Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/b369848844516ed0d4a2e8e61f9568c9be105754.roa
File:                     b369848844516ed0d4a2e8e61f9568c9be105754.roa (raw, json)
Hash identifier:          +faI4u0tYTxX1TvlRXPJrFlVGb6zO6knyx3ClJ/fdMg=
Subject key identifier:   1F:BF:02:98:18:37:39:91:71:19:1F:EF:E5:D5:45:BF:FF:5A:9D:57
Certificate issuer:       /CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
Certificate serial:       0D15C1
Authority key identifier: 72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/b369848844516ed0d4a2e8e61f9568c9be105754.roa
Signing time:             Wed 24 Mar 2021 14:47:36 +0000
ROA not before:           Wed 24 Mar 2021 14:47:36 +0000
ROA not after:            Tue 24 Mar 2026 14:47:36 +0000
asID:                     21826
IP address blocks:        181.208.0.0/17 maxlen: 24
                          181.208.128.0/17 maxlen: 24
                          186.14.0.0/16 maxlen: 24
                          186.188.0.0/17 maxlen: 24
                          190.142.0.0/16 maxlen: 24
                          200.75.96.0/19 maxlen: 24
                          200.8.0.0/16 maxlen: 24
                          200.82.128.0/19 maxlen: 24
                          200.82.160.0/20 maxlen: 24
                          200.82.176.0/20 maxlen: 24
                          200.82.192.0/20 maxlen: 24
                          200.82.208.0/20 maxlen: 24
                          200.82.224.0/19 maxlen: 24
                          2803:8100::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857537 (0xd15c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
        Validity
            Not Before: Mar 24 14:47:36 2021 GMT
            Not After : Mar 24 14:47:36 2026 GMT
        Subject: CN=b369848844516ed0d4a2e8e61f9568c9be105754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4a:d9:96:15:4a:30:42:87:03:b9:a8:a9:73:
                    47:a0:b0:f7:3c:92:c6:61:a4:44:ef:7e:13:1f:04:
                    1c:e5:4a:d1:fd:97:6b:d8:6e:24:d2:8b:c2:d6:c5:
                    86:69:e8:aa:b0:aa:9d:95:d8:8b:1d:55:6c:80:35:
                    14:af:77:6e:b0:87:c4:f0:a1:e1:59:ad:4e:2e:5c:
                    ef:84:ed:bf:f2:6e:61:23:f8:97:98:33:76:be:da:
                    0f:b7:78:24:aa:b0:00:0c:ce:4c:7f:a0:f0:6e:9d:
                    fa:0e:40:eb:d6:46:1c:be:de:d0:7c:f3:97:70:09:
                    46:e3:10:b8:f4:d3:7f:ad:71:a4:2b:88:e4:8e:7d:
                    b1:a9:d6:21:34:97:de:60:bc:58:30:01:c2:12:6d:
                    c6:7a:91:c3:9f:a8:35:63:2c:10:b4:bf:41:d7:26:
                    fb:01:28:76:63:74:c3:a1:cf:e4:80:1c:06:2a:b0:
                    8a:23:ad:54:59:7f:b9:06:e7:65:50:38:69:4b:47:
                    2f:91:f8:00:58:2d:f2:55:87:bc:cb:4e:d8:ca:2b:
                    cf:83:73:44:45:71:83:14:b0:eb:8e:78:37:2e:66:
                    e7:10:80:2b:8c:af:b1:24:d0:6d:0e:26:48:4a:4b:
                    80:30:6e:bf:a1:42:12:de:37:f5:c7:3e:14:85:c8:
                    52:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BF:02:98:18:37:39:91:71:19:1F:EF:E5:D5:45:BF:FF:5A:9D:57
            X509v3 Authority Key Identifier:
                keyid:72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/b369848844516ed0d4a2e8e61f9568c9be105754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/ef2d0ae672567bf0e707903589365faae1ff0bbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.208.0.0/16
                  186.14.0.0/16
                  186.188.0.0/17
                  190.142.0.0/16
                  200.8.0.0/16
                  200.75.96.0/19
                  200.82.128.0/17
                IPv6:
                  2803:8100::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:95:2f:47:5f:01:50:6e:81:5c:a0:cc:e3:1b:f3:e3:d0:ad:
         54:8d:dc:31:9e:34:e7:35:44:1b:91:f8:06:03:8a:33:fb:cf:
         40:86:6d:63:9c:15:58:e0:06:50:05:ed:59:20:fb:ff:00:0f:
         56:42:05:95:97:26:f3:ed:34:37:a9:65:6e:74:44:18:b0:e9:
         e4:dc:9d:a0:01:cc:05:37:cb:95:2b:ce:b8:3a:ec:f1:c9:e0:
         28:07:05:3b:90:1c:1a:d5:03:fc:14:0c:88:92:db:48:dd:5a:
         ca:a4:61:11:25:72:52:0a:4d:ca:23:3a:8d:b6:81:b9:ec:10:
         1d:66:3a:cc:a9:8e:3b:57:bc:6d:61:bf:3a:b0:39:a3:6b:ff:
         f2:67:bd:af:4b:8b:ad:f5:e9:1c:70:2c:d4:0d:f9:50:de:35:
         b3:95:84:d9:cf:1f:98:b4:9b:64:41:02:22:8b:e1:51:3c:f7:
         42:4a:eb:e9:19:d0:9c:37:b4:ac:6a:0b:4a:64:7f:93:07:41:
         fc:e5:44:17:2f:6d:fa:0c:22:d1:c2:e9:57:b7:6c:78:fa:4e:
         be:16:d6:20:a5:a8:52:57:eb:e5:f0:08:7f:25:ea:33:ba:4c:
         75:56:77:e4:1e:58:ab:5e:e9:2c:c2:e1:bd:7f:39:99:96:bf:
         ef:35:2a:a0
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIDDRXBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVm
MmQwYWU2NzI1NjdiZjBlNzA3OTAzNTg5MzY1ZmFhZTFmZjBiYmMwHhcNMjEwMzI0
MTQ0NzM2WhcNMjYwMzI0MTQ0NzM2WjAzMTEwLwYDVQQDEyhiMzY5ODQ4ODQ0NTE2
ZWQwZDRhMmU4ZTYxZjk1NjhjOWJlMTA1NzU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiErZlhVKMEKHA7moqXNHoLD3PJLGYaRE734THwQc5UrR/Zdr
2G4k0ovC1sWGaeiqsKqdldiLHVVsgDUUr3dusIfE8KHhWa1OLlzvhO2/8m5hI/iX
mDN2vtoPt3gkqrAADM5Mf6Dwbp36DkDr1kYcvt7QfPOXcAlG4xC49NN/rXGkK4jk
jn2xqdYhNJfeYLxYMAHCEm3GepHDn6g1YywQtL9B1yb7ASh2Y3TDoc/kgBwGKrCK
I61UWX+5BudlUDhpS0cvkfgAWC3yVYe8y07YyivPg3NERXGDFLDrjng3LmbnEIAr
jK+xJNBtDiZISkuAMG6/oUIS3jf1xz4UhchSHwIDAQABo4ICijCCAoYwHQYDVR0O
BBYEFB+/ApgYNzmRcRkf7+XVRb//Wp1XMB8GA1UdIwQYMBaAFHJjYSAgisbOig/l
mH4OxY10xWnVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWYyZDBh
ZTY3MjU2N2JmMGU3MDc5MDM1ODkzNjVmYWFlMWZmMGJiYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWQyZmQ0MWQtZjkyZC00MDQ4LWJlNTMtNzQ4NTQz
NDI2MDAxL2IzNjk4NDg4NDQ1MTZlZDBkNGEyZThlNjFmOTU2OGM5YmUxMDU3NTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZDJmZDQxZC1mOTJkLTQwNDgtYmU1My03NDg1
NDM0MjYwMDEvZWYyZDBhZTY3MjU2N2JmMGU3MDc5MDM1ODkzNjVmYWFlMWZmMGJi
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBOBggrBgEFBQcBBwEB/wQ/
MD0wLAQCAAEwJgMDALXQAwMAug4DBAe6vAADAwC+jgMDAMgIAwQFyEtgAwQHyFKA
MA0EAgACMAcDBQAoA4EAMA0GCSqGSIb3DQEBCwUAA4IBAQBGlS9HXwFQboFcoMzj
G/Pj0K1UjdwxnjTnNUQbkfgGA4oz+89Ahm1jnBVY4AZQBe1ZIPv/AA9WQgWVlybz
7TQ3qWVudEQYsOnk3J2gAcwFN8uVK864OuzxyeAoBwU7kBwa1QP8FAyIkttI3VrK
pGERJXJSCk3KIzqNtoG57BAdZjrMqY47V7xtYb86sDmja//yZ72vS4ut9ekccCzU
DflQ3jWzlYTZzx+YtJtkQQIii+FRPPdCSuvpGdCcN7SsagtKZH+TB0H85UQXL236
DCLRwulXt2x4+k6+FtYgpahSV+vl8Ah/Jeozukx1VnfkHlirXukswuG9fzmZlr/v
NSqg
-----END CERTIFICATE-----