Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/a09b5cf58b2142bc50f5e632d4f505fb0de13f18.roa
File:                     a09b5cf58b2142bc50f5e632d4f505fb0de13f18.roa (raw, json)
Hash identifier:          GkUR07eiOyRS2nElxeEQaSjSmi4tD4iCqImIuJbdSPs=
Subject key identifier:   2C:69:15:1E:6C:A1:26:11:C0:73:32:81:88:1C:C7:3B:D4:91:57:0D
Certificate issuer:       /CN=fdfd425584dd260c812e3b649911e7753efa8f09
Certificate serial:       16EC8C
Authority key identifier: BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/a09b5cf58b2142bc50f5e632d4f505fb0de13f18.roa
Signing time:             Thu 28 Apr 2022 01:14:11 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     264819
IP address blocks:        170.80.140.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1502348 (0x16ec8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdfd425584dd260c812e3b649911e7753efa8f09
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=a09b5cf58b2142bc50f5e632d4f505fb0de13f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0c:df:fa:86:d2:26:da:fc:22:79:39:1c:f1:
                    87:8d:8c:9b:11:10:44:8b:57:30:8c:27:27:68:bc:
                    b6:3f:85:5c:39:7d:0b:b7:0d:ed:78:9b:3b:fc:c3:
                    e5:7a:60:c6:76:b2:a6:9b:a7:5e:a4:57:90:83:23:
                    cc:5a:e1:29:dd:ac:69:8d:75:7d:42:b3:a3:b6:fa:
                    d6:f9:da:da:f2:75:24:ae:1d:5e:f9:8f:1b:88:d4:
                    b8:07:d1:e5:24:6e:5e:7e:7e:70:29:49:de:40:a9:
                    d1:f7:71:ee:53:74:9b:1b:4d:6f:8e:f7:8d:de:13:
                    66:78:f6:a4:ac:b4:c4:7f:65:74:2f:1f:a1:2d:02:
                    89:55:c1:eb:ab:18:f3:df:78:5b:94:e7:7d:3a:b2:
                    15:ea:dc:df:66:f6:03:cb:03:73:7c:8e:a6:63:29:
                    0f:14:e5:76:22:a5:11:f5:c3:d7:fd:c9:00:7a:c3:
                    86:ad:d3:0e:3c:17:fd:d3:86:88:cb:d9:c9:7b:eb:
                    b5:83:12:18:2b:7d:62:79:b2:8b:6b:ff:8a:8f:02:
                    ef:3e:4a:9b:fe:a8:44:48:77:b1:fe:15:df:5f:8a:
                    92:73:54:93:de:e2:6e:64:6b:18:44:ae:04:65:fc:
                    0a:be:0c:8b:66:f0:a2:92:45:0c:8f:7e:6d:8d:ad:
                    0b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:69:15:1E:6C:A1:26:11:C0:73:32:81:88:1C:C7:3B:D4:91:57:0D
            X509v3 Authority Key Identifier:
                keyid:BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/a09b5cf58b2142bc50f5e632d4f505fb0de13f18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/fdfd425584dd260c812e3b649911e7753efa8f09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:d2:a5:97:f5:bd:03:a5:43:ea:5e:fe:56:d6:6c:50:4c:f4:
         6b:7f:0d:68:38:14:0d:34:5a:c7:cd:13:ab:5f:44:67:16:37:
         f4:95:3d:a9:e7:d4:9e:73:41:eb:1b:49:94:1c:e1:19:3f:27:
         ce:ea:fc:5d:30:65:fd:7e:b2:5d:a5:fc:1e:7c:c7:73:da:fe:
         f0:1e:7e:5e:66:ea:43:59:59:85:bc:4a:39:a5:b0:fb:4c:78:
         e4:e3:e2:44:c2:06:45:02:46:6d:c2:aa:e7:fb:62:99:97:ac:
         9f:ad:bc:af:80:a9:e8:ff:0f:66:d0:e3:48:f2:d9:0c:ca:3f:
         54:46:71:91:38:d2:e8:c8:d5:d5:0e:95:dd:45:fd:da:3b:9e:
         2e:e9:1c:a0:53:77:f9:95:0f:24:3b:a2:e7:91:cb:20:56:f6:
         33:09:b3:1c:94:00:7d:e9:37:a8:3e:02:96:42:17:eb:47:e2:
         24:a2:dc:70:86:1b:59:df:e6:c0:28:30:56:69:ea:65:e6:4a:
         11:b8:a8:8f:30:81:76:cb:54:bd:8a:a4:c3:e6:91:4d:0e:c7:
         10:61:39:88:ad:68:45:d9:6a:bd:e6:8e:72:6e:9f:89:ba:b7:
         85:f4:cd:91:25:13:5a:ab:79:1c:46:d2:d9:89:1e:d5:a7:fc:
         91:37:88:f5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFuyMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZk
ZmQ0MjU1ODRkZDI2MGM4MTJlM2I2NDk5MTFlNzc1M2VmYThmMDkwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhhMDliNWNmNThiMjE0
MmJjNTBmNWU2MzJkNGY1MDVmYjBkZTEzZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjQzf+obSJtr8Ink5HPGHjYybERBEi1cwjCcnaLy2P4VcOX0L
tw3teJs7/MPlemDGdrKmm6depFeQgyPMWuEp3axpjXV9QrOjtvrW+dra8nUkrh1e
+Y8biNS4B9HlJG5efn5wKUneQKnR93HuU3SbG01vjveN3hNmePakrLTEf2V0Lx+h
LQKJVcHrqxjz33hblOd9OrIV6tzfZvYDywNzfI6mYykPFOV2IqUR9cPX/ckAesOG
rdMOPBf904aIy9nJe+u1gxIYK31iebKLa/+KjwLvPkqb/qhESHex/hXfX4qSc1ST
3uJuZGsYRK4EZfwKvgyLZvCikkUMj35tja0LeQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCxpFR5soSYRwHMygYgcxzvUkVcNMB8GA1UdIwQYMBaAFLz1gZ4oFe74vuhC
GWu1kH2z62AdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmRmZDQy
NTU4NGRkMjYwYzgxMmUzYjY0OTkxMWU3NzUzZWZhOGYwOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmU2NzI4NzItNzcwYS00ZDY1LWJjYmItMDU1ODc4
YWJkMWRlL2EwOWI1Y2Y1OGIyMTQyYmM1MGY1ZTYzMmQ0ZjUwNWZiMGRlMTNmMTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iZTY3Mjg3Mi03NzBhLTRkNjUtYmNiYi0wNTU4
NzhhYmQxZGUvZmRmZDQyNTU4NGRkMjYwYzgxMmUzYjY0OTkxMWU3NzUzZWZhOGYw
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqpQjDANBgkqhkiG9w0BAQsFAAOCAQEAmNKll/W9A6VD6l7+
VtZsUEz0a38NaDgUDTRax80Tq19EZxY39JU9qefUnnNB6xtJlBzhGT8nzur8XTBl
/X6yXaX8HnzHc9r+8B5+XmbqQ1lZhbxKOaWw+0x45OPiRMIGRQJGbcKq5/timZes
n628r4Cp6P8PZtDjSPLZDMo/VEZxkTjS6MjV1Q6V3UX92jueLukcoFN3+ZUPJDui
55HLIFb2MwmzHJQAfek3qD4ClkIX60fiJKLccIYbWd/mwCgwVmnqZeZKEbiojzCB
dstUvYqkw+aRTQ7HEGE5iK1oRdlqveaOcm6fibq3hfTNkSUTWqt5HEbS2Yke1af8
kTeI9Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-fra.rpki-client.org