Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/56b189d8280d84420043fa823def8c1451a85ced.roa
File:                     56b189d8280d84420043fa823def8c1451a85ced.roa (raw, json)
Hash identifier:          YoyM/kyViz/sNmQxlNPrvO68dFRGlMm9JhzHrpTnwoA=
Subject key identifier:   5E:EA:DD:07:92:CC:9A:33:0C:C7:1D:8D:85:AA:28:A4:BD:B9:3C:1C
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       121C0E
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/56b189d8280d84420043fa823def8c1451a85ced.roa
Signing time:             Fri 16 Apr 2021 02:08:54 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52323
IP address blocks:        190.225.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1186830 (0x121c0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=56b189d8280d84420043fa823def8c1451a85ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:39:8a:c5:26:bd:a1:6c:7d:a9:40:f8:69:33:
                    19:a8:a1:34:20:77:a3:df:c0:05:51:b1:58:d8:02:
                    33:90:b8:a3:40:57:0b:d6:54:0c:77:fe:61:46:25:
                    19:ef:e3:87:c6:70:9d:d7:27:83:3e:1c:b3:5b:28:
                    85:31:19:d1:2e:62:4e:0a:e5:5b:18:20:05:88:9a:
                    94:43:f1:5f:ff:8a:04:f0:6e:c8:43:16:a1:c2:ba:
                    40:b8:28:cd:6c:17:b0:54:5f:31:da:33:44:5e:fa:
                    09:a8:8a:32:ef:3d:fe:b8:ec:60:db:66:57:50:9f:
                    fa:94:55:47:b5:ca:79:65:0a:1e:19:32:7c:9a:b4:
                    01:3f:0c:27:c7:bf:7c:a1:af:23:a1:db:3e:48:d3:
                    e6:af:a4:42:d7:74:82:1c:eb:99:b9:87:96:6f:bc:
                    fa:b3:14:a7:9f:d8:13:e6:12:bc:69:eb:ff:2e:5d:
                    81:45:0b:b6:05:39:20:4a:d2:67:53:8c:21:b9:c5:
                    84:c6:83:b6:e0:75:0a:98:f3:88:b1:4d:6d:8b:f7:
                    09:41:4e:a9:77:66:94:d7:bc:e6:6a:dd:3c:d7:ab:
                    c8:b4:77:36:aa:78:dc:1d:1a:85:36:17:ce:f9:da:
                    f7:da:bd:01:f7:4f:37:0d:39:f6:1a:34:99:9c:ef:
                    43:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EA:DD:07:92:CC:9A:33:0C:C7:1D:8D:85:AA:28:A4:BD:B9:3C:1C
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/56b189d8280d84420043fa823def8c1451a85ced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.225.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:7b:06:3c:4f:5f:2a:53:4a:2a:7e:79:0d:e8:4a:a9:b0:4e:
         df:5e:c6:f7:52:ea:7a:b2:21:fc:e9:c1:15:95:07:75:ef:ee:
         6b:65:0c:cc:3d:b1:16:32:8f:5b:e7:a8:7c:33:07:4b:d4:1e:
         3a:1a:0a:ad:0f:57:da:43:8d:bd:08:8c:29:05:17:49:5a:73:
         ce:4a:0f:fd:9d:29:ab:28:a9:04:7c:7b:4c:4b:98:a6:36:d9:
         d2:7c:ed:29:2a:52:71:04:1a:7b:27:da:ec:2d:63:42:fe:69:
         ad:e7:cf:0e:fb:2d:c1:b0:c3:9f:04:18:42:9d:31:8a:85:af:
         e2:4f:1d:b0:44:7f:5e:74:65:34:42:4e:7f:82:e8:4a:81:4d:
         3b:60:f7:a5:51:40:b6:20:21:80:b7:9b:f1:81:77:e8:3d:dd:
         00:94:58:91:be:ba:f4:84:92:0a:d1:fb:13:65:64:71:19:ff:
         84:b3:90:44:d7:b6:7f:5b:9a:2c:67:0f:2a:8d:4a:74:a4:8b:
         24:c0:b3:e9:8c:d3:3e:f0:27:45:b0:30:af:14:e9:8d:e9:a3:
         10:c5:ca:92:d6:ea:ea:19:27:0c:c3:34:d8:59:ea:00:bb:f9:
         90:78:17:ab:a0:55:00:39:c4:b5:5a:44:f8:21:fe:f2:9f:58:
         5a:8c:2d:d8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEhwOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
M2E0NDRkMDYxZmM0ZDkxNGRjNTZkODAzMWE5YzQ1NzRjYTU3YWQwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg1NmIxODlkODI4MGQ4
NDQyMDA0M2ZhODIzZGVmOGMxNDUxYTg1Y2VkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsTmKxSa9oWx9qUD4aTMZqKE0IHej38AFUbFY2AIzkLijQFcL
1lQMd/5hRiUZ7+OHxnCd1yeDPhyzWyiFMRnRLmJOCuVbGCAFiJqUQ/Ff/4oE8G7I
QxahwrpAuCjNbBewVF8x2jNEXvoJqIoy7z3+uOxg22ZXUJ/6lFVHtcp5ZQoeGTJ8
mrQBPwwnx798oa8jods+SNPmr6RC13SCHOuZuYeWb7z6sxSnn9gT5hK8aev/Ll2B
RQu2BTkgStJnU4whucWExoO24HUKmPOIsU1ti/cJQU6pd2aU17zmat0816vItHc2
qnjcHRqFNhfO+dr32r0B9083DTn2GjSZnO9D1wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFF7q3QeSzJozDMcdjYWqKKS9uTwcMB8GA1UdIwQYMBaAFMmcjKrH/3v04XrK
8I/d1uVu/M2tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDkzYTQ0
NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3LzU2YjE4OWQ4MjgwZDg0NDIwMDQzZmE4MjNkZWY4YzE0NTFhODVjZWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZDkzYTQ0NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7hpDANBgkqhkiG9w0BAQsFAAOCAQEAQ3sGPE9fKlNKKn55
DehKqbBO317G91LqerIh/OnBFZUHde/ua2UMzD2xFjKPW+eofDMHS9QeOhoKrQ9X
2kONvQiMKQUXSVpzzkoP/Z0pqyipBHx7TEuYpjbZ0nztKSpScQQaeyfa7C1jQv5p
refPDvstwbDDnwQYQp0xioWv4k8dsER/XnRlNEJOf4LoSoFNO2D3pVFAtiAhgLeb
8YF36D3dAJRYkb669ISSCtH7E2VkcRn/hLOQRNe2f1uaLGcPKo1KdKSLJMCz6YzT
PvAnRbAwrxTpjemjEMXKktbq6hknDMM02FnqALv5kHgXq6BVADnEtVpE+CH+8p9Y
Wowt2A==
-----END CERTIFICATE-----