Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61ed6fb5-758e-421d-86ad-617641df563e/9e10f399fc2e9b9d844ecefdb7b3b3db4d999e3e.roa
File:                     9e10f399fc2e9b9d844ecefdb7b3b3db4d999e3e.roa (raw, json)
Hash identifier:          Cx7n8IQftL2rlepFhJcO3zbOtnKCrvE3mBw/L/000Tg=
Subject key identifier:   51:11:0F:4C:1C:AC:45:E0:FA:A1:83:D2:D2:18:95:26:02:FD:A6:D9
Certificate issuer:       /CN=0d1cb9c49815293f5f9842b7199758ddd455e663
Certificate serial:       0C8D59
Authority key identifier: 43:56:E9:F6:88:6A:E3:9E:F1:8C:27:6E:3F:69:D3:78:86:12:DC:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d1cb9c49815293f5f9842b7199758ddd455e663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61ed6fb5-758e-421d-86ad-617641df563e/9e10f399fc2e9b9d844ecefdb7b3b3db4d999e3e.roa
Signing time:             Wed 24 Mar 2021 14:46:21 +0000
ROA not before:           Wed 24 Mar 2021 14:46:21 +0000
ROA not after:            Tue 24 Mar 2026 14:46:21 +0000
asID:                     263750
IP address blocks:        45.170.104.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822617 (0xc8d59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1cb9c49815293f5f9842b7199758ddd455e663
        Validity
            Not Before: Mar 24 14:46:21 2021 GMT
            Not After : Mar 24 14:46:21 2026 GMT
        Subject: CN=9e10f399fc2e9b9d844ecefdb7b3b3db4d999e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:29:eb:ed:f8:46:c9:69:88:39:d8:0a:4c:2a:
                    db:07:e3:33:7c:56:e5:2c:98:d2:ef:03:d2:aa:d6:
                    a3:28:be:c8:a1:25:67:a1:15:7f:51:83:52:b5:30:
                    46:da:c1:cf:73:98:bf:80:8f:71:ce:3a:c7:20:7d:
                    79:f7:f1:8f:4e:9e:2c:fa:0f:d4:9a:cd:a1:ca:40:
                    89:04:5b:0e:1e:79:10:81:a8:56:7f:b9:33:6d:b4:
                    d1:72:c2:b5:c3:29:7b:fc:0a:f8:22:1b:d2:75:f3:
                    3e:48:9d:17:cc:36:de:45:17:38:0e:e9:bb:0e:dd:
                    fe:6d:a9:d3:72:ed:5c:25:2d:d1:ed:59:45:5c:78:
                    30:e3:33:ff:91:7e:ad:8d:72:8c:71:6c:b7:57:71:
                    0b:74:a0:4b:12:1f:6c:88:bb:c5:34:ed:75:d3:cc:
                    cf:98:af:3a:af:2d:19:d6:19:05:a4:02:73:0c:e4:
                    b4:0f:65:c6:ce:36:8c:be:97:d4:e6:83:c4:42:d5:
                    fd:1c:40:06:e2:4f:fe:07:b1:1d:80:62:c0:09:ce:
                    f8:54:62:8a:ff:c5:e2:41:6f:08:ed:2d:67:26:a7:
                    89:d2:05:a8:de:3a:b8:7a:21:bd:be:9b:67:01:e5:
                    72:e2:30:06:41:a8:da:64:09:3a:9a:0c:e4:24:c4:
                    14:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:11:0F:4C:1C:AC:45:E0:FA:A1:83:D2:D2:18:95:26:02:FD:A6:D9
            X509v3 Authority Key Identifier:
                keyid:43:56:E9:F6:88:6A:E3:9E:F1:8C:27:6E:3F:69:D3:78:86:12:DC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d1cb9c49815293f5f9842b7199758ddd455e663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61ed6fb5-758e-421d-86ad-617641df563e/9e10f399fc2e9b9d844ecefdb7b3b3db4d999e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61ed6fb5-758e-421d-86ad-617641df563e/0d1cb9c49815293f5f9842b7199758ddd455e663.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:0a:f2:29:ca:33:be:e8:7f:80:45:59:09:87:d3:14:1e:15:
         05:44:a7:30:16:f7:ce:43:3d:f0:40:a7:c9:b0:f9:29:8c:a0:
         ff:9f:33:dc:46:b5:bf:84:78:c7:0e:4b:e5:4d:0c:9f:26:ef:
         55:77:51:b4:0c:ed:ca:21:68:d7:c7:0c:cd:91:e1:c2:14:63:
         83:e9:54:31:aa:06:85:3f:fb:29:d8:55:2c:00:06:86:4a:97:
         32:3e:cc:81:4b:7d:63:db:dd:7c:92:57:cd:04:0e:2f:e0:a1:
         e2:fb:88:b9:83:68:03:38:40:f6:33:f1:3a:ca:44:bb:f4:95:
         4e:cc:ec:d9:fb:50:d9:26:24:ef:3b:c9:73:a0:2a:4a:3e:81:
         a5:ab:84:a7:65:e7:cd:cd:39:b5:4a:41:fe:95:fb:8f:24:2e:
         11:e1:ad:b1:39:4d:aa:7a:fe:96:75:d6:5a:6b:d1:57:62:ac:
         71:99:62:1b:8d:2c:71:c8:16:1e:d2:48:e6:60:ac:a7:4e:3e:
         ca:6b:41:b9:46:4f:e3:cd:d2:15:05:dc:e7:56:2f:e1:bf:b2:
         84:48:1b:71:71:10:41:4e:9b:c9:bb:a9:f1:58:15:a0:be:8f:
         90:19:32:80:56:6a:9f:cd:fc:ac:33:31:63:c1:f5:18:51:51:
         67:ac:24:8f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDI1ZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBk
MWNiOWM0OTgxNTI5M2Y1Zjk4NDJiNzE5OTc1OGRkZDQ1NWU2NjMwHhcNMjEwMzI0
MTQ0NjIxWhcNMjYwMzI0MTQ0NjIxWjAzMTEwLwYDVQQDEyg5ZTEwZjM5OWZjMmU5
YjlkODQ0ZWNlZmRiN2IzYjNkYjRkOTk5ZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiSnr7fhGyWmIOdgKTCrbB+MzfFblLJjS7wPSqtajKL7IoSVn
oRV/UYNStTBG2sHPc5i/gI9xzjrHIH159/GPTp4s+g/Ums2hykCJBFsOHnkQgahW
f7kzbbTRcsK1wyl7/Ar4IhvSdfM+SJ0XzDbeRRc4Dum7Dt3+banTcu1cJS3R7VlF
XHgw4zP/kX6tjXKMcWy3V3ELdKBLEh9siLvFNO1108zPmK86ry0Z1hkFpAJzDOS0
D2XGzjaMvpfU5oPEQtX9HEAG4k/+B7EdgGLACc74VGKK/8XiQW8I7S1nJqeJ0gWo
3jq4eiG9vptnAeVy4jAGQajaZAk6mgzkJMQUCQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFERD0wcrEXg+qGD0tIYlSYC/abZMB8GA1UdIwQYMBaAFENW6faIauOe8Ywn
bj9p03iGEtyYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGQxY2I5
YzQ5ODE1MjkzZjVmOTg0MmI3MTk5NzU4ZGRkNDU1ZTY2My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjFlZDZmYjUtNzU4ZS00MjFkLTg2YWQtNjE3NjQx
ZGY1NjNlLzllMTBmMzk5ZmMyZTliOWQ4NDRlY2VmZGI3YjNiM2RiNGQ5OTllM2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MWVkNmZiNS03NThlLTQyMWQtODZhZC02MTc2
NDFkZjU2M2UvMGQxY2I5YzQ5ODE1MjkzZjVmOTg0MmI3MTk5NzU4ZGRkNDU1ZTY2
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2qaDANBgkqhkiG9w0BAQsFAAOCAQEAiAryKcozvuh/gEVZ
CYfTFB4VBUSnMBb3zkM98ECnybD5KYyg/58z3Ea1v4R4xw5L5U0MnybvVXdRtAzt
yiFo18cMzZHhwhRjg+lUMaoGhT/7KdhVLAAGhkqXMj7MgUt9Y9vdfJJXzQQOL+Ch
4vuIuYNoAzhA9jPxOspEu/SVTszs2ftQ2SYk7zvJc6AqSj6BpauEp2Xnzc05tUpB
/pX7jyQuEeGtsTlNqnr+lnXWWmvRV2KscZliG40sccgWHtJI5mCsp04+ymtBuUZP
483SFQXc51Yv4b+yhEgbcXEQQU6bybup8VgVoL6PkBkygFZqn838rDMxY8H1GFFR
Z6wkjw==
-----END CERTIFICATE-----