Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/213e8fe2499352401c76fdb4db46801545db5a96.roa
File:                     213e8fe2499352401c76fdb4db46801545db5a96.roa (raw, json)
Hash identifier:          tul4n24I6ZopweUPEWylvU02pg0/c+AfCeoUrrVf0ds=
Subject key identifier:   C1:67:AE:18:F5:33:81:E6:FF:17:14:22:BE:03:B1:9B:B4:88:B3:32
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0E8A4B
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/213e8fe2499352401c76fdb4db46801545db5a96.roa
Signing time:             Wed 24 Mar 2021 14:29:29 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.236.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952907 (0xe8a4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=213e8fe2499352401c76fdb4db46801545db5a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:17:f0:52:be:5b:ba:d6:2d:20:fd:fb:34:
                    c2:a4:18:d4:cf:b7:6d:60:70:72:75:f4:b1:91:09:
                    99:d2:40:65:ab:72:e4:d2:3e:f4:15:bb:e7:04:ff:
                    88:41:7d:fa:b9:3e:1e:7a:4a:56:d8:ca:2c:d1:97:
                    31:64:66:bd:07:17:63:6d:c9:0f:d1:46:fe:c0:da:
                    0c:9b:b5:5e:96:ef:a6:75:c6:16:da:6c:e6:f5:d6:
                    9b:f9:21:7c:41:4d:d0:83:a0:9a:5d:e4:6a:5f:a9:
                    fa:06:15:e2:24:a7:6e:c5:29:03:06:1f:9e:aa:3f:
                    d2:a4:c8:99:a8:c7:1c:e3:da:f3:5b:f7:d5:47:b7:
                    48:74:82:98:51:1b:b0:af:27:e6:96:64:2b:45:5f:
                    24:07:e0:1f:aa:6e:a7:b6:3e:cd:13:b7:8b:3f:dc:
                    43:89:51:75:1a:ae:4c:6d:6e:00:d3:b2:3f:9c:e0:
                    02:7f:f1:df:ea:6a:11:cc:02:09:1e:0a:9e:e7:fa:
                    89:e9:f5:01:49:49:f0:9f:e3:6b:d9:23:c9:57:3b:
                    2e:aa:3f:aa:3a:a9:62:27:8f:02:a2:3f:ab:31:9a:
                    c3:f6:8a:5d:c2:ef:a1:63:ca:f2:37:b5:c1:57:1a:
                    16:7f:12:fc:c1:07:da:7c:7f:34:76:87:98:4d:57:
                    54:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:67:AE:18:F5:33:81:E6:FF:17:14:22:BE:03:B1:9B:B4:88:B3:32
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/213e8fe2499352401c76fdb4db46801545db5a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:4b:ff:71:82:e8:51:cb:d2:eb:26:e8:6e:05:ce:46:88:50:
         ee:bb:24:58:2e:86:2d:33:7d:3d:04:f5:ed:d9:33:3a:0a:cf:
         3f:6f:40:18:32:74:fe:7f:6e:3c:dd:44:bb:21:15:d2:7a:29:
         95:ba:85:2c:d5:ac:d5:dd:52:7c:3d:0f:14:9e:07:39:44:85:
         a1:38:77:30:57:9b:9c:4d:17:73:b2:d1:20:10:37:5d:ce:1a:
         b2:65:f5:07:98:17:bd:63:77:bb:8f:28:be:73:8e:7e:a4:78:
         c4:1b:d7:90:88:87:93:76:0b:08:fd:41:e6:41:35:db:e3:c2:
         50:db:52:c5:f5:b4:cb:b8:71:de:f0:e8:3d:fb:f0:0f:47:85:
         cb:5b:8d:57:27:2a:23:5a:99:e8:ab:fb:48:a2:a7:a8:aa:18:
         11:53:8d:0d:57:97:df:09:d1:8d:cf:9e:4b:51:50:b6:3d:3e:
         f2:f0:c6:b4:a1:21:c6:47:fa:f8:6f:08:a2:dd:14:21:58:a3:
         b3:fa:c2:c3:e4:df:fa:c0:49:1a:b3:b2:61:14:b5:df:30:7b:
         56:98:ed:95:d2:00:a1:03:cf:f8:20:7a:e7:7e:4c:ec:1c:92:
         77:80:87:e8:30:8d:5e:ed:4c:32:04:bd:14:7e:ca:c7:22:fe:
         f5:c0:fe:b7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDopLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjEwMzI0
MTQyOTI2WhcNMjYwMzI0MTQyOTI2WjAzMTEwLwYDVQQDEygyMTNlOGZlMjQ5OTM1
MjQwMWM3NmZkYjRkYjQ2ODAxNTQ1ZGI1YTk2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvcwX8FK+W7rWLSD9+zTCpBjUz7dtYHBydfSxkQmZ0kBlq3Lk
0j70FbvnBP+IQX36uT4eekpW2Mos0ZcxZGa9BxdjbckP0Ub+wNoMm7Velu+mdcYW
2mzm9dab+SF8QU3Qg6CaXeRqX6n6BhXiJKduxSkDBh+eqj/SpMiZqMcc49rzW/fV
R7dIdIKYURuwryfmlmQrRV8kB+Afqm6ntj7NE7eLP9xDiVF1Gq5MbW4A07I/nOAC
f/Hf6moRzAIJHgqe5/qJ6fUBSUnwn+Nr2SPJVzsuqj+qOqliJ48Coj+rMZrD9opd
wu+hY8ryN7XBVxoWfxL8wQfafH80doeYTVdUPwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMFnrhj1M4Hm/xcUIr4DsZu0iLMyMB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3LzIxM2U4ZmUyNDk5MzUyNDAxYzc2ZmRiNGRiNDY4MDE1NDVkYjVhOTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUQ7DANBgkqhkiG9w0BAQsFAAOCAQEAZUv/cYLoUcvS6ybo
bgXORohQ7rskWC6GLTN9PQT17dkzOgrPP29AGDJ0/n9uPN1EuyEV0noplbqFLNWs
1d1SfD0PFJ4HOUSFoTh3MFebnE0Xc7LRIBA3Xc4asmX1B5gXvWN3u48ovnOOfqR4
xBvXkIiHk3YLCP1B5kE12+PCUNtSxfW0y7hx3vDoPfvwD0eFy1uNVycqI1qZ6Kv7
SKKnqKoYEVONDVeX3wnRjc+eS1FQtj0+8vDGtKEhxkf6+G8Iot0UIVijs/rCw+Tf
+sBJGrOyYRS13zB7VpjtldIAoQPP+CB6535M7BySd4CH6DCNXu1MMgS9FH7KxyL+
9cD+tw==
-----END CERTIFICATE-----