Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/688a067c4bd880e40a28d0a2c788a353d091d17e.roa
File:                     688a067c4bd880e40a28d0a2c788a353d091d17e.roa (raw, json)
Hash identifier:          0QCtLxrG+x5sUFL1MgKlyh3Sx8PbaNB+/zU2ZYUkvqE=
Subject key identifier:   B9:E2:6F:B9:76:94:CB:77:45:06:CC:C9:CE:00:4C:C1:AF:F1:88:F3
Certificate issuer:       /CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Certificate serial:       0BA905
Authority key identifier: 63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/688a067c4bd880e40a28d0a2c788a353d091d17e.roa
Signing time:             Wed 24 Mar 2021 14:42:53 +0000
ROA not before:           Wed 24 Mar 2021 14:42:52 +0000
ROA not after:            Tue 24 Mar 2026 14:42:52 +0000
asID:                     15107
IP address blocks:        148.244.0.0/18 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 764165 (0xba905)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0932ed7fc7587a11240901c76c1f6f64f3020149
        Validity
            Not Before: Mar 24 14:42:52 2021 GMT
            Not After : Mar 24 14:42:52 2026 GMT
        Subject: CN=688a067c4bd880e40a28d0a2c788a353d091d17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:75:73:61:d7:72:e3:f7:82:50:43:2e:f2:85:
                    ae:e1:18:0a:aa:a4:02:88:b9:25:c0:3a:24:0f:06:
                    6f:99:2f:80:f6:e3:b9:ee:9e:c3:da:fc:54:1f:7e:
                    27:36:cd:55:3e:dc:2b:c1:5e:be:df:ca:99:79:0a:
                    6b:2e:27:88:12:f0:c4:86:6d:f9:0d:56:2c:05:1c:
                    01:43:9f:e6:76:15:b9:1f:76:f3:46:f3:e3:31:89:
                    ae:4c:5c:51:c0:19:78:c1:67:40:a6:44:0d:38:50:
                    c8:41:8c:ab:c6:4e:a2:b1:3c:7f:6f:8a:3b:7d:3c:
                    80:14:4e:39:67:c3:72:9f:cf:fd:28:3f:ce:b2:5e:
                    cc:2a:07:e6:29:d8:2b:31:8b:54:23:b8:fe:0f:06:
                    98:53:98:48:96:89:ba:ca:82:3f:ca:96:0e:98:64:
                    02:c9:5b:5d:f5:0e:c4:78:55:e7:4b:bd:47:2a:9e:
                    8f:f5:72:d9:59:87:a3:52:0c:43:6d:4f:45:db:4b:
                    58:73:cb:03:77:37:f6:77:fc:f5:46:36:87:03:34:
                    53:c2:e2:bc:6c:8f:62:49:2e:63:2d:0c:58:a6:8d:
                    35:41:04:7e:1a:df:9f:32:a2:81:4f:84:34:41:4c:
                    6d:cb:8e:9c:0b:e2:8d:99:fb:b5:0f:ac:7d:a0:98:
                    72:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E2:6F:B9:76:94:CB:77:45:06:CC:C9:CE:00:4C:C1:AF:F1:88:F3
            X509v3 Authority Key Identifier:
                keyid:63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/688a067c4bd880e40a28d0a2c788a353d091d17e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/0932ed7fc7587a11240901c76c1f6f64f3020149.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.244.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         76:7b:e9:d1:c1:12:34:e2:95:de:18:5a:81:ed:0f:80:49:5d:
         95:a3:b1:6a:9e:3f:d3:49:9a:48:bc:71:cf:6f:10:a9:0e:c5:
         c0:bc:19:2e:1d:42:95:f1:76:5b:50:b5:b0:27:6c:4c:b7:f9:
         44:0d:14:32:c3:6c:38:5c:c0:8b:2d:c7:12:0e:0f:32:e2:c1:
         da:1e:61:5e:15:6a:b5:99:29:94:83:ae:d4:49:30:55:34:57:
         f6:3d:d5:ea:a1:a4:aa:c1:fd:64:97:78:b9:c3:90:53:63:43:
         b7:79:e0:ca:22:bc:48:f4:90:d4:32:6c:54:07:47:df:00:e3:
         5a:72:4a:14:6d:c8:55:7c:8c:e7:74:a6:2b:05:65:08:ee:9a:
         05:d8:65:e4:b6:7d:51:d6:9f:9f:77:cd:35:5d:1f:0b:5c:6f:
         7f:64:27:fb:bc:4c:0f:a2:a1:5c:8a:46:4a:2b:a8:b4:2e:2e:
         b3:4e:58:d1:67:a1:0c:52:25:6d:b6:4e:3a:0e:34:8a:a1:c1:
         a2:ab:27:93:df:3a:7f:17:e1:21:fb:ef:20:b8:bf:36:df:54:
         6b:a8:93:a2:f9:b8:d1:e4:e9:96:bd:c4:55:f0:76:51:40:ca:
         b7:c0:bc:bd:07:93:fe:8f:b8:f8:1c:b5:83:39:13:ce:d3:ef:
         07:4e:f7:f0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC6kFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA5
MzJlZDdmYzc1ODdhMTEyNDA5MDFjNzZjMWY2ZjY0ZjMwMjAxNDkwHhcNMjEwMzI0
MTQ0MjUyWhcNMjYwMzI0MTQ0MjUyWjAzMTEwLwYDVQQDEyg2ODhhMDY3YzRiZDg4
MGU0MGEyOGQwYTJjNzg4YTM1M2QwOTFkMTdlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApHVzYddy4/eCUEMu8oWu4RgKqqQCiLklwDokDwZvmS+A9uO5
7p7D2vxUH34nNs1VPtwrwV6+38qZeQprLieIEvDEhm35DVYsBRwBQ5/mdhW5H3bz
RvPjMYmuTFxRwBl4wWdApkQNOFDIQYyrxk6isTx/b4o7fTyAFE45Z8Nyn8/9KD/O
sl7MKgfmKdgrMYtUI7j+DwaYU5hIlom6yoI/ypYOmGQCyVtd9Q7EeFXnS71HKp6P
9XLZWYejUgxDbU9F20tYc8sDdzf2d/z1RjaHAzRTwuK8bI9iSS5jLQxYpo01QQR+
Gt+fMqKBT4Q0QUxty46cC+KNmfu1D6x9oJhyKwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLnib7l2lMt3RQbMyc4ATMGv8YjzMB8GA1UdIwQYMBaAFGPl5w+iPAyAg36h
/pZQdpXAzl7/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDkzMmVk
N2ZjNzU4N2ExMTI0MDkwMWM3NmMxZjZmNjRmMzAyMDE0OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjI1MDA5M2MtYmE5OC00OGI4LThjNTItOWFiZTU3
ZDUyZDRmLzY4OGEwNjdjNGJkODgwZTQwYTI4ZDBhMmM3ODhhMzUzZDA5MWQxN2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMjUwMDkzYy1iYTk4LTQ4YjgtOGM1Mi05YWJl
NTdkNTJkNGYvMDkzMmVkN2ZjNzU4N2ExMTI0MDkwMWM3NmMxZjZmNjRmMzAyMDE0
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBpT0ADANBgkqhkiG9w0BAQsFAAOCAQEAdnvp0cESNOKV3hha
ge0PgEldlaOxap4/00maSLxxz28QqQ7FwLwZLh1ClfF2W1C1sCdsTLf5RA0UMsNs
OFzAiy3HEg4PMuLB2h5hXhVqtZkplIOu1EkwVTRX9j3V6qGkqsH9ZJd4ucOQU2ND
t3ngyiK8SPSQ1DJsVAdH3wDjWnJKFG3IVXyM53SmKwVlCO6aBdhl5LZ9Udafn3fN
NV0fC1xvf2Qn+7xMD6KhXIpGSiuotC4us05Y0WehDFIlbbZOOg40iqHBoqsnk986
fxfhIfvvILi/Nt9Ua6iTovm40eTplr3EVfB2UUDKt8C8vQeT/o+4+By1gzkTztPv
B0738A==
-----END CERTIFICATE-----