Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/cf2845cffbbe4e831fd2641846e849b395235632.roa
File:                     cf2845cffbbe4e831fd2641846e849b395235632.roa (raw, json)
Hash identifier:          bR0SisBNBXWt0Orm+iLuntQAYf7PDoGiFoGqzSg6CQg=
Subject key identifier:   90:A2:3F:80:E9:13:8A:DC:CD:FF:8B:5B:EA:9F:DE:C8:CA:17:FB:FB
Certificate issuer:       /CN=44185224cf7ca78dbccca01419f06c7cc212b495
Certificate serial:       18C2AD
Authority key identifier: DF:52:89:92:E5:35:F4:ED:70:12:21:8E:36:98:5F:3C:90:1E:32:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44185224cf7ca78dbccca01419f06c7cc212b495.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/cf2845cffbbe4e831fd2641846e849b395235632.roa
Signing time:             Fri 17 Jun 2022 17:51:15 +0000
ROA not before:           Fri 17 Jun 2022 03:00:00 +0000
ROA not after:            Mon 17 Jun 2024 03:00:00 +0000
asID:                     47869
IP address blocks:        138.36.16.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1622701 (0x18c2ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44185224cf7ca78dbccca01419f06c7cc212b495
        Validity
            Not Before: Jun 17 03:00:00 2022 GMT
            Not After : Jun 17 03:00:00 2024 GMT
        Subject: CN=cf2845cffbbe4e831fd2641846e849b395235632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4d:13:c6:56:e2:3f:2d:61:f7:cd:10:0b:bc:
                    0f:42:ac:a6:ff:3c:66:55:65:c4:6c:fc:d3:77:6d:
                    c6:07:f6:e1:ba:69:61:2f:0c:22:a7:26:5a:19:c5:
                    92:99:85:a7:31:e1:c4:8e:3f:4e:6e:cd:1a:07:78:
                    14:0c:7d:4f:0f:ca:96:dd:16:d5:ff:dd:d9:60:c8:
                    00:c4:3e:b1:eb:31:49:c6:3a:65:86:5f:21:a9:a7:
                    63:43:30:01:bc:06:af:45:98:a7:8d:2f:2a:e6:00:
                    2d:cd:ba:37:9a:c8:28:aa:8c:80:19:d4:b1:e6:15:
                    18:9e:6f:21:28:1f:3d:62:e0:a0:7b:8d:51:6b:92:
                    79:9d:b4:eb:6d:04:0a:7b:49:27:66:54:43:50:97:
                    0a:9c:88:b4:db:c3:0b:90:b6:fa:f1:42:20:23:94:
                    86:d2:5a:c0:6b:b1:bc:f6:58:36:28:44:7c:d0:fd:
                    fc:af:eb:ce:e6:cd:38:5b:88:27:f6:71:cf:db:46:
                    e5:ee:9b:82:61:92:4c:9a:8f:66:af:8d:8a:01:0a:
                    97:d8:cf:73:01:cc:77:09:d6:59:66:b5:0c:89:aa:
                    20:7d:ea:f4:d5:db:89:05:9d:8a:b1:9c:46:14:53:
                    48:2b:11:4e:79:a5:6e:34:4a:a6:22:2a:9b:65:a1:
                    0f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A2:3F:80:E9:13:8A:DC:CD:FF:8B:5B:EA:9F:DE:C8:CA:17:FB:FB
            X509v3 Authority Key Identifier:
                keyid:DF:52:89:92:E5:35:F4:ED:70:12:21:8E:36:98:5F:3C:90:1E:32:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44185224cf7ca78dbccca01419f06c7cc212b495.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/cf2845cffbbe4e831fd2641846e849b395235632.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/44185224cf7ca78dbccca01419f06c7cc212b495.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:06:c4:1b:a6:e4:ff:6c:fb:4c:48:0d:ea:fb:33:ef:40:ee:
         dd:f7:f0:d4:7b:d4:e6:51:27:97:98:50:30:78:ae:48:22:e7:
         7b:dc:b3:26:a7:8f:7a:be:80:f9:18:19:17:fe:ec:51:73:1a:
         2e:7a:aa:5d:f4:f6:58:0f:0c:2a:30:43:1c:e6:d7:e6:f1:74:
         a7:75:47:e6:b2:1a:fd:28:0e:40:cb:21:95:7e:d2:00:54:4b:
         a1:a6:d8:48:7e:be:dc:03:ed:cc:92:48:40:0f:40:2f:21:55:
         cc:ca:41:e1:0f:98:85:37:d7:7a:1a:28:94:ea:4b:e3:79:47:
         ca:b1:88:09:38:83:ea:4a:35:74:1b:bd:74:2c:20:17:c0:54:
         97:6e:cb:cd:35:c4:88:2e:58:e3:8a:a2:34:f9:05:69:58:55:
         eb:16:12:66:b7:21:2d:7c:e0:38:a0:89:08:fc:cf:56:bc:fe:
         a3:bd:1f:d4:e0:71:56:67:9a:b4:19:d0:56:2c:d4:3b:68:90:
         ba:ca:6f:f2:0b:0f:26:f2:36:2b:3a:f7:c2:e9:c6:f1:83:15:
         7d:35:61:a3:0e:a9:08:75:c7:90:9a:b4:af:85:8b:5b:94:d3:
         5c:09:fd:ee:97:1a:84:54:1a:9b:5b:e4:64:d9:58:60:48:e6:
         4a:f6:ec:2c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGMKtMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ0
MTg1MjI0Y2Y3Y2E3OGRiY2NjYTAxNDE5ZjA2YzdjYzIxMmI0OTUwHhcNMjIwNjE3
MDMwMDAwWhcNMjQwNjE3MDMwMDAwWjAzMTEwLwYDVQQDEyhjZjI4NDVjZmZiYmU0
ZTgzMWZkMjY0MTg0NmU4NDliMzk1MjM1NjMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmk0TxlbiPy1h980QC7wPQqym/zxmVWXEbPzTd23GB/bhumlh
LwwipyZaGcWSmYWnMeHEjj9Obs0aB3gUDH1PD8qW3RbV/93ZYMgAxD6x6zFJxjpl
hl8hqadjQzABvAavRZinjS8q5gAtzbo3msgoqoyAGdSx5hUYnm8hKB89YuCge41R
a5J5nbTrbQQKe0knZlRDUJcKnIi028MLkLb68UIgI5SG0lrAa7G89lg2KER80P38
r+vO5s04W4gn9nHP20bl7puCYZJMmo9mr42KAQqX2M9zAcx3CdZZZrUMiaogfer0
1duJBZ2KsZxGFFNIKxFOeaVuNEqmIiqbZaEPOwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJCiP4DpE4rczf+LW+qf3sjKF/v7MB8GA1UdIwQYMBaAFN9SiZLlNfTtcBIh
jjaYXzyQHjIgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDQxODUy
MjRjZjdjYTc4ZGJjY2NhMDE0MTlmMDZjN2NjMjEyYjQ5NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGExYTE2NTItNTQ5OS00ODdmLThiOTctMWExMmVm
MjdkOWQ2L2NmMjg0NWNmZmJiZTRlODMxZmQyNjQxODQ2ZTg0OWIzOTUyMzU2MzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80YTFhMTY1Mi01NDk5LTQ4N2YtOGI5Ny0xYTEy
ZWYyN2Q5ZDYvNDQxODUyMjRjZjdjYTc4ZGJjY2NhMDE0MTlmMDZjN2NjMjEyYjQ5
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAookEDANBgkqhkiG9w0BAQsFAAOCAQEAlAbEG6bk/2z7TEgN
6vsz70Du3ffw1HvU5lEnl5hQMHiuSCLne9yzJqePer6A+RgZF/7sUXMaLnqqXfT2
WA8MKjBDHObX5vF0p3VH5rIa/SgOQMshlX7SAFRLoabYSH6+3APtzJJIQA9ALyFV
zMpB4Q+YhTfXehoolOpL43lHyrGICTiD6ko1dBu9dCwgF8BUl27LzTXEiC5Y44qi
NPkFaVhV6xYSZrchLXzgOKCJCPzPVrz+o70f1OBxVmeatBnQVizUO2iQuspv8gsP
JvI2Kzr3wunG8YMVfTVhow6pCHXHkJq0r4WLW5TTXAn97pcahFQam1vkZNlYYEjm
SvbsLA==
-----END CERTIFICATE-----