Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/2d8c70ecbcc3b07320cb1f01f0d0a78e4f1ad50b.roa
File:                     2d8c70ecbcc3b07320cb1f01f0d0a78e4f1ad50b.roa (raw, json)
Hash identifier:          agSbDdULHjH/3GV+jox4EpsrJNvZtat7y6GMWeVM5SI=
Subject key identifier:   47:84:33:54:DB:52:49:9D:2D:67:90:B8:F6:69:27:F0:B5:FB:35:CF
Certificate issuer:       /CN=1f65d1c37e495ab494edc3bad30b1a6d4f88e383
Certificate serial:       0D5216
Authority key identifier: 4D:2E:30:FD:EB:2F:B3:C6:6F:8F:67:26:09:36:9D:75:D9:DE:CF:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/2d8c70ecbcc3b07320cb1f01f0d0a78e4f1ad50b.roa
Signing time:             Wed 24 Mar 2021 14:39:32 +0000
ROA not before:           Wed 24 Mar 2021 14:39:32 +0000
ROA not after:            Tue 24 Mar 2026 14:39:32 +0000
asID:                     264668
IP address blocks:        45.224.20.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872982 (0xd5216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f65d1c37e495ab494edc3bad30b1a6d4f88e383
        Validity
            Not Before: Mar 24 14:39:32 2021 GMT
            Not After : Mar 24 14:39:32 2026 GMT
        Subject: CN=2d8c70ecbcc3b07320cb1f01f0d0a78e4f1ad50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9c:a8:50:1c:b2:69:26:ea:25:3b:85:e2:9c:
                    95:80:5c:54:0c:f7:67:9d:6d:75:15:85:79:9d:e9:
                    a1:ab:bc:f6:a4:99:42:70:db:7f:40:01:53:b7:bd:
                    70:1f:3f:41:c7:d6:28:66:87:a3:88:a2:94:02:e8:
                    3f:d2:9a:1a:fc:a2:2e:ab:3a:d8:58:fa:a1:2c:8f:
                    05:f8:b4:79:f1:26:93:11:4a:11:95:3b:d9:0d:b7:
                    ce:ba:c5:79:a0:f8:55:0a:d6:5d:70:ef:4d:16:88:
                    d0:c3:84:1e:03:ee:c3:64:25:e5:4e:f7:bd:77:da:
                    23:76:39:a5:a8:46:09:f8:e4:10:77:01:60:31:ab:
                    14:48:fb:80:4b:5a:2b:59:79:e4:78:af:d0:8e:e1:
                    cf:b0:3b:5d:3c:36:ca:a4:86:63:aa:f4:53:a6:64:
                    4a:a4:73:96:47:ce:8d:f0:6b:8f:b1:85:88:ef:90:
                    eb:9c:e5:98:9b:64:6f:d0:dc:2d:bb:fe:ec:7d:cf:
                    95:f3:5a:7e:b1:14:e2:37:46:dc:73:d8:aa:a1:52:
                    c7:a5:65:c2:d6:c1:06:02:ac:72:42:9f:e6:7d:f1:
                    f9:39:73:f3:2f:83:c2:3c:93:af:47:11:06:32:d8:
                    18:66:23:13:a5:da:22:30:e6:ee:59:90:ac:78:86:
                    52:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:84:33:54:DB:52:49:9D:2D:67:90:B8:F6:69:27:F0:B5:FB:35:CF
            X509v3 Authority Key Identifier:
                keyid:4D:2E:30:FD:EB:2F:B3:C6:6F:8F:67:26:09:36:9D:75:D9:DE:CF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/2d8c70ecbcc3b07320cb1f01f0d0a78e4f1ad50b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:df:d0:ea:5f:ca:00:50:80:e8:f9:da:bb:77:53:7a:68:af:
         37:49:a8:b6:66:be:f1:29:40:14:56:89:28:a8:ee:f1:0f:48:
         e1:3a:07:11:83:1b:62:34:cb:6e:6e:39:32:57:2c:b4:bf:7e:
         fc:90:83:da:46:f7:8c:e4:a0:fc:fc:33:3e:41:c4:65:6d:da:
         13:98:73:ae:1f:fa:50:0e:fd:5b:27:7f:eb:40:e7:5d:44:2a:
         6f:eb:69:93:3c:e2:87:3e:32:a8:0a:ba:63:c7:a8:e0:8c:f2:
         8e:39:0e:a6:41:ab:fc:34:d5:d7:a2:4c:c6:93:0a:36:5d:8e:
         fb:da:5f:f2:3f:27:2c:e3:dd:81:f2:1e:d2:ab:77:b2:77:6c:
         e2:ca:07:7a:12:1d:4e:ff:f0:3d:a5:f5:b9:f8:f9:b2:32:1b:
         c1:1d:e8:5c:5b:20:1b:50:f1:39:7a:1e:66:2c:0b:52:8b:55:
         a1:49:e8:5a:2f:a7:fb:b1:94:a1:8e:cc:87:b0:8d:99:de:94:
         92:ac:60:f7:ec:c8:a4:61:ca:91:33:c4:cb:4b:f8:a9:e7:fe:
         37:3f:00:76:76:71:fc:86:bf:bb:18:c7:69:5f:93:52:6c:b5:
         19:a0:77:84:14:c9:47:d7:57:eb:f8:af:fa:8f:7d:75:a8:69:
         d3:ad:40:2d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDVIWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFm
NjVkMWMzN2U0OTVhYjQ5NGVkYzNiYWQzMGIxYTZkNGY4OGUzODMwHhcNMjEwMzI0
MTQzOTMyWhcNMjYwMzI0MTQzOTMyWjAzMTEwLwYDVQQDEygyZDhjNzBlY2JjYzNi
MDczMjBjYjFmMDFmMGQwYTc4ZTRmMWFkNTBiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkJyoUByyaSbqJTuF4pyVgFxUDPdnnW11FYV5nemhq7z2pJlC
cNt/QAFTt71wHz9Bx9YoZoejiKKUAug/0poa/KIuqzrYWPqhLI8F+LR58SaTEUoR
lTvZDbfOusV5oPhVCtZdcO9NFojQw4QeA+7DZCXlTve9d9ojdjmlqEYJ+OQQdwFg
MasUSPuAS1orWXnkeK/QjuHPsDtdPDbKpIZjqvRTpmRKpHOWR86N8GuPsYWI75Dr
nOWYm2Rv0Nwtu/7sfc+V81p+sRTiN0bcc9iqoVLHpWXC1sEGAqxyQp/mffH5OXPz
L4PCPJOvRxEGMtgYZiMTpdoiMObuWZCseIZSTwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEeEM1TbUkmdLWeQuPZpJ/C1+zXPMB8GA1UdIwQYMBaAFE0uMP3rL7PGb49n
Jgk2nXXZ3s9SMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWY2NWQx
YzM3ZTQ5NWFiNDk0ZWRjM2JhZDMwYjFhNmQ0Zjg4ZTM4My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmM2ZmFlOTktMmZiNi00MWViLTlmYTktNWNkYTBm
NTNhMDRjLzJkOGM3MGVjYmNjM2IwNzMyMGNiMWYwMWYwZDBhNzhlNGYxYWQ1MGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YzZmYWU5OS0yZmI2LTQxZWItOWZhOS01Y2Rh
MGY1M2EwNGMvMWY2NWQxYzM3ZTQ5NWFiNDk0ZWRjM2JhZDMwYjFhNmQ0Zjg4ZTM4
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3gFDANBgkqhkiG9w0BAQsFAAOCAQEAE9/Q6l/KAFCA6Pna
u3dTemivN0motma+8SlAFFaJKKju8Q9I4ToHEYMbYjTLbm45MlcstL9+/JCD2kb3
jOSg/PwzPkHEZW3aE5hzrh/6UA79Wyd/60DnXUQqb+tpkzzihz4yqAq6Y8eo4Izy
jjkOpkGr/DTV16JMxpMKNl2O+9pf8j8nLOPdgfIe0qt3snds4soHehIdTv/wPaX1
ufj5sjIbwR3oXFsgG1DxOXoeZiwLUotVoUnoWi+n+7GUoY7Mh7CNmd6Ukqxg9+zI
pGHKkTPEy0v4qef+Nz8AdnZx/Ia/uxjHaV+TUmy1GaB3hBTJR9dX6/iv+o99dahp
061ALQ==
-----END CERTIFICATE-----