Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84511216-bbbe-4017-99af-979a9187b98c/964661a3ba0ecd02d01843a8503b5283417fd39c.roa
File:                     964661a3ba0ecd02d01843a8503b5283417fd39c.roa (raw, json)
Hash identifier:          D5OgVG1hDBDr2Ao+PT9t+Eiwoml9+/bEwczkzPWMFkc=
Subject key identifier:   61:7B:C4:1B:E5:E0:E9:FB:6D:D5:EB:B2:2E:87:8A:FB:9F:03:4C:06
Certificate issuer:       /CN=2e67f1fac284e9a5739417637f884d6a7ccf7100
Certificate serial:       1C900B
Authority key identifier: 35:EF:0F:2D:C8:FA:BC:3A:0E:23:67:DC:B5:15:1C:C1:1E:D1:B1:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2e67f1fac284e9a5739417637f884d6a7ccf7100.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84511216-bbbe-4017-99af-979a9187b98c/964661a3ba0ecd02d01843a8503b5283417fd39c.roa
Signing time:             Sat 02 Dec 2023 01:44:37 +0000
ROA not before:           Sat 02 Dec 2023 01:44:37 +0000
ROA not after:            Tue 02 Dec 2025 01:44:37 +0000
asID:                     64121
IP address blocks:        45.183.179.0/24 maxlen: 24
                          2803:9b60::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871883 (0x1c900b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e67f1fac284e9a5739417637f884d6a7ccf7100
        Validity
            Not Before: Dec  2 01:44:37 2023 GMT
            Not After : Dec  2 01:44:37 2025 GMT
        Subject: CN=964661a3ba0ecd02d01843a8503b5283417fd39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0c:57:f2:73:28:53:f9:a1:f4:25:34:8b:f9:
                    4e:4f:5a:f9:7e:7c:ea:59:fc:e0:a5:ed:01:e7:35:
                    d2:f2:54:39:54:30:05:05:2b:43:3b:93:9e:96:8e:
                    c9:5e:76:da:de:70:56:10:89:1a:2d:86:1a:9a:0b:
                    bd:f7:3e:0c:84:15:fd:a7:61:54:ef:2e:ee:cd:2d:
                    3d:b4:37:5f:cc:a4:13:24:af:77:0d:40:40:b9:24:
                    77:4f:bd:be:79:45:57:94:54:b9:90:19:b7:bc:44:
                    e0:9a:d1:3a:87:bb:ba:43:f4:7c:62:61:dd:d4:84:
                    3e:24:04:62:6a:eb:42:3d:03:42:6b:4d:e5:ad:f0:
                    ed:64:ce:ea:34:9b:27:1b:ff:e0:46:57:fc:86:85:
                    8f:2f:a8:92:fe:71:aa:cb:7f:17:cd:de:9c:bf:95:
                    38:75:a9:70:34:92:b4:a9:77:9c:50:eb:e1:80:2f:
                    ed:e0:45:af:3a:ae:a6:e2:89:71:82:f0:1c:07:7d:
                    c5:ed:bd:29:34:d9:58:24:b1:43:ee:40:b6:14:28:
                    be:09:8a:8b:46:32:5a:54:cf:f0:5f:36:8d:42:1a:
                    e0:19:b8:47:1a:bc:ec:ad:3b:a5:be:ec:bf:8b:c7:
                    52:68:11:01:72:c0:5b:6b:48:ff:85:91:7d:bb:bf:
                    00:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7B:C4:1B:E5:E0:E9:FB:6D:D5:EB:B2:2E:87:8A:FB:9F:03:4C:06
            X509v3 Authority Key Identifier:
                keyid:35:EF:0F:2D:C8:FA:BC:3A:0E:23:67:DC:B5:15:1C:C1:1E:D1:B1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2e67f1fac284e9a5739417637f884d6a7ccf7100.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84511216-bbbe-4017-99af-979a9187b98c/964661a3ba0ecd02d01843a8503b5283417fd39c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84511216-bbbe-4017-99af-979a9187b98c/2e67f1fac284e9a5739417637f884d6a7ccf7100.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.179.0/24
                IPv6:
                  2803:9b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:c8:1e:07:d2:8a:a7:a2:76:19:4d:55:92:df:d3:f2:27:99:
         43:73:57:32:03:32:0c:c8:b1:32:05:76:07:c0:9c:75:61:50:
         4b:65:3f:04:d5:7b:de:dd:d1:0f:07:93:d3:71:c6:21:a2:60:
         3d:9b:b2:07:eb:53:6d:85:7a:b2:eb:bb:a9:17:5e:7c:48:68:
         8d:04:2b:d1:37:e8:9a:50:22:c5:e1:e2:a1:75:5d:5e:e0:0f:
         af:91:c1:5f:fd:5a:46:26:79:04:ad:70:13:fd:34:6a:a0:65:
         59:86:f0:58:9d:9e:3a:24:02:57:f4:9c:a1:29:f3:02:07:37:
         10:8d:c3:9e:bd:2d:60:1f:ca:8d:0e:76:68:cf:27:d8:ec:3b:
         89:d3:01:1e:22:ce:b2:3d:1a:b2:02:3e:4a:3a:3c:52:a7:df:
         2d:b6:0c:51:e9:05:45:4e:f9:13:00:0f:e2:29:11:04:61:e4:
         19:8b:db:66:bb:27:12:8f:80:27:37:f8:4a:dd:61:cd:27:78:
         7a:02:7f:a6:1a:e8:db:e0:f6:07:0b:e4:a9:12:c8:d5:91:c0:
         69:b8:ee:ce:92:e5:33:04:a6:a2:81:b2:c7:8e:dc:58:10:0b:
         5a:71:8b:2d:c4:a8:c7:b4:1a:6a:51:e3:75:24:ed:1e:39:86:
         6c:c9:54:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDHJALMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJl
NjdmMWZhYzI4NGU5YTU3Mzk0MTc2MzdmODg0ZDZhN2NjZjcxMDAwHhcNMjMxMjAy
MDE0NDM3WhcNMjUxMjAyMDE0NDM3WjAzMTEwLwYDVQQDEyg5NjQ2NjFhM2JhMGVj
ZDAyZDAxODQzYTg1MDNiNTI4MzQxN2ZkMzljMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiwxX8nMoU/mh9CU0i/lOT1r5fnzqWfzgpe0B5zXS8lQ5VDAF
BStDO5Oelo7JXnba3nBWEIkaLYYamgu99z4MhBX9p2FU7y7uzS09tDdfzKQTJK93
DUBAuSR3T72+eUVXlFS5kBm3vETgmtE6h7u6Q/R8YmHd1IQ+JARiautCPQNCa03l
rfDtZM7qNJsnG//gRlf8hoWPL6iS/nGqy38Xzd6cv5U4dalwNJK0qXecUOvhgC/t
4EWvOq6m4olxgvAcB33F7b0pNNlYJLFD7kC2FCi+CYqLRjJaVM/wXzaNQhrgGbhH
GrzsrTulvuy/i8dSaBEBcsBba0j/hZF9u78ARwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFGF7xBvl4On7bdXrsi6HivufA0wGMB8GA1UdIwQYMBaAFDXvDy3I+rw6DiNn
3LUVHMEe0bF6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmU2N2Yx
ZmFjMjg0ZTlhNTczOTQxNzYzN2Y4ODRkNmE3Y2NmNzEwMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQ1MTEyMTYtYmJiZS00MDE3LTk5YWYtOTc5YTkx
ODdiOThjLzk2NDY2MWEzYmEwZWNkMDJkMDE4NDNhODUwM2I1MjgzNDE3ZmQzOWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDUxMTIxNi1iYmJlLTQwMTctOTlhZi05Nzlh
OTE4N2I5OGMvMmU2N2YxZmFjMjg0ZTlhNTczOTQxNzYzN2Y4ODRkNmE3Y2NmNzEw
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAC23szANBAIAAjAHAwUAKAObYDANBgkqhkiG9w0BAQsFAAOC
AQEAUcgeB9KKp6J2GU1Vkt/T8ieZQ3NXMgMyDMixMgV2B8CcdWFQS2U/BNV73t3R
DweT03HGIaJgPZuyB+tTbYV6suu7qRdefEhojQQr0TfomlAixeHioXVdXuAPr5HB
X/1aRiZ5BK1wE/00aqBlWYbwWJ2eOiQCV/ScoSnzAgc3EI3Dnr0tYB/KjQ52aM8n
2Ow7idMBHiLOsj0asgI+Sjo8UqffLbYMUekFRU75EwAP4ikRBGHkGYvbZrsnEo+A
Jzf4St1hzSd4egJ/phro2+D2BwvkqRLI1ZHAabjuzpLlMwSmooGyx47cWBALWnGL
LcSox7QaalHjdSTtHjmGbMlUzw==
-----END CERTIFICATE-----