Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/7ed0c87d2d66c21ea95804a94fed97d58d38169d.roa
File:                     7ed0c87d2d66c21ea95804a94fed97d58d38169d.roa (raw, json)
Hash identifier:          +V2Kxpzb82zQzIPo67ZcASYLeJvFwxl+HVhyxF9oPyo=
Subject key identifier:   C9:BD:44:84:56:91:E3:EB:45:7C:5C:FB:85:50:A8:AD:2D:EF:A6:7D
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       15787C
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/7ed0c87d2d66c21ea95804a94fed97d58d38169d.roa
Signing time:             Fri 29 Dec 2023 03:38:58 +0000
ROA not before:           Fri 29 Dec 2023 03:38:57 +0000
ROA not after:            Mon 29 Dec 2025 03:38:57 +0000
asID:                     20473
IP address blocks:        201.217.20.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1407100 (0x15787c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Dec 29 03:38:57 2023 GMT
            Not After : Dec 29 03:38:57 2025 GMT
        Subject: CN=7ed0c87d2d66c21ea95804a94fed97d58d38169d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:38:00:7f:8e:92:92:e9:9c:c4:b3:43:da:e0:
                    41:9d:03:ce:12:18:29:6a:2a:1a:9c:54:f5:d8:2e:
                    24:46:63:d5:88:2f:16:16:5c:bb:7c:e2:ba:b8:f4:
                    f0:3b:11:6b:3b:7b:88:a4:8d:9b:5c:7d:2f:6f:4f:
                    f1:17:f5:f9:6d:3d:71:91:b4:58:32:7c:0c:94:1f:
                    cf:26:2d:80:73:16:ad:0a:5a:88:38:59:e1:6b:83:
                    4c:a8:12:f3:33:a6:99:e7:0a:db:2e:5c:82:f2:25:
                    2e:97:27:a3:ea:ba:2c:62:7e:08:42:73:26:e7:9d:
                    e4:50:e5:10:3a:38:61:b7:17:fc:cb:0a:94:a2:1d:
                    2f:d7:33:25:c9:62:2a:86:d2:9d:a7:3b:22:a5:50:
                    c5:59:d5:01:55:9f:c9:ce:d9:31:95:48:bf:67:67:
                    ff:9c:a6:00:c1:02:81:d6:c9:c2:b7:fc:c1:d8:1f:
                    fa:4a:99:c1:a5:ae:b9:4b:f4:ac:e1:31:0b:a4:f7:
                    c8:c8:55:a2:ed:30:38:44:0e:a3:18:71:10:b0:3b:
                    b4:4a:b8:f5:85:e6:91:7c:f8:63:77:4b:92:a8:c6:
                    8c:d0:f0:e4:e1:b8:29:b4:68:d0:e6:79:1f:4c:1c:
                    8f:4f:a1:af:ea:af:b6:ff:a7:b8:03:87:49:c2:6a:
                    c2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BD:44:84:56:91:E3:EB:45:7C:5C:FB:85:50:A8:AD:2D:EF:A6:7D
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/7ed0c87d2d66c21ea95804a94fed97d58d38169d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:be:d3:34:0f:44:32:99:de:0c:d4:51:29:ce:eb:7c:ca:44:
         71:00:8b:e4:5c:e3:f1:39:f2:29:ac:15:0a:5a:5c:e8:8a:be:
         eb:d2:4d:c1:4c:81:97:92:d7:97:11:4a:55:7d:af:e5:44:72:
         ff:65:bc:4d:c8:cf:b7:40:b5:bc:a6:d4:b9:15:4e:a4:81:a9:
         e0:2f:96:3a:6c:9f:5e:06:3a:d0:04:f8:84:4c:f8:4e:4d:44:
         ba:ad:3f:ff:8c:1c:51:be:07:fc:99:92:90:ec:be:d0:de:65:
         4c:65:b7:4a:c7:d6:ed:71:c8:33:6b:cd:8b:30:7e:e5:66:ad:
         6d:39:6f:b2:61:d6:1f:4e:e8:d8:d6:c4:e0:ae:bb:b1:97:70:
         be:cf:45:fc:22:50:97:65:61:a9:fa:9b:5d:f0:d2:fd:c6:74:
         aa:d3:cd:19:58:ed:97:c8:ca:bd:8e:13:c7:31:0a:7b:ce:08:
         97:a9:47:40:b8:8c:55:15:a1:69:14:e2:56:73:3f:8b:5b:07:
         c4:b8:32:e2:53:c8:69:ba:c5:3f:79:7b:cc:3a:4d:5d:f4:a8:
         dc:14:4e:97:c9:96:07:7a:7a:c6:3d:b3:6e:72:af:5f:f0:0c:
         8a:25:3f:d2:22:c7:eb:b5:ee:bb:5a:3f:79:89:29:98:50:47:
         99:88:40:06
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFXh8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk0
NjlmYjM4N2JlZmM5NmYwMTlkMDE0YzZlNTIzNGQwOTU1NTUzYTkwHhcNMjMxMjI5
MDMzODU3WhcNMjUxMjI5MDMzODU3WjAzMTEwLwYDVQQDEyg3ZWQwYzg3ZDJkNjZj
MjFlYTk1ODA0YTk0ZmVkOTdkNThkMzgxNjlkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1zgAf46SkumcxLND2uBBnQPOEhgpaioanFT12C4kRmPViC8W
Fly7fOK6uPTwOxFrO3uIpI2bXH0vb0/xF/X5bT1xkbRYMnwMlB/PJi2AcxatClqI
OFnha4NMqBLzM6aZ5wrbLlyC8iUulyej6rosYn4IQnMm553kUOUQOjhhtxf8ywqU
oh0v1zMlyWIqhtKdpzsipVDFWdUBVZ/JztkxlUi/Z2f/nKYAwQKB1snCt/zB2B/6
SpnBpa65S/Ss4TELpPfIyFWi7TA4RA6jGHEQsDu0Srj1heaRfPhjd0uSqMaM0PDk
4bgptGjQ5nkfTByPT6Gv6q+2/6e4A4dJwmrC1wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMm9RIRWkePrRXxc+4VQqK0t76Z9MB8GA1UdIwQYMBaAFAyFBRRHaAvbICkP
JHQ1FbXmEmp/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTQ2OWZi
Mzg3YmVmYzk2ZjAxOWQwMTRjNmU1MjM0ZDA5NTU1NTNhOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTRhZDY4ZTMtYTdmMC00ZDUxLTg2NTgtY2NmOWMy
NmQzZWE3LzdlZDBjODdkMmQ2NmMyMWVhOTU4MDRhOTRmZWQ5N2Q1OGQzODE2OWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNGFkNjhlMy1hN2YwLTRkNTEtODY1OC1jY2Y5
YzI2ZDNlYTcvOTQ2OWZiMzg3YmVmYzk2ZjAxOWQwMTRjNmU1MjM0ZDA5NTU1NTNh
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnZFDANBgkqhkiG9w0BAQsFAAOCAQEAgr7TNA9EMpneDNRR
Kc7rfMpEcQCL5Fzj8TnyKawVClpc6Iq+69JNwUyBl5LXlxFKVX2v5URy/2W8TcjP
t0C1vKbUuRVOpIGp4C+WOmyfXgY60AT4hEz4Tk1Euq0//4wcUb4H/JmSkOy+0N5l
TGW3SsfW7XHIM2vNizB+5WatbTlvsmHWH07o2NbE4K67sZdwvs9F/CJQl2Vhqfqb
XfDS/cZ0qtPNGVjtl8jKvY4TxzEKe84Il6lHQLiMVRWhaRTiVnM/i1sHxLgy4lPI
abrFP3l7zDpNXfSo3BROl8mWB3p6xj2zbnKvX/AMiiU/0iLH67Xuu1o/eYkpmFBH
mYhABg==
-----END CERTIFICATE-----