Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3cbe16d0-3f76-49f1-a2bc-ac6a6c2dd4be/e0ea7c4b1cabd635d47d0bbe0a1df97e2bd88743.roa
File:                     e0ea7c4b1cabd635d47d0bbe0a1df97e2bd88743.roa (raw, json)
Hash identifier:          3aSMXTbbXzDdNzY4nw/yQQCC8NiHRUUewG0p++pqCTg=
Subject key identifier:   22:54:A6:3B:1B:85:CF:DF:78:A2:3C:3B:58:39:1F:F7:8F:02:57:9B
Certificate issuer:       /CN=6b09d9684795d8fdec4bb4afe6ca536e0a856f30
Certificate serial:       1D8A
Authority key identifier: E6:B5:8F:28:11:C5:2A:8B:44:B3:F3:77:C5:FD:0E:72:1A:99:DA:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b09d9684795d8fdec4bb4afe6ca536e0a856f30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3cbe16d0-3f76-49f1-a2bc-ac6a6c2dd4be/e0ea7c4b1cabd635d47d0bbe0a1df97e2bd88743.roa
Signing time:             Mon 03 Oct 2022 17:39:48 +0000
ROA not before:           Mon 03 Oct 2022 17:34:36 +0000
ROA not after:            Thu 03 Oct 2024 18:34:36 +0000
asID:                     267735
IP address blocks:        45.167.88.0/22 maxlen: 24
                          2803:da0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7562 (0x1d8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b09d9684795d8fdec4bb4afe6ca536e0a856f30
        Validity
            Not Before: Oct  3 17:34:36 2022 GMT
            Not After : Oct  3 18:34:36 2024 GMT
        Subject: CN=e0ea7c4b1cabd635d47d0bbe0a1df97e2bd88743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3e:f8:be:0b:a4:4e:13:1d:68:f5:b3:d0:87:
                    74:85:35:1e:00:d5:05:84:94:a1:18:f9:1b:ae:42:
                    ac:36:c3:de:ac:69:36:67:f9:7e:83:27:6e:61:5c:
                    e6:95:7a:b8:d4:e2:5e:8e:60:94:ea:b1:32:82:2c:
                    eb:81:99:1c:e9:20:64:3c:75:1b:bc:e3:b9:f2:b4:
                    0e:cb:dd:d8:98:b9:4a:20:e5:97:08:83:3d:0d:a4:
                    5c:80:2a:63:3b:30:77:9f:a4:df:30:37:e5:b0:2a:
                    4b:45:13:6c:f0:c3:f1:ea:29:46:2c:09:f9:58:d2:
                    73:ad:44:d8:ba:93:e3:64:a1:fd:09:3d:cf:1f:37:
                    48:4f:36:41:55:cd:c5:ac:db:a8:d6:e5:4d:af:7e:
                    b4:b8:1b:61:e9:33:2c:20:5c:f3:52:63:1f:07:4f:
                    d1:e8:4a:ae:cb:31:4e:16:a4:19:19:85:4b:11:48:
                    b8:1f:ee:9f:f6:61:27:0b:5a:c8:e3:c7:10:92:12:
                    31:9e:fb:d7:02:68:69:95:e4:7b:25:d5:3f:e9:6f:
                    11:c5:e1:50:91:94:08:2b:49:84:4a:a9:f0:67:8e:
                    b0:73:27:d8:29:bc:48:1f:76:9b:81:d8:e5:d1:87:
                    02:8c:53:2f:fb:46:d1:55:0b:09:e2:03:3c:92:39:
                    a9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:54:A6:3B:1B:85:CF:DF:78:A2:3C:3B:58:39:1F:F7:8F:02:57:9B
            X509v3 Authority Key Identifier:
                keyid:E6:B5:8F:28:11:C5:2A:8B:44:B3:F3:77:C5:FD:0E:72:1A:99:DA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b09d9684795d8fdec4bb4afe6ca536e0a856f30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3cbe16d0-3f76-49f1-a2bc-ac6a6c2dd4be/e0ea7c4b1cabd635d47d0bbe0a1df97e2bd88743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3cbe16d0-3f76-49f1-a2bc-ac6a6c2dd4be/6b09d9684795d8fdec4bb4afe6ca536e0a856f30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.88.0/22
                IPv6:
                  2803:da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:55:d0:89:ee:b4:01:5e:2a:0a:71:4f:c5:99:12:30:1a:3f:
         f5:dd:f6:43:08:08:2f:2e:61:3c:35:69:37:42:7f:5d:0d:6a:
         e6:d3:3d:b6:0e:3e:bf:9a:88:4e:ad:a5:e6:73:aa:d3:ac:8d:
         94:23:02:94:02:6d:ab:92:cf:45:52:2a:0a:0c:09:57:42:b2:
         18:c7:ab:1f:98:84:95:96:d2:92:27:84:75:b4:69:78:b4:d0:
         f9:9e:76:bd:39:87:ca:3c:35:18:dc:72:6f:9e:51:68:44:3c:
         25:c4:b6:cd:61:8a:f8:8d:56:7f:9a:e4:ec:70:36:13:37:e1:
         91:b5:38:90:2d:3c:2d:06:28:fd:94:8a:a9:e9:e5:77:fb:4a:
         47:4f:a5:b1:f9:78:70:67:94:73:18:c5:7e:45:67:77:7e:ef:
         66:0f:76:39:af:d8:d9:e6:a6:e7:4a:a7:ba:ea:c0:e7:9d:44:
         47:99:ea:93:24:77:6a:11:c1:40:99:1c:18:ab:cc:49:39:6d:
         2f:83:b2:13:18:68:cd:16:04:13:08:d6:27:e2:5c:c0:fb:43:
         59:97:d4:d5:37:49:aa:43:df:59:db:76:91:db:e6:2a:0c:13:
         bb:bd:7b:a4:c5:fc:d3:ce:6f:39:84:d5:dd:c8:f0:23:18:51:
         b9:3b:04:26
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICHYowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNmIw
OWQ5Njg0Nzk1ZDhmZGVjNGJiNGFmZTZjYTUzNmUwYTg1NmYzMDAeFw0yMjEwMDMx
NzM0MzZaFw0yNDEwMDMxODM0MzZaMDMxMTAvBgNVBAMTKGUwZWE3YzRiMWNhYmQ2
MzVkNDdkMGJiZTBhMWRmOTdlMmJkODg3NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpPvi+C6ROEx1o9bPQh3SFNR4A1QWElKEY+RuuQqw2w96saTZn
+X6DJ25hXOaVerjU4l6OYJTqsTKCLOuBmRzpIGQ8dRu847nytA7L3diYuUog5ZcI
gz0NpFyAKmM7MHefpN8wN+WwKktFE2zww/HqKUYsCflY0nOtRNi6k+Nkof0JPc8f
N0hPNkFVzcWs26jW5U2vfrS4G2HpMywgXPNSYx8HT9HoSq7LMU4WpBkZhUsRSLgf
7p/2YScLWsjjxxCSEjGe+9cCaGmV5Hsl1T/pbxHF4VCRlAgrSYRKqfBnjrBzJ9gp
vEgfdpuB2OXRhwKMUy/7RtFVCwniAzySOalJAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUIlSmOxuFz994ojw7WDkf948CV5swHwYDVR0jBBgwFoAU5rWPKBHFKotEs/N3
xf0OchqZ2sgwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS82YjA5ZDk2
ODQ3OTVkOGZkZWM0YmI0YWZlNmNhNTM2ZTBhODU2ZjMwLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8zY2JlMTZkMC0zZjc2LTQ5ZjEtYTJiYy1hYzZhNmMy
ZGQ0YmUvZTBlYTdjNGIxY2FiZDYzNWQ0N2QwYmJlMGExZGY5N2UyYmQ4ODc0My5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzNjYmUxNmQwLTNmNzYtNDlmMS1hMmJjLWFjNmE2
YzJkZDRiZS82YjA5ZDk2ODQ3OTVkOGZkZWM0YmI0YWZlNmNhNTM2ZTBhODU2ZjMw
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCLadYMA0EAgACMAcDBQAoAw2gMA0GCSqGSIb3DQEBCwUAA4IB
AQCiVdCJ7rQBXioKcU/FmRIwGj/13fZDCAgvLmE8NWk3Qn9dDWrm0z22Dj6/mohO
raXmc6rTrI2UIwKUAm2rks9FUioKDAlXQrIYx6sfmISVltKSJ4R1tGl4tND5nna9
OYfKPDUY3HJvnlFoRDwlxLbNYYr4jVZ/muTscDYTN+GRtTiQLTwtBij9lIqp6eV3
+0pHT6Wx+XhwZ5RzGMV+RWd3fu9mD3Y5r9jZ5qbnSqe66sDnnURHmeqTJHdqEcFA
mRwYq8xJOW0vg7ITGGjNFgQTCNYn4lzA+0NZl9TVN0mqQ99Z23aR2+YqDBO7vXuk
xfzTzm85hNXdyPAjGFG5OwQm
-----END CERTIFICATE-----