Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/7f6f2b66494c9483d6c9142d5a892b432bc2e305.roa
File:                     7f6f2b66494c9483d6c9142d5a892b432bc2e305.roa (raw, json)
Hash identifier:          6UOsGMmRlpYsyQvkCnPfSxquni5Wi2qvUfg8mu9UFkU=
Subject key identifier:   71:26:86:7D:2A:94:3B:CF:4A:65:D6:CD:48:1D:34:DE:2F:8C:80:F3
Certificate issuer:       /CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
Certificate serial:       1B2655
Authority key identifier: E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/7f6f2b66494c9483d6c9142d5a892b432bc2e305.roa
Signing time:             Mon 05 Dec 2022 18:36:00 +0000
ROA not before:           Wed 22 Dec 2021 03:00:00 +0000
ROA not after:            Sat 23 Dec 2023 03:00:00 +0000
asID:                     264856
IP address blocks:        170.244.57.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1779285 (0x1b2655)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
        Validity
            Not Before: Dec 22 03:00:00 2021 GMT
            Not After : Dec 23 03:00:00 2023 GMT
        Subject: CN=7f6f2b66494c9483d6c9142d5a892b432bc2e305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:93:8c:7b:ef:4c:e8:03:95:20:ae:8e:35:04:
                    d7:28:32:50:8f:14:95:01:99:78:e9:a3:91:2b:dc:
                    b3:7d:3f:96:b7:fb:96:b4:9a:7d:85:41:ee:0e:16:
                    20:02:d8:d1:7c:a4:fe:92:40:bb:ca:4c:de:06:e5:
                    9f:1a:60:e7:c6:f1:8c:00:a3:77:a1:fe:2c:42:65:
                    95:7e:f8:05:40:63:b0:e4:01:46:4e:80:e0:7b:44:
                    5b:12:fb:77:68:45:25:ef:b3:fd:7a:6c:42:33:40:
                    69:ca:07:d0:73:35:28:e2:fa:9d:10:88:ec:00:83:
                    a7:08:c6:82:20:93:74:1c:7d:50:7b:67:a9:8e:e8:
                    1b:e7:9b:46:a9:26:7a:bd:59:28:03:43:89:02:63:
                    c3:53:9d:60:8c:c8:6c:b8:f6:0d:63:a1:bf:fb:3e:
                    8c:af:1a:98:36:8c:be:49:76:c1:0e:63:48:a8:71:
                    d2:a6:f2:bd:a6:3e:15:95:0e:3f:fc:2d:22:60:f7:
                    97:1c:7c:48:31:28:22:59:be:e6:d6:a4:b2:d2:19:
                    3d:08:d6:a9:88:93:67:63:73:a9:aa:a5:f9:25:4f:
                    11:9b:27:cb:13:4b:4c:13:1c:3a:db:f5:cf:27:7e:
                    60:3f:ac:83:11:91:8a:c3:95:e5:4e:cb:bd:f3:ce:
                    ab:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:26:86:7D:2A:94:3B:CF:4A:65:D6:CD:48:1D:34:DE:2F:8C:80:F3
            X509v3 Authority Key Identifier:
                keyid:E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/7f6f2b66494c9483d6c9142d5a892b432bc2e305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:a2:10:47:96:4a:93:b8:54:44:ff:05:3c:4a:8c:17:d2:2c:
         9c:f6:c8:ae:d9:a2:ba:be:e3:54:4d:d8:62:8f:02:30:df:ec:
         a7:e3:72:07:7a:80:3a:25:38:0e:a6:46:96:a8:79:4a:bd:e6:
         ef:c3:67:12:d3:c7:07:e2:ec:c3:0f:82:35:c6:4d:28:16:b9:
         05:f5:ba:cb:c4:de:08:87:3b:69:b6:cb:3a:99:a9:ad:7f:a3:
         89:6f:8f:38:2e:c7:ae:c5:cc:3e:6d:78:d6:77:82:77:bf:3a:
         3c:16:03:73:da:a7:f6:b2:ce:b6:e1:fd:bc:e3:2f:14:d2:15:
         4b:c8:f0:f9:12:9c:b1:80:ff:f7:9a:0b:19:5c:9d:92:54:0b:
         69:90:da:ea:0f:7d:c8:93:da:7c:1f:ba:a4:cd:e7:18:e6:5b:
         14:ea:2c:c9:49:f7:38:2a:57:e8:e8:b8:43:dd:e3:6a:8c:19:
         ac:55:ba:3a:56:0d:13:ae:95:df:8c:82:9d:89:7b:81:c2:1b:
         01:11:3c:e9:2b:94:b5:c4:52:87:94:21:ff:81:b5:72:a5:0d:
         40:9c:25:08:bb:7b:28:2b:04:cf:6f:ad:52:11:b3:06:7c:cc:
         93:05:aa:d8:7e:30:87:c1:05:45:d2:ab:44:c1:9c:18:25:b3:
         3f:48:1d:cf
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGyZVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJm
ZmZjMWUwYmI2ZDVmZWE4NTI5YzRmZTY1YmRhNzZmNzJkNGM4OGMwHhcNMjExMjIy
MDMwMDAwWhcNMjMxMjIzMDMwMDAwWjAzMTEwLwYDVQQDEyg3ZjZmMmI2NjQ5NGM5
NDgzZDZjOTE0MmQ1YTg5MmI0MzJiYzJlMzA1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg5OMe+9M6AOVIK6ONQTXKDJQjxSVAZl46aORK9yzfT+Wt/uW
tJp9hUHuDhYgAtjRfKT+kkC7ykzeBuWfGmDnxvGMAKN3of4sQmWVfvgFQGOw5AFG
ToDge0RbEvt3aEUl77P9emxCM0BpygfQczUo4vqdEIjsAIOnCMaCIJN0HH1Qe2ep
jugb55tGqSZ6vVkoA0OJAmPDU51gjMhsuPYNY6G/+z6MrxqYNoy+SXbBDmNIqHHS
pvK9pj4VlQ4//C0iYPeXHHxIMSgiWb7m1qSy0hk9CNapiJNnY3OpqqX5JU8RmyfL
E0tMExw62/XPJ35gP6yDEZGKw5XlTsu9886rxQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHEmhn0qlDvPSmXWzUgdNN4vjIDzMB8GA1UdIwQYMBaAFOKxgIx8ev/AjDHz
50OUxayJBKaoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmZmZmMx
ZTBiYjZkNWZlYTg1MjljNGZlNjViZGE3NmY3MmQ0Yzg4Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjI0NzZhNDgtM2RjOS00NzM2LWJmOWYtZDc2MWJh
ZjQzN2MyLzdmNmYyYjY2NDk0Yzk0ODNkNmM5MTQyZDVhODkyYjQzMmJjMmUzMDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iMjQ3NmE0OC0zZGM5LTQ3MzYtYmY5Zi1kNzYx
YmFmNDM3YzIvMmZmZmMxZTBiYjZkNWZlYTg1MjljNGZlNjViZGE3NmY3MmQ0Yzg4
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKr0OTANBgkqhkiG9w0BAQsFAAOCAQEAd6IQR5ZKk7hURP8F
PEqMF9IsnPbIrtmiur7jVE3YYo8CMN/sp+NyB3qAOiU4DqZGlqh5Sr3m78NnEtPH
B+Lsww+CNcZNKBa5BfW6y8TeCIc7abbLOpmprX+jiW+POC7HrsXMPm141neCd786
PBYDc9qn9rLOtuH9vOMvFNIVS8jw+RKcsYD/95oLGVydklQLaZDa6g99yJPafB+6
pM3nGOZbFOosyUn3OCpX6Oi4Q93jaowZrFW6OlYNE66V34yCnYl7gcIbARE86SuU
tcRSh5Qh/4G1cqUNQJwlCLt7KCsEz2+tUhGzBnzMkwWq2H4wh8EFRdKrRMGcGCWz
P0gdzw==
-----END CERTIFICATE-----