Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d0e662ff-33b4-44be-8020-9616b2e960d8/d9e03c845109647363062d595623f0019082a034.roa
File:                     d9e03c845109647363062d595623f0019082a034.roa (raw, json)
Hash identifier:          bBgBf1JrQyXdCvJniUPVtv3q2OKjNJ/OnFP8RJm7xwg=
Subject key identifier:   B9:C0:0A:85:4C:B7:13:29:B8:AA:4D:7C:95:03:30:3F:9A:70:12:52
Certificate issuer:       /CN=39a30dc8d9a2613f485c79d6067d35eef4832f3f
Certificate serial:       0540
Authority key identifier: E1:A9:CE:70:6E:1D:BA:C2:75:F7:8D:5A:CA:2B:75:94:C3:A3:57:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39a30dc8d9a2613f485c79d6067d35eef4832f3f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d0e662ff-33b4-44be-8020-9616b2e960d8/d9e03c845109647363062d595623f0019082a034.roa
Signing time:             Mon 15 Nov 2021 17:25:33 +0000
ROA not before:           Mon 15 Nov 2021 03:00:00 +0000
ROA not after:            Wed 15 Nov 2023 03:00:00 +0000
asID:                     263170
IP address blocks:        192.141.4.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1344 (0x540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39a30dc8d9a2613f485c79d6067d35eef4832f3f
        Validity
            Not Before: Nov 15 03:00:00 2021 GMT
            Not After : Nov 15 03:00:00 2023 GMT
        Subject: CN=d9e03c845109647363062d595623f0019082a034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5c:54:b1:4f:68:64:1d:45:73:31:e5:31:48:
                    1d:db:01:f0:b8:2b:fa:76:56:f6:77:0a:0e:8e:ac:
                    35:fb:91:62:c0:d0:0d:31:e7:df:99:d8:d9:88:97:
                    86:47:13:c5:54:2a:5f:06:aa:43:7d:4c:2e:59:19:
                    c6:70:5e:a5:19:1b:02:15:38:c4:1e:fb:51:e2:dc:
                    75:dc:e7:35:74:94:41:52:b0:ac:37:a5:69:a5:91:
                    9a:0a:2e:1b:01:2f:ff:99:af:c3:14:06:b5:33:09:
                    22:3b:14:74:65:63:cf:9f:c3:27:6e:21:9b:7d:a5:
                    26:a8:b5:71:e2:6b:8d:10:74:d1:4f:b7:c6:90:68:
                    d6:bc:cf:9d:3b:2c:a8:75:89:d7:67:11:88:2c:81:
                    d9:37:2a:07:ef:68:d3:81:15:34:71:41:a2:d5:c9:
                    db:2c:14:52:02:8f:dc:76:54:02:e4:bd:37:5a:0b:
                    ac:8c:1a:4b:d9:a7:76:58:7e:97:5e:41:58:35:4d:
                    ed:3f:d5:94:33:59:30:da:7c:54:33:1e:7e:87:eb:
                    fd:1b:c0:82:81:dc:23:fd:d5:26:0e:7d:f4:5e:da:
                    ff:f7:e4:79:5d:b1:07:6d:4f:ea:73:14:02:32:92:
                    2c:ac:e6:97:b7:1b:91:f9:8e:87:43:52:f0:14:14:
                    14:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C0:0A:85:4C:B7:13:29:B8:AA:4D:7C:95:03:30:3F:9A:70:12:52
            X509v3 Authority Key Identifier:
                keyid:E1:A9:CE:70:6E:1D:BA:C2:75:F7:8D:5A:CA:2B:75:94:C3:A3:57:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39a30dc8d9a2613f485c79d6067d35eef4832f3f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d0e662ff-33b4-44be-8020-9616b2e960d8/d9e03c845109647363062d595623f0019082a034.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d0e662ff-33b4-44be-8020-9616b2e960d8/39a30dc8d9a2613f485c79d6067d35eef4832f3f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:eb:95:2c:b6:5a:e7:c6:68:40:85:10:9a:29:65:4b:cb:77:
         c6:c6:ea:e8:78:4f:4f:b0:d2:3a:71:19:78:70:4d:66:26:b3:
         e3:fc:9c:6f:3c:fb:95:ca:1a:3a:82:eb:c1:00:3d:7d:40:98:
         e6:d9:8a:d1:a4:d8:a5:5c:30:0c:88:bb:f5:57:9a:22:42:e2:
         ed:45:3b:4c:65:4b:61:89:65:3a:0d:74:b3:72:aa:8c:cb:93:
         eb:14:84:7d:6b:83:65:64:40:76:f4:29:a4:ed:1c:ec:3c:44:
         cf:97:3b:51:8f:a8:57:46:1f:33:48:bc:71:24:03:85:4f:6f:
         ab:6b:1b:7a:5e:44:47:26:80:7e:9b:61:e9:6a:e9:79:36:1b:
         a6:46:41:1d:6d:3a:31:7f:18:b1:6b:11:0e:eb:18:de:ae:20:
         57:78:7c:05:49:0e:35:c9:6a:28:13:b0:ae:b9:dc:6e:47:c5:
         ca:a2:a9:a0:3d:ad:5e:d9:35:cc:d2:a8:e2:c3:63:aa:d8:38:
         e2:00:b1:23:7f:7e:b6:05:9c:65:15:a5:6c:37:6b:fb:be:9c:
         17:67:9b:3e:a0:bf:1b:2a:c7:76:dc:f0:a5:25:e1:ae:d2:c7:
         42:0c:ba:dd:04:8e:7a:26:da:7e:c7:f3:5b:bb:8d:e5:1d:58:
         de:a2:c5:d7
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBUAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzlh
MzBkYzhkOWEyNjEzZjQ4NWM3OWQ2MDY3ZDM1ZWVmNDgzMmYzZjAeFw0yMTExMTUw
MzAwMDBaFw0yMzExMTUwMzAwMDBaMDMxMTAvBgNVBAMTKGQ5ZTAzYzg0NTEwOTY0
NzM2MzA2MmQ1OTU2MjNmMDAxOTA4MmEwMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkXFSxT2hkHUVzMeUxSB3bAfC4K/p2VvZ3Cg6OrDX7kWLA0A0x
59+Z2NmIl4ZHE8VUKl8GqkN9TC5ZGcZwXqUZGwIVOMQe+1Hi3HXc5zV0lEFSsKw3
pWmlkZoKLhsBL/+Zr8MUBrUzCSI7FHRlY8+fwyduIZt9pSaotXHia40QdNFPt8aQ
aNa8z507LKh1iddnEYgsgdk3KgfvaNOBFTRxQaLVydssFFICj9x2VALkvTdaC6yM
GkvZp3ZYfpdeQVg1Te0/1ZQzWTDafFQzHn6H6/0bwIKB3CP91SYOffRe2v/35Hld
sQdtT+pzFAIykiys5pe3G5H5jodDUvAUFBTdAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUucAKhUy3Eym4qk18lQMwP5pwElIwHwYDVR0jBBgwFoAU4anOcG4dusJ1941a
yit1lMOjVzcwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8zOWEzMGRj
OGQ5YTI2MTNmNDg1Yzc5ZDYwNjdkMzVlZWY0ODMyZjNmLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9kMGU2NjJmZi0zM2I0LTQ0YmUtODAyMC05NjE2YjJl
OTYwZDgvZDllMDNjODQ1MTA5NjQ3MzYzMDYyZDU5NTYyM2YwMDE5MDgyYTAzNC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2QwZTY2MmZmLTMzYjQtNDRiZS04MDIwLTk2MTZi
MmU5NjBkOC8zOWEzMGRjOGQ5YTI2MTNmNDg1Yzc5ZDYwNjdkMzVlZWY0ODMyZjNm
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCwI0EMA0GCSqGSIb3DQEBCwUAA4IBAQAo65UstlrnxmhAhRCa
KWVLy3fGxuroeE9PsNI6cRl4cE1mJrPj/JxvPPuVyho6guvBAD19QJjm2YrRpNil
XDAMiLv1V5oiQuLtRTtMZUthiWU6DXSzcqqMy5PrFIR9a4NlZEB29Cmk7RzsPETP
lztRj6hXRh8zSLxxJAOFT2+raxt6XkRHJoB+m2Hpaul5NhumRkEdbToxfxixaxEO
6xjeriBXeHwFSQ41yWooE7CuudxuR8XKoqmgPa1e2TXM0qjiw2Oq2DjiALEjf362
BZxlFaVsN2v7vpwXZ5s+oL8bKsd23PClJeGu0sdCDLrdBI56Jtp+x/Nbu43lHVje
osXX
-----END CERTIFICATE-----