Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/b546d46fd9c00b8f28d5aa838307c4a2c1986948.roa
File:                     b546d46fd9c00b8f28d5aa838307c4a2c1986948.roa (raw, json)
Hash identifier:          E7iTqHmPodsmndnm3e/6ljXXWbR2oZfsZ5LZHmloEK8=
Subject key identifier:   2C:27:A2:DF:11:05:D8:20:E5:85:7D:86:FD:59:A0:5B:3F:F8:90:24
Certificate issuer:       /CN=c6e6abb9e295aea3473895245eb2e4f25f175b38
Certificate serial:       1E62C5
Authority key identifier: C0:CA:27:17:C5:5C:E3:9E:55:4B:B4:3B:F7:AD:12:09:3C:36:7E:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6e6abb9e295aea3473895245eb2e4f25f175b38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/b546d46fd9c00b8f28d5aa838307c4a2c1986948.roa
Signing time:             Mon 13 Feb 2023 21:07:04 +0000
ROA not before:           Mon 22 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27814
IP address blocks:        200.110.112.0/21 maxlen: 24
                          200.110.122.0/23 maxlen: 24
                          200.110.124.0/23 maxlen: 24
                          200.110.127.0/24 maxlen: 24
                          2001:13c7:6f00::/45 maxlen: 48
                          2001:13c7:6f08::/48 maxlen: 48
                          2001:13c7:6f09::/48 maxlen: 48
                          2001:13c7:6f10::/45 maxlen: 48
                          2001:13c7:6f10::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1991365 (0x1e62c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e6abb9e295aea3473895245eb2e4f25f175b38
        Validity
            Not Before: Mar 22 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=b546d46fd9c00b8f28d5aa838307c4a2c1986948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3d:bf:8e:02:42:ce:fb:c2:50:57:b0:ad:e7:
                    d0:58:03:f7:66:57:7e:0d:8c:29:e4:19:2c:fd:58:
                    b4:f1:8f:0d:ca:72:76:79:b8:75:23:4f:8a:a1:7b:
                    88:7d:eb:16:2e:09:dc:18:17:a6:8f:e2:cd:5a:a6:
                    ce:1c:db:f9:ba:44:63:63:06:51:df:be:8d:ec:d4:
                    85:77:9f:2f:00:30:0e:0d:59:b4:6a:0b:63:28:fb:
                    54:96:ce:a2:e0:6b:7b:a1:b2:ea:14:88:7b:26:31:
                    9b:0a:ed:9d:5a:19:71:3f:86:72:9d:14:94:03:31:
                    5a:0a:af:04:5f:61:67:0c:3c:90:a9:0c:4e:f1:b0:
                    33:38:aa:c6:58:87:ef:72:0d:ed:fc:2f:e9:e5:0d:
                    24:b9:c2:ef:6c:9a:29:b8:28:89:47:b3:52:c7:19:
                    7f:62:c9:46:b6:38:46:9f:27:6e:3f:bc:9b:87:49:
                    bc:20:1f:ff:e2:b3:2d:4d:a0:90:f7:41:cb:37:0b:
                    6c:c6:c2:30:bf:c5:01:fb:08:2e:bc:5f:0a:d6:d1:
                    3c:94:ff:f7:1d:51:cd:67:ea:d6:0b:70:89:45:e8:
                    a1:46:90:20:90:0a:af:e3:f1:c9:36:c4:25:91:44:
                    0c:e0:19:a6:24:b2:4c:27:05:20:ce:ca:8c:04:08:
                    2e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:27:A2:DF:11:05:D8:20:E5:85:7D:86:FD:59:A0:5B:3F:F8:90:24
            X509v3 Authority Key Identifier:
                keyid:C0:CA:27:17:C5:5C:E3:9E:55:4B:B4:3B:F7:AD:12:09:3C:36:7E:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6e6abb9e295aea3473895245eb2e4f25f175b38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/b546d46fd9c00b8f28d5aa838307c4a2c1986948.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/c6e6abb9e295aea3473895245eb2e4f25f175b38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.112.0/21
                  200.110.122.0-200.110.125.255
                  200.110.127.0/24
                IPv6:
                  2001:13c7:6f00::-2001:13c7:6f09:ffff:ffff:ffff:ffff:ffff
                  2001:13c7:6f10::/45

    Signature Algorithm: sha256WithRSAEncryption
         cf:39:35:ad:f2:a8:64:1d:c0:f5:d6:c2:75:92:ea:76:0e:38:
         f7:8c:f5:cf:91:3c:aa:36:32:a1:11:9e:3c:2e:24:90:f7:fc:
         e3:1c:9f:67:f6:3a:44:9c:fb:44:41:ee:90:ac:0e:1f:3a:ff:
         06:5c:15:50:1a:11:3d:47:a2:29:e5:9f:ce:3d:c5:92:16:07:
         17:f8:18:7e:16:2d:1a:5c:23:f0:18:00:c1:d5:55:a3:83:83:
         c9:05:90:52:46:91:a1:95:b3:5c:49:97:42:d0:10:cb:1f:ef:
         8e:00:a2:bc:19:fc:d9:76:00:55:27:85:81:54:f8:64:f1:a1:
         ce:b5:6c:ff:83:06:db:19:f3:d4:04:a0:3b:20:f9:d3:3f:41:
         1b:00:94:e2:87:41:3f:ff:e3:82:1d:c5:c9:5b:25:ce:9c:1b:
         40:59:80:50:4c:78:c7:fb:51:4a:21:94:b3:36:15:71:cc:32:
         da:97:89:4a:1b:d8:4c:77:3e:eb:65:18:66:19:5d:9f:34:c7:
         74:3e:ed:bf:81:fe:0d:68:12:6a:76:86:a6:b7:24:7e:fb:23:
         19:bc:21:3a:16:59:6c:b9:e7:be:3b:7d:88:64:30:6f:ba:b6:
         76:60:2e:4d:19:47:4c:c2:76:29:4b:57:39:f9:82:29:a8:8d:
         e9:fd:07:d7
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIDHmLFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM2
ZTZhYmI5ZTI5NWFlYTM0NzM4OTUyNDVlYjJlNGYyNWYxNzViMzgwHhcNMjEwMzIy
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhiNTQ2ZDQ2ZmQ5YzAw
YjhmMjhkNWFhODM4MzA3YzRhMmMxOTg2OTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA7T2/jgJCzvvCUFewrefQWAP3Zld+DYwp5Bks/Vi08Y8NynJ2
ebh1I0+KoXuIfesWLgncGBemj+LNWqbOHNv5ukRjYwZR376N7NSFd58vADAODVm0
agtjKPtUls6i4Gt7obLqFIh7JjGbCu2dWhlxP4ZynRSUAzFaCq8EX2FnDDyQqQxO
8bAzOKrGWIfvcg3t/C/p5Q0kucLvbJopuCiJR7NSxxl/YslGtjhGnyduP7ybh0m8
IB//4rMtTaCQ90HLNwtsxsIwv8UB+wguvF8K1tE8lP/3HVHNZ+rWC3CJReihRpAg
kAqv4/HJNsQlkUQM4BmmJLJMJwUgzsqMBAguuwIDAQABo4ICkzCCAo8wHQYDVR0O
BBYEFCwnot8RBdgg5YV9hv1ZoFs/+JAkMB8GA1UdIwQYMBaAFMDKJxfFXOOeVUu0
O/etEgk8Nn4oMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzZlNmFi
YjllMjk1YWVhMzQ3Mzg5NTI0NWViMmU0ZjI1ZjE3NWIzOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTU1YTRjNDItZmQxYy00NmM5LWFjMTgtZWZmNjI4
MWM4YzM4L2I1NDZkNDZmZDljMDBiOGYyOGQ1YWE4MzgzMDdjNGEyYzE5ODY5NDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNTVhNGM0Mi1mZDFjLTQ2YzktYWMxOC1lZmY2
MjgxYzhjMzgvYzZlNmFiYjllMjk1YWVhMzQ3Mzg5NTI0NWViMmU0ZjI1ZjE3NWIz
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBXBggrBgEFBQcBBwEB/wRI
MEYwIAQCAAEwGgMEA8hucDAMAwQByG56AwQByG58AwQAyG5/MCIEAgACMBwwEQMG
ACABE8dvAwcBIAETx28IAwcDIAETx28QMA0GCSqGSIb3DQEBCwUAA4IBAQDPOTWt
8qhkHcD11sJ1kup2Djj3jPXPkTyqNjKhEZ48LiSQ9/zjHJ9n9jpEnPtEQe6QrA4f
Ov8GXBVQGhE9R6Ip5Z/OPcWSFgcX+Bh+Fi0aXCPwGADB1VWjg4PJBZBSRpGhlbNc
SZdC0BDLH++OAKK8GfzZdgBVJ4WBVPhk8aHOtWz/gwbbGfPUBKA7IPnTP0EbAJTi
h0E//+OCHcXJWyXOnBtAWYBQTHjH+1FKIZSzNhVxzDLal4lKG9hMdz7rZRhmGV2f
NMd0Pu2/gf4NaBJqdoamtyR++yMZvCE6Fllsuee+O32IZDBvurZ2YC5NGUdMwnYp
S1c5+YIpqI3p/QfX
-----END CERTIFICATE-----