Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/ee71f005a6f024dfd62232ff478513fc9d8d0ded.roa
File:                     ee71f005a6f024dfd62232ff478513fc9d8d0ded.roa (raw, json)
Hash identifier:          +SrIJBRQwUo7REFx3YlpDa1tkKW3OJ64ZqZyYmHHTr0=
Subject key identifier:   DC:15:99:DA:F6:1D:CC:97:C2:18:40:DA:65:60:D3:1E:28:3C:2E:9B
Certificate issuer:       /CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
Certificate serial:       1362F9
Authority key identifier: 4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/ee71f005a6f024dfd62232ff478513fc9d8d0ded.roa
Signing time:             Wed 10 Nov 2021 13:02:49 +0000
ROA not before:           Wed 10 Nov 2021 03:00:00 +0000
ROA not after:            Tue 10 Nov 2026 03:00:00 +0000
asID:                     263774
IP address blocks:        138.117.76.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1270521 (0x1362f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
        Validity
            Not Before: Nov 10 03:00:00 2021 GMT
            Not After : Nov 10 03:00:00 2026 GMT
        Subject: CN=ee71f005a6f024dfd62232ff478513fc9d8d0ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b3:26:18:39:52:28:fb:93:45:a7:69:07:7d:
                    9a:95:ae:ca:e9:7d:1c:43:5a:0f:8f:62:ca:d9:ca:
                    7a:19:32:cd:f1:b8:ea:df:6c:58:0c:ed:df:95:e8:
                    9c:59:1f:30:49:34:2c:2a:ea:e3:49:c4:f5:f3:39:
                    7b:25:5f:c8:cb:05:85:5e:27:6d:68:e7:ad:43:57:
                    57:52:39:fb:d2:c8:9d:9f:26:ca:7d:50:b9:24:e3:
                    d8:8e:ff:ce:54:99:b9:8d:0e:fb:27:f4:34:02:a7:
                    df:2e:92:6a:01:5e:f0:3c:cd:1e:37:21:cf:07:71:
                    a6:ac:7d:88:83:33:18:9b:31:e9:9e:61:43:11:a6:
                    e3:70:92:27:0f:e0:60:73:fb:51:0f:8d:a8:08:39:
                    4e:3f:a1:ec:7b:f7:a0:f8:a4:81:90:91:8a:7e:b3:
                    8d:c1:fe:18:da:68:57:4f:15:1e:1c:43:8b:3e:b2:
                    78:e5:30:93:a2:43:2d:ca:39:90:1c:45:b9:0b:aa:
                    3f:35:72:8c:2d:03:77:86:eb:f2:d5:3a:90:3d:7d:
                    cf:42:c5:9d:f5:84:1b:c8:4b:77:7c:9a:64:29:01:
                    f8:cc:bc:a4:56:ca:66:09:07:5a:52:00:39:25:f0:
                    9f:81:22:4d:a1:2e:6f:b3:da:45:d0:dc:7e:6c:4f:
                    0a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:15:99:DA:F6:1D:CC:97:C2:18:40:DA:65:60:D3:1E:28:3C:2E:9B
            X509v3 Authority Key Identifier:
                keyid:4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/ee71f005a6f024dfd62232ff478513fc9d8d0ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/0306af81c270a60bd7a6b440bc97d420322ebcb5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:23:df:47:a2:61:6e:78:51:ad:e5:cb:5e:d3:86:7a:ca:5f:
         37:29:99:a5:2e:88:fc:83:ba:58:7b:8a:b7:9c:bb:97:8f:08:
         02:f3:cb:19:20:6f:9f:f9:32:7c:de:c6:20:92:82:47:97:70:
         7f:3c:06:fa:c0:2e:d6:be:12:39:4a:d6:e2:01:57:28:e7:ff:
         47:37:e2:b0:54:77:4a:69:87:56:6c:42:4c:2b:60:c3:22:c9:
         73:d9:9f:19:fc:a9:64:0c:21:71:6e:00:63:c4:b8:e6:0a:d0:
         87:54:70:7e:a4:d9:e9:bf:0d:51:08:d3:b6:73:8b:72:23:d2:
         0a:45:42:2f:34:5c:6f:0b:3a:77:53:94:84:3b:0d:bc:e7:3e:
         a0:28:ed:80:3e:97:90:77:67:97:4c:a9:57:6a:8f:b0:e8:93:
         ce:19:cb:de:99:fd:b5:bc:f2:57:56:57:59:ba:c8:48:bb:33:
         3d:41:e5:eb:34:99:41:a9:ab:91:b9:db:fb:03:4a:29:9d:8e:
         f2:d7:90:ea:2c:2a:cf:64:ab:58:60:b2:41:c1:b8:26:2a:79:
         b9:ab:da:ec:6c:4b:76:6e:c4:69:48:ab:ec:fc:de:9a:d2:ff:
         70:6e:54:75:c6:96:2c:03:30:b4:4d:d8:4c:60:50:a2:00:a8:
         cf:80:96:7c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDE2L5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAz
MDZhZjgxYzI3MGE2MGJkN2E2YjQ0MGJjOTdkNDIwMzIyZWJjYjUwHhcNMjExMTEw
MDMwMDAwWhcNMjYxMTEwMDMwMDAwWjAzMTEwLwYDVQQDEyhlZTcxZjAwNWE2ZjAy
NGRmZDYyMjMyZmY0Nzg1MTNmYzlkOGQwZGVkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg7MmGDlSKPuTRadpB32ala7K6X0cQ1oPj2LK2cp6GTLN8bjq
32xYDO3fleicWR8wSTQsKurjScT18zl7JV/IywWFXidtaOetQ1dXUjn70sidnybK
fVC5JOPYjv/OVJm5jQ77J/Q0AqffLpJqAV7wPM0eNyHPB3GmrH2IgzMYmzHpnmFD
EabjcJInD+Bgc/tRD42oCDlOP6Hse/eg+KSBkJGKfrONwf4Y2mhXTxUeHEOLPrJ4
5TCTokMtyjmQHEW5C6o/NXKMLQN3huvy1TqQPX3PQsWd9YQbyEt3fJpkKQH4zLyk
VspmCQdaUgA5JfCfgSJNoS5vs9pF0Nx+bE8KMQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNwVmdr2HcyXwhhA2mVg0x4oPC6bMB8GA1UdIwQYMBaAFE7h+ZpS1J1Q2X+F
YnwRm3OXhrC1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDMwNmFm
ODFjMjcwYTYwYmQ3YTZiNDQwYmM5N2Q0MjAzMjJlYmNiNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGUwNjYxMjQtZGNhNC00MjA1LWI1OTQtOTBkMzky
YzNlMzJjL2VlNzFmMDA1YTZmMDI0ZGZkNjIyMzJmZjQ3ODUxM2ZjOWQ4ZDBkZWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZTA2NjEyNC1kY2E0LTQyMDUtYjU5NC05MGQz
OTJjM2UzMmMvMDMwNmFmODFjMjcwYTYwYmQ3YTZiNDQwYmM5N2Q0MjAzMjJlYmNi
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAYp1TDANBgkqhkiG9w0BAQsFAAOCAQEABiPfR6JhbnhRreXL
XtOGespfNymZpS6I/IO6WHuKt5y7l48IAvPLGSBvn/kyfN7GIJKCR5dwfzwG+sAu
1r4SOUrW4gFXKOf/RzfisFR3SmmHVmxCTCtgwyLJc9mfGfypZAwhcW4AY8S45grQ
h1RwfqTZ6b8NUQjTtnOLciPSCkVCLzRcbws6d1OUhDsNvOc+oCjtgD6XkHdnl0yp
V2qPsOiTzhnL3pn9tbzyV1ZXWbrISLszPUHl6zSZQamrkbnb+wNKKZ2O8teQ6iwq
z2SrWGCyQcG4Jip5uava7GxLdm7EaUir7PzemtL/cG5UdcaWLAMwtE3YTGBQogCo
z4CWfA==
-----END CERTIFICATE-----