Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cc7439fc-bb57-4ec2-99e3-b9d21c615697/4cec3dfc1a83d52c1586d61cbc6f12a88ef0d588.roa
File:                     4cec3dfc1a83d52c1586d61cbc6f12a88ef0d588.roa (raw, json)
Hash identifier:          /RGwVxZ44jSJ5DynWesFQ7ST57KH0xw3dfpeyLjdNgs=
Subject key identifier:   FC:17:23:40:DD:83:93:C8:20:51:28:4F:E9:77:09:07:81:59:DD:19
Certificate issuer:       /CN=0f93bb3c007d18be5c8a08f924130cad8044105f
Certificate serial:       0D18D1
Authority key identifier: 48:82:6B:AE:3A:84:9C:A3:B1:F6:DC:6A:A0:A1:C0:63:8F:08:ED:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f93bb3c007d18be5c8a08f924130cad8044105f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cc7439fc-bb57-4ec2-99e3-b9d21c615697/4cec3dfc1a83d52c1586d61cbc6f12a88ef0d588.roa
Signing time:             Wed 24 Mar 2021 14:40:07 +0000
ROA not before:           Wed 24 Mar 2021 14:40:07 +0000
ROA not after:            Tue 24 Mar 2026 14:40:07 +0000
asID:                     266681
IP address blocks:        45.228.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858321 (0xd18d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f93bb3c007d18be5c8a08f924130cad8044105f
        Validity
            Not Before: Mar 24 14:40:07 2021 GMT
            Not After : Mar 24 14:40:07 2026 GMT
        Subject: CN=4cec3dfc1a83d52c1586d61cbc6f12a88ef0d588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:9f:6f:5c:57:f8:e3:9a:68:73:21:cf:2f:
                    8c:bd:d8:63:eb:05:b0:ad:90:28:51:d8:3c:36:48:
                    50:5a:09:bd:27:b0:3a:c6:37:78:2d:ac:fd:91:e1:
                    e0:22:17:ea:97:fd:df:f7:c5:b3:09:af:eb:08:4a:
                    cd:56:33:74:db:c4:c0:49:ff:6a:46:79:fe:41:8b:
                    c9:28:66:d8:b9:27:f9:f3:60:14:b4:e9:ec:47:8c:
                    f5:02:45:36:99:c0:fb:06:28:99:20:63:49:72:a0:
                    4c:1a:1c:fe:79:c8:d0:84:25:b5:17:85:57:08:81:
                    bf:17:ad:6c:2c:0c:2c:2d:41:4c:73:4c:02:d9:8d:
                    a9:a1:5c:d3:fe:61:87:26:94:fe:ed:c9:5e:19:54:
                    72:5c:1d:d2:44:21:bc:39:67:f4:42:69:57:ce:71:
                    dd:7a:e1:31:1c:32:0c:33:2e:7a:7f:fa:64:72:f3:
                    27:12:3f:e4:c1:7c:ce:aa:3c:14:ce:d3:1b:76:5b:
                    e9:21:1c:17:2d:93:c7:4e:5c:0c:fd:0c:60:d2:23:
                    f0:3c:e4:f7:a8:f0:b6:6e:a2:a3:63:ec:1c:28:96:
                    f7:d0:d6:54:e4:33:5e:20:93:2c:c2:9e:95:4a:15:
                    28:d5:d0:44:83:a1:8d:8c:42:9d:48:65:de:9d:75:
                    88:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:17:23:40:DD:83:93:C8:20:51:28:4F:E9:77:09:07:81:59:DD:19
            X509v3 Authority Key Identifier:
                keyid:48:82:6B:AE:3A:84:9C:A3:B1:F6:DC:6A:A0:A1:C0:63:8F:08:ED:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f93bb3c007d18be5c8a08f924130cad8044105f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cc7439fc-bb57-4ec2-99e3-b9d21c615697/4cec3dfc1a83d52c1586d61cbc6f12a88ef0d588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cc7439fc-bb57-4ec2-99e3-b9d21c615697/0f93bb3c007d18be5c8a08f924130cad8044105f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:20:7f:9a:ec:88:15:f1:e6:63:24:ca:9f:b3:2c:73:6f:6c:
         e6:8f:19:63:37:5f:32:f6:e6:b8:6a:6e:66:0c:ea:1b:0c:cd:
         e0:e5:08:10:d0:dc:a0:6f:17:7e:5c:a5:b6:12:72:c9:86:4b:
         13:ae:dd:88:ab:5e:9c:d8:e1:7e:db:e3:5a:b5:a2:09:78:3b:
         f1:9e:32:4c:69:89:2f:0c:28:79:d6:ac:fd:35:c5:24:3a:f2:
         1c:2a:bc:93:61:ce:15:bd:ad:e6:35:69:36:90:6a:a2:55:f2:
         17:8a:78:10:60:74:1b:08:bf:8c:b0:02:33:b4:5e:db:87:f9:
         9d:8f:4c:36:5f:5e:84:80:6e:55:a7:88:8d:0e:32:c2:3c:52:
         22:8d:9c:eb:da:7f:23:74:4c:59:67:63:6a:39:57:4c:b4:54:
         18:b6:d8:a0:7c:64:a7:9d:3a:fc:c4:c7:26:6c:d1:72:bb:51:
         44:13:4d:11:c0:47:45:a5:8d:e4:cb:a8:87:fa:a7:40:7c:ef:
         d0:96:04:92:76:38:7c:0a:5d:f1:45:af:f1:f0:ba:58:5c:da:
         c5:c9:30:c7:37:a6:92:00:0e:d6:10:e0:ee:cb:cf:83:06:08:
         ef:f7:c8:f8:39:d2:ed:be:ef:0d:e9:91:07:92:2a:02:7c:62:
         72:d1:a2:18
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDRjRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBm
OTNiYjNjMDA3ZDE4YmU1YzhhMDhmOTI0MTMwY2FkODA0NDEwNWYwHhcNMjEwMzI0
MTQ0MDA3WhcNMjYwMzI0MTQ0MDA3WjAzMTEwLwYDVQQDEyg0Y2VjM2RmYzFhODNk
NTJjMTU4NmQ2MWNiYzZmMTJhODhlZjBkNTg4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAteefb1xX+OOaaHMhzy+Mvdhj6wWwrZAoUdg8NkhQWgm9J7A6
xjd4Laz9keHgIhfql/3f98WzCa/rCErNVjN028TASf9qRnn+QYvJKGbYuSf582AU
tOnsR4z1AkU2mcD7BiiZIGNJcqBMGhz+ecjQhCW1F4VXCIG/F61sLAwsLUFMc0wC
2Y2poVzT/mGHJpT+7cleGVRyXB3SRCG8OWf0QmlXznHdeuExHDIMMy56f/pkcvMn
Ej/kwXzOqjwUztMbdlvpIRwXLZPHTlwM/Qxg0iPwPOT3qPC2bqKjY+wcKJb30NZU
5DNeIJMswp6VShUo1dBEg6GNjEKdSGXenXWIJQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPwXI0Ddg5PIIFEoT+l3CQeBWd0ZMB8GA1UdIwQYMBaAFEiCa646hJyjsfbc
aqChwGOPCO3iMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGY5M2Ji
M2MwMDdkMThiZTVjOGEwOGY5MjQxMzBjYWQ4MDQ0MTA1Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2M3NDM5ZmMtYmI1Ny00ZWMyLTk5ZTMtYjlkMjFj
NjE1Njk3LzRjZWMzZGZjMWE4M2Q1MmMxNTg2ZDYxY2JjNmYxMmE4OGVmMGQ1ODgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jYzc0MzlmYy1iYjU3LTRlYzItOTllMy1iOWQy
MWM2MTU2OTcvMGY5M2JiM2MwMDdkMThiZTVjOGEwOGY5MjQxMzBjYWQ4MDQ0MTA1
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3ktDANBgkqhkiG9w0BAQsFAAOCAQEAgyB/muyIFfHmYyTK
n7Msc29s5o8ZYzdfMvbmuGpuZgzqGwzN4OUIENDcoG8XflylthJyyYZLE67diKte
nNjhftvjWrWiCXg78Z4yTGmJLwwoedas/TXFJDryHCq8k2HOFb2t5jVpNpBqolXy
F4p4EGB0Gwi/jLACM7Re24f5nY9MNl9ehIBuVaeIjQ4ywjxSIo2c69p/I3RMWWdj
ajlXTLRUGLbYoHxkp506/MTHJmzRcrtRRBNNEcBHRaWN5Muoh/qnQHzv0JYEknY4
fApd8UWv8fC6WFzaxckwxzemkgAO1hDg7svPgwYI7/fI+DnS7b7vDemRB5IqAnxi
ctGiGA==
-----END CERTIFICATE-----