Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/656d715d-a239-46a1-a4c0-85ed7528c811/b84a6a60cabcb48cd3e394ce018a9275d5657309.roa
File:                     b84a6a60cabcb48cd3e394ce018a9275d5657309.roa (raw, json)
Hash identifier:          9HSjCivxuHuah32aMh/Mv6CaRf3CfdlTW8OqeRKlqNk=
Subject key identifier:   92:FA:D8:BE:42:BC:01:EC:B4:C9:DD:26:95:77:53:C9:77:66:5E:A2
Certificate issuer:       /CN=15f17e39b2a57eadc93fc47962028588c7fc873f
Certificate serial:       24149E
Authority key identifier: E3:DF:CD:25:F0:87:8C:A8:D3:F8:39:8A:71:EC:BD:31:53:BC:7E:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15f17e39b2a57eadc93fc47962028588c7fc873f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/656d715d-a239-46a1-a4c0-85ed7528c811/b84a6a60cabcb48cd3e394ce018a9275d5657309.roa
Signing time:             Mon 18 Dec 2023 18:58:53 +0000
ROA not before:           Mon 18 Dec 2023 18:58:53 +0000
ROA not after:            Thu 18 Dec 2025 18:58:53 +0000
asID:                     12684
IP address blocks:        45.174.8.0/24 maxlen: 24
                          2803:3060::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2364574 (0x24149e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f17e39b2a57eadc93fc47962028588c7fc873f
        Validity
            Not Before: Dec 18 18:58:53 2023 GMT
            Not After : Dec 18 18:58:53 2025 GMT
        Subject: CN=b84a6a60cabcb48cd3e394ce018a9275d5657309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d7:f1:c4:22:8a:83:dd:71:de:bb:65:04:54:
                    1e:c3:8d:92:48:3f:ea:60:36:9f:eb:a1:f6:a5:28:
                    8e:07:7f:0c:9d:50:1e:9e:ea:0b:1d:dc:fc:28:e8:
                    4b:34:a0:7f:4b:e9:a9:81:47:2b:69:6b:75:0e:f9:
                    8e:da:a8:d4:1a:f6:64:f0:96:e6:2a:93:1e:13:ee:
                    87:75:35:d6:80:d4:49:ae:c4:b5:2d:6e:5a:71:29:
                    63:24:5e:96:11:1e:0a:3f:c9:b3:35:cf:94:f1:b3:
                    5e:d3:cf:8b:c9:19:a3:12:bc:88:32:a5:8e:f8:78:
                    5c:10:cd:b6:87:92:b2:40:ca:1a:ab:ce:b5:20:15:
                    19:58:17:23:45:1a:90:d8:22:23:14:29:b4:35:ac:
                    7d:f6:fc:91:6a:cf:39:a9:46:bc:93:c4:97:2a:c4:
                    0b:04:fa:99:80:a6:bf:0c:68:55:f3:60:59:94:4c:
                    c9:45:32:13:6f:cc:38:ce:57:09:be:06:ec:88:49:
                    34:ac:a6:e5:3e:a2:51:14:e2:b8:7e:35:7b:c5:76:
                    d1:9e:5f:2d:aa:17:76:f3:ce:be:20:06:34:8b:83:
                    34:92:2e:f3:09:ce:bb:0c:4d:13:86:ac:ae:df:05:
                    1d:5e:e1:f7:b3:45:66:f9:87:7e:66:96:b8:7a:83:
                    0a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FA:D8:BE:42:BC:01:EC:B4:C9:DD:26:95:77:53:C9:77:66:5E:A2
            X509v3 Authority Key Identifier:
                keyid:E3:DF:CD:25:F0:87:8C:A8:D3:F8:39:8A:71:EC:BD:31:53:BC:7E:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15f17e39b2a57eadc93fc47962028588c7fc873f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/656d715d-a239-46a1-a4c0-85ed7528c811/b84a6a60cabcb48cd3e394ce018a9275d5657309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/656d715d-a239-46a1-a4c0-85ed7528c811/15f17e39b2a57eadc93fc47962028588c7fc873f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.8.0/24
                IPv6:
                  2803:3060::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:cd:cb:95:a6:e6:2a:fb:a0:bc:5d:de:2b:34:c4:dd:98:00:
         8f:42:d7:39:2b:34:66:49:3a:65:ce:04:41:4f:ba:04:65:4f:
         81:7a:cd:77:b4:91:b1:b5:3a:2d:06:6a:35:d5:0c:3c:5e:b5:
         80:ca:a4:ff:02:ca:d2:aa:6f:2f:fa:c8:dc:85:e7:33:a0:99:
         d8:a0:85:1a:37:10:24:37:0f:e4:5e:cb:30:26:f9:b2:dc:62:
         81:4e:2f:23:fa:49:b3:a8:d0:1d:ae:76:16:2b:d9:a4:18:83:
         63:ef:c0:9a:55:dc:b8:8f:05:8e:43:44:e5:34:78:e8:a9:8f:
         f0:1c:a3:89:ae:b6:f3:4a:ab:39:a2:ed:a9:ea:49:f1:61:6e:
         2d:8c:e6:bd:4e:30:84:29:8c:d4:06:29:8b:f0:ee:01:11:3a:
         08:99:94:a2:a2:17:56:27:05:e9:89:3e:63:59:dc:9b:c4:69:
         62:f7:05:c8:b5:e8:ee:bc:a6:f1:1f:6d:59:08:30:24:6a:b0:
         d3:50:21:95:e2:78:8c:8d:15:5b:28:89:9b:73:a2:37:27:cb:
         61:ac:5a:48:05:c9:83:2e:b9:a9:68:fc:93:5d:e2:d5:c1:43:
         2b:f7:a6:6c:a0:76:88:41:c3:0f:20:9b:7e:91:67:6a:0f:9d:
         05:c3:b7:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDJBSeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE1
ZjE3ZTM5YjJhNTdlYWRjOTNmYzQ3OTYyMDI4NTg4YzdmYzg3M2YwHhcNMjMxMjE4
MTg1ODUzWhcNMjUxMjE4MTg1ODUzWjAzMTEwLwYDVQQDEyhiODRhNmE2MGNhYmNi
NDhjZDNlMzk0Y2UwMThhOTI3NWQ1NjU3MzA5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoNfxxCKKg91x3rtlBFQew42SSD/qYDaf66H2pSiOB38MnVAe
nuoLHdz8KOhLNKB/S+mpgUcraWt1DvmO2qjUGvZk8JbmKpMeE+6HdTXWgNRJrsS1
LW5acSljJF6WER4KP8mzNc+U8bNe08+LyRmjEryIMqWO+HhcEM22h5KyQMoaq861
IBUZWBcjRRqQ2CIjFCm0Nax99vyRas85qUa8k8SXKsQLBPqZgKa/DGhV82BZlEzJ
RTITb8w4zlcJvgbsiEk0rKblPqJRFOK4fjV7xXbRnl8tqhd2886+IAY0i4M0ki7z
Cc67DE0Thqyu3wUdXuH3s0Vm+Yd+Zpa4eoMKSwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFJL62L5CvAHstMndJpV3U8l3Zl6iMB8GA1UdIwQYMBaAFOPfzSXwh4yo0/g5
inHsvTFTvH4SMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTVmMTdl
MzliMmE1N2VhZGM5M2ZjNDc5NjIwMjg1ODhjN2ZjODczZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjU2ZDcxNWQtYTIzOS00NmExLWE0YzAtODVlZDc1
MjhjODExL2I4NGE2YTYwY2FiY2I0OGNkM2UzOTRjZTAxOGE5Mjc1ZDU2NTczMDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTZkNzE1ZC1hMjM5LTQ2YTEtYTRjMC04NWVk
NzUyOGM4MTEvMTVmMTdlMzliMmE1N2VhZGM5M2ZjNDc5NjIwMjg1ODhjN2ZjODcz
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAC2uCDANBAIAAjAHAwUAKAMwYDANBgkqhkiG9w0BAQsFAAOC
AQEAOs3LlabmKvugvF3eKzTE3ZgAj0LXOSs0Zkk6Zc4EQU+6BGVPgXrNd7SRsbU6
LQZqNdUMPF61gMqk/wLK0qpvL/rI3IXnM6CZ2KCFGjcQJDcP5F7LMCb5stxigU4v
I/pJs6jQHa52FivZpBiDY+/AmlXcuI8FjkNE5TR46KmP8Byjia6280qrOaLtqepJ
8WFuLYzmvU4whCmM1AYpi/DuARE6CJmUoqIXVicF6Yk+Y1ncm8RpYvcFyLXo7rym
8R9tWQgwJGqw01AhleJ4jI0VWyiJm3OiNyfLYaxaSAXJgy65qWj8k13i1cFDK/em
bKB2iEHDDyCbfpFnag+dBcO3Jg==
-----END CERTIFICATE-----