Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8944f36b-2325-44ed-b803-7566ee057cd8/9dca33f1c90ee8661332a0f7732c6d2ac544c283.roa
File:                     9dca33f1c90ee8661332a0f7732c6d2ac544c283.roa (raw, json)
Hash identifier:          l9ItENPM1FNkV9ORiJ2AWa5zxDAL0rdXbMyFtHeTDwo=
Subject key identifier:   86:A2:3C:AC:D8:F0:E4:3D:B0:7B:10:D6:2D:97:82:89:EE:E0:BC:64
Certificate issuer:       /CN=fc3eb9c806dfd203fdb6fc49031057505a0c6f13
Certificate serial:       0C521F
Authority key identifier: 2F:9B:B8:0D:9F:F8:55:8E:F5:47:19:FF:D0:B2:4C:5C:6B:29:4B:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc3eb9c806dfd203fdb6fc49031057505a0c6f13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8944f36b-2325-44ed-b803-7566ee057cd8/9dca33f1c90ee8661332a0f7732c6d2ac544c283.roa
Signing time:             Wed 24 Mar 2021 22:50:59 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     266783
IP address blocks:        45.235.12.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 807455 (0xc521f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3eb9c806dfd203fdb6fc49031057505a0c6f13
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=9dca33f1c90ee8661332a0f7732c6d2ac544c283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ab:76:dc:df:99:cb:d5:af:14:0c:7c:97:1a:
                    a2:e0:ff:53:0b:5b:82:89:1a:cb:dd:f1:03:70:35:
                    68:36:97:e6:32:4c:e9:04:d6:02:9f:af:e3:99:a5:
                    f3:e4:b8:d8:08:73:b1:de:0d:c4:c1:49:dc:66:88:
                    70:3e:2e:6f:e8:cf:da:1c:7c:1f:fe:64:62:98:98:
                    9d:3e:b0:be:a4:e4:06:ad:2c:66:03:23:cd:ab:84:
                    f6:23:53:6c:0a:20:10:56:8d:f1:26:94:bc:d6:ec:
                    d5:e7:3e:35:b2:89:8d:22:ba:cc:f4:7b:96:33:9c:
                    c8:a5:ca:26:23:60:be:71:f4:26:29:fc:97:3f:b0:
                    2c:2f:f5:a7:2e:e4:f5:c6:e7:4b:e4:0a:df:f4:f8:
                    d3:6d:f2:cf:6d:3c:bc:ba:a7:2e:d4:26:90:5a:42:
                    f7:6c:02:ea:ec:8a:38:7f:36:5d:a8:ab:b4:ee:b5:
                    f1:84:bc:06:ef:65:ae:ac:2f:c0:20:79:07:d1:25:
                    3e:d0:12:4b:a9:02:d0:90:7f:ab:40:36:3c:4c:11:
                    9e:bd:1d:70:2e:e2:68:f8:fc:83:73:d6:00:fa:ad:
                    81:1e:3f:a7:de:0a:22:ac:7b:91:dc:38:24:9a:9d:
                    5c:36:fb:c0:f2:66:c7:ed:7c:da:3a:dd:fc:3b:e4:
                    f5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A2:3C:AC:D8:F0:E4:3D:B0:7B:10:D6:2D:97:82:89:EE:E0:BC:64
            X509v3 Authority Key Identifier:
                keyid:2F:9B:B8:0D:9F:F8:55:8E:F5:47:19:FF:D0:B2:4C:5C:6B:29:4B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc3eb9c806dfd203fdb6fc49031057505a0c6f13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8944f36b-2325-44ed-b803-7566ee057cd8/9dca33f1c90ee8661332a0f7732c6d2ac544c283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8944f36b-2325-44ed-b803-7566ee057cd8/fc3eb9c806dfd203fdb6fc49031057505a0c6f13.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:93:59:ad:bd:27:4a:aa:f9:3b:33:fd:e1:ca:5d:93:a5:4a:
         5c:82:6b:c2:bf:c5:b2:aa:2a:4c:7c:91:ed:62:03:d8:07:19:
         07:3d:91:7e:56:79:3e:54:56:24:c5:b3:6a:43:21:b4:07:14:
         e8:81:cc:b9:a1:9f:37:b4:81:9c:bc:f6:d9:45:85:a3:43:9f:
         ad:73:e4:37:ee:d2:fc:d9:60:7a:4b:b3:09:17:85:dc:aa:dd:
         79:da:9e:e2:83:7b:ec:0b:7e:c5:62:a8:c9:14:c6:3e:2b:1d:
         95:6c:5f:90:dc:f0:1e:a3:01:a1:44:cc:a0:73:5d:6e:64:6f:
         71:e9:0e:5c:46:ba:c7:52:9f:c6:d4:07:c9:fe:3f:af:7c:21:
         79:11:e1:fa:e9:9b:e6:a5:cc:39:15:4b:d8:99:51:b6:ce:54:
         a9:4e:c8:3a:82:07:04:22:35:65:4b:2a:22:0f:88:35:60:92:
         7d:30:34:cf:18:f0:50:e6:86:c3:2d:c1:a3:78:b8:18:1f:4f:
         c0:53:fa:54:51:19:68:db:e2:ac:ec:a8:c6:33:98:ad:a0:2d:
         57:31:9e:e4:fd:b4:17:b1:17:91:70:26:f6:e8:eb:ed:2e:43:
         75:ec:e0:25:6f:a6:45:ea:54:5d:8d:58:05:d3:46:2e:a9:c2:
         e8:b8:55:cd
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDFIfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZj
M2ViOWM4MDZkZmQyMDNmZGI2ZmM0OTAzMTA1NzUwNWEwYzZmMTMwHhcNMjEwMzI0
MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEyg5ZGNhMzNmMWM5MGVl
ODY2MTMzMmEwZjc3MzJjNmQyYWM1NDRjMjgzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlqt23N+Zy9WvFAx8lxqi4P9TC1uCiRrL3fEDcDVoNpfmMkzp
BNYCn6/jmaXz5LjYCHOx3g3EwUncZohwPi5v6M/aHHwf/mRimJidPrC+pOQGrSxm
AyPNq4T2I1NsCiAQVo3xJpS81uzV5z41somNIrrM9HuWM5zIpcomI2C+cfQmKfyX
P7AsL/WnLuT1xudL5Arf9PjTbfLPbTy8uqcu1CaQWkL3bALq7Io4fzZdqKu07rXx
hLwG72WurC/AIHkH0SU+0BJLqQLQkH+rQDY8TBGevR1wLuJo+PyDc9YA+q2BHj+n
3goirHuR3Dgkmp1cNvvA8mbH7XzaOt38O+T1XwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIaiPKzY8OQ9sHsQ1i2Xgonu4LxkMB8GA1UdIwQYMBaAFC+buA2f+FWO9UcZ
/9CyTFxrKUsUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmMzZWI5
YzgwNmRmZDIwM2ZkYjZmYzQ5MDMxMDU3NTA1YTBjNmYxMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODk0NGYzNmItMjMyNS00NGVkLWI4MDMtNzU2NmVl
MDU3Y2Q4LzlkY2EzM2YxYzkwZWU4NjYxMzMyYTBmNzczMmM2ZDJhYzU0NGMyODMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84OTQ0ZjM2Yi0yMzI1LTQ0ZWQtYjgwMy03NTY2
ZWUwNTdjZDgvZmMzZWI5YzgwNmRmZDIwM2ZkYjZmYzQ5MDMxMDU3NTA1YTBjNmYx
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3rDDANBgkqhkiG9w0BAQsFAAOCAQEAgZNZrb0nSqr5OzP9
4cpdk6VKXIJrwr/FsqoqTHyR7WID2AcZBz2RflZ5PlRWJMWzakMhtAcU6IHMuaGf
N7SBnLz22UWFo0OfrXPkN+7S/NlgekuzCReF3Krdedqe4oN77At+xWKoyRTGPisd
lWxfkNzwHqMBoUTMoHNdbmRvcekOXEa6x1KfxtQHyf4/r3wheRHh+umb5qXMORVL
2JlRts5UqU7IOoIHBCI1ZUsqIg+INWCSfTA0zxjwUOaGwy3Bo3i4GB9PwFP6VFEZ
aNvirOyoxjOYraAtVzGe5P20F7EXkXAm9ujr7S5DdezgJW+mRepUXY1YBdNGLqnC
6LhVzQ==
-----END CERTIFICATE-----