Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/8f8d6dae7bab023f21d87e333089e79a9dc45bf3.roa
File:                     8f8d6dae7bab023f21d87e333089e79a9dc45bf3.roa (raw, json)
Hash identifier:          gWMOtpQYOzkZ3Qb/2c8F+E/nTh0tdWEQE/KNPZQczts=
Subject key identifier:   46:0D:B8:58:10:A3:34:76:2B:D3:BD:64:A1:17:04:F5:F6:40:26:4A
Certificate issuer:       /CN=c3d85f03580e6350cae3b1665689b40bfef21165
Certificate serial:       0BADE6
Authority key identifier: 1B:54:57:FE:43:51:67:CE:87:F6:61:EB:2A:EF:23:89:21:1A:B3:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3d85f03580e6350cae3b1665689b40bfef21165.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/8f8d6dae7bab023f21d87e333089e79a9dc45bf3.roa
Signing time:             Wed 24 Mar 2021 14:40:10 +0000
ROA not before:           Wed 24 Mar 2021 14:40:10 +0000
ROA not after:            Tue 24 Mar 2026 14:40:10 +0000
asID:                     267778
IP address blocks:        45.171.108.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765414 (0xbade6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3d85f03580e6350cae3b1665689b40bfef21165
        Validity
            Not Before: Mar 24 14:40:10 2021 GMT
            Not After : Mar 24 14:40:10 2026 GMT
        Subject: CN=8f8d6dae7bab023f21d87e333089e79a9dc45bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0c:3c:7f:c4:9b:9b:41:77:e9:55:5a:48:8a:
                    42:4a:43:87:98:b8:76:63:d4:e8:6b:c8:f1:5d:49:
                    e1:bb:02:01:88:9b:a1:12:88:55:81:78:42:9c:c4:
                    a5:19:7d:90:17:c0:a8:fa:af:e5:f3:56:1a:26:63:
                    27:89:26:03:ef:ca:ce:05:64:47:11:91:4e:24:04:
                    20:79:c5:35:0c:6a:67:a2:bf:08:40:07:7a:a6:b9:
                    f0:93:e6:98:e7:e7:10:0f:6c:d8:60:e3:a2:02:31:
                    4e:63:0d:bf:c5:af:32:db:7c:f3:8c:1b:5e:33:91:
                    7d:26:d9:1b:a6:cb:ef:90:d6:1b:89:41:6c:b5:8a:
                    57:63:c9:18:ea:0e:67:33:07:18:8a:ae:09:ce:c3:
                    b4:ac:f2:52:3f:68:e0:07:7f:20:d9:36:76:6e:eb:
                    e4:9c:76:c0:e9:59:81:64:41:d6:87:19:a2:da:ec:
                    dd:30:65:e0:42:c3:72:51:fc:76:6e:80:f3:58:71:
                    cb:78:44:36:00:5d:46:30:5e:d0:07:1b:b6:74:5e:
                    de:0a:70:ef:d2:88:d3:da:54:1f:7a:71:96:8f:8f:
                    fd:48:61:0c:d8:69:a2:5a:2a:f3:eb:ec:46:54:98:
                    73:01:28:59:7b:7c:ae:d7:66:2e:70:cb:26:f3:c3:
                    7e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0D:B8:58:10:A3:34:76:2B:D3:BD:64:A1:17:04:F5:F6:40:26:4A
            X509v3 Authority Key Identifier:
                keyid:1B:54:57:FE:43:51:67:CE:87:F6:61:EB:2A:EF:23:89:21:1A:B3:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3d85f03580e6350cae3b1665689b40bfef21165.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/8f8d6dae7bab023f21d87e333089e79a9dc45bf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/c3d85f03580e6350cae3b1665689b40bfef21165.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:29:de:0b:f2:da:09:97:64:ef:84:9f:af:c7:db:a2:db:a0:
         17:d4:50:80:74:51:21:a2:32:e8:68:64:1e:30:6d:b0:20:69:
         4f:8e:7d:64:d8:6d:a4:7c:10:61:47:60:da:e1:95:df:0f:ba:
         5a:e2:f8:94:37:19:aa:87:e1:06:0e:be:9a:e5:d8:fa:52:77:
         d7:20:50:c2:98:03:23:7a:40:9e:cb:1e:1c:64:b6:9c:da:95:
         b7:09:bc:11:74:5d:c4:e1:b3:fc:e4:5b:c3:30:7d:dd:d6:53:
         3c:1e:fd:21:e6:1b:2b:98:ea:a2:23:bd:7a:c0:a2:62:d4:55:
         92:de:35:ba:8b:d0:e7:cb:eb:10:0f:67:a9:f9:72:8d:ca:8a:
         42:d6:48:c2:e4:cf:f8:b2:0d:13:dd:88:79:32:a2:0e:de:62:
         3e:7d:03:43:61:f4:8a:8e:f8:b3:05:43:ba:71:3d:0d:81:1a:
         8d:3f:6a:42:92:80:82:8d:ca:28:ba:3e:4d:bd:4a:2a:ad:ea:
         9d:e7:28:bf:f4:b8:64:38:fc:4c:61:35:44:bf:94:c6:6b:8e:
         24:ca:a3:49:51:fb:15:e1:e3:d1:75:cf:ef:84:0b:d4:c4:e0:
         a6:50:fe:17:54:86:4d:9b:c1:7b:ab:59:ff:62:11:f5:73:9a:
         d4:a7:39:5f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC63mMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMz
ZDg1ZjAzNTgwZTYzNTBjYWUzYjE2NjU2ODliNDBiZmVmMjExNjUwHhcNMjEwMzI0
MTQ0MDEwWhcNMjYwMzI0MTQ0MDEwWjAzMTEwLwYDVQQDEyg4ZjhkNmRhZTdiYWIw
MjNmMjFkODdlMzMzMDg5ZTc5YTlkYzQ1YmYzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArgw8f8Sbm0F36VVaSIpCSkOHmLh2Y9Toa8jxXUnhuwIBiJuh
EohVgXhCnMSlGX2QF8Co+q/l81YaJmMniSYD78rOBWRHEZFOJAQgecU1DGpnor8I
QAd6prnwk+aY5+cQD2zYYOOiAjFOYw2/xa8y23zzjBteM5F9JtkbpsvvkNYbiUFs
tYpXY8kY6g5nMwcYiq4JzsO0rPJSP2jgB38g2TZ2buvknHbA6VmBZEHWhxmi2uzd
MGXgQsNyUfx2boDzWHHLeEQ2AF1GMF7QBxu2dF7eCnDv0ojT2lQfenGWj4/9SGEM
2GmiWirz6+xGVJhzAShZe3yu12YucMsm88N+XQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEYNuFgQozR2K9O9ZKEXBPX2QCZKMB8GA1UdIwQYMBaAFBtUV/5DUWfOh/Zh
6yrvI4khGrNFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzNkODVm
MDM1ODBlNjM1MGNhZTNiMTY2NTY4OWI0MGJmZWYyMTE2NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWRiZGZjNDktNWZmYy00NzkyLTg4ODMtZGE4YmY2
YTM3OGM1LzhmOGQ2ZGFlN2JhYjAyM2YyMWQ4N2UzMzMwODllNzlhOWRjNDViZjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZGJkZmM0OS01ZmZjLTQ3OTItODg4My1kYThi
ZjZhMzc4YzUvYzNkODVmMDM1ODBlNjM1MGNhZTNiMTY2NTY4OWI0MGJmZWYyMTE2
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2rbDANBgkqhkiG9w0BAQsFAAOCAQEAQineC/LaCZdk74Sf
r8fbotugF9RQgHRRIaIy6GhkHjBtsCBpT459ZNhtpHwQYUdg2uGV3w+6WuL4lDcZ
qofhBg6+muXY+lJ31yBQwpgDI3pAnsseHGS2nNqVtwm8EXRdxOGz/ORbwzB93dZT
PB79IeYbK5jqoiO9esCiYtRVkt41uovQ58vrEA9nqflyjcqKQtZIwuTP+LINE92I
eTKiDt5iPn0DQ2H0io74swVDunE9DYEajT9qQpKAgo3KKLo+Tb1KKq3qnecov/S4
ZDj8TGE1RL+UxmuOJMqjSVH7FeHj0XXP74QL1MTgplD+F1SGTZvBe6tZ/2IR9XOa
1Kc5Xw==
-----END CERTIFICATE-----