Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e41f8e0-767b-4f81-8908-a853d15adc64/737b97ca5df38a0b8410cb2c54b2e5cabb2e4553.roa
File:                     737b97ca5df38a0b8410cb2c54b2e5cabb2e4553.roa (raw, json)
Hash identifier:          ZL1RuzPnfGfiytcnwcThwTn+0gYd6HVhav7TJyG03Ls=
Subject key identifier:   DE:13:8F:92:48:70:D0:CA:6B:BF:55:43:CA:BE:AB:63:14:4A:11:2E
Certificate issuer:       /CN=632e9a2ff72a8398731612b91d77d2040365c4a2
Certificate serial:       0303
Authority key identifier: 5D:2B:36:FF:65:7C:14:4D:98:23:0E:ED:9B:0E:07:38:4F:8A:8F:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/632e9a2ff72a8398731612b91d77d2040365c4a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e41f8e0-767b-4f81-8908-a853d15adc64/737b97ca5df38a0b8410cb2c54b2e5cabb2e4553.roa
Signing time:             Tue 11 Apr 2023 00:20:18 +0000
ROA not before:           Mon 10 Apr 2023 00:19:58 +0000
ROA not after:            Fri 11 Apr 2025 00:19:58 +0000
asID:                     11947
IP address blocks:        196.32.32.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 771 (0x303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632e9a2ff72a8398731612b91d77d2040365c4a2
        Validity
            Not Before: Apr 10 00:19:58 2023 GMT
            Not After : Apr 11 00:19:58 2025 GMT
        Subject: CN=737b97ca5df38a0b8410cb2c54b2e5cabb2e4553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:26:d4:b3:c1:1d:41:da:8a:cb:d3:84:e7:91:
                    9e:77:e5:e2:c4:dc:8d:78:cf:74:1b:2a:48:41:98:
                    be:70:f5:50:d7:ac:58:7d:d7:09:66:62:27:67:03:
                    33:9b:02:52:fd:46:92:b4:75:80:dd:f9:7a:e5:5d:
                    b3:15:29:2d:83:22:02:91:34:95:f9:ef:bb:2b:d3:
                    ec:98:f3:b0:19:a7:4b:6d:82:30:a8:2b:ca:7a:df:
                    6b:8e:9c:e7:9e:47:53:e9:d9:6d:58:73:a4:d7:5d:
                    be:81:4d:23:25:53:02:c5:5f:32:88:4f:fd:0d:a1:
                    eb:91:de:b0:df:82:ca:43:df:58:39:05:75:54:8d:
                    87:40:21:b4:c5:35:8a:24:e7:9c:ef:02:ab:b7:60:
                    77:48:f7:49:a1:35:85:30:a9:e2:73:27:ab:92:df:
                    6f:d4:a7:51:38:34:d7:44:a1:3f:4a:74:9c:41:c0:
                    a9:97:dd:8a:12:46:10:f9:58:37:6d:d7:07:d0:2d:
                    bd:b4:e2:eb:46:3c:7e:e0:89:66:73:fe:49:fb:32:
                    23:1b:ae:1e:cf:bf:a3:3e:85:f0:b3:86:fb:c0:fa:
                    d0:09:1e:66:35:96:ae:97:a9:6f:7c:ff:92:24:68:
                    3a:e3:99:ad:57:01:33:22:45:9d:ea:eb:16:21:71:
                    f9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:13:8F:92:48:70:D0:CA:6B:BF:55:43:CA:BE:AB:63:14:4A:11:2E
            X509v3 Authority Key Identifier:
                keyid:5D:2B:36:FF:65:7C:14:4D:98:23:0E:ED:9B:0E:07:38:4F:8A:8F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/632e9a2ff72a8398731612b91d77d2040365c4a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e41f8e0-767b-4f81-8908-a853d15adc64/737b97ca5df38a0b8410cb2c54b2e5cabb2e4553.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e41f8e0-767b-4f81-8908-a853d15adc64/632e9a2ff72a8398731612b91d77d2040365c4a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.32.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         18:38:9e:ea:b9:df:a1:27:f8:6e:f0:1f:5b:29:12:ac:2c:75:
         8e:81:24:e8:df:1d:76:85:a9:ae:07:e7:d3:ba:18:07:90:24:
         cf:c0:37:84:eb:0b:29:14:21:84:fa:a8:00:95:4a:3d:d5:7e:
         9c:7d:6f:06:24:57:6d:ee:d2:36:67:2f:52:4e:0c:61:8e:c1:
         bd:8e:ef:b0:21:5f:4e:64:12:6c:43:22:cb:d8:4e:f2:e5:6f:
         f5:3a:85:26:46:7f:8d:14:d6:fe:ef:e3:4e:20:02:96:55:03:
         c6:71:8e:9c:66:58:d3:93:ee:78:3a:2f:1a:33:36:2b:05:21:
         db:93:6c:12:81:9b:29:1f:63:a8:36:d0:f1:aa:53:bf:2e:cd:
         ca:a7:c0:87:dd:85:1c:c0:84:17:b9:a1:b5:88:dc:7e:9b:18:
         a4:d7:fa:ab:27:d8:8a:03:c2:61:c3:7b:73:4e:be:33:71:ac:
         61:9e:b7:29:b2:ed:8d:58:ac:bc:cb:cf:6c:ef:ca:fb:83:a0:
         80:99:32:d2:e3:77:0a:9e:02:9d:4f:70:ba:6c:1c:c9:54:1f:
         94:aa:90:05:35:ae:c7:7f:37:8d:9c:dc:80:de:37:7d:be:73:
         8c:32:c6:a1:e4:72:62:ee:75:3f:14:00:c4:97:05:9d:a2:c7:
         aa:ff:94:a9
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAwMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjMy
ZTlhMmZmNzJhODM5ODczMTYxMmI5MWQ3N2QyMDQwMzY1YzRhMjAeFw0yMzA0MTAw
MDE5NThaFw0yNTA0MTEwMDE5NThaMDMxMTAvBgNVBAMTKDczN2I5N2NhNWRmMzhh
MGI4NDEwY2IyYzU0YjJlNWNhYmIyZTQ1NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCIJtSzwR1B2orL04TnkZ535eLE3I14z3QbKkhBmL5w9VDXrFh9
1wlmYidnAzObAlL9RpK0dYDd+XrlXbMVKS2DIgKRNJX577sr0+yY87AZp0ttgjCo
K8p632uOnOeeR1Pp2W1Yc6TXXb6BTSMlUwLFXzKIT/0NoeuR3rDfgspD31g5BXVU
jYdAIbTFNYok55zvAqu3YHdI90mhNYUwqeJzJ6uS32/Up1E4NNdEoT9KdJxBwKmX
3YoSRhD5WDdt1wfQLb204utGPH7giWZz/kn7MiMbrh7Pv6M+hfCzhvvA+tAJHmY1
lq6XqW98/5IkaDrjma1XATMiRZ3q6xYhcfnpAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQU3hOPkkhw0Mprv1VDyr6rYxRKES4wHwYDVR0jBBgwFoAUXSs2/2V8FE2YIw7t
mw4HOE+Kj24wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS82MzJlOWEy
ZmY3MmE4Mzk4NzMxNjEyYjkxZDc3ZDIwNDAzNjVjNGEyLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy81ZTQxZjhlMC03NjdiLTRmODEtODkwOC1hODUzZDE1
YWRjNjQvNzM3Yjk3Y2E1ZGYzOGEwYjg0MTBjYjJjNTRiMmU1Y2FiYjJlNDU1My5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzVlNDFmOGUwLTc2N2ItNGY4MS04OTA4LWE4NTNk
MTVhZGM2NC82MzJlOWEyZmY3MmE4Mzk4NzMxNjEyYjkxZDc3ZDIwNDAzNjVjNGEy
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQFxCAgMA0GCSqGSIb3DQEBCwUAA4IBAQAYOJ7qud+hJ/hu8B9b
KRKsLHWOgSTo3x12hamuB+fTuhgHkCTPwDeE6wspFCGE+qgAlUo91X6cfW8GJFdt
7tI2Zy9STgxhjsG9ju+wIV9OZBJsQyLL2E7y5W/1OoUmRn+NFNb+7+NOIAKWVQPG
cY6cZljTk+54Oi8aMzYrBSHbk2wSgZspH2OoNtDxqlO/Ls3Kp8CH3YUcwIQXuaG1
iNx+mxik1/qrJ9iKA8Jhw3tzTr4zcaxhnrcpsu2NWKy8y89s78r7g6CAmTLS43cK
ngKdT3C6bBzJVB+UqpAFNa7HfzeNnNyA3jd9vnOMMsah5HJi7nU/FADElwWdoseq
/5Sp
-----END CERTIFICATE-----