Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/ecfd91e107c739ed0b01ee21951b13c2e5857d25.roa
File:                     ecfd91e107c739ed0b01ee21951b13c2e5857d25.roa (raw, json)
Hash identifier:          bzaJvirnCsmpRoD1EfJWmvjqU8MaxtV3q30e/hnCWs8=
Subject key identifier:   F9:53:A2:F4:86:36:B9:0E:90:9C:DC:70:FE:C2:9D:74:E4:6B:93:C7
Certificate issuer:       /CN=6991426f0c0c7ac92da1d5129c9ec711a2a38a3a
Certificate serial:       0DDFAD
Authority key identifier: 55:7C:2D:2E:8D:B1:AA:A7:A7:7D:B1:29:5D:09:4A:92:0C:0D:CD:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6991426f0c0c7ac92da1d5129c9ec711a2a38a3a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/ecfd91e107c739ed0b01ee21951b13c2e5857d25.roa
Signing time:             Wed 12 May 2021 20:29:00 +0000
ROA not before:           Wed 12 May 2021 03:00:00 +0000
ROA not after:            Fri 12 May 2023 03:00:00 +0000
asID:                     52242
IP address blocks:        190.181.128.0/23 maxlen: 24
                          190.181.135.0/24 maxlen: 24
                          190.181.141.0/24 maxlen: 24
                          190.181.153.0/24 maxlen: 24
                          190.181.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 909229 (0xddfad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6991426f0c0c7ac92da1d5129c9ec711a2a38a3a
        Validity
            Not Before: May 12 03:00:00 2021 GMT
            Not After : May 12 03:00:00 2023 GMT
        Subject: CN=ecfd91e107c739ed0b01ee21951b13c2e5857d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:57:f6:2c:91:27:bf:8f:5a:18:77:32:0d:70:
                    3d:03:e8:4c:58:62:5d:d1:f8:4d:ec:63:06:7e:a5:
                    86:b8:73:a0:1b:e2:4e:97:80:7d:ee:f6:8b:71:a9:
                    12:80:d6:91:28:7a:2f:c0:cd:92:0e:d4:fc:7f:38:
                    e3:3e:69:ff:1a:e2:d2:09:89:3d:e6:ae:ae:3e:d8:
                    58:8c:48:a6:6f:f7:9a:fe:63:39:1a:61:d4:a9:c5:
                    0f:b3:7a:5d:fe:26:af:1b:cb:6b:af:35:f4:fc:16:
                    f8:50:73:11:1a:44:04:33:7d:d6:15:34:be:6e:4a:
                    30:fe:cc:6c:0b:93:02:01:3e:32:d8:27:80:5d:1c:
                    0e:7f:f8:94:3a:71:2c:cd:76:47:00:82:57:82:2a:
                    c9:ef:a5:c5:d4:15:b6:1b:e9:d7:49:16:46:05:e1:
                    0a:8a:df:d7:ff:71:05:e3:4e:3e:1b:29:a9:de:53:
                    3a:a2:0a:a1:d9:c0:cc:81:70:f7:d5:94:5c:18:8d:
                    66:c4:32:20:56:bb:ff:99:86:82:5f:57:1d:48:16:
                    76:6f:cd:e2:67:b2:99:43:b6:e2:e5:bc:3e:b9:d7:
                    73:d1:a3:c0:ce:db:7f:ac:50:00:00:3a:a7:93:81:
                    26:5f:28:51:67:bf:1d:41:69:d4:a0:f8:db:c7:fa:
                    13:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:53:A2:F4:86:36:B9:0E:90:9C:DC:70:FE:C2:9D:74:E4:6B:93:C7
            X509v3 Authority Key Identifier:
                keyid:55:7C:2D:2E:8D:B1:AA:A7:A7:7D:B1:29:5D:09:4A:92:0C:0D:CD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6991426f0c0c7ac92da1d5129c9ec711a2a38a3a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/ecfd91e107c739ed0b01ee21951b13c2e5857d25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/6991426f0c0c7ac92da1d5129c9ec711a2a38a3a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.128.0/23
                  190.181.135.0/24
                  190.181.141.0/24
                  190.181.153.0/24
                  190.181.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:b0:78:ba:59:03:95:31:09:81:2b:aa:f2:71:87:3d:9a:a8:
         12:2d:d4:f6:34:c5:7c:65:ce:6d:25:45:bd:c8:75:e7:b1:cf:
         18:ae:25:ef:35:5f:cd:02:7f:43:be:a7:70:fa:a8:42:dd:4f:
         b1:65:d2:29:7b:c2:a7:a0:0b:ce:a5:73:73:31:8d:cb:52:50:
         e1:59:e9:02:da:d1:21:dd:cf:a5:bc:76:ef:21:48:81:ed:46:
         d8:a3:91:c3:5d:d9:45:da:62:32:f8:04:d7:0a:b9:71:49:9d:
         dc:a9:32:fc:da:8e:61:b3:88:75:a9:63:20:b4:f8:19:b5:aa:
         df:47:fb:9c:5e:46:9b:4b:41:e9:c0:40:24:18:70:49:64:09:
         77:97:45:dc:c6:29:26:67:9f:ee:d4:67:37:e9:41:7f:13:49:
         bd:b3:6c:2c:8f:56:80:a1:91:4e:09:60:ec:e7:9f:65:e2:cf:
         64:9d:c3:2e:6a:75:e8:8a:9f:9a:8d:9e:d2:e1:41:7d:7d:42:
         2c:84:bb:e4:d4:3d:f3:86:aa:b0:39:d3:18:9e:8c:48:56:3c:
         09:21:24:49:4b:70:b1:ee:51:78:4d:83:fb:6c:84:23:3f:e9:
         0d:49:fa:f0:10:b5:12:33:86:f0:bf:eb:e7:4e:28:e6:2c:ea:
         78:99:71:e3
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIDDd+tMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY5
OTE0MjZmMGMwYzdhYzkyZGExZDUxMjljOWVjNzExYTJhMzhhM2EwHhcNMjEwNTEy
MDMwMDAwWhcNMjMwNTEyMDMwMDAwWjAzMTEwLwYDVQQDEyhlY2ZkOTFlMTA3Yzcz
OWVkMGIwMWVlMjE5NTFiMTNjMmU1ODU3ZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhVf2LJEnv49aGHcyDXA9A+hMWGJd0fhN7GMGfqWGuHOgG+JO
l4B97vaLcakSgNaRKHovwM2SDtT8fzjjPmn/GuLSCYk95q6uPthYjEimb/ea/mM5
GmHUqcUPs3pd/iavG8trrzX0/Bb4UHMRGkQEM33WFTS+bkow/sxsC5MCAT4y2CeA
XRwOf/iUOnEszXZHAIJXgirJ76XF1BW2G+nXSRZGBeEKit/X/3EF404+Gymp3lM6
ogqh2cDMgXD31ZRcGI1mxDIgVrv/mYaCX1cdSBZ2b83iZ7KZQ7bi5bw+uddz0aPA
ztt/rFAAADqnk4EmXyhRZ78dQWnUoPjbx/oTlwIDAQABo4ICczCCAm8wHQYDVR0O
BBYEFPlTovSGNrkOkJzccP7CnXTka5PHMB8GA1UdIwQYMBaAFFV8LS6Nsaqnp32x
KV0JSpIMDc0NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjk5MTQy
NmYwYzBjN2FjOTJkYTFkNTEyOWM5ZWM3MTFhMmEzOGEzYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGFhMDhlMjEtZmIyZC00OGI3LTgyZDktZjQxODdj
NGVhN2EwL2VjZmQ5MWUxMDdjNzM5ZWQwYjAxZWUyMTk1MWIxM2MyZTU4NTdkMjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80YWEwOGUyMS1mYjJkLTQ4YjctODJkOS1mNDE4
N2M0ZWE3YTAvNjk5MTQyNmYwYzBjN2FjOTJkYTFkNTEyOWM5ZWM3MTFhMmEzOGEz
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQo
MCYwJAQCAAEwHgMEAb61gAMEAL61hwMEAL61jQMEAL61mQMEAL61ojANBgkqhkiG
9w0BAQsFAAOCAQEAErB4ulkDlTEJgSuq8nGHPZqoEi3U9jTFfGXObSVFvch157HP
GK4l7zVfzQJ/Q76ncPqoQt1PsWXSKXvCp6ALzqVzczGNy1JQ4VnpAtrRId3Ppbx2
7yFIge1G2KORw13ZRdpiMvgE1wq5cUmd3Kky/NqOYbOIdaljILT4GbWq30f7nF5G
m0tB6cBAJBhwSWQJd5dF3MYpJmef7tRnN+lBfxNJvbNsLI9WgKGRTglg7OefZeLP
ZJ3DLmp16Iqfmo2e0uFBfX1CLIS75NQ984aqsDnTGJ6MSFY8CSEkSUtwse5ReE2D
+2yEIz/pDUn68BC1EjOG8L/r504o5izqeJlx4w==
-----END CERTIFICATE-----