Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/377c2a6b6e490a96ef783cc34c29a75018c7e4c3.roa
File:                     377c2a6b6e490a96ef783cc34c29a75018c7e4c3.roa (raw, json)
Hash identifier:          09AoSn+L5m+EBY4WLuQ0sqRsU0WR/WNyvI7eSHcuKuQ=
Subject key identifier:   9A:2C:C7:CD:15:64:60:97:7A:70:0B:E8:54:24:61:ED:9C:AC:12:3B
Certificate issuer:       /CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
Certificate serial:       137F59
Authority key identifier: 4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/377c2a6b6e490a96ef783cc34c29a75018c7e4c3.roa
Signing time:             Wed 10 Nov 2021 14:26:30 +0000
ROA not before:           Wed 10 Nov 2021 03:00:00 +0000
ROA not after:            Tue 10 Nov 2026 03:00:00 +0000
asID:                     263774
IP address blocks:        170.83.124.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1277785 (0x137f59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
        Validity
            Not Before: Nov 10 03:00:00 2021 GMT
            Not After : Nov 10 03:00:00 2026 GMT
        Subject: CN=377c2a6b6e490a96ef783cc34c29a75018c7e4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:85:a5:56:f7:1d:47:b9:c2:aa:c3:20:52:d5:
                    22:f7:97:85:77:6b:69:b6:0c:58:28:cb:53:80:aa:
                    68:d6:6f:b3:ca:eb:d1:e9:f3:3b:a9:2c:a4:12:3b:
                    d2:8f:f6:cf:86:b9:a2:23:57:da:ad:ab:45:a1:f6:
                    22:e3:5e:88:f7:b5:62:ba:f7:f0:5d:35:5d:de:37:
                    1a:90:f6:f6:5f:e0:1b:af:43:75:e3:da:c2:30:13:
                    df:5b:51:8a:22:81:e7:73:8d:ff:ce:67:31:ff:63:
                    8a:a2:30:27:82:5f:a3:64:b4:cb:15:bb:d4:69:3c:
                    fa:6f:31:4b:81:45:9f:bf:e1:3e:d4:a4:d3:db:0f:
                    d0:70:a8:96:d8:80:cf:52:10:0f:57:69:4d:20:bf:
                    5b:0f:3d:7b:d0:d4:92:a4:82:e1:55:a1:ea:2d:54:
                    4a:92:a4:a8:35:a6:c5:0b:5e:b2:04:ba:93:c8:43:
                    43:28:98:3b:b0:15:01:57:4a:7b:04:9b:2f:90:90:
                    35:62:91:2d:14:dc:75:cd:f4:b4:a5:96:7a:cc:fa:
                    a1:e2:21:12:4f:bd:11:6a:2e:2e:f7:55:eb:61:8d:
                    74:25:e6:5a:2b:f2:9e:ef:42:e9:83:82:32:c1:70:
                    25:50:27:a0:06:21:f9:d2:f9:9e:5f:0a:31:49:d1:
                    f9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2C:C7:CD:15:64:60:97:7A:70:0B:E8:54:24:61:ED:9C:AC:12:3B
            X509v3 Authority Key Identifier:
                keyid:4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/377c2a6b6e490a96ef783cc34c29a75018c7e4c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/0306af81c270a60bd7a6b440bc97d420322ebcb5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:e2:55:0e:2f:8b:a7:bb:0f:e1:9a:b7:37:5c:fd:45:ed:86:
         de:ae:d3:17:78:a4:fa:1a:75:70:76:41:cd:fd:03:e5:28:6c:
         4a:07:17:97:f8:a3:e4:75:52:e5:9c:9e:80:86:a6:83:e8:cc:
         93:ca:32:bf:07:e4:80:7b:39:0a:2c:1c:48:7c:6b:97:a6:fe:
         26:c4:80:80:54:8e:89:02:be:76:ab:08:e6:c8:32:70:44:29:
         68:87:19:65:95:4b:29:49:ab:fe:ea:1e:a6:d1:bd:c6:3f:ac:
         99:7d:d3:f3:39:60:a4:ca:25:d0:a8:b4:bb:f7:90:fc:77:4d:
         ec:01:50:2f:43:26:53:c7:ad:ad:11:7c:17:97:7e:18:5a:6a:
         b7:5a:a2:47:3c:7e:6a:c8:81:39:1a:68:1f:93:b2:fa:7c:99:
         31:14:8c:74:ae:4f:4d:9a:e2:d6:56:41:56:b5:a4:39:48:07:
         14:d8:f7:7b:47:8f:3f:70:04:1e:eb:96:67:0c:8b:5e:7f:e9:
         10:49:02:3e:f7:85:26:98:9e:b2:c1:95:05:5f:7e:4b:86:40:
         bc:33:5b:75:7f:2c:a8:86:5b:79:ce:e1:f0:d1:71:92:e3:5f:
         e4:ba:67:b6:ad:3c:e2:5f:6a:7f:a8:6f:55:45:d1:9d:2f:e4:
         de:91:98:ed
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDE39ZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAz
MDZhZjgxYzI3MGE2MGJkN2E2YjQ0MGJjOTdkNDIwMzIyZWJjYjUwHhcNMjExMTEw
MDMwMDAwWhcNMjYxMTEwMDMwMDAwWjAzMTEwLwYDVQQDEygzNzdjMmE2YjZlNDkw
YTk2ZWY3ODNjYzM0YzI5YTc1MDE4YzdlNGMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg4WlVvcdR7nCqsMgUtUi95eFd2tptgxYKMtTgKpo1m+zyuvR
6fM7qSykEjvSj/bPhrmiI1faratFofYi416I97ViuvfwXTVd3jcakPb2X+Abr0N1
49rCMBPfW1GKIoHnc43/zmcx/2OKojAngl+jZLTLFbvUaTz6bzFLgUWfv+E+1KTT
2w/QcKiW2IDPUhAPV2lNIL9bDz170NSSpILhVaHqLVRKkqSoNabFC16yBLqTyEND
KJg7sBUBV0p7BJsvkJA1YpEtFNx1zfS0pZZ6zPqh4iEST70Rai4u91XrYY10JeZa
K/Ke70Lpg4IywXAlUCegBiH50vmeXwoxSdH57QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJosx80VZGCXenAL6FQkYe2crBI7MB8GA1UdIwQYMBaAFE7h+ZpS1J1Q2X+F
YnwRm3OXhrC1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDMwNmFm
ODFjMjcwYTYwYmQ3YTZiNDQwYmM5N2Q0MjAzMjJlYmNiNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGUwNjYxMjQtZGNhNC00MjA1LWI1OTQtOTBkMzky
YzNlMzJjLzM3N2MyYTZiNmU0OTBhOTZlZjc4M2NjMzRjMjlhNzUwMThjN2U0YzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZTA2NjEyNC1kY2E0LTQyMDUtYjU5NC05MGQz
OTJjM2UzMmMvMDMwNmFmODFjMjcwYTYwYmQ3YTZiNDQwYmM5N2Q0MjAzMjJlYmNi
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqpTfDANBgkqhkiG9w0BAQsFAAOCAQEAV+JVDi+Lp7sP4Zq3
N1z9Re2G3q7TF3ik+hp1cHZBzf0D5ShsSgcXl/ij5HVS5ZyegIamg+jMk8oyvwfk
gHs5CiwcSHxrl6b+JsSAgFSOiQK+dqsI5sgycEQpaIcZZZVLKUmr/uoeptG9xj+s
mX3T8zlgpMol0Ki0u/eQ/HdN7AFQL0MmU8etrRF8F5d+GFpqt1qiRzx+asiBORpo
H5Oy+nyZMRSMdK5PTZri1lZBVrWkOUgHFNj3e0ePP3AEHuuWZwyLXn/pEEkCPveF
JpiessGVBV9+S4ZAvDNbdX8sqIZbec7h8NFxkuNf5Lpntq084l9qf6hvVUXRnS/k
3pGY7Q==
-----END CERTIFICATE-----