Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/4c4a2007eb95b979965d5a07f74514cc980e1a6b.roa
File:                     4c4a2007eb95b979965d5a07f74514cc980e1a6b.roa (raw, json)
Hash identifier:          2KQx05O/xvfWslP+fjb6sT46yynZl8BMt8ad1SCQ7bU=
Subject key identifier:   0F:2E:E7:34:A2:A4:52:71:11:5B:D8:BC:10:AB:70:FA:8B:5B:D2:A2
Certificate issuer:       /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial:       0B8A96
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/4c4a2007eb95b979965d5a07f74514cc980e1a6b.roa
Signing time:             Wed 24 Mar 2021 14:31:58 +0000
ROA not before:           Wed 24 Mar 2021 14:31:57 +0000
ROA not after:            Tue 24 Mar 2026 14:31:57 +0000
asID:                     27770
IP address blocks:        170.210.128.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 756374 (0xb8a96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
        Validity
            Not Before: Mar 24 14:31:57 2021 GMT
            Not After : Mar 24 14:31:57 2026 GMT
        Subject: CN=4c4a2007eb95b979965d5a07f74514cc980e1a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:e9:c7:07:5b:1e:81:0f:cb:0b:bd:97:79:
                    2a:47:32:a0:57:18:75:4f:24:77:8c:7e:01:c7:e8:
                    0d:7f:5b:ec:79:11:60:ee:3e:13:59:ca:83:0a:e6:
                    3f:02:73:25:59:06:47:33:3f:b3:f9:2f:b6:f3:5c:
                    8f:30:ee:18:3b:24:98:d6:90:4d:3f:9d:98:92:d8:
                    f8:4b:dc:e8:24:d3:58:33:db:05:ef:e9:93:73:53:
                    cf:7a:a8:a5:6e:62:d0:f1:d6:c9:57:4a:38:fc:59:
                    00:40:60:d0:03:03:4c:43:2b:c3:7e:dd:48:7a:5c:
                    63:b4:3c:dd:10:27:dc:80:36:af:94:c0:04:c6:0c:
                    98:6d:55:e6:bd:b4:ef:86:a9:ac:f2:dc:3f:fd:01:
                    5d:42:f2:01:7a:53:e6:d5:80:42:44:6f:87:a1:8c:
                    4c:5d:5f:ff:76:ff:16:86:0b:3f:4f:44:20:1e:bd:
                    d8:ed:81:04:30:87:01:4a:11:b8:37:fe:65:c7:6c:
                    ff:76:1a:60:27:1c:68:2c:f3:73:38:5c:df:82:45:
                    5b:b1:86:c7:ca:c2:98:4d:59:cb:1a:f1:81:71:95:
                    a4:d5:5c:2f:67:02:a5:58:de:c2:88:6c:4e:fb:60:
                    63:5f:28:2c:9a:9f:8c:1c:f7:d4:99:25:c2:34:6e:
                    ce:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2E:E7:34:A2:A4:52:71:11:5B:D8:BC:10:AB:70:FA:8B:5B:D2:A2
            X509v3 Authority Key Identifier:
                keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/4c4a2007eb95b979965d5a07f74514cc980e1a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         51:19:8c:58:73:f5:0a:f1:a4:27:45:d5:8b:39:6a:3f:fa:4d:
         17:0b:0f:e0:e8:5c:a7:01:35:6e:cf:e8:fc:b7:c5:69:41:b0:
         69:f3:c5:c8:2a:18:1f:08:ca:85:5c:99:74:3b:eb:55:55:ea:
         8a:96:21:0a:4f:4a:60:88:c2:2b:f1:02:35:e7:c2:aa:fa:4c:
         c7:3c:5f:1d:cb:db:01:6c:e1:5d:7f:29:ef:2e:ac:ae:f0:d5:
         3e:21:02:d7:f3:64:5e:6b:c3:75:b3:ad:49:aa:f6:c9:10:ba:
         ce:5a:5f:a2:ae:88:3e:7a:b4:40:ea:5a:c0:43:d4:df:27:40:
         da:9e:c5:88:e1:ca:a6:4a:2a:93:33:17:72:7e:42:90:b6:bd:
         12:e9:8b:b0:4a:3a:ec:eb:75:eb:53:fd:21:6e:75:a3:1f:da:
         e3:75:3c:1d:9f:8b:a5:5d:37:9d:35:88:6d:d7:68:3b:0b:1c:
         d7:20:b1:69:a7:44:7f:ff:d9:86:6d:f1:b2:b3:6f:da:d2:2c:
         1d:8e:5a:f1:e0:7f:79:fe:d4:fe:f5:7d:03:97:c7:55:a9:88:
         41:18:6b:54:af:16:42:7a:da:c0:19:03:49:e9:42:6a:02:2f:
         39:3d:5a:e9:54:a4:2c:9a:28:f9:49:a6:18:2a:3e:26:8d:53:
         7b:c2:ef:5c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC4qWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVl
YzkzMzQ3ODlkNGZiOTdiMGMwYWE0ODM1NjM5MDZhNWQ2OWI0YzIwHhcNMjEwMzI0
MTQzMTU3WhcNMjYwMzI0MTQzMTU3WjAzMTEwLwYDVQQDEyg0YzRhMjAwN2ViOTVi
OTc5OTY1ZDVhMDdmNzQ1MTRjYzk4MGUxYTZiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyEbpxwdbHoEPywu9l3kqRzKgVxh1TyR3jH4Bx+gNf1vseRFg
7j4TWcqDCuY/AnMlWQZHMz+z+S+281yPMO4YOySY1pBNP52Yktj4S9zoJNNYM9sF
7+mTc1PPeqilbmLQ8dbJV0o4/FkAQGDQAwNMQyvDft1IelxjtDzdECfcgDavlMAE
xgyYbVXmvbTvhqms8tw//QFdQvIBelPm1YBCRG+HoYxMXV//dv8Whgs/T0QgHr3Y
7YEEMIcBShG4N/5lx2z/dhpgJxxoLPNzOFzfgkVbsYbHysKYTVnLGvGBcZWk1Vwv
ZwKlWN7CiGxO+2BjXygsmp+MHPfUmSXCNG7O7wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFA8u5zSipFJxEVvYvBCrcPqLW9KiMB8GA1UdIwQYMBaAFAiRqsSRgrsOBnj6
2ng1jFjfNFzLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWVjOTMz
NDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRjMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjhkNWJlNGQtZTc1MS00YzcwLTk2NmItY2ZmNWVk
N2JmNWJlLzRjNGEyMDA3ZWI5NWI5Nzk5NjVkNWEwN2Y3NDUxNGNjOTgwZTFhNmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mOGQ1YmU0ZC1lNzUxLTRjNzAtOTY2Yi1jZmY1
ZWQ3YmY1YmUvZWVjOTMzNDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRj
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA6rSgDANBgkqhkiG9w0BAQsFAAOCAQEAURmMWHP1CvGkJ0XV
izlqP/pNFwsP4OhcpwE1bs/o/LfFaUGwafPFyCoYHwjKhVyZdDvrVVXqipYhCk9K
YIjCK/ECNefCqvpMxzxfHcvbAWzhXX8p7y6srvDVPiEC1/NkXmvDdbOtSar2yRC6
zlpfoq6IPnq0QOpawEPU3ydA2p7FiOHKpkoqkzMXcn5CkLa9EumLsEo67Ot161P9
IW51ox/a43U8HZ+LpV03nTWIbddoOwsc1yCxaadEf//Zhm3xsrNv2tIsHY5a8eB/
ef7U/vV9A5fHVamIQRhrVK8WQnrawBkDSelCagIvOT1a6VSkLJoo+UmmGCo+Jo1T
e8LvXA==
-----END CERTIFICATE-----