Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e998e7d-3bbb-4428-829a-e5d6196b07a0/bcd7e16ac9320060bf939f0f4a09785d2713cd2b.roa
File:                     bcd7e16ac9320060bf939f0f4a09785d2713cd2b.roa (raw, json)
Hash identifier:          MTPTnYk8eyK4o+aPawdNE6npdQZdCzayqvdjG7Bn5pM=
Subject key identifier:   12:65:BE:1F:D9:25:54:51:D7:81:5C:31:57:C6:BC:5C:62:D1:FA:BA
Certificate issuer:       /CN=e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed
Certificate serial:       0CF740
Authority key identifier: 9E:3D:EA:02:F3:CA:3F:DF:F6:23:91:72:D2:FB:E8:B3:D2:7C:F2:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1e998e7d-3bbb-4428-829a-e5d6196b07a0/bcd7e16ac9320060bf939f0f4a09785d2713cd2b.roa
Signing time:             Fri 24 Nov 2023 11:57:05 +0000
ROA not before:           Fri 24 Nov 2023 11:57:05 +0000
ROA not after:            Mon 24 Nov 2025 11:57:05 +0000
asID:                     269814
IP address blocks:        45.186.24.0/22 maxlen: 24
                          2803:7b60::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 849728 (0xcf740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed
        Validity
            Not Before: Nov 24 11:57:05 2023 GMT
            Not After : Nov 24 11:57:05 2025 GMT
        Subject: CN=bcd7e16ac9320060bf939f0f4a09785d2713cd2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5a:09:12:fe:60:a1:74:f8:0c:d5:79:5d:ad:
                    d8:c4:ae:76:4d:b2:45:18:d1:6e:fa:91:9e:59:ea:
                    17:b7:fd:fa:46:a5:88:ec:c7:bc:e3:e4:6f:0f:50:
                    16:92:d1:e5:e5:0b:2e:9a:86:ad:25:7a:4d:95:dd:
                    15:ad:48:af:97:0b:66:69:66:28:2c:4f:e3:0e:2f:
                    4f:81:94:03:98:42:02:52:72:db:7b:2a:42:26:30:
                    a8:5f:19:1b:e4:34:40:af:1f:ee:c4:7c:33:6d:c8:
                    f6:21:f3:f6:99:da:06:44:81:7d:20:be:e8:6a:42:
                    12:e0:35:0e:76:10:99:07:50:26:20:81:b1:ac:7a:
                    5a:69:a4:c9:59:ff:02:ec:dd:6c:a5:aa:70:47:de:
                    9f:08:63:90:9a:ad:ff:9b:61:c4:56:19:8c:8e:73:
                    68:7a:93:e9:0a:a4:87:bc:e3:7a:45:91:30:4a:f0:
                    df:61:14:fe:8e:dd:e3:c7:86:6f:99:ec:76:16:f9:
                    b9:b6:62:ce:b8:54:ef:01:43:3f:90:c8:88:db:df:
                    01:6b:23:38:05:23:9e:66:ec:34:45:45:95:7c:c2:
                    43:86:2b:1b:e4:e1:04:3e:1d:3f:4d:17:b9:cd:7e:
                    64:7f:db:70:89:cf:b3:36:4b:a1:33:50:78:a7:ca:
                    0a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:65:BE:1F:D9:25:54:51:D7:81:5C:31:57:C6:BC:5C:62:D1:FA:BA
            X509v3 Authority Key Identifier:
                keyid:9E:3D:EA:02:F3:CA:3F:DF:F6:23:91:72:D2:FB:E8:B3:D2:7C:F2:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e998e7d-3bbb-4428-829a-e5d6196b07a0/bcd7e16ac9320060bf939f0f4a09785d2713cd2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1e998e7d-3bbb-4428-829a-e5d6196b07a0/e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.24.0/22
                IPv6:
                  2803:7b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:67:ea:fd:87:92:0e:df:f2:2b:c5:b7:db:bb:39:42:de:f7:
         da:c6:bf:08:e6:e9:8e:e7:64:4d:37:92:82:dd:ec:2f:07:12:
         43:c8:3c:44:9f:a2:42:aa:72:51:8c:ef:9e:db:d2:4d:00:74:
         25:d0:a1:f6:8b:b1:dd:c4:40:16:02:2c:5f:8d:f9:46:e7:4b:
         fa:af:60:da:ed:a9:f4:07:fc:89:25:fc:a0:29:8c:3c:9b:24:
         d0:87:2c:b1:b4:a5:f0:d2:87:90:3c:11:90:ed:11:34:f2:34:
         7a:f7:1c:54:9d:0a:9c:da:4f:cb:5c:37:37:84:5c:e0:56:10:
         c2:5d:38:ee:8a:32:7c:8f:8e:a3:a7:77:9f:88:23:bb:f4:af:
         36:fd:91:15:1d:39:de:be:f8:9b:ba:b0:18:84:bd:d1:9e:83:
         48:ff:51:db:63:ef:5a:48:df:84:d9:4e:ac:15:cd:76:90:43:
         99:57:fe:c6:45:47:d6:b3:6f:b7:30:0f:fb:78:a9:20:83:b3:
         0a:86:4e:c1:d0:71:1d:93:f6:58:58:ac:06:9d:75:be:4e:40:
         c3:91:9b:3b:e9:d3:0d:cb:cb:77:36:25:38:25:01:45:47:22:
         61:65:3e:d2:5b:10:18:62:f0:78:4e:38:d8:d2:19:70:74:58:
         11:3e:22:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDPdAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU4
YjBjZDFlNGEwZDUyNWY3NGQ0Y2M4NmIzNDc0Zjk4NjdjYTYzZWQwHhcNMjMxMTI0
MTE1NzA1WhcNMjUxMTI0MTE1NzA1WjAzMTEwLwYDVQQDEyhiY2Q3ZTE2YWM5MzIw
MDYwYmY5MzlmMGY0YTA5Nzg1ZDI3MTNjZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvloJEv5goXT4DNV5Xa3YxK52TbJFGNFu+pGeWeoXt/36RqWI
7Me84+RvD1AWktHl5QsumoatJXpNld0VrUivlwtmaWYoLE/jDi9PgZQDmEICUnLb
eypCJjCoXxkb5DRArx/uxHwzbcj2IfP2mdoGRIF9IL7oakIS4DUOdhCZB1AmIIGx
rHpaaaTJWf8C7N1spapwR96fCGOQmq3/m2HEVhmMjnNoepPpCqSHvON6RZEwSvDf
YRT+jt3jx4Zvmex2Fvm5tmLOuFTvAUM/kMiI298BayM4BSOeZuw0RUWVfMJDhisb
5OEEPh0/TRe5zX5kf9twic+zNkuhM1B4p8oKRQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFBJlvh/ZJVRR14FcMVfGvFxi0fq6MB8GA1UdIwQYMBaAFJ496gLzyj/f9iOR
ctL76LPSfPIoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZThiMGNk
MWU0YTBkNTI1Zjc0ZDRjYzg2YjM0NzRmOTg2N2NhNjNlZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWU5OThlN2QtM2JiYi00NDI4LTgyOWEtZTVkNjE5
NmIwN2EwL2JjZDdlMTZhYzkzMjAwNjBiZjkzOWYwZjRhMDk3ODVkMjcxM2NkMmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZTk5OGU3ZC0zYmJiLTQ0MjgtODI5YS1lNWQ2
MTk2YjA3YTAvZThiMGNkMWU0YTBkNTI1Zjc0ZDRjYzg2YjM0NzRmOTg2N2NhNjNl
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi26GDANBAIAAjAHAwUAKAN7YDANBgkqhkiG9w0BAQsFAAOC
AQEAK2fq/YeSDt/yK8W327s5Qt732sa/CObpjudkTTeSgt3sLwcSQ8g8RJ+iQqpy
UYzvntvSTQB0JdCh9oux3cRAFgIsX435RudL+q9g2u2p9Af8iSX8oCmMPJsk0Ics
sbSl8NKHkDwRkO0RNPI0evccVJ0KnNpPy1w3N4Rc4FYQwl047ooyfI+Oo6d3n4gj
u/SvNv2RFR053r74m7qwGIS90Z6DSP9R22PvWkjfhNlOrBXNdpBDmVf+xkVH1rNv
tzAP+3ipIIOzCoZOwdBxHZP2WFisBp11vk5Aw5GbO+nTDcvLdzYlOCUBRUciYWU+
0lsQGGLweE442NIZcHRYET4iBw==
-----END CERTIFICATE-----