Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/f15b4715947b24efba360200fb3c14f42ab04e15.roa
File:                     f15b4715947b24efba360200fb3c14f42ab04e15.roa (raw, json)
Hash identifier:          ol4AtoiTJ41XtZN6RlMaFu7R2pxleupF+icqNicPLCU=
Subject key identifier:   8F:E4:4B:5B:DD:84:5A:43:15:BD:09:77:13:73:9D:20:AF:CD:31:F5
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       0E4020
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/f15b4715947b24efba360200fb3c14f42ab04e15.roa
Signing time:             Wed 24 Mar 2021 14:45:11 +0000
ROA not before:           Wed 24 Mar 2021 14:45:09 +0000
ROA not after:            Tue 24 Mar 2026 14:45:09 +0000
asID:                     27819
IP address blocks:        201.218.194.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933920 (0xe4020)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 24 14:45:09 2021 GMT
            Not After : Mar 24 14:45:09 2026 GMT
        Subject: CN=f15b4715947b24efba360200fb3c14f42ab04e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f2:7d:b4:2e:43:6a:e2:08:94:c6:69:d9:49:
                    b2:09:fb:f0:59:42:1b:8f:ba:77:09:eb:b2:dc:61:
                    a4:62:69:57:92:08:79:58:28:23:84:1a:42:4b:4f:
                    32:c4:01:2f:54:de:6c:80:84:16:4d:46:cd:20:81:
                    65:ae:f0:e7:c8:9a:ab:7d:2b:1a:70:37:5b:03:f6:
                    a3:90:29:a7:80:87:e2:ca:31:dc:35:c8:c2:93:77:
                    6b:0b:47:f1:c3:b6:46:c0:b5:ca:66:3b:dd:c5:93:
                    bf:12:b1:69:ee:84:7a:76:eb:26:42:6c:a7:f4:cb:
                    49:a5:97:d3:56:92:de:ff:09:85:72:54:cf:a4:1e:
                    f2:25:cd:87:72:db:86:5e:a5:13:52:44:fd:0d:d3:
                    71:4b:bc:4d:c7:f0:a5:71:e7:75:c8:b6:fc:c2:2b:
                    12:34:c8:94:70:a4:34:30:f6:a6:57:4d:23:9a:65:
                    10:46:69:f9:ff:c8:22:ac:99:8d:64:b1:fe:db:79:
                    35:9e:87:21:d1:aa:49:b3:19:a0:71:f2:00:61:83:
                    5e:ed:0a:b7:30:8b:79:38:41:74:0f:8a:8c:94:e5:
                    e2:85:b7:3f:81:40:e6:cc:00:41:ee:1d:1c:55:d5:
                    95:1e:70:45:24:d2:09:1c:28:64:6c:0d:ee:49:fb:
                    8f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E4:4B:5B:DD:84:5A:43:15:BD:09:77:13:73:9D:20:AF:CD:31:F5
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/f15b4715947b24efba360200fb3c14f42ab04e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:d2:f2:ca:02:12:6a:c8:5f:d7:69:e6:99:3b:68:ad:0d:12:
         b1:42:f1:a4:ef:84:d1:3a:df:60:58:a8:b7:18:63:21:8b:c4:
         63:d7:6c:5f:17:f3:5c:51:c4:43:03:01:bc:4d:d3:9a:b6:b7:
         a7:ed:80:86:d0:64:44:c9:25:5b:e5:e5:37:5b:63:84:94:33:
         6d:28:ab:64:a7:44:2c:49:44:0c:93:a6:89:c1:58:59:3a:b1:
         f4:22:df:c1:a9:11:07:cd:62:21:e7:8e:d2:d8:3a:c3:ad:44:
         08:f4:1a:5e:42:88:bb:e6:0c:ec:b5:5c:da:54:b7:2e:95:7b:
         2e:19:c4:a1:eb:30:37:bb:a3:ec:e0:ac:e0:18:bc:88:05:d2:
         81:c0:4e:da:27:ed:10:56:f6:c7:a6:05:e5:78:e0:b6:85:c6:
         3d:c1:ff:95:67:9b:c8:87:77:dc:61:77:0c:68:70:3d:d7:65:
         46:bd:98:15:d3:d3:4e:f9:10:0f:6d:cf:76:9d:56:45:d6:22:
         cf:87:b7:78:e0:e5:13:6a:70:21:2b:e4:2d:dc:6d:a5:54:c9:
         d8:f4:20:b7:3d:5e:ac:f2:c5:3e:76:87:12:91:e9:f4:ab:e1:
         c2:a1:df:3a:4a:d6:30:5e:ea:09:16:3a:bf:49:43:84:7c:70:
         0c:fe:91:4a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDkAgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4
NWRhMzA0MzM0ZmIzNjIwNGEzNzBlOTUwNDg3Njg5ZTgxMWEyYzgwHhcNMjEwMzI0
MTQ0NTA5WhcNMjYwMzI0MTQ0NTA5WjAzMTEwLwYDVQQDEyhmMTViNDcxNTk0N2Iy
NGVmYmEzNjAyMDBmYjNjMTRmNDJhYjA0ZTE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAifJ9tC5DauIIlMZp2UmyCfvwWUIbj7p3Ceuy3GGkYmlXkgh5
WCgjhBpCS08yxAEvVN5sgIQWTUbNIIFlrvDnyJqrfSsacDdbA/ajkCmngIfiyjHc
NcjCk3drC0fxw7ZGwLXKZjvdxZO/ErFp7oR6dusmQmyn9MtJpZfTVpLe/wmFclTP
pB7yJc2HctuGXqUTUkT9DdNxS7xNx/Clced1yLb8wisSNMiUcKQ0MPamV00jmmUQ
Rmn5/8girJmNZLH+23k1noch0apJsxmgcfIAYYNe7Qq3MIt5OEF0D4qMlOXihbc/
gUDmzABB7h0cVdWVHnBFJNIJHChkbA3uSfuPXQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFI/kS1vdhFpDFb0JdxNznSCvzTH1MB8GA1UdIwQYMBaAFJWonEF2ARCODpgC
PQcm9Ep8UQ9LMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDg1ZGEz
MDQzMzRmYjM2MjA0YTM3MGU5NTA0ODc2ODllODExYTJjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWNjNTQ4ZmYtOGYwYy00ZTc1LTgxMjUtNWUwOTVm
YmYyNGMwL2YxNWI0NzE1OTQ3YjI0ZWZiYTM2MDIwMGZiM2MxNGY0MmFiMDRlMTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xY2M1NDhmZi04ZjBjLTRlNzUtODEyNS01ZTA5
NWZiZjI0YzAvZDg1ZGEzMDQzMzRmYjM2MjA0YTM3MGU5NTA0ODc2ODllODExYTJj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnawjANBgkqhkiG9w0BAQsFAAOCAQEAW9LyygISashf12nm
mTtorQ0SsULxpO+E0TrfYFiotxhjIYvEY9dsXxfzXFHEQwMBvE3Tmra3p+2AhtBk
RMklW+XlN1tjhJQzbSirZKdELElEDJOmicFYWTqx9CLfwakRB81iIeeO0tg6w61E
CPQaXkKIu+YM7LVc2lS3LpV7LhnEoeswN7uj7OCs4Bi8iAXSgcBO2iftEFb2x6YF
5XjgtoXGPcH/lWebyId33GF3DGhwPddlRr2YFdPTTvkQD23Pdp1WRdYiz4e3eODl
E2pwISvkLdxtpVTJ2PQgtz1erPLFPnaHEpHp9KvhwqHfOkrWMF7qCRY6v0lDhHxw
DP6RSg==
-----END CERTIFICATE-----