Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/3257019f3448612b7f82bc05318af3ff64d86b7f.roa
File:                     3257019f3448612b7f82bc05318af3ff64d86b7f.roa (raw, json)
Hash identifier:          /60dIxfWQZCxW0VnckVMl0KuOBGD432C4UqYJffbQpI=
Subject key identifier:   13:1A:8F:AB:47:CE:C6:6E:C0:C7:FE:F5:76:50:9C:8E:3B:CA:CC:5A
Certificate issuer:       /CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
Certificate serial:       0BC97A
Authority key identifier: 0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/3257019f3448612b7f82bc05318af3ff64d86b7f.roa
Signing time:             Wed 24 Mar 2021 14:40:30 +0000
ROA not before:           Wed 24 Mar 2021 14:40:30 +0000
ROA not after:            Tue 24 Mar 2026 14:40:30 +0000
asID:                     267849
IP address blocks:        45.175.164.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 772474 (0xbc97a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
        Validity
            Not Before: Mar 24 14:40:30 2021 GMT
            Not After : Mar 24 14:40:30 2026 GMT
        Subject: CN=3257019f3448612b7f82bc05318af3ff64d86b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:9d:52:8b:11:94:b6:9a:2d:6f:e6:24:ff:
                    91:1e:ee:9c:8e:91:7a:40:05:24:f2:88:56:90:95:
                    58:2f:d4:2b:f0:13:ad:e8:28:48:a0:77:fb:aa:e2:
                    a4:8f:94:c4:ca:57:8e:ef:91:7d:0c:ce:bb:8e:03:
                    b6:ac:80:55:16:12:0a:14:f7:29:5e:c0:a5:df:f3:
                    e4:c9:c7:b2:d1:a8:4a:ed:4e:1a:ef:9e:d5:74:df:
                    13:c4:4a:78:af:16:88:0d:f0:16:a5:47:26:be:01:
                    16:e6:07:46:7e:90:ea:ba:f1:8d:88:94:b3:b2:07:
                    43:40:36:20:17:6a:47:a0:29:97:ca:98:57:8d:eb:
                    2e:1c:1b:de:9e:62:20:da:9b:4b:c0:e2:32:6d:47:
                    39:cf:f7:24:0e:6d:fc:87:fa:4a:2b:f8:f3:17:4c:
                    73:9e:f8:99:73:0e:90:ce:a7:08:ad:44:04:35:e2:
                    e9:6f:3e:f5:c7:b2:e9:d1:b0:6b:f2:52:73:47:f7:
                    bb:4a:ef:b6:dc:d9:3b:7e:80:ae:5e:2f:22:c7:6e:
                    03:3a:ea:74:0f:4a:ec:1f:ed:ca:be:43:47:65:fb:
                    b9:03:d1:87:5b:66:13:01:ea:92:55:15:cc:ee:a4:
                    2b:c1:da:43:ec:19:de:ee:17:aa:37:77:f5:62:2a:
                    3a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1A:8F:AB:47:CE:C6:6E:C0:C7:FE:F5:76:50:9C:8E:3B:CA:CC:5A
            X509v3 Authority Key Identifier:
                keyid:0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/3257019f3448612b7f82bc05318af3ff64d86b7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/d53e5113cbffa42dda2928ee24c7eff1286a8644.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:cb:b3:97:89:c6:41:54:c6:e9:d9:47:78:b3:8a:64:ac:41:
         2f:4f:70:c6:66:d5:7e:34:23:a7:53:1e:00:4f:a2:95:1f:d8:
         97:6f:28:fe:a1:38:75:06:45:a7:e0:b1:fe:9d:6c:c7:2b:bc:
         c0:bf:05:b9:28:75:9e:f3:c8:38:27:6f:ea:7d:51:8b:3f:67:
         66:00:e1:82:2e:f6:63:3a:4f:c0:e0:ed:f3:c6:cf:c2:3b:8b:
         29:97:31:20:75:42:38:e2:46:55:a6:6e:bf:12:b7:7f:b2:9b:
         23:c3:3c:67:9e:56:a0:c9:b2:dc:ff:db:da:86:c6:3c:6a:b9:
         7e:0d:e8:c4:69:0d:c0:6c:64:59:e2:36:87:ca:ed:9d:02:7d:
         67:4a:e1:1a:ed:e3:fb:c1:f1:4e:e6:df:42:f5:7b:03:f8:96:
         cf:8a:13:c2:67:94:ba:0e:9a:d3:25:46:f7:f5:a3:a3:49:9d:
         dd:27:00:7f:c1:41:85:5e:61:96:10:65:8a:cf:df:2b:09:39:
         c9:37:fd:1a:10:18:4d:3e:b4:d2:86:3a:60:d7:2f:36:12:2f:
         ee:1f:1e:03:8b:c4:18:8d:a9:ce:df:a2:ad:f4:85:b8:4c:00:
         e0:fe:d1:48:a0:b0:e7:da:dc:f8:f6:8d:ee:5e:9e:39:4b:b4:
         0b:da:5d:10
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC8l6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
M2U1MTEzY2JmZmE0MmRkYTI5MjhlZTI0YzdlZmYxMjg2YTg2NDQwHhcNMjEwMzI0
MTQ0MDMwWhcNMjYwMzI0MTQ0MDMwWjAzMTEwLwYDVQQDEygzMjU3MDE5ZjM0NDg2
MTJiN2Y4MmJjMDUzMThhZjNmZjY0ZDg2YjdmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1JadUosRlLaaLW/mJP+RHu6cjpF6QAUk8ohWkJVYL9Qr8BOt
6ChIoHf7quKkj5TEyleO75F9DM67jgO2rIBVFhIKFPcpXsCl3/Pkycey0ahK7U4a
757VdN8TxEp4rxaIDfAWpUcmvgEW5gdGfpDquvGNiJSzsgdDQDYgF2pHoCmXyphX
jesuHBvenmIg2ptLwOIybUc5z/ckDm38h/pKK/jzF0xznviZcw6QzqcIrUQENeLp
bz71x7Lp0bBr8lJzR/e7Su+23Nk7foCuXi8ix24DOup0D0rsH+3KvkNHZfu5A9GH
W2YTAeqSVRXM7qQrwdpD7Bne7heqN3f1Yio6fwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBMaj6tHzsZuwMf+9XZQnI47ysxaMB8GA1UdIwQYMBaAFAuTS1sgOMh/+q0e
N1+EX6sugu1dMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDUzZTUx
MTNjYmZmYTQyZGRhMjkyOGVlMjRjN2VmZjEyODZhODY0NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTE0NTJiZWQtMjZhNi00Mjk4LWFjZDMtMDllNGJi
YzQ0NTQyLzMyNTcwMTlmMzQ0ODYxMmI3ZjgyYmMwNTMxOGFmM2ZmNjRkODZiN2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMTQ1MmJlZC0yNmE2LTQyOTgtYWNkMy0wOWU0
YmJjNDQ1NDIvZDUzZTUxMTNjYmZmYTQyZGRhMjkyOGVlMjRjN2VmZjEyODZhODY0
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2vpDANBgkqhkiG9w0BAQsFAAOCAQEAHMuzl4nGQVTG6dlH
eLOKZKxBL09wxmbVfjQjp1MeAE+ilR/Yl28o/qE4dQZFp+Cx/p1sxyu8wL8FuSh1
nvPIOCdv6n1Riz9nZgDhgi72YzpPwODt88bPwjuLKZcxIHVCOOJGVaZuvxK3f7Kb
I8M8Z55WoMmy3P/b2obGPGq5fg3oxGkNwGxkWeI2h8rtnQJ9Z0rhGu3j+8HxTubf
QvV7A/iWz4oTwmeUug6a0yVG9/Wjo0md3ScAf8FBhV5hlhBlis/fKwk5yTf9GhAY
TT600oY6YNcvNhIv7h8eA4vEGI2pzt+irfSFuEwA4P7RSKCw59rc+PaN7l6eOUu0
C9pdEA==
-----END CERTIFICATE-----