Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ee0927b-ef75-430b-9bf2-be0e84a77fa8/7c2a9e5eb70ca01d5adb34ce34a90c17c0a06d4a.roa
File:                     7c2a9e5eb70ca01d5adb34ce34a90c17c0a06d4a.roa (raw, json)
Hash identifier:          sud/GFlPWS/My0ApZbkUz96dZ1nZq6Dt1jpPj9vH1BU=
Subject key identifier:   64:4E:2C:89:9D:18:A9:C5:33:50:D4:06:CC:B3:DA:AF:D8:70:42:59
Certificate issuer:       /CN=1732d7ce406bd7aa01b8752602eec7239b41c506
Certificate serial:       0AF4F9
Authority key identifier: F1:FF:2F:A9:D2:24:F1:13:1B:DF:F3:B6:84:4D:84:98:31:4E:19:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1732d7ce406bd7aa01b8752602eec7239b41c506.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ee0927b-ef75-430b-9bf2-be0e84a77fa8/7c2a9e5eb70ca01d5adb34ce34a90c17c0a06d4a.roa
Signing time:             Wed 24 Mar 2021 14:36:07 +0000
ROA not before:           Wed 24 Mar 2021 14:36:07 +0000
ROA not after:            Tue 24 Mar 2026 14:36:07 +0000
asID:                     269867
IP address blocks:        45.189.119.0/24 maxlen: 24
                          2801:15:7000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718073 (0xaf4f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1732d7ce406bd7aa01b8752602eec7239b41c506
        Validity
            Not Before: Mar 24 14:36:07 2021 GMT
            Not After : Mar 24 14:36:07 2026 GMT
        Subject: CN=7c2a9e5eb70ca01d5adb34ce34a90c17c0a06d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e6:c7:e7:7b:15:73:b2:2f:e9:9f:92:12:3e:
                    a3:d0:d7:27:2c:a9:15:02:ba:3f:c2:e5:f5:13:ad:
                    4f:a8:2f:df:da:d7:c6:8f:f1:8a:01:af:38:76:5d:
                    98:d7:71:b6:1a:cc:fc:37:ea:a9:87:23:cb:8d:7c:
                    fe:6c:56:8a:5c:71:4b:ed:2c:19:4a:1e:3e:57:52:
                    96:52:fb:66:dc:93:d2:c6:b6:2a:7c:a4:2b:5b:36:
                    3d:44:48:4e:80:3b:a2:2a:c4:9b:f7:29:c9:5e:ff:
                    71:ac:18:c4:c6:b1:fa:0d:f0:53:cb:12:04:40:a7:
                    f7:a2:ca:2a:b8:da:c0:76:b4:03:6a:1b:d9:ab:b7:
                    97:3a:ef:3b:22:8d:af:b7:3a:8d:e1:b6:b6:db:7d:
                    52:6b:27:f3:7a:c3:68:35:3d:9b:6f:af:ee:7d:e9:
                    45:ad:fb:56:61:ee:97:d3:31:a5:56:d1:03:2d:4d:
                    5e:f7:ad:fa:5c:79:50:11:4e:6b:b7:df:f7:5d:66:
                    db:60:ae:64:65:11:d7:eb:16:fc:4a:82:55:93:18:
                    3b:4e:8d:ac:6b:9d:21:ad:7f:92:96:7f:e5:11:e4:
                    76:7f:97:ac:61:a4:58:f5:cb:0a:e8:7d:e3:6e:33:
                    94:16:7b:67:87:04:e5:d6:0c:ff:72:bb:1c:e8:4f:
                    0b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4E:2C:89:9D:18:A9:C5:33:50:D4:06:CC:B3:DA:AF:D8:70:42:59
            X509v3 Authority Key Identifier:
                keyid:F1:FF:2F:A9:D2:24:F1:13:1B:DF:F3:B6:84:4D:84:98:31:4E:19:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1732d7ce406bd7aa01b8752602eec7239b41c506.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee0927b-ef75-430b-9bf2-be0e84a77fa8/7c2a9e5eb70ca01d5adb34ce34a90c17c0a06d4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ee0927b-ef75-430b-9bf2-be0e84a77fa8/1732d7ce406bd7aa01b8752602eec7239b41c506.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.119.0/24
                IPv6:
                  2801:15:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:35:94:b2:90:d8:97:c2:4d:e7:33:29:7e:c0:f7:37:f6:72:
         9f:16:d9:05:0e:9c:de:06:96:0d:e9:cb:23:40:66:58:98:e7:
         b7:77:02:9e:dc:56:77:75:4d:53:1e:2d:12:64:c1:29:e0:82:
         e8:bb:c2:1a:fb:8e:fb:2b:d3:30:e7:90:15:0f:b7:df:2f:29:
         e7:cb:d5:19:01:80:bb:8a:9e:d5:49:48:af:bb:02:9a:37:9b:
         57:68:b3:25:54:d8:49:e7:96:f0:88:5a:4f:d0:b7:4c:ac:5b:
         4e:08:90:eb:b6:45:d1:e1:2d:4e:8b:3e:53:3f:94:89:92:15:
         d2:02:8c:35:39:5f:78:5c:07:33:a7:12:3e:4e:bd:a5:51:c9:
         f7:e9:bd:49:6e:d6:25:0c:43:b7:13:3b:60:e0:40:97:66:9f:
         fa:c6:52:59:23:66:8e:4e:3f:f3:03:72:13:24:9e:60:89:43:
         a5:3f:3d:7b:16:77:f3:8d:dc:7e:3a:84:1b:3f:36:b9:c8:ab:
         b8:ec:9b:be:bc:85:27:c4:a4:b5:12:95:26:0a:9c:32:8f:5b:
         18:d3:6c:19:74:bb:1f:18:2e:0d:a6:77:0d:4f:83:47:40:46:
         fa:f5:3e:d3:d4:d4:85:06:a3:e0:49:1b:7e:d7:05:2d:c3:79:
         f5:5b:22:79
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDCvT5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE3
MzJkN2NlNDA2YmQ3YWEwMWI4NzUyNjAyZWVjNzIzOWI0MWM1MDYwHhcNMjEwMzI0
MTQzNjA3WhcNMjYwMzI0MTQzNjA3WjAzMTEwLwYDVQQDEyg3YzJhOWU1ZWI3MGNh
MDFkNWFkYjM0Y2UzNGE5MGMxN2MwYTA2ZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkebH53sVc7Iv6Z+SEj6j0NcnLKkVAro/wuX1E61PqC/f2tfG
j/GKAa84dl2Y13G2Gsz8N+qphyPLjXz+bFaKXHFL7SwZSh4+V1KWUvtm3JPSxrYq
fKQrWzY9REhOgDuiKsSb9ynJXv9xrBjExrH6DfBTyxIEQKf3osoquNrAdrQDahvZ
q7eXOu87Io2vtzqN4ba2231SayfzesNoNT2bb6/ufelFrftWYe6X0zGlVtEDLU1e
9636XHlQEU5rt9/3XWbbYK5kZRHX6xb8SoJVkxg7To2sa50hrX+Sln/lEeR2f5es
YaRY9csK6H3jbjOUFntnhwTl1gz/crsc6E8LaQIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFGROLImdGKnFM1DUBsyz2q/YcEJZMB8GA1UdIwQYMBaAFPH/L6nSJPETG9/z
toRNhJgxThlrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTczMmQ3
Y2U0MDZiZDdhYTAxYjg3NTI2MDJlZWM3MjM5YjQxYzUwNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVlMDkyN2ItZWY3NS00MzBiLTliZjItYmUwZTg0
YTc3ZmE4LzdjMmE5ZTVlYjcwY2EwMWQ1YWRiMzRjZTM0YTkwYzE3YzBhMDZkNGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWUwOTI3Yi1lZjc1LTQzMGItOWJmMi1iZTBl
ODRhNzdmYTgvMTczMmQ3Y2U0MDZiZDdhYTAxYjg3NTI2MDJlZWM3MjM5YjQxYzUw
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAC29dzAPBAIAAjAJAwcAKAEAFXAAMA0GCSqGSIb3DQEBCwUA
A4IBAQADNZSykNiXwk3nMyl+wPc39nKfFtkFDpzeBpYN6csjQGZYmOe3dwKe3FZ3
dU1THi0SZMEp4ILou8Ia+477K9Mw55AVD7ffLynny9UZAYC7ip7VSUivuwKaN5tX
aLMlVNhJ55bwiFpP0LdMrFtOCJDrtkXR4S1Oiz5TP5SJkhXSAow1OV94XAczpxI+
Tr2lUcn36b1JbtYlDEO3Eztg4ECXZp/6xlJZI2aOTj/zA3ITJJ5giUOlPz17Fnfz
jdx+OoQbPza5yKu47Ju+vIUnxKS1EpUmCpwyj1sY02wZdLsfGC4NpncNT4NHQEb6
9T7T1NSFBqPgSRt+1wUtw3n1WyJ5
-----END CERTIFICATE-----