Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/3c6de7f2e63ab3b623c84263723dd6682e7bf806.roa
File:                     3c6de7f2e63ab3b623c84263723dd6682e7bf806.roa (raw, json)
Hash identifier:          mYlPA04V3x9ca7t071r0FzigAo2zbgl7S1mmwV+JgmY=
Subject key identifier:   6B:89:D8:40:BE:93:26:51:10:42:F7:30:4A:B2:35:98:45:79:76:DC
Certificate issuer:       /CN=9fcf3302c6615af1974dce9c8e8304499ee53acc
Certificate serial:       0D8DE9
Authority key identifier: 0C:2B:E8:0C:8A:F6:87:11:C5:E1:13:00:62:89:C4:8B:A8:1F:E8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fcf3302c6615af1974dce9c8e8304499ee53acc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/3c6de7f2e63ab3b623c84263723dd6682e7bf806.roa
Signing time:             Wed 24 Mar 2021 14:32:52 +0000
ROA not before:           Wed 24 Mar 2021 14:32:51 +0000
ROA not after:            Tue 24 Mar 2026 14:32:51 +0000
asID:                     264789
IP address blocks:        168.197.240.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888297 (0xd8de9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fcf3302c6615af1974dce9c8e8304499ee53acc
        Validity
            Not Before: Mar 24 14:32:51 2021 GMT
            Not After : Mar 24 14:32:51 2026 GMT
        Subject: CN=3c6de7f2e63ab3b623c84263723dd6682e7bf806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:f8:90:a6:52:24:c2:29:21:1c:25:df:0e:
                    86:63:37:33:e0:57:6f:13:1f:fa:84:c5:d8:37:70:
                    ed:81:21:40:cb:0d:f8:6d:fe:12:e8:79:33:f8:63:
                    d9:b9:34:59:b4:1a:f5:b0:75:10:9f:25:e3:73:b4:
                    26:e9:26:c4:65:98:aa:71:ac:1c:a5:01:00:79:20:
                    21:3a:99:85:76:bf:12:7e:32:de:86:e4:0c:36:1d:
                    dc:6d:0d:88:8e:55:43:1b:72:86:b0:fc:ab:43:d1:
                    22:fc:f5:09:f4:23:a9:1a:3c:0d:36:f0:25:2c:3e:
                    94:ef:0a:0c:df:41:b5:d5:3c:5e:64:ab:80:5b:42:
                    17:53:7b:88:5d:eb:e3:a7:17:91:ab:dc:b2:6a:43:
                    1c:1f:f8:b5:b2:a8:aa:bd:9c:a5:c4:fc:11:eb:21:
                    07:b5:20:30:3b:54:dc:6a:e5:8c:8c:3d:16:14:fb:
                    54:3a:f2:7d:29:52:38:f1:04:2f:e4:55:6c:38:c4:
                    f1:66:3d:99:58:7d:0c:1c:bd:03:f6:fd:c6:78:8d:
                    29:0a:bd:ad:5c:72:1a:86:0d:26:20:ff:dd:ba:b3:
                    52:81:e9:f1:7b:a1:7b:3c:9f:f4:b7:ba:cc:29:ed:
                    6e:43:be:92:ca:81:3a:6b:74:5e:de:f2:84:da:8c:
                    e7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:89:D8:40:BE:93:26:51:10:42:F7:30:4A:B2:35:98:45:79:76:DC
            X509v3 Authority Key Identifier:
                keyid:0C:2B:E8:0C:8A:F6:87:11:C5:E1:13:00:62:89:C4:8B:A8:1F:E8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fcf3302c6615af1974dce9c8e8304499ee53acc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/3c6de7f2e63ab3b623c84263723dd6682e7bf806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/9fcf3302c6615af1974dce9c8e8304499ee53acc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:f1:b8:e2:29:3d:a3:88:28:c4:12:02:12:03:bd:36:ad:02:
         39:59:e4:60:a7:a4:29:6d:d3:9f:e5:ec:c7:f8:63:46:49:e3:
         08:58:61:95:f1:be:79:1c:81:0e:e2:5e:e9:44:b1:17:20:19:
         04:16:11:6a:3d:3d:2b:a4:bb:30:ef:5e:da:14:32:54:3c:20:
         39:8d:92:55:5e:c4:e2:f7:82:1a:c2:1d:1f:6a:55:cd:9d:03:
         c9:84:fd:bd:39:f7:bb:b3:26:cb:33:cc:81:51:c1:4c:3f:12:
         9f:57:c3:29:04:79:aa:b7:11:54:3b:f1:27:42:4c:11:2f:e7:
         31:75:8e:5a:24:6a:c0:81:4a:c7:cf:b7:de:bc:d4:51:3c:dd:
         e9:01:14:0c:f7:0f:72:64:86:36:be:9f:17:e0:58:3c:3d:22:
         bc:06:d9:dd:3b:f1:23:d1:d3:3b:00:98:22:7a:35:b2:92:dd:
         7e:23:70:9a:0a:7f:3a:7c:a0:c7:3f:3d:38:16:25:cc:ac:fa:
         08:06:1a:d6:3d:b3:16:c8:4a:75:44:34:ef:97:4d:a2:c0:e2:
         c8:d5:e6:d1:35:6d:14:0c:34:cc:08:08:7d:ba:c6:bd:96:6c:
         cf:aa:05:1c:11:5b:8e:fc:45:55:d8:26:de:35:54:83:ab:1a:
         0b:ba:6c:61
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDY3pMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlm
Y2YzMzAyYzY2MTVhZjE5NzRkY2U5YzhlODMwNDQ5OWVlNTNhY2MwHhcNMjEwMzI0
MTQzMjUxWhcNMjYwMzI0MTQzMjUxWjAzMTEwLwYDVQQDEygzYzZkZTdmMmU2M2Fi
M2I2MjNjODQyNjM3MjNkZDY2ODJlN2JmODA2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtMT4kKZSJMIpIRwl3w6GYzcz4FdvEx/6hMXYN3DtgSFAyw34
bf4S6Hkz+GPZuTRZtBr1sHUQnyXjc7Qm6SbEZZiqcawcpQEAeSAhOpmFdr8SfjLe
huQMNh3cbQ2IjlVDG3KGsPyrQ9Ei/PUJ9COpGjwNNvAlLD6U7woM30G11TxeZKuA
W0IXU3uIXevjpxeRq9yyakMcH/i1sqiqvZylxPwR6yEHtSAwO1TcauWMjD0WFPtU
OvJ9KVI48QQv5FVsOMTxZj2ZWH0MHL0D9v3GeI0pCr2tXHIahg0mIP/durNSgenx
e6F7PJ/0t7rMKe1uQ76SyoE6a3Re3vKE2ozn4wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGuJ2EC+kyZREEL3MEqyNZhFeXbcMB8GA1UdIwQYMBaAFAwr6AyK9ocRxeET
AGKJxIuoH+gYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWZjZjMz
MDJjNjYxNWFmMTk3NGRjZTljOGU4MzA0NDk5ZWU1M2FjYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWMxNDhkYjYtMTRiMS00MjQwLTkyZWQtZjE2YjU0
YzA5YTY5LzNjNmRlN2YyZTYzYWIzYjYyM2M4NDI2MzcyM2RkNjY4MmU3YmY4MDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81YzE0OGRiNi0xNGIxLTQyNDAtOTJlZC1mMTZi
NTRjMDlhNjkvOWZjZjMzMDJjNjYxNWFmMTk3NGRjZTljOGU4MzA0NDk5ZWU1M2Fj
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqjF8DANBgkqhkiG9w0BAQsFAAOCAQEAIPG44ik9o4goxBIC
EgO9Nq0COVnkYKekKW3Tn+Xsx/hjRknjCFhhlfG+eRyBDuJe6USxFyAZBBYRaj09
K6S7MO9e2hQyVDwgOY2SVV7E4veCGsIdH2pVzZ0DyYT9vTn3u7MmyzPMgVHBTD8S
n1fDKQR5qrcRVDvxJ0JMES/nMXWOWiRqwIFKx8+33rzUUTzd6QEUDPcPcmSGNr6f
F+BYPD0ivAbZ3TvxI9HTOwCYIno1spLdfiNwmgp/Onygxz89OBYlzKz6CAYa1j2z
FshKdUQ075dNosDiyNXm0TVtFAw0zAgIfbrGvZZsz6oFHBFbjvxFVdgm3jVUg6sa
C7psYQ==
-----END CERTIFICATE-----