Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/6249927dd679cd44cb76b1433063a380240a29aa.roa
File:                     6249927dd679cd44cb76b1433063a380240a29aa.roa (raw, json)
Hash identifier:          RKSGGEPT5KEvs+YNUSwrBTwUe5UxM3zi4i9g57KAdbs=
Subject key identifier:   13:FE:E9:A0:AA:76:38:B7:5C:E8:69:BC:0A:CA:9C:CE:5C:C6:57:73
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       0E4DA5
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/6249927dd679cd44cb76b1433063a380240a29aa.roa
Signing time:             Wed 24 Mar 2021 14:39:09 +0000
ROA not before:           Wed 24 Mar 2021 14:39:07 +0000
ROA not after:            Tue 24 Mar 2026 14:39:07 +0000
asID:                     61468
IP address blocks:        2800:68:12::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937381 (0xe4da5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 24 14:39:07 2021 GMT
            Not After : Mar 24 14:39:07 2026 GMT
        Subject: CN=6249927dd679cd44cb76b1433063a380240a29aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c3:4c:b9:c7:da:12:b3:bf:29:ed:69:52:23:
                    1c:72:0a:37:c1:1e:46:f3:f4:81:d8:57:ec:0e:e8:
                    c3:c6:3f:c0:67:5c:b1:89:31:de:92:fb:5a:a9:ec:
                    b1:43:77:b8:3d:84:d3:f6:f9:1d:10:a0:75:3f:8a:
                    6c:c5:e0:38:cb:63:20:d1:da:72:52:74:78:e9:91:
                    a4:f1:4b:39:80:02:6b:b5:37:a3:04:53:d3:d0:e6:
                    27:c3:61:9f:dd:bf:38:bf:07:59:11:2a:e6:c7:4e:
                    f5:2f:1a:27:ca:00:1a:58:a1:c4:cd:d1:74:78:5a:
                    11:75:ab:4f:16:ad:29:72:98:fb:de:c1:9d:32:a5:
                    01:b7:a1:c6:9f:bf:2c:5d:d4:d2:31:bb:7e:6f:8e:
                    76:f1:0d:74:fe:9a:c3:bd:46:e1:e8:92:63:f0:6a:
                    2e:61:be:cd:b8:22:36:56:10:d2:f8:c6:d4:7a:be:
                    c0:6a:f2:42:1e:82:f0:a0:12:fa:66:e7:29:56:9c:
                    6f:ce:20:d9:b5:43:c7:19:ea:f6:e9:77:32:9c:b3:
                    e3:2a:30:d5:59:57:8f:43:24:df:dd:00:09:2d:15:
                    8c:76:2b:16:60:75:79:74:b8:90:86:14:15:fe:f4:
                    e4:01:7f:fe:85:26:aa:52:41:ff:f3:9e:f6:56:f8:
                    16:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FE:E9:A0:AA:76:38:B7:5C:E8:69:BC:0A:CA:9C:CE:5C:C6:57:73
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/6249927dd679cd44cb76b1433063a380240a29aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:a3:cf:95:b8:30:3d:70:75:25:b2:81:4e:24:6a:89:84:2f:
         03:73:a4:0e:78:69:50:b5:73:ff:f4:b8:66:77:9a:68:3a:24:
         ad:0b:6e:46:5d:09:fd:db:8f:53:77:fc:e4:cb:3d:f3:da:20:
         a1:a4:54:09:36:92:f0:a0:4f:c4:a7:ba:bf:d7:02:8c:ba:aa:
         ce:9e:65:7d:3d:79:53:6b:1e:d3:62:d4:ab:65:f0:4d:89:ad:
         e6:c5:85:c7:c6:48:39:19:03:10:de:82:7e:73:05:1a:db:09:
         01:c7:76:64:64:63:f0:a7:67:20:b8:70:01:0b:3c:8a:62:eb:
         61:f6:21:b5:29:0c:1a:f7:02:c7:09:05:0c:8b:09:72:3f:e2:
         1d:00:c4:31:a2:c2:d0:31:01:bb:10:61:59:07:8c:f8:45:92:
         4b:6d:f9:be:b3:5c:22:44:58:5b:8a:56:77:d8:85:8c:96:38:
         7f:f1:95:46:ca:8f:12:85:f3:51:5d:88:70:14:4b:d5:71:1f:
         7b:34:10:58:8e:48:6e:5c:ea:23:52:12:a4:8a:94:5f:91:eb:
         c3:99:67:ce:6c:25:1b:02:46:40:16:a4:d1:eb:d2:b0:a4:ba:
         48:c1:02:e4:60:e1:7b:4d:3e:be:ff:76:81:86:eb:19:9e:de:
         62:8d:2d:d8
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDk2lMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA1
YWU2OWQyZjExMWM3OTQxNjVhMDFhODY1ZmUxODdiODgzMTIyN2QwHhcNMjEwMzI0
MTQzOTA3WhcNMjYwMzI0MTQzOTA3WjAzMTEwLwYDVQQDEyg2MjQ5OTI3ZGQ2Nzlj
ZDQ0Y2I3NmIxNDMzMDYzYTM4MDI0MGEyOWFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAscNMucfaErO/Ke1pUiMccgo3wR5G8/SB2FfsDujDxj/AZ1yx
iTHekvtaqeyxQ3e4PYTT9vkdEKB1P4psxeA4y2Mg0dpyUnR46ZGk8Us5gAJrtTej
BFPT0OYnw2Gf3b84vwdZESrmx071LxonygAaWKHEzdF0eFoRdatPFq0pcpj73sGd
MqUBt6HGn78sXdTSMbt+b4528Q10/prDvUbh6JJj8GouYb7NuCI2VhDS+MbUer7A
avJCHoLwoBL6ZucpVpxvziDZtUPHGer26XcynLPjKjDVWVePQyTf3QAJLRWMdisW
YHV5dLiQhhQV/vTkAX/+hSaqUkH/8572VvgWZQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFBP+6aCqdji3XOhpvArKnM5cxldzMB8GA1UdIwQYMBaAFIIUXtq2WB5z5L1U
YAk+zsl2C8SfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDVhZTY5
ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGM3OTRiZDAtN2Q5NC00NDVmLTgyMzMtMTIwMGM5
YzZmMmVjLzYyNDk5MjdkZDY3OWNkNDRjYjc2YjE0MzMwNjNhMzgwMjQwYTI5YWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84Yzc5NGJkMC03ZDk0LTQ0NWYtODIzMy0xMjAw
YzljNmYyZWMvMDVhZTY5ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgAAGgAEjANBgkqhkiG9w0BAQsFAAOCAQEAOKPPlbgwPXB1
JbKBTiRqiYQvA3OkDnhpULVz//S4ZneaaDokrQtuRl0J/duPU3f85Ms989ogoaRU
CTaS8KBPxKe6v9cCjLqqzp5lfT15U2se02LUq2XwTYmt5sWFx8ZIORkDEN6CfnMF
GtsJAcd2ZGRj8KdnILhwAQs8imLrYfYhtSkMGvcCxwkFDIsJcj/iHQDEMaLC0DEB
uxBhWQeM+EWSS235vrNcIkRYW4pWd9iFjJY4f/GVRsqPEoXzUV2IcBRL1XEfezQQ
WI5IblzqI1ISpIqUX5Hrw5lnzmwlGwJGQBak0evSsKS6SMEC5GDhe00+vv92gYbr
GZ7eYo0t2A==
-----END CERTIFICATE-----