Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/e2fd722702cb655a709708cf69114b1a93637461.roa
File:                     e2fd722702cb655a709708cf69114b1a93637461.roa (raw, json)
Hash identifier:          gngoYjRz3CP6cwfeoQvt0Oz/4CAFNmmK4LmAcLIPpyc=
Subject key identifier:   DF:30:4D:E0:7B:AE:EC:1E:C4:96:3D:12:62:40:37:02:1C:26:21:79
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       0C93A1
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/e2fd722702cb655a709708cf69114b1a93637461.roa
Signing time:             Mon 19 Apr 2021 19:29:01 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     18747
IP address blocks:        181.78.128.0/18 maxlen: 18
                          181.78.128.0/19 maxlen: 19
                          181.78.160.0/21 maxlen: 21
                          181.78.192.0/18 maxlen: 18
                          181.78.192.0/19 maxlen: 19
                          181.78.224.0/21 maxlen: 21
                          181.78.64.0/18 maxlen: 18
                          181.78.64.0/19 maxlen: 19
                          181.78.96.0/21 maxlen: 21
                          181.79.64.0/21 maxlen: 21
                          181.79.72.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 824225 (0xc93a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=e2fd722702cb655a709708cf69114b1a93637461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9c:2d:f0:a9:f7:b8:e6:dc:04:f3:30:75:7d:
                    48:21:5f:06:81:a0:ce:65:43:8a:ab:43:d3:ac:00:
                    82:2b:7b:f4:d6:b0:4b:5c:10:fc:08:f5:13:a9:da:
                    a3:2f:5d:1d:75:b6:d8:6d:3e:29:b0:be:33:0b:49:
                    94:e8:3c:04:bd:ff:65:f3:4e:bc:22:01:2a:e0:0a:
                    35:12:cd:2f:76:26:00:59:bd:14:57:06:f4:6b:a6:
                    08:18:77:bf:07:12:68:53:7a:64:cc:53:34:90:ed:
                    12:97:37:86:47:f8:61:c6:87:33:5e:e1:fe:e2:52:
                    75:fb:34:79:d0:f1:49:b4:74:9a:25:1c:e5:42:12:
                    ad:18:49:9b:28:f4:17:96:a3:fd:a2:bc:77:c7:9c:
                    46:af:fe:94:a8:00:63:d7:e5:1e:3a:35:2a:f0:2b:
                    b3:aa:21:9e:a8:93:b8:dc:c2:2f:9a:2a:02:71:76:
                    75:0c:22:b9:aa:cf:6c:a2:0c:6a:da:5d:50:b3:d1:
                    96:75:78:cb:61:5e:46:c8:6a:a0:43:01:8b:05:0d:
                    a9:d3:7f:01:8e:2b:0b:04:4d:39:77:2d:56:7c:39:
                    f9:98:96:cf:1f:6c:5f:d9:00:16:b1:7d:58:15:4f:
                    90:f9:dc:0f:67:e5:56:3f:a0:6d:48:d5:7a:83:34:
                    88:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:30:4D:E0:7B:AE:EC:1E:C4:96:3D:12:62:40:37:02:1C:26:21:79
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/e2fd722702cb655a709708cf69114b1a93637461.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.64.0-181.78.255.255
                  181.79.64.0-181.79.73.255

    Signature Algorithm: sha256WithRSAEncryption
         15:28:03:e4:17:bc:21:ef:10:f2:fa:9b:52:c7:57:e4:3f:40:
         7d:a8:58:39:40:a9:76:4b:2d:57:50:d1:54:da:d3:0e:b7:32:
         2b:cd:88:3d:b6:10:9d:12:bd:2c:a7:80:ab:a6:03:c1:6c:16:
         07:22:f2:90:e2:15:4d:9a:14:af:2b:3c:52:18:69:b6:44:2b:
         fd:07:85:b7:4c:52:9f:03:95:4a:ec:dd:02:ca:46:fe:29:a0:
         51:e5:2c:8d:22:24:1a:88:e9:6c:ff:d9:fc:31:c8:1c:b7:73:
         9c:0a:52:35:56:e0:6c:59:d7:dc:42:ce:96:bf:c4:cd:15:36:
         58:11:a5:f0:f9:99:06:cc:41:79:db:0c:8e:ab:d5:2a:22:97:
         54:e9:5c:85:f6:31:a1:f5:f4:ee:bb:96:38:c7:55:18:3d:4a:
         26:d3:e7:00:6e:b7:31:0f:75:0f:bb:e3:4e:f0:df:f6:e0:41:
         bb:dd:53:37:18:4d:14:f9:09:55:1e:65:11:6e:4b:b0:a8:ba:
         de:1d:b7:51:d2:cf:48:36:3c:9e:6d:a8:53:d9:be:94:c7:68:
         e3:c7:2b:ed:eb:3f:92:f7:20:55:8e:8e:02:f6:04:bb:c5:4b:
         41:7b:59:ee:ea:42:d7:5e:ba:ce:f9:b4:1d:4d:62:3d:84:c2:
         60:0c:08:3b
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDDJOhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMy
Y2ZjMzIxMjQ1NTQ2NGNkOGY4NTZhMzQ4YjJkNWNhZjczZGNkNzMwHhcNMjEwMzI0
MDMwMDAwWhcNMjMwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhlMmZkNzIyNzAyY2I2
NTVhNzA5NzA4Y2Y2OTExNGIxYTkzNjM3NDYxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAx5wt8Kn3uObcBPMwdX1IIV8GgaDOZUOKq0PTrACCK3v01rBL
XBD8CPUTqdqjL10ddbbYbT4psL4zC0mU6DwEvf9l8068IgEq4Ao1Es0vdiYAWb0U
Vwb0a6YIGHe/BxJoU3pkzFM0kO0SlzeGR/hhxoczXuH+4lJ1+zR50PFJtHSaJRzl
QhKtGEmbKPQXlqP9orx3x5xGr/6UqABj1+UeOjUq8CuzqiGeqJO43MIvmioCcXZ1
DCK5qs9sogxq2l1Qs9GWdXjLYV5GyGqgQwGLBQ2p038BjisLBE05dy1WfDn5mJbP
H2xf2QAWsX1YFU+Q+dwPZ+VWP6BtSNV6gzSINQIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFN8wTeB7ruwexJY9EmJANwIcJiF5MB8GA1UdIwQYMBaAFO2XYCMHZoB2YyKf
bUEoBQfvncIpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzJjZmMz
MjEyNDU1NDY0Y2Q4Zjg1NmEzNDhiMmQ1Y2FmNzNkY2Q3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGVmNTY4NmQtZmM2Ni00YzhlLWJlNGYtZGE2OWZi
YzJiZmI1L2UyZmQ3MjI3MDJjYjY1NWE3MDk3MDhjZjY5MTE0YjFhOTM2Mzc0NjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wZWY1Njg2ZC1mYzY2LTRjOGUtYmU0Zi1kYTY5
ZmJjMmJmYjUvYzJjZmMzMjEyNDU1NDY0Y2Q4Zjg1NmEzNDhiMmQ1Y2FmNzNkY2Q3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwIQQCAAEwGzALAwQGtU5AAwMAtU4wDAMEBrVPQAMEAbVPSDANBgkqhkiG9w0B
AQsFAAOCAQEAFSgD5Be8Ie8Q8vqbUsdX5D9AfahYOUCpdkstV1DRVNrTDrcyK82I
PbYQnRK9LKeAq6YDwWwWByLykOIVTZoUrys8UhhptkQr/QeFt0xSnwOVSuzdAspG
/imgUeUsjSIkGojpbP/Z/DHIHLdznApSNVbgbFnX3ELOlr/EzRU2WBGl8PmZBsxB
edsMjqvVKiKXVOlchfYxofX07ruWOMdVGD1KJtPnAG63MQ91D7vjTvDf9uBBu91T
NxhNFPkJVR5lEW5LsKi63h23UdLPSDY8nm2oU9m+lMdo48cr7es/kvcgVY6OAvYE
u8VLQXtZ7upC1166zvm0HU1iPYTCYAwIOw==
-----END CERTIFICATE-----