Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/070d1b47-85b0-4ddd-ac72-e76f7c316898/ac8c1b588ffbc2238cf26380a06c508c95eff745.roa
File:                     ac8c1b588ffbc2238cf26380a06c508c95eff745.roa (raw, json)
Hash identifier:          mLidgD+dQY+tfz+MretROZlxc+TF/L6TnKcri6efRwo=
Subject key identifier:   8B:10:B9:AD:70:72:7A:38:EF:50:57:86:D1:15:57:9A:DC:6C:47:F4
Certificate issuer:       /CN=e6322d97bafb983117628a59a2b307310ae7154d
Certificate serial:       0782
Authority key identifier: D2:CC:17:6A:68:CC:08:8B:69:04:F5:4F:4C:E2:99:E5:9D:2A:EC:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6322d97bafb983117628a59a2b307310ae7154d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/070d1b47-85b0-4ddd-ac72-e76f7c316898/ac8c1b588ffbc2238cf26380a06c508c95eff745.roa
Signing time:             Tue 30 Mar 2021 09:54:50 +0000
ROA not before:           Tue 30 Mar 2021 03:00:00 +0000
ROA not after:            Thu 30 Mar 2023 03:00:00 +0000
asID:                     262181
IP address blocks:        190.185.64.0/20 maxlen: 24
                          190.185.80.0/20 maxlen: 24
                          2803:51c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1922 (0x782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6322d97bafb983117628a59a2b307310ae7154d
        Validity
            Not Before: Mar 30 03:00:00 2021 GMT
            Not After : Mar 30 03:00:00 2023 GMT
        Subject: CN=ac8c1b588ffbc2238cf26380a06c508c95eff745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f7:a2:83:9f:b7:9f:61:13:01:6e:bd:22:fc:
                    49:da:ee:19:2d:57:7d:4c:89:f1:13:69:51:e9:10:
                    da:a3:30:e5:63:94:09:6e:2c:88:d5:73:c2:9e:46:
                    1b:06:cb:a3:da:9e:b2:dd:39:8e:7f:23:5e:22:a7:
                    45:bf:b2:ae:f5:f4:15:f4:61:91:99:e6:09:c3:57:
                    11:a8:1a:46:6f:4d:95:a4:79:49:dc:92:9d:70:87:
                    3d:da:cc:9f:57:80:33:a4:96:d0:14:f2:14:82:bd:
                    e0:f1:9e:5c:36:6a:d3:13:5e:bf:40:30:c5:09:dd:
                    e9:f3:7d:7f:22:40:63:d4:27:47:64:a4:05:f1:be:
                    ed:d6:f5:c6:5c:80:7c:b8:aa:c5:04:a3:0c:0a:b7:
                    1f:a2:d1:02:62:93:d1:4a:30:22:33:fa:a1:67:ce:
                    f4:d0:26:59:75:e3:6f:7a:ab:73:08:1e:a0:cb:be:
                    73:43:eb:82:52:5a:76:d9:3f:78:2d:80:0b:9c:8c:
                    94:79:78:3b:df:8d:14:55:0c:0c:e7:ad:e4:fb:0c:
                    f6:95:59:f2:d1:6d:d3:7e:8a:82:20:f2:6a:2b:9d:
                    90:3d:24:ea:31:df:b9:1b:8c:ca:ab:49:bd:82:d0:
                    95:b2:65:ac:9e:7a:20:c2:14:78:f0:ae:9b:94:a8:
                    48:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:10:B9:AD:70:72:7A:38:EF:50:57:86:D1:15:57:9A:DC:6C:47:F4
            X509v3 Authority Key Identifier:
                keyid:D2:CC:17:6A:68:CC:08:8B:69:04:F5:4F:4C:E2:99:E5:9D:2A:EC:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6322d97bafb983117628a59a2b307310ae7154d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/070d1b47-85b0-4ddd-ac72-e76f7c316898/ac8c1b588ffbc2238cf26380a06c508c95eff745.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/070d1b47-85b0-4ddd-ac72-e76f7c316898/e6322d97bafb983117628a59a2b307310ae7154d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.64.0/19
                IPv6:
                  2803:51c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:32:d7:5f:dd:de:9d:05:6f:ff:b9:7d:b6:08:01:90:6b:c6:
         e5:f4:3e:10:1a:87:d1:f8:cf:1a:bd:0b:b2:17:5d:c2:77:c5:
         07:5f:26:28:f2:8c:06:3d:b7:17:52:54:0e:6d:9f:5c:37:94:
         5d:48:67:bb:c5:83:7d:b0:a5:75:23:fe:5a:ce:29:6e:52:31:
         bd:0b:ac:70:65:ca:83:e1:e4:7a:6c:8c:8f:64:12:24:10:e3:
         ed:ca:ed:27:57:6d:b6:27:5d:b6:8c:f8:3c:09:93:cc:85:4d:
         b9:33:b3:49:aa:e8:a1:3a:b8:df:c9:32:17:b0:e0:f4:7a:a3:
         12:05:ab:2d:05:2c:17:2b:d9:e6:5e:b0:78:bb:61:58:86:fc:
         be:0b:01:cd:52:b0:3c:17:1f:98:b5:03:96:0f:b1:7f:72:c6:
         1d:66:1b:17:d2:57:88:11:14:a6:29:af:b0:8e:57:e4:4b:8c:
         26:a8:94:a3:0c:2e:85:fe:a4:7b:b4:6c:65:2d:9d:39:10:cd:
         0d:87:d5:b5:4d:3b:15:72:a3:28:df:bd:97:a3:a0:8c:ec:6c:
         b1:b2:37:41:3c:44:3b:24:d5:ee:72:e0:44:e1:67:ad:5c:01:
         c4:1e:69:3b:94:f6:0d:e7:a4:96:11:0d:43:ab:27:4f:60:32:
         2d:80:13:8c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZTYz
MjJkOTdiYWZiOTgzMTE3NjI4YTU5YTJiMzA3MzEwYWU3MTU0ZDAeFw0yMTAzMzAw
MzAwMDBaFw0yMzAzMzAwMzAwMDBaMDMxMTAvBgNVBAMTKGFjOGMxYjU4OGZmYmMy
MjM4Y2YyNjM4MGEwNmM1MDhjOTVlZmY3NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCn96KDn7efYRMBbr0i/Ena7hktV31MifETaVHpENqjMOVjlAlu
LIjVc8KeRhsGy6PanrLdOY5/I14ip0W/sq719BX0YZGZ5gnDVxGoGkZvTZWkeUnc
kp1whz3azJ9XgDOkltAU8hSCveDxnlw2atMTXr9AMMUJ3enzfX8iQGPUJ0dkpAXx
vu3W9cZcgHy4qsUEowwKtx+i0QJik9FKMCIz+qFnzvTQJll14296q3MIHqDLvnND
64JSWnbZP3gtgAucjJR5eDvfjRRVDAznreT7DPaVWfLRbdN+ioIg8mornZA9JOox
37kbjMqrSb2C0JWyZayeeiDCFHjwrpuUqEh9AgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUixC5rXByejjvUFeG0RVXmtxsR/QwHwYDVR0jBBgwFoAU0swXamjMCItpBPVP
TOKZ5Z0q7K4wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9lNjMyMmQ5
N2JhZmI5ODMxMTc2MjhhNTlhMmIzMDczMTBhZTcxNTRkLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8wNzBkMWI0Ny04NWIwLTRkZGQtYWM3Mi1lNzZmN2Mz
MTY4OTgvYWM4YzFiNTg4ZmZiYzIyMzhjZjI2MzgwYTA2YzUwOGM5NWVmZjc0NS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzA3MGQxYjQ3LTg1YjAtNGRkZC1hYzcyLWU3NmY3
YzMxNjg5OC9lNjMyMmQ5N2JhZmI5ODMxMTc2MjhhNTlhMmIzMDczMTBhZTcxNTRk
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQFvrlAMA0EAgACMAcDBQAoA1HAMA0GCSqGSIb3DQEBCwUAA4IB
AQB0Mtdf3d6dBW//uX22CAGQa8bl9D4QGofR+M8avQuyF13Cd8UHXyYo8owGPbcX
UlQObZ9cN5RdSGe7xYN9sKV1I/5aziluUjG9C6xwZcqD4eR6bIyPZBIkEOPtyu0n
V222J122jPg8CZPMhU25M7NJquihOrjfyTIXsOD0eqMSBastBSwXK9nmXrB4u2FY
hvy+CwHNUrA8Fx+YtQOWD7F/csYdZhsX0leIERSmKa+wjlfkS4wmqJSjDC6F/qR7
tGxlLZ05EM0Nh9W1TTsVcqMo372Xo6CM7GyxsjdBPEQ7JNXucuBE4WetXAHEHmk7
lPYN56SWEQ1DqydPYDItgBOM
-----END CERTIFICATE-----