Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ba4ebcd20e920687f2a910955dcddd0310c29c91.roa
File:                     ba4ebcd20e920687f2a910955dcddd0310c29c91.roa (raw, json)
Hash identifier:          ikwLrrKXPF/x2ykug/6717RwjfF6vcRUCM9iXIoQZpU=
Subject key identifier:   30:78:DC:A6:9F:F8:DA:62:DA:04:26:78:08:86:19:DB:66:4C:A6:A8
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EF427
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ba4ebcd20e920687f2a910955dcddd0310c29c91.roa
Signing time:             Wed 24 Mar 2021 14:29:32 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980007 (0xef427)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=ba4ebcd20e920687f2a910955dcddd0310c29c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a0:b3:df:5b:a7:c4:e5:07:92:1d:2c:ad:0e:
                    e8:17:b8:de:3f:1b:9c:4d:00:1d:65:39:51:06:4d:
                    8f:bf:ae:64:f0:51:43:80:27:8b:83:2c:dd:8a:87:
                    ef:39:70:6b:c3:d8:de:0b:4f:42:42:1b:f0:c3:89:
                    99:af:ee:5b:1d:e8:0b:58:72:f8:04:71:19:d6:24:
                    a4:e2:4e:4c:33:fa:2b:f6:52:e8:fb:5a:fb:4a:df:
                    22:1c:89:43:78:c3:20:d5:04:3f:4b:e1:2a:b9:70:
                    88:41:c6:18:0e:22:52:fe:0c:87:14:2e:59:1e:e0:
                    d5:9f:cd:56:0d:2d:37:ba:b4:51:23:05:13:b4:c5:
                    1a:68:1e:a0:bd:f1:a3:8c:3f:35:4e:75:aa:9a:9c:
                    2e:36:d4:62:31:4a:8a:86:0b:f2:dc:f2:23:ee:8e:
                    75:e9:2d:f3:3c:ef:ec:b9:dd:7a:ba:b6:84:82:9c:
                    a7:de:d4:96:a2:21:d7:32:3f:b4:e4:fa:d7:bb:4b:
                    38:a6:ad:98:d6:03:02:be:9e:37:ea:80:d2:0e:11:
                    cf:75:78:72:38:6a:0b:54:52:1d:a2:84:22:3a:7e:
                    e4:a3:75:f8:98:cb:53:d9:80:19:18:11:f5:65:35:
                    f8:11:9d:89:4a:fc:7e:d4:bf:2b:aa:d5:4e:0b:89:
                    5a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:78:DC:A6:9F:F8:DA:62:DA:04:26:78:08:86:19:DB:66:4C:A6:A8
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ba4ebcd20e920687f2a910955dcddd0310c29c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:91:61:d4:97:3b:35:97:85:7d:b6:77:55:cf:41:0f:1d:05:
         29:e4:71:cd:6a:8e:65:55:86:6e:b3:08:d3:d8:ab:f8:39:a5:
         c3:a8:9c:57:36:db:3a:60:da:89:0e:78:13:a2:ba:28:3e:43:
         0a:b9:e1:02:a2:d3:d3:dc:5a:d2:de:1c:72:92:c0:56:57:fb:
         0a:2a:46:e0:16:e0:81:04:0b:f2:29:93:26:19:4a:18:2e:45:
         12:3a:bb:2e:c6:79:e8:d3:07:9b:e8:7e:b2:82:e4:fa:d0:3a:
         2f:85:e9:e9:35:59:dd:9f:c8:aa:08:9b:18:59:e8:da:fa:3c:
         5c:41:7b:4f:df:2b:04:8e:9e:b8:14:4c:28:d0:d1:c6:87:58:
         13:8a:c1:a4:9d:4f:8f:70:8a:3b:9d:6e:2e:75:06:11:46:72:
         21:d5:49:c9:57:9d:95:18:f9:bd:3f:e8:89:4e:68:f0:bd:8f:
         61:5a:c9:bb:44:ac:b6:65:9a:1c:63:b7:03:2d:26:5e:86:44:
         2c:6a:d3:d4:e2:54:eb:70:89:cc:c0:d6:16:c3:73:0d:f6:8d:
         6d:66:9e:26:bd:5d:5f:54:8a:89:e7:de:86:09:44:6a:28:90:
         a9:58:76:a5:c4:ec:d2:bc:58:26:e6:a3:43:52:36:74:cb:1d:
         57:8c:37:05
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDvQnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjEwMzI0
MTQyOTI2WhcNMjYwMzI0MTQyOTI2WjAzMTEwLwYDVQQDEyhiYTRlYmNkMjBlOTIw
Njg3ZjJhOTEwOTU1ZGNkZGQwMzEwYzI5YzkxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA6KCz31unxOUHkh0srQ7oF7jePxucTQAdZTlRBk2Pv65k8FFD
gCeLgyzdiofvOXBrw9jeC09CQhvww4mZr+5bHegLWHL4BHEZ1iSk4k5MM/or9lLo
+1r7St8iHIlDeMMg1QQ/S+EquXCIQcYYDiJS/gyHFC5ZHuDVn81WDS03urRRIwUT
tMUaaB6gvfGjjD81TnWqmpwuNtRiMUqKhgvy3PIj7o516S3zPO/sud16uraEgpyn
3tSWoiHXMj+05PrXu0s4pq2Y1gMCvp436oDSDhHPdXhyOGoLVFIdooQiOn7ko3X4
mMtT2YAZGBH1ZTX4EZ2JSvx+1L8rqtVOC4lazQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDB43Kaf+Npi2gQmeAiGGdtmTKaoMB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3L2JhNGViY2QyMGU5MjA2ODdmMmE5MTA5NTVkY2RkZDAzMTBjMjljOTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUQ0zANBgkqhkiG9w0BAQsFAAOCAQEAZpFh1Jc7NZeFfbZ3
Vc9BDx0FKeRxzWqOZVWGbrMI09ir+Dmlw6icVzbbOmDaiQ54E6K6KD5DCrnhAqLT
09xa0t4ccpLAVlf7CipG4BbggQQL8imTJhlKGC5FEjq7LsZ56NMHm+h+soLk+tA6
L4Xp6TVZ3Z/IqgibGFno2vo8XEF7T98rBI6euBRMKNDRxodYE4rBpJ1Pj3CKO51u
LnUGEUZyIdVJyVedlRj5vT/oiU5o8L2PYVrJu0SstmWaHGO3Ay0mXoZELGrT1OJU
63CJzMDWFsNzDfaNbWaeJr1dX1SKiefehglEaiiQqVh2pcTs0rxYJuajQ1I2dMsd
V4w3BQ==
-----END CERTIFICATE-----