Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/da3bb75b202300844951fad47c41eb747ad6cdb7.roa
File:                     da3bb75b202300844951fad47c41eb747ad6cdb7.roa (raw, json)
Hash identifier:          BhaJ/mL5uYUGltZgYzihkWMWPcrNuZ+TLsW5uF9onGk=
Subject key identifier:   C6:A4:7B:B5:AB:0B:71:48:69:0E:66:DB:0F:C1:00:FE:FE:F5:62:A6
Certificate issuer:       /CN=8e04677b51c6fee610279bb07461734e534b699e
Certificate serial:       0C1434
Authority key identifier: 5C:CB:63:54:F2:B0:C7:52:06:99:0C:99:5C:C9:F1:FA:10:8B:21:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e04677b51c6fee610279bb07461734e534b699e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/da3bb75b202300844951fad47c41eb747ad6cdb7.roa
Signing time:             Wed 24 Mar 2021 14:29:43 +0000
ROA not before:           Wed 24 Mar 2021 14:29:43 +0000
ROA not after:            Tue 24 Mar 2026 14:29:43 +0000
asID:                     267782
IP address blocks:        45.171.132.0/24 maxlen: 24
                          45.171.133.0/24 maxlen: 24
                          45.171.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 791604 (0xc1434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e04677b51c6fee610279bb07461734e534b699e
        Validity
            Not Before: Mar 24 14:29:43 2021 GMT
            Not After : Mar 24 14:29:43 2026 GMT
        Subject: CN=da3bb75b202300844951fad47c41eb747ad6cdb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bf:5f:02:05:01:ac:8d:f5:d1:81:a4:09:2d:
                    3c:e2:3a:f8:61:4d:17:a7:b0:a9:68:7a:13:ed:c6:
                    0a:a1:1e:46:a1:34:7d:5b:04:6b:e9:ee:75:67:cc:
                    79:b5:1d:b0:bb:88:17:87:49:dd:0b:1a:13:b0:b7:
                    ee:e6:61:c8:08:88:19:b7:45:9e:60:9c:6c:03:b1:
                    7e:cb:c1:f2:fd:f3:87:80:16:40:6c:4a:71:a4:47:
                    d8:c8:52:0e:1e:77:d9:7d:e3:fb:19:75:57:b7:dd:
                    5e:67:a1:77:dd:11:f3:9b:25:76:16:91:ab:1d:7c:
                    4a:36:43:b7:71:12:79:83:b9:71:15:cd:db:28:c4:
                    d2:16:f8:c6:10:84:67:8c:5e:e9:c5:70:3d:c5:de:
                    63:76:63:47:6b:9a:14:4e:14:e8:b9:37:5d:f5:a7:
                    84:b2:cf:ea:0c:bd:e4:fd:8d:8c:c4:73:d2:9a:2d:
                    4b:a8:14:69:1b:26:51:ed:59:21:59:08:ef:1a:b0:
                    67:53:29:a2:09:eb:cc:34:79:e8:0c:f7:63:11:7a:
                    98:52:ba:1e:20:88:b6:b8:98:a2:6d:e4:9a:76:ea:
                    f1:50:62:69:c1:dd:d0:07:3a:f9:b2:95:b1:d7:66:
                    43:00:a3:74:cf:f7:05:46:05:df:09:06:f3:74:7c:
                    9d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A4:7B:B5:AB:0B:71:48:69:0E:66:DB:0F:C1:00:FE:FE:F5:62:A6
            X509v3 Authority Key Identifier:
                keyid:5C:CB:63:54:F2:B0:C7:52:06:99:0C:99:5C:C9:F1:FA:10:8B:21:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e04677b51c6fee610279bb07461734e534b699e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/da3bb75b202300844951fad47c41eb747ad6cdb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/8e04677b51c6fee610279bb07461734e534b699e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.132.0-45.171.134.255

    Signature Algorithm: sha256WithRSAEncryption
         56:6a:60:74:4a:af:a0:72:30:ed:53:85:72:64:bf:3c:f6:eb:
         4b:a5:fb:a9:5f:6f:66:20:35:d4:fb:b2:57:45:30:49:92:c2:
         95:54:f1:28:c9:64:37:ef:fe:b2:25:25:1d:1b:b2:13:1f:c8:
         bb:df:88:f4:01:74:91:b9:03:bf:64:c4:96:0d:e9:cb:bc:ac:
         72:db:68:06:23:58:83:21:7e:bc:1c:32:0e:26:e9:ba:81:04:
         9e:5f:4b:e3:8a:49:7d:35:3b:7f:48:37:13:57:6f:bd:62:4f:
         b5:2b:98:3c:ed:78:00:2c:80:ff:ea:af:98:e1:13:08:9a:da:
         8c:28:4f:74:5b:94:00:1a:29:3c:45:3b:7e:bb:a3:a8:89:4f:
         94:8d:f7:3c:04:52:1c:db:8f:27:25:50:f3:34:01:7b:1f:32:
         03:39:6d:0a:08:f3:96:f7:d9:82:22:08:92:f9:26:d5:82:38:
         56:fa:e3:73:75:56:65:44:70:45:7e:d8:e9:ac:dc:7d:8a:62:
         3b:20:69:d4:20:f4:22:58:00:58:c8:9f:a9:4c:51:a4:38:75:
         4a:7b:42:30:22:4a:ee:64:96:8d:76:da:f9:e7:67:08:60:97:
         8a:65:1e:b2:8d:de:ae:73:0c:cb:7d:5c:24:0d:d7:69:e5:e4:
         87:a1:49:01
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDDBQ0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhl
MDQ2NzdiNTFjNmZlZTYxMDI3OWJiMDc0NjE3MzRlNTM0YjY5OWUwHhcNMjEwMzI0
MTQyOTQzWhcNMjYwMzI0MTQyOTQzWjAzMTEwLwYDVQQDEyhkYTNiYjc1YjIwMjMw
MDg0NDk1MWZhZDQ3YzQxZWI3NDdhZDZjZGI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsL9fAgUBrI310YGkCS084jr4YU0Xp7CpaHoT7cYKoR5GoTR9
WwRr6e51Z8x5tR2wu4gXh0ndCxoTsLfu5mHICIgZt0WeYJxsA7F+y8Hy/fOHgBZA
bEpxpEfYyFIOHnfZfeP7GXVXt91eZ6F33RHzmyV2FpGrHXxKNkO3cRJ5g7lxFc3b
KMTSFvjGEIRnjF7pxXA9xd5jdmNHa5oUThTouTdd9aeEss/qDL3k/Y2MxHPSmi1L
qBRpGyZR7VkhWQjvGrBnUymiCevMNHnoDPdjEXqYUroeIIi2uJiibeSadurxUGJp
wd3QBzr5spWx12ZDAKN0z/cFRgXfCQbzdHydAwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFMake7WrC3FIaQ5m2w/BAP7+9WKmMB8GA1UdIwQYMBaAFFzLY1TysMdSBpkM
mVzJ8foQiyHPMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGUwNDY3
N2I1MWM2ZmVlNjEwMjc5YmIwNzQ2MTczNGU1MzRiNjk5ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTcxNmMzODQtMTViMi00Y2Q0LTk1ODQtOGYzNjFk
NzRjM2I0L2RhM2JiNzViMjAyMzAwODQ0OTUxZmFkNDdjNDFlYjc0N2FkNmNkYjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NzE2YzM4NC0xNWIyLTRjZDQtOTU4NC04ZjM2
MWQ3NGMzYjQvOGUwNDY3N2I1MWM2ZmVlNjEwMjc5YmIwNzQ2MTczNGU1MzRiNjk5
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQCLauEAwQALauGMA0GCSqGSIb3DQEBCwUAA4IBAQBWamB0
Sq+gcjDtU4VyZL889utLpfupX29mIDXU+7JXRTBJksKVVPEoyWQ37/6yJSUdG7IT
H8i734j0AXSRuQO/ZMSWDenLvKxy22gGI1iDIX68HDIOJum6gQSeX0vjikl9NTt/
SDcTV2+9Yk+1K5g87XgALID/6q+Y4RMImtqMKE90W5QAGik8RTt+u6OoiU+Ujfc8
BFIc248nJVDzNAF7HzIDOW0KCPOW99mCIgiS+SbVgjhW+uNzdVZlRHBFftjprNx9
imI7IGnUIPQiWABYyJ+pTFGkOHVKe0IwIkruZJaNdtr552cIYJeKZR6yjd6ucwzL
fVwkDddp5eSHoUkB
-----END CERTIFICATE-----