Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/3e51351502cea6cdf295fb0eb815366be2b7bfcd.roa
File:                     3e51351502cea6cdf295fb0eb815366be2b7bfcd.roa (raw, json)
Hash identifier:          K2xIJOmWM/Zq62iiuUPZQ0Mf2ZwhkT7EQ3rXOS5NBAw=
Subject key identifier:   0B:C0:D0:BF:A4:03:12:26:1E:5E:45:55:64:9F:02:F7:E2:22:8B:8D
Certificate issuer:       /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial:       245C0F
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/3e51351502cea6cdf295fb0eb815366be2b7bfcd.roa
Signing time:             Sun 24 Sep 2023 02:06:43 +0000
ROA not before:           Sat 23 Sep 2023 02:06:43 +0000
ROA not after:            Wed 24 Sep 2025 02:06:43 +0000
asID:                     269918
IP address blocks:        131.72.168.0/22 maxlen: 24
                          131.72.168.0/23 maxlen: 23
                          131.72.168.0/24 maxlen: 24
                          131.72.169.0/24 maxlen: 24
                          131.72.170.0/23 maxlen: 23
                          131.72.170.0/24 maxlen: 24
                          131.72.171.0/24 maxlen: 24
                          2803:dd80::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2382863 (0x245c0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
        Validity
            Not Before: Sep 23 02:06:43 2023 GMT
            Not After : Sep 24 02:06:43 2025 GMT
        Subject: CN=3e51351502cea6cdf295fb0eb815366be2b7bfcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7d:a5:91:f5:67:82:c8:22:1a:15:14:1b:fe:
                    a8:6c:e8:fb:16:85:b2:2a:b6:e9:3d:a6:fc:78:d3:
                    d9:ae:19:59:16:ff:14:2d:d7:d3:61:f7:42:6b:d7:
                    99:6c:4c:ac:fb:fd:5d:b8:f5:9e:ad:a4:3e:b8:48:
                    77:26:88:2b:cd:d0:79:57:8e:17:a8:5d:60:bf:68:
                    1d:67:69:e3:e4:30:4c:b9:d6:bb:8e:19:38:47:ae:
                    d6:cd:65:c0:6d:1a:59:28:f9:81:94:a8:14:f6:c9:
                    19:e7:2d:2f:46:66:34:74:1f:5b:83:35:83:89:9a:
                    1c:78:7d:08:55:b6:f6:4d:16:b9:e4:8a:1f:27:92:
                    fb:e0:61:aa:fb:ec:5e:3e:c3:64:29:9d:ba:f7:10:
                    d2:92:fd:85:34:c1:47:c8:48:e2:f5:d0:ce:08:63:
                    27:6a:94:17:59:85:8b:bc:35:90:de:57:b9:df:49:
                    84:94:b7:5a:3c:92:42:64:e8:db:0d:b1:84:b6:21:
                    71:f7:01:f9:3f:0a:5e:a7:fb:27:44:97:a7:b5:cc:
                    7d:43:b1:dd:59:5d:6e:67:99:04:a2:9c:18:6a:aa:
                    2c:02:23:a6:76:3c:83:3e:2f:77:1a:49:bc:fe:03:
                    aa:b7:cb:1f:56:35:f3:76:18:ab:1d:eb:42:cb:88:
                    41:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C0:D0:BF:A4:03:12:26:1E:5E:45:55:64:9F:02:F7:E2:22:8B:8D
            X509v3 Authority Key Identifier:
                keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/3e51351502cea6cdf295fb0eb815366be2b7bfcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.168.0/22
                IPv6:
                  2803:dd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:06:60:d3:6f:e6:28:be:34:0f:5f:27:67:34:e0:2e:df:fa:
         dc:92:ea:96:06:13:94:13:0e:b2:74:b2:4e:92:6a:eb:39:ee:
         7f:d0:c8:cd:1b:16:bd:7d:6d:8f:fd:a0:f4:b6:f6:75:d6:d9:
         2c:e8:d8:03:12:b4:f0:89:df:35:0e:1d:ac:4e:33:f1:93:ce:
         a8:34:56:37:40:7d:32:aa:5b:7c:59:c7:ce:a4:20:98:d6:b9:
         e1:fa:5c:36:40:fc:ee:ab:89:25:ad:00:c6:2c:43:35:5c:03:
         cc:74:ef:e2:c1:19:e9:7c:33:b5:31:62:b8:4a:85:73:4a:17:
         6c:7b:86:05:35:6e:4d:00:d9:d6:8c:e0:2e:42:c6:1c:b2:66:
         f7:17:33:7f:b5:b3:ba:d8:98:35:0e:df:f2:28:4f:ff:9b:d3:
         34:62:b4:b6:ec:e9:87:ae:22:85:28:97:db:29:59:55:da:19:
         89:ed:f5:c3:9c:31:7a:fe:e6:0b:03:03:63:b1:ca:8c:6c:b6:
         3a:97:c4:a8:9c:0c:1f:ef:47:99:a9:5d:e8:c3:a4:7f:39:df:
         73:ad:c3:f2:18:38:7d:8f:84:c1:bf:8e:72:82:d2:40:6f:0d:
         f3:07:d6:21:1e:f9:86:bb:e1:83:58:3c:98:35:5e:02:4d:29:
         af:55:59:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDJFwPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM0
MjY4N2JjZWJkMjdkNmZkNjhmYzBmOTVhMThmZDhhZjhiNDM2YmIwHhcNMjMwOTIz
MDIwNjQzWhcNMjUwOTI0MDIwNjQzWjAzMTEwLwYDVQQDEygzZTUxMzUxNTAyY2Vh
NmNkZjI5NWZiMGViODE1MzY2YmUyYjdiZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1X2lkfVngsgiGhUUG/6obOj7FoWyKrbpPab8eNPZrhlZFv8U
LdfTYfdCa9eZbEys+/1duPWeraQ+uEh3JogrzdB5V44XqF1gv2gdZ2nj5DBMuda7
jhk4R67WzWXAbRpZKPmBlKgU9skZ5y0vRmY0dB9bgzWDiZoceH0IVbb2TRa55Iof
J5L74GGq++xePsNkKZ269xDSkv2FNMFHyEji9dDOCGMnapQXWYWLvDWQ3le530mE
lLdaPJJCZOjbDbGEtiFx9wH5Pwpep/snRJentcx9Q7HdWV1uZ5kEopwYaqosAiOm
djyDPi93Gkm8/gOqt8sfVjXzdhirHetCy4hB5QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFAvA0L+kAxImHl5FVWSfAvfiIouNMB8GA1UdIwQYMBaAFL4+q3oQa0Cw9kKP
S3ATUXycZmTgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzQyNjg3
YmNlYmQyN2Q2ZmQ2OGZjMGY5NWExOGZkOGFmOGI0MzZiYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTAxMzQ1NjUtOWYzYy00OWIxLWFhZjYtZGZmMmVh
MzE0NmZlLzNlNTEzNTE1MDJjZWE2Y2RmMjk1ZmIwZWI4MTUzNjZiZTJiN2JmY2Qu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMDEzNDU2NS05ZjNjLTQ5YjEtYWFmNi1kZmYy
ZWEzMTQ2ZmUvYzQyNjg3YmNlYmQyN2Q2ZmQ2OGZjMGY5NWExOGZkOGFmOGI0MzZi
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAoNIqDANBAIAAjAHAwUAKAPdgDANBgkqhkiG9w0BAQsFAAOC
AQEAbAZg02/mKL40D18nZzTgLt/63JLqlgYTlBMOsnSyTpJq6znuf9DIzRsWvX1t
j/2g9Lb2ddbZLOjYAxK08InfNQ4drE4z8ZPOqDRWN0B9MqpbfFnHzqQgmNa54fpc
NkD87quJJa0AxixDNVwDzHTv4sEZ6XwztTFiuEqFc0oXbHuGBTVuTQDZ1ozgLkLG
HLJm9xczf7WzutiYNQ7f8ihP/5vTNGK0tuzph64ihSiX2ylZVdoZie31w5wxev7m
CwMDY7HKjGy2OpfEqJwMH+9Hmald6MOkfznfc63D8hg4fY+Ewb+OcoLSQG8N8wfW
IR75hrvhg1g8mDVeAk0pr1VZMw==
-----END CERTIFICATE-----