Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/fd69dbb816a252fde3a7458df463bdaa2d8c9352.roa
File:                     fd69dbb816a252fde3a7458df463bdaa2d8c9352.roa (raw, json)
Hash identifier:          LmdPQgIPNf9icioEZCf8U4ff5z6+84Z/a5TXgogn7a8=
Subject key identifier:   0A:68:C3:69:6B:0B:F7:86:32:DC:E3:F7:72:5A:BF:7E:B0:B6:12:A6
Certificate issuer:       /CN=36e192b55cb56ddb327e18a090fa757000686249
Certificate serial:       0D0EEF
Authority key identifier: 75:D0:7D:9E:91:AC:51:2C:49:38:1A:C8:8E:68:5A:9E:77:AB:C3:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36e192b55cb56ddb327e18a090fa757000686249.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/fd69dbb816a252fde3a7458df463bdaa2d8c9352.roa
Signing time:             Wed 24 Mar 2021 14:35:05 +0000
ROA not before:           Wed 24 Mar 2021 14:35:05 +0000
ROA not after:            Tue 24 Mar 2026 14:35:05 +0000
asID:                     262928
IP address blocks:        191.102.224.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855791 (0xd0eef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36e192b55cb56ddb327e18a090fa757000686249
        Validity
            Not Before: Mar 24 14:35:05 2021 GMT
            Not After : Mar 24 14:35:05 2026 GMT
        Subject: CN=fd69dbb816a252fde3a7458df463bdaa2d8c9352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:4a:8a:3d:0c:b4:27:a5:e5:99:7b:9d:ba:
                    2e:ec:79:bd:bd:40:95:a4:ac:39:2e:de:19:33:40:
                    fb:f9:a4:bd:e6:e5:ce:1d:e9:ff:48:3d:6a:17:b5:
                    5c:3e:64:b0:f1:b7:8e:42:ee:13:f5:f1:dc:fb:67:
                    8d:34:48:db:57:f0:f9:57:4e:2e:af:04:69:3a:e9:
                    b8:3a:3e:8e:63:b9:96:25:7f:6d:89:7c:b8:d4:0c:
                    01:d6:f4:9a:2c:94:e0:5b:fe:dc:35:28:eb:0c:79:
                    ad:27:12:36:9e:56:7f:fb:ae:94:76:98:6c:39:36:
                    12:49:35:3d:dd:0e:dc:46:a1:92:09:1b:27:e2:90:
                    62:2c:a6:19:3a:6f:c8:ef:f5:06:f9:04:3f:c7:ab:
                    0b:00:2e:4c:57:15:71:75:b1:73:d2:1b:a3:d1:12:
                    80:b2:89:42:ab:ed:e8:30:46:e4:c9:d8:2c:9e:b1:
                    e1:79:9b:0a:c4:72:dc:23:0b:ef:f4:47:d0:a0:21:
                    83:9b:0d:d0:c0:ee:3b:45:64:f8:79:01:4a:f7:dd:
                    27:bb:81:53:ab:6f:83:38:ea:ba:b2:dd:5b:84:04:
                    e2:69:86:2f:f2:27:b3:5b:36:df:55:1f:25:05:8c:
                    69:ca:a6:1f:1b:84:ac:03:14:71:8d:f6:41:aa:34:
                    23:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:68:C3:69:6B:0B:F7:86:32:DC:E3:F7:72:5A:BF:7E:B0:B6:12:A6
            X509v3 Authority Key Identifier:
                keyid:75:D0:7D:9E:91:AC:51:2C:49:38:1A:C8:8E:68:5A:9E:77:AB:C3:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36e192b55cb56ddb327e18a090fa757000686249.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/fd69dbb816a252fde3a7458df463bdaa2d8c9352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/36e192b55cb56ddb327e18a090fa757000686249.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:e0:71:4b:e0:78:88:34:e2:ef:2a:ed:5a:a3:67:a6:5e:13:
         ba:88:68:24:31:18:49:0b:b4:5f:ca:cc:82:2e:29:94:76:a3:
         64:a2:90:4d:4a:7b:fd:ab:a3:10:d6:53:45:fb:48:9c:02:3a:
         19:94:54:42:5a:c0:eb:a0:0a:a2:ed:ee:ce:e6:bb:f2:4d:4f:
         c6:3b:3f:8f:19:05:f9:10:b6:11:4e:98:32:cd:35:13:e7:55:
         4e:c1:58:b5:54:e0:8c:2a:e0:ee:85:19:a5:bf:76:fc:d7:4e:
         e5:af:d0:6e:e5:8c:60:93:84:f4:1c:84:f4:a6:0b:85:21:15:
         f7:ec:57:26:8f:9c:7b:df:f0:a3:5a:2a:4a:01:df:f2:15:7c:
         2e:5a:45:81:e3:9f:2c:4d:89:c8:ef:31:18:f6:91:7e:78:12:
         36:7a:c8:a5:4d:25:26:61:bd:fb:31:7f:e8:cd:77:b8:01:e6:
         8a:ee:13:1d:58:ca:b9:ef:8d:77:85:fc:10:6a:ff:36:44:44:
         c4:b7:15:b8:5e:86:8a:1d:27:5d:fd:0f:39:8d:f8:42:e7:ab:
         16:61:ed:83:ff:33:5b:56:6b:04:90:ba:6c:78:6d:bc:38:e5:
         e9:fc:8e:0c:c0:ea:17:6f:00:ab:2e:9a:34:36:24:2f:92:70:
         4b:4d:13:67
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDQ7vMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM2
ZTE5MmI1NWNiNTZkZGIzMjdlMThhMDkwZmE3NTcwMDA2ODYyNDkwHhcNMjEwMzI0
MTQzNTA1WhcNMjYwMzI0MTQzNTA1WjAzMTEwLwYDVQQDEyhmZDY5ZGJiODE2YTI1
MmZkZTNhNzQ1OGRmNDYzYmRhYTJkOGM5MzUyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArvFKij0MtCel5Zl7nbou7Hm9vUCVpKw5Lt4ZM0D7+aS95uXO
Hen/SD1qF7VcPmSw8beOQu4T9fHc+2eNNEjbV/D5V04urwRpOum4Oj6OY7mWJX9t
iXy41AwB1vSaLJTgW/7cNSjrDHmtJxI2nlZ/+66UdphsOTYSSTU93Q7cRqGSCRsn
4pBiLKYZOm/I7/UG+QQ/x6sLAC5MVxVxdbFz0huj0RKAsolCq+3oMEbkydgsnrHh
eZsKxHLcIwvv9EfQoCGDmw3QwO47RWT4eQFK990nu4FTq2+DOOq6st1bhATiaYYv
8iezWzbfVR8lBYxpyqYfG4SsAxRxjfZBqjQj8wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFApow2lrC/eGMtzj93Jav36wthKmMB8GA1UdIwQYMBaAFHXQfZ6RrFEsSTga
yI5oWp53q8NbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzZlMTky
YjU1Y2I1NmRkYjMyN2UxOGEwOTBmYTc1NzAwMDY4NjI0OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjI4YzQxMGQtOWU1ZS00ZjFlLWEzNTUtYTQwNzM0
MzVjYTE0L2ZkNjlkYmI4MTZhMjUyZmRlM2E3NDU4ZGY0NjNiZGFhMmQ4YzkzNTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMjhjNDEwZC05ZTVlLTRmMWUtYTM1NS1hNDA3
MzQzNWNhMTQvMzZlMTkyYjU1Y2I1NmRkYjMyN2UxOGEwOTBmYTc1NzAwMDY4NjI0
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBL9m4DANBgkqhkiG9w0BAQsFAAOCAQEAZ+BxS+B4iDTi7yrt
WqNnpl4TuohoJDEYSQu0X8rMgi4plHajZKKQTUp7/aujENZTRftInAI6GZRUQlrA
66AKou3uzua78k1Pxjs/jxkF+RC2EU6YMs01E+dVTsFYtVTgjCrg7oUZpb92/NdO
5a/QbuWMYJOE9ByE9KYLhSEV9+xXJo+ce9/wo1oqSgHf8hV8LlpFgeOfLE2JyO8x
GPaRfngSNnrIpU0lJmG9+zF/6M13uAHmiu4THVjKue+Nd4X8EGr/NkRExLcVuF6G
ih0nXf0POY34QuerFmHtg/8zW1ZrBJC6bHhtvDjl6fyODMDqF28Aqy6aNDYkL5Jw
S00TZw==
-----END CERTIFICATE-----