Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/010a700b67191afbdbe3a25fdea6f128002c036d.roa
File:                     010a700b67191afbdbe3a25fdea6f128002c036d.roa (raw, json)
Hash identifier:          oRgndztv9E4maXE9Qfk/9clri89uwqiRr2fWVS1aDjk=
Subject key identifier:   97:EA:F1:75:9E:BE:36:AB:AE:E5:35:60:D8:F9:AB:C7:D6:04:3C:C3
Certificate issuer:       /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial:       032015
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/010a700b67191afbdbe3a25fdea6f128002c036d.roa
Signing time:             Wed 20 Apr 2022 18:49:05 +0000
ROA not before:           Wed 20 Apr 2022 03:00:00 +0000
ROA not after:            Sat 20 Apr 2024 03:00:00 +0000
asID:                     262186
IP address blocks:        189.85.43.128/25 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204821 (0x32015)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
        Validity
            Not Before: Apr 20 03:00:00 2022 GMT
            Not After : Apr 20 03:00:00 2024 GMT
        Subject: CN=010a700b67191afbdbe3a25fdea6f128002c036d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:65:66:58:8c:51:3d:35:47:8f:ca:61:14:3b:
                    f0:95:be:63:60:20:41:fb:74:c9:db:15:c2:14:5d:
                    41:f3:85:a5:1f:05:95:21:15:d1:5e:b4:ed:b9:5e:
                    f9:74:cc:58:95:8c:b5:96:ce:e2:20:d7:78:77:2d:
                    da:3d:00:38:28:9c:73:a4:d4:71:59:b8:4c:ca:74:
                    18:b0:7d:1b:78:67:63:30:f3:5c:5a:d3:c7:65:4d:
                    7b:c2:dc:96:46:69:fc:ac:4a:5a:8f:e8:68:93:7b:
                    46:ca:9e:18:a9:66:cb:6c:62:1c:aa:34:a9:1c:8b:
                    84:ff:8f:dc:a0:32:1d:6d:ad:33:2a:5c:95:c4:20:
                    58:ef:43:c9:cf:fc:00:b6:03:3d:4f:77:4e:fb:5a:
                    3f:b4:7c:bf:0a:d2:77:1c:d3:a3:a7:c0:85:5d:d3:
                    84:60:d2:00:98:8a:61:32:2a:c6:ca:7a:31:76:5c:
                    de:7b:d8:61:6b:f1:d3:e6:c4:a8:e4:5b:26:ab:fb:
                    66:e9:c2:ab:2e:a8:fb:1e:55:5c:1f:cc:80:1b:d9:
                    30:f7:0f:44:08:94:1e:ec:cb:9b:47:12:c5:fe:c2:
                    80:ee:f5:8d:82:30:38:40:54:78:dd:cf:26:69:fc:
                    da:59:ea:73:1e:99:41:f3:34:5a:f0:a4:8a:fc:38:
                    28:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EA:F1:75:9E:BE:36:AB:AE:E5:35:60:D8:F9:AB:C7:D6:04:3C:C3
            X509v3 Authority Key Identifier:
                keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/010a700b67191afbdbe3a25fdea6f128002c036d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.43.128/25

    Signature Algorithm: sha256WithRSAEncryption
         22:6e:51:bd:13:6a:6e:36:ff:8e:d7:87:12:32:63:38:1a:83:
         31:2d:26:67:10:1b:97:66:79:b6:af:c3:6d:3e:f5:18:28:8b:
         d5:a8:3a:95:2b:cf:a6:da:2b:9e:92:f2:f3:13:2d:ac:2f:e8:
         a9:e4:77:fe:a5:06:1e:80:84:b6:4f:d4:6c:4e:db:04:31:0b:
         45:49:81:25:9c:32:db:45:42:da:da:74:9d:b3:57:bc:2c:82:
         41:ad:a8:17:ae:f8:84:eb:8b:5d:81:aa:25:34:df:53:0a:25:
         68:96:d7:2c:d8:d7:ab:1e:c3:6a:47:21:e5:1f:22:0b:b7:0d:
         94:63:41:b1:04:17:ad:17:05:2c:37:bb:08:f5:16:ce:ab:cd:
         70:64:1a:31:69:5b:1e:ef:f1:1c:b6:6e:e1:43:1a:39:3a:1c:
         77:67:d4:69:91:9d:39:c4:3a:8f:ac:aa:56:f6:24:4e:9f:8e:
         7d:75:cb:5a:c3:7f:f0:f0:d4:db:30:d8:2c:f3:cc:c2:9a:b3:
         2a:fe:e5:0a:37:92:77:96:a7:81:c3:c2:13:a0:23:c5:57:24:
         20:0f:62:fc:4b:76:5a:41:bb:12:92:de:7a:32:58:58:92:eb:
         8c:39:4b:2e:52:0c:d8:3e:31:54:4c:86:5c:7e:c8:68:ce:92:
         6e:4c:eb:53
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDAyAVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM1
ZWY4NjEyNGEzOGYzZmM0NmU4NWU1MWUwMTQxMWRiMzdmZGIyMDQwHhcNMjIwNDIw
MDMwMDAwWhcNMjQwNDIwMDMwMDAwWjAzMTEwLwYDVQQDEygwMTBhNzAwYjY3MTkx
YWZiZGJlM2EyNWZkZWE2ZjEyODAwMmMwMzZkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuWVmWIxRPTVHj8phFDvwlb5jYCBB+3TJ2xXCFF1B84WlHwWV
IRXRXrTtuV75dMxYlYy1ls7iINd4dy3aPQA4KJxzpNRxWbhMynQYsH0beGdjMPNc
WtPHZU17wtyWRmn8rEpaj+hok3tGyp4YqWbLbGIcqjSpHIuE/4/coDIdba0zKlyV
xCBY70PJz/wAtgM9T3dO+1o/tHy/CtJ3HNOjp8CFXdOEYNIAmIphMirGynoxdlze
e9hha/HT5sSo5Fsmq/tm6cKrLqj7HlVcH8yAG9kw9w9ECJQe7MubRxLF/sKA7vWN
gjA4QFR43c8mafzaWepzHplB8zRa8KSK/DgoWQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFJfq8XWevjarruU1YNj5q8fWBDzDMB8GA1UdIwQYMBaAFIZWaXKATb3tFH/z
oDjCtpWtwshrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzVlZjg2
MTI0YTM4ZjNmYzQ2ZTg1ZTUxZTAxNDExZGIzN2ZkYjIwNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTkxYzAxZmUtNWUwMi00MjgwLWIyYzMtZTNiZTFm
MjBjMDZkLzAxMGE3MDBiNjcxOTFhZmJkYmUzYTI1ZmRlYTZmMTI4MDAyYzAzNmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xOTFjMDFmZS01ZTAyLTQyODAtYjJjMy1lM2Jl
MWYyMGMwNmQvYzVlZjg2MTI0YTM4ZjNmYzQ2ZTg1ZTUxZTAxNDExZGIzN2ZkYjIw
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAEwBwMFB71VK4AwDQYJKoZIhvcNAQELBQADggEBACJuUb0Tam42/47X
hxIyYzgagzEtJmcQG5dmebavw20+9Rgoi9WoOpUrz6baK56S8vMTLawv6Knkd/6l
Bh6AhLZP1GxO2wQxC0VJgSWcMttFQtradJ2zV7wsgkGtqBeu+ITri12BqiU031MK
JWiW1yzY16sew2pHIeUfIgu3DZRjQbEEF60XBSw3uwj1Fs6rzXBkGjFpWx7v8Ry2
buFDGjk6HHdn1GmRnTnEOo+sqlb2JE6fjn11y1rDf/Dw1Nsw2CzzzMKasyr+5Qo3
kneWp4HDwhOgI8VXJCAPYvxLdlpBuxKS3noyWFiS64w5Sy5SDNg+MVRMhlx+yGjO
km5M61M=
-----END CERTIFICATE-----