Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/25614f8afdbef17c2dee846855d3d0dacb992903.roa
File:                     25614f8afdbef17c2dee846855d3d0dacb992903.roa (raw, json)
Hash identifier:          6C7E/E1cLi1AVmgGBqrcAnKhYaOYWqPopnP0E/2VCB4=
Subject key identifier:   97:A3:B4:FC:BF:B1:A8:7C:0B:E1:58:D2:28:4E:F1:FE:43:5E:9D:CE
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       01FF92
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/25614f8afdbef17c2dee846855d3d0dacb992903.roa
Signing time:             Mon 29 Nov 2021 18:58:31 +0000
ROA not before:           Mon 29 Nov 2021 03:00:00 +0000
ROA not after:            Wed 29 Nov 2023 03:00:00 +0000
asID:                     27768
IP address blocks:        201.217.52.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130962 (0x1ff92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Nov 29 03:00:00 2021 GMT
            Not After : Nov 29 03:00:00 2023 GMT
        Subject: CN=25614f8afdbef17c2dee846855d3d0dacb992903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f8:d8:dd:eb:a6:f7:c6:63:15:45:68:a0:e3:
                    76:9d:5f:01:a3:78:c9:4b:07:07:27:ce:81:f9:b4:
                    f9:d7:78:5f:fc:57:5d:42:de:3d:bb:6c:5d:32:1c:
                    48:bf:cf:85:ff:f1:e4:cb:e5:ac:86:0e:6f:21:a7:
                    d7:12:6e:33:1e:c9:ec:48:ad:2d:5c:08:c6:b5:be:
                    bf:58:87:a2:eb:80:3f:32:b8:da:20:cc:3d:3a:1b:
                    63:f0:b1:41:9c:d5:26:c9:3d:65:e0:1a:ea:07:3c:
                    36:fd:19:e3:0f:cc:4d:84:2f:b8:af:04:1f:a4:38:
                    db:56:01:95:68:e5:4c:83:98:12:ca:34:9a:31:98:
                    46:04:12:51:bf:2d:12:52:74:c3:f5:4d:46:fa:ea:
                    5d:11:85:03:ab:00:3e:8b:12:90:aa:4c:9f:25:0d:
                    a8:a0:7f:0a:bc:6a:33:08:2d:6a:4e:f0:8b:04:3f:
                    d5:a7:a0:08:26:0a:71:71:a7:60:2a:3d:58:7b:36:
                    ff:d6:8d:87:2d:34:78:03:ec:aa:ff:5d:c6:4d:23:
                    54:93:e4:6b:fb:f4:e7:1e:8e:d4:22:16:eb:46:b4:
                    97:90:40:12:19:c8:a1:a7:71:af:86:56:67:aa:6b:
                    bd:3e:12:d8:fe:ba:e8:c7:55:b0:f0:14:e4:c6:05:
                    d6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A3:B4:FC:BF:B1:A8:7C:0B:E1:58:D2:28:4E:F1:FE:43:5E:9D:CE
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/25614f8afdbef17c2dee846855d3d0dacb992903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:d8:a6:26:7b:b0:9c:ef:e7:1d:e7:e4:6c:f0:6e:a2:66:d2:
         d7:41:c6:7b:0f:10:d4:c0:48:3e:f9:9a:57:de:77:e1:3b:91:
         78:45:29:51:8d:8f:2a:b2:4f:2c:ab:57:45:c4:b0:36:1b:24:
         46:2e:c0:5f:91:e0:d4:df:7d:f7:b0:20:38:65:2e:da:fa:21:
         0f:51:da:77:a4:0f:1f:7a:57:e9:9e:0b:43:2e:44:58:3e:d7:
         70:55:70:93:77:9b:6f:0c:2a:be:ff:28:be:f8:96:83:5f:80:
         a3:81:df:0b:1f:75:66:7b:4b:fc:56:89:0c:0c:5b:b5:eb:12:
         ee:a5:30:53:0e:66:12:e0:db:f4:11:c1:ff:b3:92:d3:59:7c:
         d3:14:5a:70:bc:93:b8:d9:6b:c1:2e:de:67:bf:75:72:ae:e1:
         5b:fb:7b:d1:36:5f:6b:7d:87:e7:60:e6:42:43:6e:db:78:8f:
         98:54:fe:d3:31:d4:69:c2:6f:20:2b:cb:79:b4:d7:c6:7f:f4:
         d1:05:f1:87:70:1b:ad:77:b8:b9:cb:00:b6:f2:df:d2:6b:89:
         3e:57:d9:b8:6f:2f:05:3f:f4:56:03:72:56:ef:68:1a:15:ce:
         03:99:c0:f5:49:b1:c4:a8:27:ee:ff:bc:81:f1:1b:e1:23:06:
         d4:5f:77:4c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAf+SMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk0
NjlmYjM4N2JlZmM5NmYwMTlkMDE0YzZlNTIzNGQwOTU1NTUzYTkwHhcNMjExMTI5
MDMwMDAwWhcNMjMxMTI5MDMwMDAwWjAzMTEwLwYDVQQDEygyNTYxNGY4YWZkYmVm
MTdjMmRlZTg0Njg1NWQzZDBkYWNiOTkyOTAzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmvjY3eum98ZjFUVooON2nV8Bo3jJSwcHJ86B+bT513hf/Fdd
Qt49u2xdMhxIv8+F//Hky+Wshg5vIafXEm4zHsnsSK0tXAjGtb6/WIei64A/Mrja
IMw9Ohtj8LFBnNUmyT1l4BrqBzw2/RnjD8xNhC+4rwQfpDjbVgGVaOVMg5gSyjSa
MZhGBBJRvy0SUnTD9U1G+updEYUDqwA+ixKQqkyfJQ2ooH8KvGozCC1qTvCLBD/V
p6AIJgpxcadgKj1Yezb/1o2HLTR4A+yq/13GTSNUk+Rr+/TnHo7UIhbrRrSXkEAS
Gcihp3GvhlZnqmu9PhLY/rrox1Ww8BTkxgXWjwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJejtPy/sah8C+FY0ihO8f5DXp3OMB8GA1UdIwQYMBaAFAyFBRRHaAvbICkP
JHQ1FbXmEmp/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTQ2OWZi
Mzg3YmVmYzk2ZjAxOWQwMTRjNmU1MjM0ZDA5NTU1NTNhOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTRhZDY4ZTMtYTdmMC00ZDUxLTg2NTgtY2NmOWMy
NmQzZWE3LzI1NjE0ZjhhZmRiZWYxN2MyZGVlODQ2ODU1ZDNkMGRhY2I5OTI5MDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNGFkNjhlMy1hN2YwLTRkNTEtODY1OC1jY2Y5
YzI2ZDNlYTcvOTQ2OWZiMzg3YmVmYzk2ZjAxOWQwMTRjNmU1MjM0ZDA5NTU1NTNh
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAcnZNDANBgkqhkiG9w0BAQsFAAOCAQEAOtimJnuwnO/nHefk
bPBuombS10HGew8Q1MBIPvmaV9534TuReEUpUY2PKrJPLKtXRcSwNhskRi7AX5Hg
1N9997AgOGUu2vohD1Had6QPH3pX6Z4LQy5EWD7XcFVwk3ebbwwqvv8ovviWg1+A
o4HfCx91ZntL/FaJDAxbtesS7qUwUw5mEuDb9BHB/7OS01l80xRacLyTuNlrwS7e
Z791cq7hW/t70TZfa32H52DmQkNu23iPmFT+0zHUacJvICvLebTXxn/00QXxh3Ab
rXe4ucsAtvLf0muJPlfZuG8vBT/0VgNyVu9oGhXOA5nA9UmxxKgn7v+8gfEb4SMG
1F93TA==
-----END CERTIFICATE-----