Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fefe688b-4428-4840-a83a-08943aa84d05/e8b6fcfda95049ad99cd0969c029cb2a196cd204.roa
File:                     e8b6fcfda95049ad99cd0969c029cb2a196cd204.roa (raw, json)
Hash identifier:          I8Cp3rFQtEkkciGiNVqsm69mBil2NVlOkphp8Fw31zU=
Subject key identifier:   9B:94:DB:FC:94:A7:44:8D:EE:17:63:A8:39:16:53:9A:AF:63:98:69
Certificate issuer:       /CN=e1c05a92a385e8c5fe0107e8dbfa5287c168e026
Certificate serial:       05C0
Authority key identifier: 03:FD:A8:5F:94:87:66:57:3A:3A:11:0D:30:A2:5C:08:52:89:DD:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e1c05a92a385e8c5fe0107e8dbfa5287c168e026.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fefe688b-4428-4840-a83a-08943aa84d05/e8b6fcfda95049ad99cd0969c029cb2a196cd204.roa
Signing time:             Tue 04 Jul 2023 00:23:04 +0000
ROA not before:           Mon 03 Jul 2023 00:23:04 +0000
ROA not after:            Fri 04 Jul 2025 00:23:04 +0000
asID:                     263157
IP address blocks:        170.0.12.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1472 (0x5c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1c05a92a385e8c5fe0107e8dbfa5287c168e026
        Validity
            Not Before: Jul  3 00:23:04 2023 GMT
            Not After : Jul  4 00:23:04 2025 GMT
        Subject: CN=e8b6fcfda95049ad99cd0969c029cb2a196cd204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:56:48:41:fa:04:2a:b8:d5:7a:cc:67:0d:
                    50:c5:d9:5f:24:aa:74:e2:b2:bb:25:d3:32:39:b1:
                    7e:11:c1:05:3f:6b:b2:97:8e:3a:f8:58:dc:c2:c9:
                    40:1a:7a:c1:7f:21:87:22:8b:64:b4:4a:5a:9c:88:
                    9f:c5:31:3a:c6:85:4b:c7:03:e3:85:45:7a:37:4d:
                    dd:df:c3:d0:32:02:4e:1f:c4:16:69:63:81:76:ac:
                    ee:a2:ab:c0:fb:60:67:5f:7e:2f:43:39:f5:0e:a6:
                    a8:6f:41:f8:bb:0b:e9:97:c3:e5:8c:dd:74:c3:b6:
                    79:88:60:ce:e6:85:32:84:43:85:dc:fe:fc:43:fa:
                    52:cd:d3:31:54:11:e5:df:31:69:86:83:a2:c8:1c:
                    46:3d:93:06:f7:cd:66:c9:13:08:3e:a8:6f:6a:0d:
                    17:2f:3b:02:ff:2b:89:39:b6:5e:11:3e:e7:c9:39:
                    fe:cb:dd:7c:0e:fe:69:2b:28:a6:54:1c:db:62:3b:
                    41:45:e9:70:fd:f6:42:b2:29:41:a4:59:89:04:de:
                    62:33:a8:30:ae:94:38:1d:49:8f:4e:78:c9:62:cc:
                    28:39:56:c3:85:d0:73:93:a3:53:dc:5a:7e:c4:36:
                    35:4f:50:df:c0:8d:c1:3b:44:69:b7:97:2a:80:60:
                    20:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:94:DB:FC:94:A7:44:8D:EE:17:63:A8:39:16:53:9A:AF:63:98:69
            X509v3 Authority Key Identifier:
                keyid:03:FD:A8:5F:94:87:66:57:3A:3A:11:0D:30:A2:5C:08:52:89:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e1c05a92a385e8c5fe0107e8dbfa5287c168e026.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fefe688b-4428-4840-a83a-08943aa84d05/e8b6fcfda95049ad99cd0969c029cb2a196cd204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fefe688b-4428-4840-a83a-08943aa84d05/e1c05a92a385e8c5fe0107e8dbfa5287c168e026.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:2c:f2:06:10:67:7d:0e:81:3f:03:b8:d9:f3:80:15:fa:83:
         99:f1:1c:1d:5b:fc:9e:7e:a8:99:12:ff:9e:c0:af:d3:5a:c3:
         bd:7c:12:86:42:f3:90:c5:77:ea:f3:6c:30:6c:ed:e5:d4:91:
         8b:23:b2:7e:6f:ca:b5:7c:61:d8:96:d2:5e:b3:64:fd:63:36:
         30:fd:3d:c4:fc:44:8d:be:c3:ec:7b:e8:8a:06:a9:81:96:e3:
         83:40:fa:a6:21:95:bf:75:d4:4a:f3:e8:ea:9b:1b:20:d5:5f:
         54:7d:d8:fe:76:ee:da:bb:19:29:98:68:32:bb:22:06:74:92:
         a5:69:8a:ab:34:de:58:27:bc:ce:3c:5b:1d:9a:ae:e3:0d:60:
         89:32:02:0d:ed:3b:31:72:a4:0b:10:ee:6d:9a:a4:d9:6c:22:
         58:0c:53:f4:da:0d:a0:19:4f:15:af:00:20:bf:16:e1:70:0d:
         b5:7c:24:3c:ba:a3:f3:99:41:59:8e:86:63:2e:c3:ee:ac:47:
         8e:5a:4b:66:82:b9:60:91:33:41:da:e8:ee:7b:01:14:a1:fb:
         ca:f8:98:f2:ff:cf:a8:c7:7d:a8:bc:99:40:a4:1a:09:8d:49:
         29:6e:e0:3a:f6:e6:a7:3b:69:68:19:ff:31:80:38:05:1b:12:
         c7:89:68:13
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBcAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZTFj
MDVhOTJhMzg1ZThjNWZlMDEwN2U4ZGJmYTUyODdjMTY4ZTAyNjAeFw0yMzA3MDMw
MDIzMDRaFw0yNTA3MDQwMDIzMDRaMDMxMTAvBgNVBAMTKGU4YjZmY2ZkYTk1MDQ5
YWQ5OWNkMDk2OWMwMjljYjJhMTk2Y2QyMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/s1ZIQfoEKrjVesxnDVDF2V8kqnTisrsl0zI5sX4RwQU/a7KX
jjr4WNzCyUAaesF/IYcii2S0SlqciJ/FMTrGhUvHA+OFRXo3Td3fw9AyAk4fxBZp
Y4F2rO6iq8D7YGdffi9DOfUOpqhvQfi7C+mXw+WM3XTDtnmIYM7mhTKEQ4Xc/vxD
+lLN0zFUEeXfMWmGg6LIHEY9kwb3zWbJEwg+qG9qDRcvOwL/K4k5tl4RPufJOf7L
3XwO/mkrKKZUHNtiO0FF6XD99kKyKUGkWYkE3mIzqDCulDgdSY9OeMlizCg5VsOF
0HOTo1PcWn7ENjVPUN/AjcE7RGm3lyqAYCBXAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUm5Tb/JSnRI3uF2OoORZTmq9jmGkwHwYDVR0jBBgwFoAUA/2oX5SHZlc6OhEN
MKJcCFKJ3Z0wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9lMWMwNWE5
MmEzODVlOGM1ZmUwMTA3ZThkYmZhNTI4N2MxNjhlMDI2LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mZWZlNjg4Yi00NDI4LTQ4NDAtYTgzYS0wODk0M2Fh
ODRkMDUvZThiNmZjZmRhOTUwNDlhZDk5Y2QwOTY5YzAyOWNiMmExOTZjZDIwNC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2ZlZmU2ODhiLTQ0MjgtNDg0MC1hODNhLTA4OTQz
YWE4NGQwNS9lMWMwNWE5MmEzODVlOGM1ZmUwMTA3ZThkYmZhNTI4N2MxNjhlMDI2
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCqgAMMA0GCSqGSIb3DQEBCwUAA4IBAQB1LPIGEGd9DoE/A7jZ
84AV+oOZ8RwdW/yefqiZEv+ewK/TWsO9fBKGQvOQxXfq82wwbO3l1JGLI7J+b8q1
fGHYltJes2T9YzYw/T3E/ESNvsPse+iKBqmBluODQPqmIZW/ddRK8+jqmxsg1V9U
fdj+du7auxkpmGgyuyIGdJKlaYqrNN5YJ7zOPFsdmq7jDWCJMgIN7TsxcqQLEO5t
mqTZbCJYDFP02g2gGU8VrwAgvxbhcA21fCQ8uqPzmUFZjoZjLsPurEeOWktmgrlg
kTNB2ujuewEUofvK+Jjy/8+ox32ovJlApBoJjUkpbuA69uanO2loGf8xgDgFGxLH
iWgT
-----END CERTIFICATE-----