Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/5d4c2c27600617dbd96e85e75556aeb766e9ffc9.roa
File:                     5d4c2c27600617dbd96e85e75556aeb766e9ffc9.roa (raw, json)
Hash identifier:          rYfBYx8lx8BnEOiPlqoCqbH1UJNTZeseqP9ipMyzrrA=
Subject key identifier:   3B:D0:D7:3A:26:B8:33:64:F2:55:42:B3:A9:EE:56:6D:C5:19:02:2D
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       0DF65F
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/5d4c2c27600617dbd96e85e75556aeb766e9ffc9.roa
Signing time:             Wed 24 Mar 2021 14:32:25 +0000
ROA not before:           Wed 24 Mar 2021 14:32:25 +0000
ROA not after:            Tue 24 Mar 2026 14:32:25 +0000
asID:                     262202
IP address blocks:        190.98.184.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915039 (0xdf65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Mar 24 14:32:25 2021 GMT
            Not After : Mar 24 14:32:25 2026 GMT
        Subject: CN=5d4c2c27600617dbd96e85e75556aeb766e9ffc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:23:5d:b2:ee:26:3a:33:ea:ea:ea:ac:59:97:
                    af:f4:74:17:58:58:96:58:d4:1a:8e:d1:1e:8b:ce:
                    e6:05:ea:d0:87:77:99:ab:b6:43:d5:66:3c:a1:b6:
                    cb:36:02:2b:3c:26:1f:be:b0:35:9b:28:9c:d6:04:
                    6e:54:4b:a5:cd:75:5a:49:5e:ec:1d:2e:d3:5b:ab:
                    af:6c:62:13:22:18:d4:61:73:4e:10:9d:90:b0:3f:
                    4b:df:13:98:85:ed:01:5a:25:14:5f:ec:72:d4:33:
                    00:aa:89:7f:ef:af:32:17:4e:66:fa:57:36:1d:c4:
                    ed:39:71:be:b1:a1:a4:ac:d9:ff:c6:4d:1f:ee:15:
                    e6:d7:e5:fe:49:68:00:42:be:eb:db:9f:82:00:2e:
                    b4:89:98:30:52:61:aa:74:70:22:6e:9f:f7:3f:fd:
                    69:0e:48:74:f6:f2:28:af:5d:7a:8b:c7:1b:74:60:
                    ed:89:a3:32:3b:32:24:69:08:7e:7f:04:03:49:20:
                    10:85:ec:24:0f:31:0c:ff:99:8a:17:14:21:d3:8e:
                    5f:bc:6d:3c:76:99:b4:6f:b4:7b:d1:1a:20:9d:02:
                    99:9c:cd:50:2f:9d:08:23:78:12:ee:2e:dd:75:f0:
                    5b:98:40:35:cd:03:a9:c2:42:1b:da:d7:53:d5:71:
                    f1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D0:D7:3A:26:B8:33:64:F2:55:42:B3:A9:EE:56:6D:C5:19:02:2D
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/5d4c2c27600617dbd96e85e75556aeb766e9ffc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0b:b2:9c:5c:db:54:5d:f6:78:53:d0:82:4a:6f:75:04:5c:96:
         93:9d:71:f8:7b:e6:4d:a7:06:ce:77:1f:f2:d5:ec:94:48:11:
         a9:da:2f:59:96:90:bb:f0:56:87:c3:08:ca:88:a8:1d:0c:e9:
         9c:14:53:ec:59:2b:0c:d2:fe:22:42:36:9b:b0:ca:af:92:04:
         3b:0c:a2:10:cc:f8:a9:bb:c6:f9:7d:21:e5:7b:4c:0b:1f:3d:
         b7:c7:8a:64:70:96:03:2e:37:9b:25:26:86:f8:f8:c2:76:a6:
         96:bf:fd:43:d9:7f:19:31:f2:d0:d7:25:7c:69:8b:bb:2d:0d:
         c2:b5:09:44:53:78:c7:6f:5b:7f:3f:fc:af:8e:79:78:d1:72:
         ab:03:6d:0f:4f:f3:99:37:89:79:d0:91:13:e9:37:47:ed:dd:
         0f:37:6f:93:42:bd:27:c4:40:86:01:c5:1a:ac:7d:1c:75:0f:
         4a:8d:c4:2d:54:76:7d:74:4a:b7:78:93:8a:48:e8:42:02:c3:
         a8:35:f4:62:86:f0:e2:43:70:c7:08:7f:e1:f5:50:b3:71:76:
         e6:5f:b6:22:8d:18:cf:56:f0:ec:d9:2f:c8:55:30:46:7c:d9:
         69:4c:c3:4b:82:b6:c1:82:df:33:34:77:57:3d:20:dc:e1:60:
         b1:4c:9d:c7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDfZfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
Mjg1M2NjODVjMWU1NWM2NWU3NjMyOTliYTA4ODk0ZjhjZThkNTEwHhcNMjEwMzI0
MTQzMjI1WhcNMjYwMzI0MTQzMjI1WjAzMTEwLwYDVQQDEyg1ZDRjMmMyNzYwMDYx
N2RiZDk2ZTg1ZTc1NTU2YWViNzY2ZTlmZmM5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApCNdsu4mOjPq6uqsWZev9HQXWFiWWNQajtEei87mBerQh3eZ
q7ZD1WY8obbLNgIrPCYfvrA1myic1gRuVEulzXVaSV7sHS7TW6uvbGITIhjUYXNO
EJ2QsD9L3xOYhe0BWiUUX+xy1DMAqol/768yF05m+lc2HcTtOXG+saGkrNn/xk0f
7hXm1+X+SWgAQr7r25+CAC60iZgwUmGqdHAibp/3P/1pDkh09vIor116i8cbdGDt
iaMyOzIkaQh+fwQDSSAQhewkDzEM/5mKFxQh045fvG08dpm0b7R70RognQKZnM1Q
L50II3gS7i7ddfBbmEA1zQOpwkIb2tdT1XHxEQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDvQ1zomuDNk8lVCs6nuVm3FGQItMB8GA1UdIwQYMBaAFI1zxHehMa1tUWdm
3vRyzC5gSH+tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2YyODUz
Y2M4NWMxZTU1YzY1ZTc2MzI5OWJhMDg4OTRmOGNlOGQ1MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDZmMjFhOGMtM2E3MS00N2E3LTlmNmUtYzliNDQx
NDI3ZmNkLzVkNGMyYzI3NjAwNjE3ZGJkOTZlODVlNzU1NTZhZWI3NjZlOWZmYzku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNmYyMWE4Yy0zYTcxLTQ3YTctOWY2ZS1jOWI0
NDE0MjdmY2QvY2YyODUzY2M4NWMxZTU1YzY1ZTc2MzI5OWJhMDg4OTRmOGNlOGQ1
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA75iuDANBgkqhkiG9w0BAQsFAAOCAQEAC7KcXNtUXfZ4U9CC
Sm91BFyWk51x+HvmTacGzncf8tXslEgRqdovWZaQu/BWh8MIyoioHQzpnBRT7Fkr
DNL+IkI2m7DKr5IEOwyiEMz4qbvG+X0h5XtMCx89t8eKZHCWAy43myUmhvj4wnam
lr/9Q9l/GTHy0NclfGmLuy0NwrUJRFN4x29bfz/8r455eNFyqwNtD0/zmTeJedCR
E+k3R+3dDzdvk0K9J8RAhgHFGqx9HHUPSo3ELVR2fXRKt3iTikjoQgLDqDX0Yobw
4kNwxwh/4fVQs3F25l+2Io0Yz1bw7NkvyFUwRnzZaUzDS4K2wYLfMzR3Vz0g3OFg
sUydxw==
-----END CERTIFICATE-----