Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/176e8b0a1c8bc66df68b8546cc3808989b2d8a1c.roa
File:                     176e8b0a1c8bc66df68b8546cc3808989b2d8a1c.roa (raw, json)
Hash identifier:          o0a/gPD4e7eRQHugq4I+ETZHd0+tWrEfbMDorXS1qYw=
Subject key identifier:   AD:94:01:1A:42:FA:8E:5B:60:D8:6C:05:55:E3:02:62:6F:19:E7:E3
Certificate issuer:       /CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
Certificate serial:       0D4D47
Authority key identifier: 08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/176e8b0a1c8bc66df68b8546cc3808989b2d8a1c.roa
Signing time:             Wed 24 Mar 2021 14:47:21 +0000
ROA not before:           Wed 24 Mar 2021 14:47:21 +0000
ROA not after:            Tue 24 Mar 2026 14:47:21 +0000
asID:                     264731
IP address blocks:        186.167.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871751 (0xd4d47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
        Validity
            Not Before: Mar 24 14:47:21 2021 GMT
            Not After : Mar 24 14:47:21 2026 GMT
        Subject: CN=176e8b0a1c8bc66df68b8546cc3808989b2d8a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:71:8c:20:1c:ec:5e:f0:30:b1:c9:3b:8e:b8:
                    ad:16:8b:11:8c:0c:30:3e:1d:ab:03:fe:2b:31:75:
                    d0:e8:5d:1a:07:fd:4a:9e:97:40:f5:da:7e:55:e2:
                    d0:b5:99:cc:c3:80:52:1a:62:c4:00:53:74:2f:98:
                    d9:d1:08:3b:b7:bf:8a:77:18:f3:fe:32:70:30:75:
                    b7:a1:f2:ab:74:6e:58:f2:0d:a7:9f:4f:f5:75:43:
                    33:f0:f1:39:f5:aa:16:0a:62:64:b4:a3:80:10:12:
                    0e:c7:2f:ef:32:32:84:10:7a:8d:2d:72:63:17:2d:
                    e8:51:df:ef:86:40:4e:e7:8e:f8:bb:d0:c4:6c:bf:
                    c9:c8:06:bd:8f:f9:28:cb:ba:4d:73:5e:63:98:4b:
                    2b:3b:7d:38:a3:5e:fb:0b:32:a2:e0:47:de:86:7b:
                    5f:73:3e:e8:cf:4e:bc:f7:ac:e7:11:82:f5:eb:48:
                    94:d9:12:ce:5d:92:5e:b4:87:7f:b6:12:0d:8d:26:
                    49:88:22:ce:1c:b4:ab:1c:ea:10:04:7f:b4:22:48:
                    23:25:17:0f:6a:e6:f8:c6:70:3b:b5:5e:51:3f:7f:
                    d0:e0:a4:26:76:f5:b9:1a:af:f9:3a:ab:04:b5:81:
                    87:5b:76:af:d1:50:32:c7:a5:ea:3e:3b:c7:31:d7:
                    cb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:94:01:1A:42:FA:8E:5B:60:D8:6C:05:55:E3:02:62:6F:19:E7:E3
            X509v3 Authority Key Identifier:
                keyid:08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/176e8b0a1c8bc66df68b8546cc3808989b2d8a1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/96fbc1b8c542f9384f9a2004e66a61080248cdc6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.167.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:4d:c7:50:dc:23:bf:5a:3f:4a:c6:ee:9e:9e:82:98:b4:66:
         35:db:93:aa:84:ba:75:30:2f:70:72:33:e0:ab:8b:c5:35:cc:
         a4:46:c1:f0:75:81:e0:61:62:ed:b0:db:0a:f7:12:21:4c:18:
         e5:43:a3:27:2d:49:ee:fa:42:d5:98:85:72:2b:96:e2:c1:32:
         7e:fb:66:39:75:94:e2:8d:a4:4d:4e:b5:90:12:ed:69:29:83:
         0a:c8:a2:26:ba:4f:0e:84:ed:57:24:5a:b4:cf:6c:9b:0b:83:
         bb:da:42:3b:2f:21:5d:7b:cd:da:8f:4b:36:d9:e7:2f:3d:8a:
         04:46:a8:28:45:6b:3b:3f:7f:09:b2:2b:e8:b2:98:c8:a5:d6:
         98:31:ff:99:56:a5:1e:17:6b:3a:dc:cd:e0:53:cb:f2:69:8b:
         59:c5:4e:3d:e1:4f:55:ea:2c:c3:cb:64:91:1c:fc:ff:43:f9:
         be:1a:bf:e1:a6:6f:b9:a3:88:a7:0c:4b:75:6c:8f:6a:2c:3c:
         28:21:b8:0f:06:19:40:91:18:27:88:e5:c5:bf:40:a5:5b:aa:
         20:86:a1:8f:8d:8c:f1:ca:fe:dd:5c:3f:7f:e4:c4:ff:a5:e0:
         60:95:2f:f8:47:9b:c7:1e:5e:af:7a:b5:e7:d9:18:52:ae:7f:
         63:2a:59:d9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDU1HMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk2
ZmJjMWI4YzU0MmY5Mzg0ZjlhMjAwNGU2NmE2MTA4MDI0OGNkYzYwHhcNMjEwMzI0
MTQ0NzIxWhcNMjYwMzI0MTQ0NzIxWjAzMTEwLwYDVQQDEygxNzZlOGIwYTFjOGJj
NjZkZjY4Yjg1NDZjYzM4MDg5ODliMmQ4YTFjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn3GMIBzsXvAwsck7jritFosRjAwwPh2rA/4rMXXQ6F0aB/1K
npdA9dp+VeLQtZnMw4BSGmLEAFN0L5jZ0Qg7t7+Kdxjz/jJwMHW3ofKrdG5Y8g2n
n0/1dUMz8PE59aoWCmJktKOAEBIOxy/vMjKEEHqNLXJjFy3oUd/vhkBO5474u9DE
bL/JyAa9j/koy7pNc15jmEsrO304o177CzKi4Efehntfcz7oz06896znEYL160iU
2RLOXZJetId/thINjSZJiCLOHLSrHOoQBH+0IkgjJRcPaub4xnA7tV5RP3/Q4KQm
dvW5Gq/5OqsEtYGHW3av0VAyx6XqPjvHMdfLjwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFK2UARpC+o5bYNhsBVXjAmJvGefjMB8GA1UdIwQYMBaAFAgTOQmsgsKNsTeP
clNCyZ+fjVPiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTZmYmMx
YjhjNTQyZjkzODRmOWEyMDA0ZTY2YTYxMDgwMjQ4Y2RjNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTVmOTllMTAtNzhhZi00MmY2LWE3YTUtMDg5MmVm
MjJkMWQ4LzE3NmU4YjBhMWM4YmM2NmRmNjhiODU0NmNjMzgwODk4OWIyZDhhMWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NWY5OWUxMC03OGFmLTQyZjYtYTdhNS0wODky
ZWYyMmQxZDgvOTZmYmMxYjhjNTQyZjkzODRmOWEyMDA0ZTY2YTYxMDgwMjQ4Y2Rj
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALqn8TANBgkqhkiG9w0BAQsFAAOCAQEAN03HUNwjv1o/Ssbu
np6CmLRmNduTqoS6dTAvcHIz4KuLxTXMpEbB8HWB4GFi7bDbCvcSIUwY5UOjJy1J
7vpC1ZiFciuW4sEyfvtmOXWU4o2kTU61kBLtaSmDCsiiJrpPDoTtVyRatM9smwuD
u9pCOy8hXXvN2o9LNtnnLz2KBEaoKEVrOz9/CbIr6LKYyKXWmDH/mValHhdrOtzN
4FPL8mmLWcVOPeFPVeosw8tkkRz8/0P5vhq/4aZvuaOIpwxLdWyPaiw8KCG4DwYZ
QJEYJ4jlxb9ApVuqIIahj42M8cr+3Vw/f+TE/6XgYJUv+Eebxx5er3q159kYUq5/
YypZ2Q==
-----END CERTIFICATE-----