Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76a5b994-83f7-451e-a79d-be17942e228d/37b8158389690c85c554d1b211b686049ae24038.roa
File:                     37b8158389690c85c554d1b211b686049ae24038.roa (raw, json)
Hash identifier:          MVFMKIXilRMXkT4Dn9GpxEch1aT097Fgl2wS6rLuG84=
Subject key identifier:   BD:0F:6A:4C:BD:48:88:8D:01:44:2A:2B:E2:B9:C2:4E:68:38:06:AC
Certificate issuer:       /CN=0a62334472d90f8f616e01c4fe6b92ab5a455575
Certificate serial:       07DB
Authority key identifier: 47:AD:52:32:F0:0E:F2:23:56:BE:67:65:E5:58:13:86:84:E4:F5:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a62334472d90f8f616e01c4fe6b92ab5a455575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76a5b994-83f7-451e-a79d-be17942e228d/37b8158389690c85c554d1b211b686049ae24038.roa
Signing time:             Mon 12 Sep 2022 17:41:14 +0000
ROA not before:           Mon 12 Sep 2022 17:39:06 +0000
ROA not after:            Thu 12 Sep 2024 17:39:06 +0000
asID:                     272851
IP address blocks:        2803:8290::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2011 (0x7db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a62334472d90f8f616e01c4fe6b92ab5a455575
        Validity
            Not Before: Sep 12 17:39:06 2022 GMT
            Not After : Sep 12 17:39:06 2024 GMT
        Subject: CN=37b8158389690c85c554d1b211b686049ae24038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:78:16:a0:a8:29:87:4d:44:d7:b2:41:62:2f:
                    2d:4c:91:e8:22:a4:b7:97:76:39:ca:95:37:cc:12:
                    b8:9c:2c:b9:01:54:1a:fb:b7:df:88:45:ec:6b:d2:
                    b3:13:d5:f7:ad:a6:74:44:14:34:93:48:48:11:3f:
                    ac:23:08:ca:81:67:67:c4:73:8f:af:69:5b:30:3f:
                    f2:e3:ea:b4:61:1f:83:30:4a:65:d6:e0:86:0d:37:
                    28:f5:e9:43:f1:a3:0d:ce:cd:4f:44:24:db:84:a8:
                    41:90:1d:f9:7e:92:32:9a:a3:dd:47:4f:0a:37:39:
                    03:80:a1:2e:4f:3f:62:36:d5:ac:01:4e:c5:3a:87:
                    de:32:80:40:b0:92:a8:8e:2c:51:2e:f5:3a:68:ab:
                    95:6f:66:33:87:55:73:0e:01:12:d5:2e:70:51:3a:
                    d0:92:e0:d6:90:58:4c:da:b6:9f:62:4a:18:aa:63:
                    b9:f3:48:1d:f3:cc:a4:36:5d:19:c3:94:72:ec:a3:
                    dc:0b:90:bc:7d:4c:27:f7:a6:d3:fd:14:2c:b5:b3:
                    42:48:c6:8d:3a:24:d5:50:33:75:01:d1:5c:75:7f:
                    2c:f5:00:c6:48:bd:73:a8:f3:9a:69:2a:aa:e3:5b:
                    11:0d:c8:ef:aa:3b:78:56:f7:f2:f3:d3:5a:bd:e1:
                    c1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0F:6A:4C:BD:48:88:8D:01:44:2A:2B:E2:B9:C2:4E:68:38:06:AC
            X509v3 Authority Key Identifier:
                keyid:47:AD:52:32:F0:0E:F2:23:56:BE:67:65:E5:58:13:86:84:E4:F5:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a62334472d90f8f616e01c4fe6b92ab5a455575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76a5b994-83f7-451e-a79d-be17942e228d/37b8158389690c85c554d1b211b686049ae24038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76a5b994-83f7-451e-a79d-be17942e228d/0a62334472d90f8f616e01c4fe6b92ab5a455575.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8290::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:6f:ab:33:d0:99:43:a1:14:d4:d0:6a:b8:54:32:e6:2e:4b:
         69:44:14:8c:44:57:45:78:9d:18:be:c4:5e:73:32:ac:4a:cd:
         13:c4:85:c9:2b:a4:53:53:78:47:fc:1e:5b:f7:9a:fb:b2:3b:
         97:05:8a:8b:3b:55:4b:f1:b0:a6:66:00:ab:58:1b:b9:d0:9c:
         ec:46:14:8a:d0:f2:de:4a:6f:db:ed:ef:db:6d:7b:2b:0b:d8:
         0c:1d:e9:58:1f:0e:4a:13:70:d4:11:6a:ba:75:35:c3:97:16:
         6e:19:bb:db:fa:04:76:bc:8c:f0:95:77:2f:d8:f1:a7:64:90:
         df:ad:26:10:11:1f:4c:24:25:91:9a:9f:f6:86:28:35:18:cb:
         2f:e0:5a:c9:9b:5b:d2:56:b1:c1:24:5c:76:40:61:eb:cd:77:
         c2:4a:08:29:1c:b4:95:7e:de:09:db:fb:01:07:f3:3a:36:94:
         e2:b0:09:73:4e:85:87:7c:d2:e0:27:75:51:20:c3:f3:b8:42:
         6f:a6:ee:af:25:cf:82:b2:84:99:4c:7a:b6:0b:8a:ea:9d:81:
         1f:0c:5e:9c:18:e5:55:fb:b0:3b:7e:5d:17:1d:ab:cb:8b:22:
         d1:55:fd:3b:68:29:5b:60:fb:96:a5:8d:0a:54:ab:1e:d6:26:
         70:4c:8d:24
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICB9swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMGE2
MjMzNDQ3MmQ5MGY4ZjYxNmUwMWM0ZmU2YjkyYWI1YTQ1NTU3NTAeFw0yMjA5MTIx
NzM5MDZaFw0yNDA5MTIxNzM5MDZaMDMxMTAvBgNVBAMTKDM3YjgxNTgzODk2OTBj
ODVjNTU0ZDFiMjExYjY4NjA0OWFlMjQwMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHeBagqCmHTUTXskFiLy1MkegipLeXdjnKlTfMEricLLkBVBr7
t9+IRexr0rMT1fetpnREFDSTSEgRP6wjCMqBZ2fEc4+vaVswP/Lj6rRhH4MwSmXW
4IYNNyj16UPxow3OzU9EJNuEqEGQHfl+kjKao91HTwo3OQOAoS5PP2I21awBTsU6
h94ygECwkqiOLFEu9Tpoq5VvZjOHVXMOARLVLnBROtCS4NaQWEzatp9iShiqY7nz
SB3zzKQ2XRnDlHLso9wLkLx9TCf3ptP9FCy1s0JIxo06JNVQM3UB0Vx1fyz1AMZI
vXOo85ppKqrjWxENyO+qO3hW9/Lz01q94cGrAgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUvQ9qTL1IiI0BRCor4rnCTmg4BqwwHwYDVR0jBBgwFoAUR61SMvAO8iNWvmdl
5VgThoTk9dAwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8wYTYyMzM0
NDcyZDkwZjhmNjE2ZTAxYzRmZTZiOTJhYjVhNDU1NTc1LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy83NmE1Yjk5NC04M2Y3LTQ1MWUtYTc5ZC1iZTE3OTQy
ZTIyOGQvMzdiODE1ODM4OTY5MGM4NWM1NTRkMWIyMTFiNjg2MDQ5YWUyNDAzOC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzc2YTViOTk0LTgzZjctNDUxZS1hNzlkLWJlMTc5
NDJlMjI4ZC8wYTYyMzM0NDcyZDkwZjhmNjE2ZTAxYzRmZTZiOTJhYjVhNDU1NTc1
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAOCkDANBgkqhkiG9w0BAQsFAAOCAQEAmm+rM9CZQ6EU1NBq
uFQy5i5LaUQUjERXRXidGL7EXnMyrErNE8SFySukU1N4R/weW/ea+7I7lwWKiztV
S/GwpmYAq1gbudCc7EYUitDy3kpv2+3v2217KwvYDB3pWB8OShNw1BFqunU1w5cW
bhm72/oEdryM8JV3L9jxp2SQ360mEBEfTCQlkZqf9oYoNRjLL+BayZtb0laxwSRc
dkBh6813wkoIKRy0lX7eCdv7AQfzOjaU4rAJc06Fh3zS4Cd1USDD87hCb6buryXP
grKEmUx6tguK6p2BHwxenBjlVfuwO35dFx2ry4si0VX9O2gpW2D7lqWNClSrHtYm
cEyNJA==
-----END CERTIFICATE-----