Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/4fb242bdf0be7f517786afcb1c334644dbbfa793.roa
File:                     4fb242bdf0be7f517786afcb1c334644dbbfa793.roa (raw, json)
Hash identifier:          jFqmFRjElpifwNlWI6ddpL+LYWD60rFQOKiCvpyTLhs=
Subject key identifier:   EC:3A:4D:29:D1:2C:45:37:E4:39:92:1F:39:D6:AC:30:7C:15:87:13
Certificate issuer:       /CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Certificate serial:       159F14
Authority key identifier: E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/4fb242bdf0be7f517786afcb1c334644dbbfa793.roa
Signing time:             Mon 21 Feb 2022 15:27:49 +0000
ROA not before:           Mon 21 Feb 2022 03:00:00 +0000
ROA not after:            Wed 21 Feb 2024 03:00:00 +0000
asID:                     265855
IP address blocks:        2803:da20:100::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1416980 (0x159f14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
        Validity
            Not Before: Feb 21 03:00:00 2022 GMT
            Not After : Feb 21 03:00:00 2024 GMT
        Subject: CN=4fb242bdf0be7f517786afcb1c334644dbbfa793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9b:83:cf:af:ba:29:d0:1c:86:ef:25:9d:20:
                    b3:88:9b:4d:91:93:f2:da:93:c6:25:d3:f9:79:a9:
                    22:58:16:b7:77:11:e0:09:0f:83:4f:07:f2:ce:aa:
                    3b:66:7f:24:79:86:d6:4c:15:f3:0b:9f:87:e2:88:
                    95:5f:ec:e5:ce:35:d1:9c:57:82:67:6d:cf:0f:d9:
                    3b:ed:a8:6b:de:15:d5:3c:07:c4:d0:a1:d0:39:14:
                    60:0f:07:38:d3:df:6a:9b:53:e0:dc:20:30:f2:8f:
                    03:9a:29:bf:81:40:58:ea:ea:fb:5f:3a:d5:e0:24:
                    46:0f:96:bc:fc:a6:89:b4:77:d3:10:87:a7:75:85:
                    5b:92:21:44:a6:5c:aa:a7:78:5c:61:54:2d:67:26:
                    36:5d:41:f8:ca:4b:45:d0:6e:37:e3:45:10:50:86:
                    f2:92:f7:a8:40:31:65:a1:ea:cc:3f:d3:70:8a:58:
                    aa:12:a0:99:a6:2c:71:17:b0:42:2f:2f:f5:69:7d:
                    73:d3:c1:99:eb:e4:77:47:d7:c2:4a:64:85:ac:8d:
                    2b:a5:42:c7:b7:2e:95:79:7e:5f:05:51:cb:9e:74:
                    fa:89:d4:72:d2:3b:3c:9d:e7:67:9f:75:c1:ca:26:
                    87:2d:9c:21:a3:e0:2b:17:d0:8e:89:10:16:32:e2:
                    de:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3A:4D:29:D1:2C:45:37:E4:39:92:1F:39:D6:AC:30:7C:15:87:13
            X509v3 Authority Key Identifier:
                keyid:E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/4fb242bdf0be7f517786afcb1c334644dbbfa793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:da20:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:10:fd:9f:97:18:97:0d:b6:20:75:28:c1:f6:30:c5:f0:6e:
         e8:60:2d:98:39:f1:bb:87:3f:d8:b9:f7:e5:b4:27:3b:11:c5:
         67:b0:ab:b4:82:e9:87:72:6e:94:af:cc:f1:34:11:51:91:b2:
         8b:f3:1e:a0:41:99:30:b6:be:e2:6d:ad:a3:b9:8e:10:d1:a1:
         05:a4:00:05:34:76:76:1a:22:b4:c1:ee:0c:34:e7:60:1a:ba:
         47:1c:e2:0f:94:11:c4:16:80:7b:d6:75:f6:a5:51:2f:e8:18:
         2d:2f:44:33:3b:06:67:d7:b7:13:ac:34:4e:e6:44:a0:c6:ab:
         a0:e9:27:12:6c:f4:d2:7a:71:67:d8:7c:3c:58:76:0b:48:49:
         4c:cd:21:0d:3c:cc:db:02:c9:26:62:71:22:6c:77:cb:eb:76:
         64:b2:a2:9c:3f:55:03:78:3d:f0:72:89:b1:bc:9e:2e:18:bd:
         21:0e:93:f7:a7:ae:a2:1f:22:61:83:93:e8:c8:70:b2:ff:6f:
         e4:37:c3:01:76:f2:83:8a:09:6c:29:36:60:cd:92:72:08:59:
         b4:e9:f8:17:a4:3e:46:a2:a6:4a:95:7a:23:f1:da:1b:1f:85:
         28:10:48:c2:49:01:3b:ee:aa:23:d2:67:9e:ed:40:48:5f:69:
         21:a7:a7:b2
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDFZ8UMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
ZDc3ZWZjMWFiMWI0Yjg0OWFhM2FjNTdjZDAwMzY2ZWE3NWI2NzcwHhcNMjIwMjIx
MDMwMDAwWhcNMjQwMjIxMDMwMDAwWjAzMTEwLwYDVQQDEyg0ZmIyNDJiZGYwYmU3
ZjUxNzc4NmFmY2IxYzMzNDY0NGRiYmZhNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlZuDz6+6KdAchu8lnSCziJtNkZPy2pPGJdP5eakiWBa3dxHg
CQ+DTwfyzqo7Zn8keYbWTBXzC5+H4oiVX+zlzjXRnFeCZ23PD9k77ahr3hXVPAfE
0KHQORRgDwc4099qm1Pg3CAw8o8Dmim/gUBY6ur7XzrV4CRGD5a8/KaJtHfTEIen
dYVbkiFEplyqp3hcYVQtZyY2XUH4yktF0G4340UQUIbykveoQDFloerMP9Nwiliq
EqCZpixxF7BCLy/1aX1z08GZ6+R3R9fCSmSFrI0rpULHty6VeX5fBVHLnnT6idRy
0js8nednn3XByiaHLZwho+ArF9COiRAWMuLeHwIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFOw6TSnRLEU35DmSHznWrDB8FYcTMB8GA1UdIwQYMBaAFOUy2F5GWQDaZbBn
V5TRUNPp9E3lMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzNkNzdl
ZmMxYWIxYjRiODQ5YWEzYWM1N2NkMDAzNjZlYTc1YjY3Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmE0YTE0ZjktOTE4MC00Y2ExLThmN2QtOWNkODAx
YWQ2NGVmLzRmYjI0MmJkZjBiZTdmNTE3Nzg2YWZjYjFjMzM0NjQ0ZGJiZmE3OTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYTRhMTRmOS05MTgwLTRjYTEtOGY3ZC05Y2Q4
MDFhZDY0ZWYvMzNkNzdlZmMxYWIxYjRiODQ5YWEzYWM1N2NkMDAzNjZlYTc1YjY3
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGACgD2iABMA0GCSqGSIb3DQEBCwUAA4IBAQAGEP2flxiXDbYg
dSjB9jDF8G7oYC2YOfG7hz/YuffltCc7EcVnsKu0gumHcm6Ur8zxNBFRkbKL8x6g
QZkwtr7iba2juY4Q0aEFpAAFNHZ2GiK0we4MNOdgGrpHHOIPlBHEFoB71nX2pVEv
6BgtL0QzOwZn17cTrDRO5kSgxqug6ScSbPTSenFn2Hw8WHYLSElMzSENPMzbAskm
YnEibHfL63ZksqKcP1UDeD3wcomxvJ4uGL0hDpP3p66iHyJhg5PoyHCy/2/kN8MB
dvKDiglsKTZgzZJyCFm06fgXpD5GoqZKlXoj8dobH4UoEEjCSQE77qoj0mee7UBI
X2khp6ey
-----END CERTIFICATE-----