Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/10f64fc21da841671fb8abf6daef39fd3ed00eb6.roa
File:                     10f64fc21da841671fb8abf6daef39fd3ed00eb6.roa (raw, json)
Hash identifier:          /lXeNbHdTC3/6iyvgRg5M/ENghknkvSa4PlZvExHYjE=
Subject key identifier:   A6:13:EA:E7:CF:4E:E2:F0:62:17:2F:DB:65:7D:27:4A:54:39:BE:FE
Certificate issuer:       /CN=145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8
Certificate serial:       0D00DD
Authority key identifier: AB:5B:47:C3:F1:02:51:0A:B1:09:C5:03:CA:A3:E9:AD:7D:61:47:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/10f64fc21da841671fb8abf6daef39fd3ed00eb6.roa
Signing time:             Wed 24 Mar 2021 14:39:49 +0000
ROA not before:           Wed 24 Mar 2021 14:39:47 +0000
ROA not after:            Tue 24 Mar 2026 14:39:47 +0000
asID:                     19582
IP address blocks:        200.115.32.0/20 maxlen: 24
                          2803:8300::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 19 Feb 2024 16:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852189 (0xd00dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8
        Validity
            Not Before: Mar 24 14:39:47 2021 GMT
            Not After : Mar 24 14:39:47 2026 GMT
        Subject: CN=10f64fc21da841671fb8abf6daef39fd3ed00eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c1:73:0c:59:79:8a:57:c2:59:3f:07:8b:38:
                    1e:6d:ad:1b:f7:be:15:0b:a5:54:1b:06:10:86:fc:
                    a7:bf:36:70:28:3b:c0:2d:9b:16:f9:24:81:44:24:
                    a0:83:55:89:25:e9:b2:5a:64:9c:03:97:26:d7:8d:
                    96:92:41:8e:51:4b:3d:e1:30:c8:0a:18:3c:8c:8a:
                    b3:c8:6c:6a:f5:d2:be:01:0a:5d:02:53:df:e8:48:
                    d0:75:da:9b:40:6a:24:f6:d9:23:5f:21:ca:ba:1f:
                    4c:2f:52:1a:c6:36:1e:29:7c:50:16:f0:0f:78:2d:
                    19:3e:45:38:07:28:e5:98:e6:a7:7c:bc:e5:f2:d0:
                    26:76:e0:fb:70:ce:5a:c9:cb:e8:67:6d:2b:c8:c5:
                    26:37:64:f0:20:b6:31:6d:d7:e4:8e:42:70:ef:b2:
                    ee:b7:9d:a9:37:f8:cf:23:36:94:cb:1c:0a:91:7f:
                    b7:c8:10:1f:76:26:cf:9d:8f:ee:bf:5b:1b:56:97:
                    c0:1f:f2:98:0a:32:d1:51:e4:ea:87:ad:65:d6:cd:
                    fa:06:f0:cb:e3:6e:47:1b:5f:6b:ed:15:1e:13:98:
                    97:56:e0:cd:eb:53:ad:e4:a0:90:84:d3:40:79:d0:
                    58:89:cd:5d:ad:c9:b5:a5:43:28:43:55:e9:d9:a2:
                    71:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:13:EA:E7:CF:4E:E2:F0:62:17:2F:DB:65:7D:27:4A:54:39:BE:FE
            X509v3 Authority Key Identifier:
                keyid:AB:5B:47:C3:F1:02:51:0A:B1:09:C5:03:CA:A3:E9:AD:7D:61:47:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/10f64fc21da841671fb8abf6daef39fd3ed00eb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.32.0/20
                IPv6:
                  2803:8300::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:06:3e:c9:81:3f:9b:71:2a:5b:d3:fd:87:84:07:b5:10:f5:
         76:ad:0c:1f:33:99:bd:8c:e6:54:80:15:8b:12:d2:42:04:7e:
         b2:03:67:88:ce:5f:d5:3b:45:da:4e:10:2c:38:0d:3f:df:fa:
         95:e8:8b:fd:31:98:84:6a:52:fb:fc:31:7e:e8:66:2e:e4:c2:
         bd:ce:f6:f6:a6:39:1f:7b:50:0c:96:64:ec:66:42:f7:2c:32:
         f4:7d:c6:92:63:0d:80:f7:2a:41:b4:cb:a8:2d:e2:80:ff:7b:
         81:4a:30:0e:c8:6f:e0:0f:61:5b:51:27:fb:e8:55:b1:10:8b:
         40:97:c2:e6:75:e3:b9:36:f9:ed:52:43:43:52:c0:d5:bd:3c:
         7e:7b:95:b2:2e:c9:65:e9:7c:88:ac:80:dd:8a:bd:93:61:50:
         44:c1:85:82:32:3a:38:1c:92:bb:99:96:38:eb:48:08:88:34:
         81:6b:d1:8d:8d:55:94:d1:d1:95:3f:95:65:ab:60:96:54:68:
         0f:91:be:1a:67:27:4f:42:0f:e0:c8:cc:26:06:44:49:fc:4a:
         e0:df:d2:2c:0e:a3:d4:24:18:45:90:00:16:f6:88:cd:e8:23:
         b3:20:4f:52:32:5b:be:49:8a:10:79:3c:bc:9c:62:a1:1a:19:
         3f:86:ec:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDQDdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE0
NWExN2RjY2Q4YTU0YTc0ZGE4MmYxY2E3ZWFjOWMyYzU1Y2UxZDgwHhcNMjEwMzI0
MTQzOTQ3WhcNMjYwMzI0MTQzOTQ3WjAzMTEwLwYDVQQDEygxMGY2NGZjMjFkYTg0
MTY3MWZiOGFiZjZkYWVmMzlmZDNlZDAwZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjcFzDFl5ilfCWT8Hizgeba0b974VC6VUGwYQhvynvzZwKDvA
LZsW+SSBRCSgg1WJJemyWmScA5cm142WkkGOUUs94TDIChg8jIqzyGxq9dK+AQpd
AlPf6EjQddqbQGok9tkjXyHKuh9ML1IaxjYeKXxQFvAPeC0ZPkU4ByjlmOanfLzl
8tAmduD7cM5aycvoZ20ryMUmN2TwILYxbdfkjkJw77Lut52pN/jPIzaUyxwKkX+3
yBAfdibPnY/uv1sbVpfAH/KYCjLRUeTqh61l1s36BvDL425HG19r7RUeE5iXVuDN
61Ot5KCQhNNAedBYic1drcm1pUMoQ1Xp2aJxUQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFKYT6ufPTuLwYhcv22V9J0pUOb7+MB8GA1UdIwQYMBaAFKtbR8PxAlEKsQnF
A8qj6a19YUfvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTQ1YTE3
ZGNjZDhhNTRhNzRkYTgyZjFjYTdlYWM5YzJjNTVjZTFkOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDZmNWRmYzctMzkxOC00YTBhLTk1MDctMTU5OThh
MWQ2OWFhLzEwZjY0ZmMyMWRhODQxNjcxZmI4YWJmNmRhZWYzOWZkM2VkMDBlYjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NmY1ZGZjNy0zOTE4LTRhMGEtOTUwNy0xNTk5
OGExZDY5YWEvMTQ1YTE3ZGNjZDhhNTRhNzRkYTgyZjFjYTdlYWM5YzJjNTVjZTFk
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEBMhzIDANBAIAAjAHAwUAKAODADANBgkqhkiG9w0BAQsFAAOC
AQEAHwY+yYE/m3EqW9P9h4QHtRD1dq0MHzOZvYzmVIAVixLSQgR+sgNniM5f1TtF
2k4QLDgNP9/6leiL/TGYhGpS+/wxfuhmLuTCvc729qY5H3tQDJZk7GZC9ywy9H3G
kmMNgPcqQbTLqC3igP97gUowDshv4A9hW1En++hVsRCLQJfC5nXjuTb57VJDQ1LA
1b08fnuVsi7JZel8iKyA3Yq9k2FQRMGFgjI6OBySu5mWOOtICIg0gWvRjY1VlNHR
lT+VZatgllRoD5G+GmcnT0IP4MjMJgZESfxK4N/SLA6j1CQYRZAAFvaIzegjsyBP
UjJbvkmKEHk8vJxioRoZP4bsVg==
-----END CERTIFICATE-----