Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ea4e93cf-258e-4095-b153-52da0ff5def7/3bb90ba61d858eb40cf016ddf00ceba63b0e6ada.roa
File:                     3bb90ba61d858eb40cf016ddf00ceba63b0e6ada.roa (raw, json)
Hash identifier:          ALDhm0WRDndUQEjn88LWSCWiRfBdjlC0NFFhYF/pPJI=
Subject key identifier:   72:30:88:BD:31:10:7D:E7:F6:57:A3:72:B8:72:BE:50:38:17:D5:5F
Certificate issuer:       /CN=64f666bdaccc96943f7d7ccb43d6b7d2046d0633
Certificate serial:       0CCC60
Authority key identifier: AA:1E:24:BE:21:73:46:07:BE:18:B9:3D:D7:27:BB:06:95:02:FD:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64f666bdaccc96943f7d7ccb43d6b7d2046d0633.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ea4e93cf-258e-4095-b153-52da0ff5def7/3bb90ba61d858eb40cf016ddf00ceba63b0e6ada.roa
Signing time:             Wed 24 Mar 2021 14:31:39 +0000
ROA not before:           Wed 24 Mar 2021 14:31:39 +0000
ROA not after:            Tue 24 Mar 2026 14:31:39 +0000
asID:                     265857
IP address blocks:        45.225.3.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838752 (0xccc60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f666bdaccc96943f7d7ccb43d6b7d2046d0633
        Validity
            Not Before: Mar 24 14:31:39 2021 GMT
            Not After : Mar 24 14:31:39 2026 GMT
        Subject: CN=3bb90ba61d858eb40cf016ddf00ceba63b0e6ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fa:ad:98:ad:fa:b7:39:6a:2c:b7:75:b1:f7:
                    ee:ff:5c:04:f9:9a:3f:f6:91:d9:4a:91:49:0a:dd:
                    80:dc:ed:03:5d:c3:3a:73:b7:6c:43:e5:a1:b1:73:
                    85:e3:43:9f:53:01:6e:9c:e4:48:a6:c5:6f:2a:f7:
                    50:e2:3c:9a:64:40:5d:d7:ff:68:a1:9b:ec:80:16:
                    d4:ae:1a:18:3d:db:d8:6d:42:45:b3:a1:bf:18:a7:
                    74:0b:e9:86:da:68:f6:bf:35:66:96:39:a4:b9:5d:
                    f2:a9:7c:f1:b9:c3:2a:30:f5:a3:2a:37:26:98:ec:
                    49:55:89:c1:0e:11:29:3b:a5:1d:57:5a:11:85:dc:
                    30:90:44:bf:3f:bd:ad:b7:5a:d7:4b:63:44:65:0f:
                    30:8a:90:79:33:8f:3e:2e:2d:f3:d8:e9:6b:7f:fc:
                    07:b6:5e:92:d9:81:b8:12:fd:32:4b:44:1f:fb:80:
                    43:b0:64:40:b0:5b:d2:cc:c3:c7:9c:13:f2:7e:d0:
                    79:d0:be:32:3b:64:02:2b:0b:45:09:f3:35:e5:3c:
                    26:4c:0f:db:f6:a3:e8:7f:4b:33:e0:1a:96:91:9f:
                    0e:d7:89:7e:f2:aa:fa:04:88:19:d6:c1:04:b8:6c:
                    7f:94:0d:c6:70:3d:c2:bc:6f:a0:82:2f:66:69:1b:
                    43:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:30:88:BD:31:10:7D:E7:F6:57:A3:72:B8:72:BE:50:38:17:D5:5F
            X509v3 Authority Key Identifier:
                keyid:AA:1E:24:BE:21:73:46:07:BE:18:B9:3D:D7:27:BB:06:95:02:FD:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64f666bdaccc96943f7d7ccb43d6b7d2046d0633.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ea4e93cf-258e-4095-b153-52da0ff5def7/3bb90ba61d858eb40cf016ddf00ceba63b0e6ada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ea4e93cf-258e-4095-b153-52da0ff5def7/64f666bdaccc96943f7d7ccb43d6b7d2046d0633.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:82:73:bb:23:23:05:ed:4b:7c:b1:53:63:81:05:7f:58:d0:
         59:da:2d:33:9b:db:6d:f6:58:60:24:b8:5c:28:62:c7:56:75:
         24:04:fc:b4:4f:2c:bd:c2:95:28:c7:23:0e:10:a4:15:87:96:
         03:52:b6:f5:cb:d8:ad:e5:a3:67:ad:3a:23:32:28:bb:22:1c:
         4e:4b:4e:74:40:0c:ec:73:ae:e3:66:13:af:0f:7f:ae:a6:c7:
         1a:90:cc:38:6a:60:ce:c0:f5:18:11:54:f9:ba:5f:11:a5:f1:
         d3:c5:3b:ee:ed:b0:1e:7f:95:f2:e8:c1:ff:44:8d:02:01:d8:
         01:af:a8:50:a5:44:50:4f:8b:b4:c2:a2:d9:69:35:0c:68:5c:
         93:4f:d6:83:b9:3a:f1:19:04:75:d9:55:59:3e:b0:7d:66:44:
         e4:98:b6:7b:6b:d5:d1:cb:b1:b4:86:de:75:7b:c7:69:aa:af:
         f2:07:4c:f8:e0:08:fa:87:6d:05:bb:d8:30:56:8c:24:82:b5:
         95:be:df:b9:40:e5:a7:89:62:d6:63:24:61:3c:ca:0d:44:b9:
         f1:1c:c7:03:c5:27:30:7d:4c:fc:35:2b:83:3d:7b:f6:d2:01:
         3e:fa:f1:c9:39:90:71:8f:0e:6e:f8:8c:99:8d:da:41:ef:2e:
         66:01:9f:59
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDMxgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY0
ZjY2NmJkYWNjYzk2OTQzZjdkN2NjYjQzZDZiN2QyMDQ2ZDA2MzMwHhcNMjEwMzI0
MTQzMTM5WhcNMjYwMzI0MTQzMTM5WjAzMTEwLwYDVQQDEygzYmI5MGJhNjFkODU4
ZWI0MGNmMDE2ZGRmMDBjZWJhNjNiMGU2YWRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgPqtmK36tzlqLLd1sffu/1wE+Zo/9pHZSpFJCt2A3O0DXcM6
c7dsQ+WhsXOF40OfUwFunORIpsVvKvdQ4jyaZEBd1/9ooZvsgBbUrhoYPdvYbUJF
s6G/GKd0C+mG2mj2vzVmljmkuV3yqXzxucMqMPWjKjcmmOxJVYnBDhEpO6UdV1oR
hdwwkES/P72tt1rXS2NEZQ8wipB5M48+Li3z2Olrf/wHtl6S2YG4Ev0yS0Qf+4BD
sGRAsFvSzMPHnBPyftB50L4yO2QCKwtFCfM15TwmTA/b9qPof0sz4BqWkZ8O14l+
8qr6BIgZ1sEEuGx/lA3GcD3CvG+ggi9maRtDVQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHIwiL0xEH3n9lejcrhyvlA4F9VfMB8GA1UdIwQYMBaAFKoeJL4hc0YHvhi5
PdcnuwaVAv0fMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjRmNjY2
YmRhY2NjOTY5NDNmN2Q3Y2NiNDNkNmI3ZDIwNDZkMDYzMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWE0ZTkzY2YtMjU4ZS00MDk1LWIxNTMtNTJkYTBm
ZjVkZWY3LzNiYjkwYmE2MWQ4NThlYjQwY2YwMTZkZGYwMGNlYmE2M2IwZTZhZGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYTRlOTNjZi0yNThlLTQwOTUtYjE1My01MmRh
MGZmNWRlZjcvNjRmNjY2YmRhY2NjOTY5NDNmN2Q3Y2NiNDNkNmI3ZDIwNDZkMDYz
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3hAzANBgkqhkiG9w0BAQsFAAOCAQEAcYJzuyMjBe1LfLFT
Y4EFf1jQWdotM5vbbfZYYCS4XChix1Z1JAT8tE8svcKVKMcjDhCkFYeWA1K29cvY
reWjZ606IzIouyIcTktOdEAM7HOu42YTrw9/rqbHGpDMOGpgzsD1GBFU+bpfEaXx
08U77u2wHn+V8ujB/0SNAgHYAa+oUKVEUE+LtMKi2Wk1DGhck0/Wg7k68RkEddlV
WT6wfWZE5Ji2e2vV0cuxtIbedXvHaaqv8gdM+OAI+odtBbvYMFaMJIK1lb7fuUDl
p4li1mMkYTzKDUS58RzHA8UnMH1M/DUrgz179tIBPvrxyTmQcY8ObviMmY3aQe8u
ZgGfWQ==
-----END CERTIFICATE-----