Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/2d8457bde564d20ee8716cff75b5b063ef9ba166.roa
File:                     2d8457bde564d20ee8716cff75b5b063ef9ba166.roa (raw, json)
Hash identifier:          MLovhrO1Vtd0YBr7V/VfjGpZRoBxXB6IhDRuBy4bHiA=
Subject key identifier:   47:B5:DD:B5:8E:0F:DB:63:E5:4E:B9:51:9B:17:0F:EB:EF:60:01:EE
Certificate issuer:       /CN=f3df8538662f3c792fbb0559315226c5b8695024
Certificate serial:       029D3E
Authority key identifier: E5:59:36:32:80:35:F5:26:9C:5A:92:03:89:A6:24:44:62:DA:AC:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3df8538662f3c792fbb0559315226c5b8695024.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/2d8457bde564d20ee8716cff75b5b063ef9ba166.roa
Signing time:             Tue 15 Feb 2022 01:49:16 +0000
ROA not before:           Mon 14 Feb 2022 03:00:00 +0000
ROA not after:            Wed 14 Feb 2024 03:00:00 +0000
asID:                     271935
IP address blocks:        181.232.190.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171326 (0x29d3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3df8538662f3c792fbb0559315226c5b8695024
        Validity
            Not Before: Feb 14 03:00:00 2022 GMT
            Not After : Feb 14 03:00:00 2024 GMT
        Subject: CN=2d8457bde564d20ee8716cff75b5b063ef9ba166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ee:46:a4:c1:ae:9c:bb:e2:98:f5:e9:ee:09:
                    7e:e2:d0:84:e4:14:2a:d4:33:f6:e6:79:30:67:58:
                    f1:5a:01:7f:67:fa:d1:06:f5:85:43:98:08:3f:0f:
                    01:2b:0b:4e:8f:92:d7:ea:c1:00:24:c8:56:a0:5b:
                    2d:35:5e:87:13:45:48:99:b2:08:db:24:ed:67:1b:
                    c0:9c:c4:b7:1e:27:36:2a:7e:89:f3:d9:41:5c:4b:
                    1e:47:23:f4:aa:08:7b:b0:a6:23:ea:75:95:ae:59:
                    4c:c8:12:59:a5:51:e0:ed:92:49:5f:d1:98:4b:8d:
                    68:df:f8:8b:b4:8f:56:45:c2:ea:70:b1:17:fa:55:
                    8d:f5:60:aa:21:a0:11:d4:0d:05:a0:e1:04:79:ab:
                    66:a0:14:c1:b9:08:de:0f:59:4a:65:05:70:ef:f8:
                    ba:6e:49:3d:81:20:3d:df:f8:0d:9f:ec:33:de:d4:
                    5a:5b:44:76:df:f8:db:15:a8:8a:ff:f9:8e:5a:15:
                    58:03:6e:e8:ee:ff:3f:16:15:fb:22:56:0f:66:39:
                    da:3f:0e:69:49:ec:b6:2c:82:f3:d2:ac:c8:b6:8a:
                    04:42:56:fa:bf:42:47:05:35:e6:ea:cd:79:45:46:
                    bb:9b:40:0d:d0:05:1a:99:61:87:6f:4e:e1:4f:00:
                    ad:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B5:DD:B5:8E:0F:DB:63:E5:4E:B9:51:9B:17:0F:EB:EF:60:01:EE
            X509v3 Authority Key Identifier:
                keyid:E5:59:36:32:80:35:F5:26:9C:5A:92:03:89:A6:24:44:62:DA:AC:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3df8538662f3c792fbb0559315226c5b8695024.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/2d8457bde564d20ee8716cff75b5b063ef9ba166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/f3df8538662f3c792fbb0559315226c5b8695024.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:09:11:03:01:b1:8d:5b:21:93:96:9b:4a:67:95:1a:b9:fe:
         75:7a:b6:46:e2:81:f5:9d:6b:3a:fa:1f:c3:cc:b9:8d:0a:66:
         b1:c0:bb:9d:17:ff:34:38:28:b9:d1:ea:de:a1:9b:7f:6f:96:
         46:b1:d1:bb:8d:02:17:f9:cf:75:7b:03:17:36:07:79:21:a0:
         3e:03:d2:51:aa:a9:f5:6e:8d:5a:fd:64:7e:b5:08:a0:bb:d6:
         97:a2:f5:11:5d:99:1c:28:f3:db:a5:d2:09:e4:31:4b:11:02:
         ca:a4:ae:32:84:4c:e5:0d:6f:28:86:ea:6c:9e:06:80:4c:af:
         a0:02:12:ed:6c:94:8e:fc:c6:e1:c7:dd:30:ab:52:62:0b:a2:
         f3:ea:6a:1f:45:a0:66:fd:8e:bf:82:cc:d5:a8:ca:1c:0e:8f:
         2d:19:86:59:5b:f9:0d:b7:b2:1b:d0:bb:1c:ad:cb:ca:cd:2b:
         50:b5:9e:19:b3:bd:93:7b:95:d8:fb:0b:d3:83:01:2c:cd:23:
         7b:13:00:46:e7:61:d9:a7:df:b3:bc:14:35:8e:c5:17:df:a3:
         9b:f8:ec:de:07:90:db:49:bf:28:53:da:11:d0:6a:df:7e:63:
         8d:14:13:e0:1d:3d:3a:84:f6:92:21:0e:09:02:bc:ef:52:f5:
         97:3d:f0:9e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAp0+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYz
ZGY4NTM4NjYyZjNjNzkyZmJiMDU1OTMxNTIyNmM1Yjg2OTUwMjQwHhcNMjIwMjE0
MDMwMDAwWhcNMjQwMjE0MDMwMDAwWjAzMTEwLwYDVQQDEygyZDg0NTdiZGU1NjRk
MjBlZTg3MTZjZmY3NWI1YjA2M2VmOWJhMTY2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAne5GpMGunLvimPXp7gl+4tCE5BQq1DP25nkwZ1jxWgF/Z/rR
BvWFQ5gIPw8BKwtOj5LX6sEAJMhWoFstNV6HE0VImbII2yTtZxvAnMS3Hic2Kn6J
89lBXEseRyP0qgh7sKYj6nWVrllMyBJZpVHg7ZJJX9GYS41o3/iLtI9WRcLqcLEX
+lWN9WCqIaAR1A0FoOEEeatmoBTBuQjeD1lKZQVw7/i6bkk9gSA93/gNn+wz3tRa
W0R23/jbFaiK//mOWhVYA27o7v8/FhX7IlYPZjnaPw5pSey2LILz0qzItooEQlb6
v0JHBTXm6s15RUa7m0AN0AUamWGHb07hTwCtpwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEe13bWOD9tj5U65UZsXD+vvYAHuMB8GA1UdIwQYMBaAFOVZNjKANfUmnFqS
A4mmJERi2qwpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjNkZjg1
Mzg2NjJmM2M3OTJmYmIwNTU5MzE1MjI2YzViODY5NTAyNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWEwMmIyODUtOTNlZS00YzEyLTkwYWYtZDYyODk4
MTlkNjcwLzJkODQ1N2JkZTU2NGQyMGVlODcxNmNmZjc1YjViMDYzZWY5YmExNjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xYTAyYjI4NS05M2VlLTRjMTItOTBhZi1kNjI4
OTgxOWQ2NzAvZjNkZjg1Mzg2NjJmM2M3OTJmYmIwNTU5MzE1MjI2YzViODY5NTAy
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAbXovjANBgkqhkiG9w0BAQsFAAOCAQEAGAkRAwGxjVshk5ab
SmeVGrn+dXq2RuKB9Z1rOvofw8y5jQpmscC7nRf/NDgoudHq3qGbf2+WRrHRu40C
F/nPdXsDFzYHeSGgPgPSUaqp9W6NWv1kfrUIoLvWl6L1EV2ZHCjz26XSCeQxSxEC
yqSuMoRM5Q1vKIbqbJ4GgEyvoAIS7WyUjvzG4cfdMKtSYgui8+pqH0WgZv2Ov4LM
1ajKHA6PLRmGWVv5DbeyG9C7HK3Lys0rULWeGbO9k3uV2PsL04MBLM0jexMARudh
2affs7wUNY7FF9+jm/js3geQ20m/KFPaEdBq335jjRQT4B09OoT2kiEOCQK871L1
lz3wng==
-----END CERTIFICATE-----