Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/b068f26639638f522518d2c924539625a26af75b.roa
File:                     b068f26639638f522518d2c924539625a26af75b.roa (raw, json)
Hash identifier:          3wULRmCP1oKydo0IvFqAnYhUPCBcSjRhG7RG1HtDhFo=
Subject key identifier:   28:3F:73:30:F6:14:BE:AD:40:77:CB:DD:94:F3:4C:B5:89:7D:23:E8
Certificate issuer:       /CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289
Certificate serial:       14F7C7
Authority key identifier: 2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/b068f26639638f522518d2c924539625a26af75b.roa
Signing time:             Mon 28 Mar 2022 11:21:37 +0000
ROA not before:           Mon 28 Mar 2022 03:00:00 +0000
ROA not after:            Thu 28 Mar 2024 03:00:00 +0000
asID:                     265554
IP address blocks:        2803:aba0:2100::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1374151 (0x14f7c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289
        Validity
            Not Before: Mar 28 03:00:00 2022 GMT
            Not After : Mar 28 03:00:00 2024 GMT
        Subject: CN=b068f26639638f522518d2c924539625a26af75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5a:87:96:0c:48:7d:4f:70:50:28:95:05:d0:
                    72:73:3c:67:0a:fc:c5:77:20:48:47:cc:27:f1:6a:
                    28:cf:34:67:42:a2:c6:40:c7:cc:e8:23:a2:5a:6e:
                    7c:d3:92:c9:3d:98:66:64:a1:b3:ff:26:d5:28:ea:
                    f0:12:89:4e:75:91:b1:9a:a5:cc:0a:16:b6:c4:15:
                    c0:18:47:52:6f:ff:af:68:e1:cc:d1:d6:79:14:22:
                    06:f2:85:30:64:40:78:f8:21:92:79:e6:9d:a9:ed:
                    42:98:64:df:8f:af:85:36:6d:e2:7e:0a:49:e2:68:
                    0c:3f:6a:a8:73:ff:bf:d3:e9:d7:54:8e:39:04:8b:
                    dc:59:70:0f:31:c5:c2:da:01:48:bf:4b:5d:02:6e:
                    66:d5:b4:90:98:0a:af:5f:f3:ce:e0:42:6f:71:a8:
                    ba:7a:1f:b5:ad:67:b5:d9:3a:5b:32:93:d6:01:b8:
                    08:f2:1e:ca:4b:c1:f3:d8:0b:f5:29:5b:1f:17:87:
                    ec:fd:ad:4e:ab:5e:3e:f1:1d:6f:61:e3:6c:60:4f:
                    10:87:83:2a:34:44:6d:bb:8f:a5:cf:81:2a:b3:8a:
                    d5:1c:cb:b1:8c:3e:80:a4:1c:ff:4e:c9:77:16:ae:
                    99:ab:39:f5:0f:39:a2:c1:09:77:2d:b3:f1:3e:16:
                    7f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3F:73:30:F6:14:BE:AD:40:77:CB:DD:94:F3:4C:B5:89:7D:23:E8
            X509v3 Authority Key Identifier:
                keyid:2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/b068f26639638f522518d2c924539625a26af75b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aba0:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:d1:ef:e8:a4:8c:34:ec:e8:4e:5a:97:5c:d7:ad:50:cd:66:
         3d:2c:c3:c7:8d:9b:05:80:8b:b3:ed:e4:ca:1f:f3:d3:6c:83:
         c7:6b:6d:57:95:84:53:b2:4c:a2:a7:0d:f7:19:be:0e:f3:67:
         c9:06:ae:59:f7:c1:24:d1:5d:da:df:7f:d7:35:b1:8b:a5:8b:
         97:6a:73:01:fd:96:88:d2:c8:91:27:13:be:fb:39:52:c1:b4:
         83:54:d3:90:31:f9:29:24:fb:4f:7f:84:50:85:9f:bd:a1:3b:
         08:b2:5a:33:ab:ee:b3:93:35:0e:5f:ae:ab:cc:ab:06:6d:25:
         6a:5e:23:6e:64:a5:4a:e5:12:06:56:ea:e3:7b:0b:41:70:d9:
         e7:8c:da:fe:2b:f9:22:fe:d7:a1:23:07:ed:76:92:22:11:cf:
         a3:c0:46:37:f7:e5:8d:5b:ba:ac:7b:ef:b8:b0:e1:00:1f:36:
         cd:fd:2d:84:02:39:af:38:d6:fa:cc:12:d7:91:9a:32:6f:86:
         bf:20:4b:a1:ff:38:2a:11:2a:9a:71:0f:44:71:12:72:f7:9e:
         74:77:00:79:88:3f:0e:15:cd:44:ae:62:58:5a:2d:bc:ff:28:
         66:8d:09:c7:eb:46:6b:f5:41:2c:90:5b:a1:65:a5:55:73:bd:
         2e:f6:e0:86
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDFPfHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFk
ZmRkZmUyZjY2Yjk5MWJkNmMwYTUyMDM2YzhiYWZlZDJmMWYyODkwHhcNMjIwMzI4
MDMwMDAwWhcNMjQwMzI4MDMwMDAwWjAzMTEwLwYDVQQDEyhiMDY4ZjI2NjM5NjM4
ZjUyMjUxOGQyYzkyNDUzOTYyNWEyNmFmNzViMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAglqHlgxIfU9wUCiVBdByczxnCvzFdyBIR8wn8WoozzRnQqLG
QMfM6COiWm5805LJPZhmZKGz/ybVKOrwEolOdZGxmqXMCha2xBXAGEdSb/+vaOHM
0dZ5FCIG8oUwZEB4+CGSeeadqe1CmGTfj6+FNm3ifgpJ4mgMP2qoc/+/0+nXVI45
BIvcWXAPMcXC2gFIv0tdAm5m1bSQmAqvX/PO4EJvcai6eh+1rWe12TpbMpPWAbgI
8h7KS8Hz2Av1KVsfF4fs/a1Oq14+8R1vYeNsYE8Qh4MqNERtu4+lz4Eqs4rVHMux
jD6ApBz/Tsl3Fq6Zqzn1DzmiwQl3LbPxPhZ/cQIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFCg/czD2FL6tQHfL3ZTzTLWJfSPoMB8GA1UdIwQYMBaAFC/w65BScgOTnese
mjNEe0ThV91yMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWRmZGRm
ZTJmNjZiOTkxYmQ2YzBhNTIwMzZjOGJhZmVkMmYxZjI4OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE4OTlmNjctYzY1Zi00ZDY0LWI5ZmUtMmRlNmE2
MGM3MzA3L2IwNjhmMjY2Mzk2MzhmNTIyNTE4ZDJjOTI0NTM5NjI1YTI2YWY3NWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTg5OWY2Ny1jNjVmLTRkNjQtYjlmZS0yZGU2
YTYwYzczMDcvMWRmZGRmZTJmNjZiOTkxYmQ2YzBhNTIwMzZjOGJhZmVkMmYxZjI4
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGACgDq6AhMA0GCSqGSIb3DQEBCwUAA4IBAQBm0e/opIw07OhO
Wpdc161QzWY9LMPHjZsFgIuz7eTKH/PTbIPHa21XlYRTskyipw33Gb4O82fJBq5Z
98Ek0V3a33/XNbGLpYuXanMB/ZaI0siRJxO++zlSwbSDVNOQMfkpJPtPf4RQhZ+9
oTsIslozq+6zkzUOX66rzKsGbSVqXiNuZKVK5RIGVurjewtBcNnnjNr+K/ki/teh
IwftdpIiEc+jwEY39+WNW7qse++4sOEAHzbN/S2EAjmvONb6zBLXkZoyb4a/IEuh
/zgqESqacQ9EcRJy9550dwB5iD8OFc1ErmJYWi28/yhmjQnH60Zr9UEskFuhZaVV
c70u9uCG
-----END CERTIFICATE-----