Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/fe2b6b276300cda88048d19b463e57d9438649fe.roa
File:                     fe2b6b276300cda88048d19b463e57d9438649fe.roa (raw, json)
Hash identifier:          8jxAzx6AdD6KbS7faSUfnZRlOvbRz/SkkwW5cFTvBgc=
Subject key identifier:   B7:26:16:E4:43:34:7A:73:93:11:6D:6C:A3:07:7A:44:9B:04:0A:96
Certificate issuer:       /CN=05820a897e090cc17411129464e856f3f8c8966d
Certificate serial:       1BE2
Authority key identifier: 57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/fe2b6b276300cda88048d19b463e57d9438649fe.roa
Signing time:             Fri 01 Apr 2022 00:19:10 +0000
ROA not before:           Thu 31 Mar 2022 03:00:00 +0000
ROA not after:            Sun 31 Mar 2024 03:00:00 +0000
asID:                     265559
IP address blocks:        45.174.57.0/24 maxlen: 26

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7138 (0x1be2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05820a897e090cc17411129464e856f3f8c8966d
        Validity
            Not Before: Mar 31 03:00:00 2022 GMT
            Not After : Mar 31 03:00:00 2024 GMT
        Subject: CN=fe2b6b276300cda88048d19b463e57d9438649fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5c:fe:95:66:23:ea:97:0d:55:e2:e6:00:93:
                    2d:81:c2:41:5a:87:50:83:3b:02:47:3d:e9:83:16:
                    d9:e0:e3:7f:dc:44:83:74:ad:ce:ca:3f:7a:5b:04:
                    7f:c1:62:68:c3:65:7b:e3:5a:e0:7e:06:79:b7:8b:
                    ff:59:87:46:f6:71:da:3a:7d:66:4f:3c:6c:47:3e:
                    81:84:5e:76:30:ef:b4:ce:3b:f2:3e:90:b7:a3:c6:
                    d8:82:a4:37:c3:86:76:60:c6:72:ef:50:fd:95:ce:
                    a2:47:a9:3f:6b:dc:3f:b4:d0:aa:bb:e7:b5:45:48:
                    06:17:20:c9:a5:eb:f8:dc:86:60:1e:58:2b:37:37:
                    8b:83:15:fe:c8:9a:bd:95:1e:7f:9c:11:ba:02:23:
                    7c:77:c5:84:a1:33:cd:2a:63:25:11:81:96:bb:aa:
                    4c:80:7e:f1:72:b4:57:d0:91:f3:1a:74:40:22:9b:
                    01:4f:b5:e9:b0:26:7b:8c:01:0e:fd:00:1c:76:56:
                    c7:e3:4b:df:b5:2b:69:60:82:d5:6e:57:50:6d:71:
                    cc:68:06:3f:2c:f8:73:c2:62:66:24:1f:fd:1b:26:
                    54:85:b3:f8:e2:68:36:dd:75:0e:5f:90:96:93:b3:
                    cf:e6:75:ea:06:1f:f3:87:83:16:e1:06:00:37:3c:
                    4b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:26:16:E4:43:34:7A:73:93:11:6D:6C:A3:07:7A:44:9B:04:0A:96
            X509v3 Authority Key Identifier:
                keyid:57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/fe2b6b276300cda88048d19b463e57d9438649fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/05820a897e090cc17411129464e856f3f8c8966d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:67:9c:19:69:07:c4:07:fd:9b:43:55:2b:3d:9c:1f:f0:19:
         7d:eb:26:d8:14:d1:98:89:55:c8:21:8d:97:3f:03:2b:c6:7d:
         d3:58:70:c0:32:66:08:8a:d2:5b:20:f9:85:2e:69:a9:64:f2:
         62:87:4e:80:58:5e:98:cc:ab:30:1e:62:1c:8a:cc:3b:ac:f5:
         0e:66:b5:ce:ed:46:0b:65:e9:9e:e2:34:c8:c2:83:25:9c:12:
         94:8b:88:cd:51:00:6e:b5:dc:2a:cd:73:5b:4b:de:c7:bb:05:
         5a:16:14:70:cc:a9:e8:25:3f:15:7d:f0:be:c8:58:38:69:ec:
         37:2b:d2:0c:89:91:c9:7e:95:e9:ed:59:e2:8e:03:37:71:e9:
         1d:4e:7b:eb:90:67:d5:52:e4:0e:ed:49:b9:52:42:c1:c0:45:
         11:87:4a:9c:92:b7:88:52:e0:e5:e0:53:dc:a4:9e:8d:31:98:
         7c:c6:1f:d6:97:db:72:e9:7d:fd:b1:ce:6f:bc:65:5a:de:b0:
         85:f1:e8:50:3a:e5:64:71:91:1e:87:43:95:6a:62:bb:99:1a:
         07:af:88:b5:b8:35:21:5a:b9:db:00:51:99:65:d1:c2:b8:05:
         88:b0:89:f1:86:d2:7e:21:1b:d2:b9:d9:0b:18:7c:2f:cd:1f:
         a7:77:6a:cc
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICG+IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDU4
MjBhODk3ZTA5MGNjMTc0MTExMjk0NjRlODU2ZjNmOGM4OTY2ZDAeFw0yMjAzMzEw
MzAwMDBaFw0yNDAzMzEwMzAwMDBaMDMxMTAvBgNVBAMTKGZlMmI2YjI3NjMwMGNk
YTg4MDQ4ZDE5YjQ2M2U1N2Q5NDM4NjQ5ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDXP6VZiPqlw1V4uYAky2BwkFah1CDOwJHPemDFtng43/cRIN0
rc7KP3pbBH/BYmjDZXvjWuB+Bnm3i/9Zh0b2cdo6fWZPPGxHPoGEXnYw77TOO/I+
kLejxtiCpDfDhnZgxnLvUP2VzqJHqT9r3D+00Kq757VFSAYXIMml6/jchmAeWCs3
N4uDFf7Imr2VHn+cEboCI3x3xYShM80qYyURgZa7qkyAfvFytFfQkfMadEAimwFP
temwJnuMAQ79ABx2VsfjS9+1K2lggtVuV1BtccxoBj8s+HPCYmYkH/0bJlSFs/ji
aDbddQ5fkJaTs8/mdeoGH/OHgxbhBgA3PEvpAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUtyYW5EM0enOTEW1sowd6RJsECpYwHwYDVR0jBBgwFoAUV1YP82HscKqmc5Lp
Gn5foJIZ/RowDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8wNTgyMGE4
OTdlMDkwY2MxNzQxMTEyOTQ2NGU4NTZmM2Y4Yzg5NjZkLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8yNWE0MDdjNi0xMTIxLTRiYzYtYTI1Ni03Y2I0MWQ5
ODg1MzAvZmUyYjZiMjc2MzAwY2RhODgwNDhkMTliNDYzZTU3ZDk0Mzg2NDlmZS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzI1YTQwN2M2LTExMjEtNGJjNi1hMjU2LTdjYjQx
ZDk4ODUzMC8wNTgyMGE4OTdlMDkwY2MxNzQxMTEyOTQ2NGU4NTZmM2Y4Yzg5NjZk
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQALa45MA0GCSqGSIb3DQEBCwUAA4IBAQBiZ5wZaQfEB/2bQ1Ur
PZwf8Bl96ybYFNGYiVXIIY2XPwMrxn3TWHDAMmYIitJbIPmFLmmpZPJih06AWF6Y
zKswHmIcisw7rPUOZrXO7UYLZeme4jTIwoMlnBKUi4jNUQButdwqzXNbS97HuwVa
FhRwzKnoJT8VffC+yFg4aew3K9IMiZHJfpXp7VnijgM3cekdTnvrkGfVUuQO7Um5
UkLBwEURh0qckreIUuDl4FPcpJ6NMZh8xh/Wl9ty6X39sc5vvGVa3rCF8ehQOuVk
cZEeh0OVamK7mRoHr4i1uDUhWrnbAFGZZdHCuAWIsInxhtJ+IRvSudkLGHwvzR+n
d2rM
-----END CERTIFICATE-----