0000
ROA not after:            Tue 24 Mar 2026 14:30:12 +0000
asID:                     52436
IP address blocks:        168.196.32.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785337 (0xbfbb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e6663fb5d62a6c45845d461b066de1127b3e069
        Validity
            Not Before: Mar 24 14:30:12 2021 GMT
            Not After : Mar 24 14:30:12 2026 GMT
        Subject: CN=82e0f113457090bf75f8fae9dcff30aee3a01cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0e:1b:39:56:f7:95:6b:cd:f8:85:1b:05:4a:
                    2c:16:33:30:2f:e9:a0:20:8a:d9:e2:6f:eb:ee:40:
                    53:5d:70:2e:24:3d:b9:7e:d4:0d:ac:d2:5f:ba:03:
                    40:94:56:f6:5e:6f:99:83:8f:9a:5f:a5:ae:4e:68:
                    93:18:8e:62:9a:ed:28:06:34:40:7d:58:79:ed:39:
                    45:7b:cb:5d:13:61:29:e4:9f:cc:4b:66:f8:76:4e:
                    08:b8:5d:6d:00:fd:70:d3:a2:4b:92:9f:6b:e9:4f:
                    f0:97:6e:69:4c:d4:b3:4c:fc:83:ac:89:70:86:a8:
                    4a:00:86:3c:af:80:ab:2a:c3:cb:80:23:de:28:18:
                    8a:84:c4:cd:49:55:e4:3a:b9:98:28:f4:64:53:f1:
                    40:94:cc:d7:8d:63:83:c3:ff:8c:23:11:34:ef:df:
                    a2:2c:d8:ed:90:e9:24:21:3a:c5:90:46:d0:ed:7c:
                    1e:e3:57:ca:b1:ae:d5:5b:4c:87:d1:b9:db:9a:6f:
                    03:fc:b2:2a:7f:ff:34:89:fa:77:b9:08:c2:1c:00:
                    93:4f:32:9d:0d:c5:48:b8:51:f6:b7:74:a3:db:dc:
                    70:b7:44:0c:5b:9c:19:48:c2:72:3e:ad:74:e1:49:
                    79:27:9f:83:c1:8e:5b:e5:aa:64:1c:2b:5e:61:00:
                    f2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4B:5A:D6:5D:E4:05:CC:B6:D6:DD:42:B1:A2:CD:3E:E3:BC:C7:5A
            X509v3 Authority Key Identifier:
                keyid:4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/82e0f113457090bf75f8fae9dcff30aee3a01cde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/9e6663fb5d62a6c45845d461b066de1127b3e069.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:2d:c0:8b:cb:81:70:38:5f:d0:ad:aa:07:57:0c:b1:97:d5:
         eb:49:d1:a1:8c:45:8f:61:28:1b:3a:e9:23:8c:77:ee:e2:60:
         4c:01:b0:cb:4f:47:9d:5c:06:cb:bc:b2:68:f8:6a:38:b4:de:
         fc:f7:72:d4:27:47:a4:24:8f:16:2c:12:39:84:56:2d:8c:a7:
         49:37:7f:e8:b7:5f:99:26:4c:bc:f1:11:b1:86:60:9c:19:58:
         79:5d:8b:f0:be:cb:bb:3a:46:93:68:49:0b:e5:06:2c:5a:4f:
         e0:ab:99:34:47:47:13:4f:85:fd:cd:86:26:a4:62:8c:ad:af:
         cb:9b:0d:b9:c6:a0:db:cc:88:b5:e7:6b:f2:b2:48:d3:ac:09:
         b6:d0:ca:a4:2f:c4:04:f5:ff:e1:7f:d2:c7:4e:f2:50:14:2a:
         d6:b2:fe:30:71:39:57:b6:a6:12:2b:48:b9:16:9e:5d:1f:7a:
         05:b0:be:f9:8f:d1:9d:39:15:5d:28:5d:40:f9:e0:da:7c:05:
         59:cd:76:12:4f:9d:ed:28:2c:c7:c3:df:22:c1:0a:6c:14:94:
         de:21:1a:86:40:3b:62:5e:87:fc:30:b6:c8:53:72:30:c7:f8:
         9e:a7:8c:8a:ce:6a:53:b8:00:83:a8:43:51:46:d4:ba:58:fd:
         b5:cb:da:b8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC/u5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDll
NjY2M2ZiNWQ2MmE2YzQ1ODQ1ZDQ2MWIwNjZkZTExMjdiM2UwNjkwHhcNMjEwMzI0
MTQzMDEyWhcNMjYwMzI0MTQzMDEyWjAzMTEwLwYDVQQDEyg4MmUwZjExMzQ1NzA5
MGJmNzVmOGZhZTlkY2ZmMzBhZWUzYTAxY2RlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1w4bOVb3lWvN+IUbBUosFjMwL+mgIIrZ4m/r7kBTXXAuJD25
ftQNrNJfugNAlFb2Xm+Zg4+aX6WuTmiTGI5imu0oBjRAfVh57TlFe8tdE2Ep5J/M
S2b4dk4IuF1tAP1w06JLkp9r6U/wl25pTNSzTPyDrIlwhqhKAIY8r4CrKsPLgCPe
KBiKhMTNSVXkOrmYKPRkU/FAlMzXjWODw/+MIxE079+iLNjtkOkkITrFkEbQ7Xwe
41fKsa7VW0yH0bnbmm8D/LIqf/80ifp3uQjCHACTTzKdDcVIuFH2t3Sj29xwt0QM
W5wZSMJyPq104Ul5J5+DwY5b5apkHCteYQDywQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBRLWtZd5AXMttbdQrGizT7jvMdaMB8GA1UdIwQYMBaAFE762/rMCWR6WNc6
yjRIk1JTzAtSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWU2NjYz
ZmI1ZDYyYTZjNDU4NDVkNDYxYjA2NmRlMTEyN2IzZTA2OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzg1NTIwZTYtMWY5OC00OTZiLThkOWUtMTVkZjll
MDc3MmNlLzgyZTBmMTEzNDU3MDkwYmY3NWY4ZmFlOWRjZmYzMGFlZTNhMDFjZGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODU1MjBlNi0xZjk4LTQ5NmItOGQ5ZS0xNWRm
OWUwNzcyY2UvOWU2NjYzZmI1ZDYyYTZjNDU4NDVkNDYxYjA2NmRlMTEyN2IzZTA2
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAajEIDANBgkqhkiG9w0BAQsFAAOCAQEAAS3Ai8uBcDhf0K2q
B1cMsZfV60nRoYxFj2EoGzrpI4x37uJgTAGwy09HnVwGy7yyaPhqOLTe/Pdy1CdH
pCSPFiwSOYRWLYynSTd/6LdfmSZMvPERsYZgnBlYeV2L8L7LuzpGk2hJC+UGLFpP
4KuZNEdHE0+F/c2GJqRijK2vy5sNucag28yItedr8rJI06wJttDKpC/EBPX/4X/S
x07yUBQq1rL+MHE5V7amEitIuRaeXR96BbC++Y/RnTkVXShdQPng2nwFWc12Ek+d
7Sgsx8PfIsEKbBSU3iEahkA7Yl6H/DC2yFNyMMf4nqeMis5qU7gAg6hDUUbUulj9
tcvauA==
-----END CERTIFICATE-----