Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26f7b28f-9407-4c17-84a0-d605f9743ee0/751d6f9e9a5c8dccaebe89506138965aad316ecc.roa
File:                     751d6f9e9a5c8dccaebe89506138965aad316ecc.roa (raw, json)
Hash identifier:          iJ3Ra+zRcPN3PfHqbgspnKcW5O8QBthqlzbvN+5MDW4=
Subject key identifier:   F9:22:3C:6E:B3:70:77:E8:E9:96:2E:83:87:92:9E:A1:10:23:1A:0D
Certificate issuer:       /CN=07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4
Certificate serial:       0A71DF
Authority key identifier: F5:94:27:0F:83:2E:B2:05:83:30:E3:F6:46:2B:43:F0:6A:5B:3B:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/26f7b28f-9407-4c17-84a0-d605f9743ee0/751d6f9e9a5c8dccaebe89506138965aad316ecc.roa
Signing time:             Sat 12 Feb 2022 17:02:22 +0000
ROA not before:           Sat 12 Feb 2022 03:00:00 +0000
ROA not after:            Mon 12 Feb 2024 03:00:00 +0000
asID:                     271791
IP address blocks:        201.221.112.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684511 (0xa71df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4
        Validity
            Not Before: Feb 12 03:00:00 2022 GMT
            Not After : Feb 12 03:00:00 2024 GMT
        Subject: CN=751d6f9e9a5c8dccaebe89506138965aad316ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f2:98:bc:7e:25:11:b0:2f:58:bf:bd:44:f2:
                    83:4c:3a:1a:17:42:0c:c6:55:5a:5b:d5:96:18:7d:
                    6b:e7:c2:1e:43:5c:be:a3:ff:38:9f:31:d4:7e:9b:
                    81:42:c0:da:b6:37:88:8a:d7:36:55:41:11:d3:90:
                    36:80:69:58:f4:1c:77:41:f3:ec:18:e8:51:6f:b1:
                    0c:d5:cd:4c:84:af:58:c2:1d:5e:10:46:17:cb:2b:
                    6f:b6:9c:32:ce:21:bb:4f:ed:a3:a5:ee:df:05:d9:
                    a3:c4:65:8f:40:56:fa:f8:02:63:d7:9f:51:69:b7:
                    5b:bd:c7:1b:25:03:c3:3f:a8:08:d4:1a:88:dd:ef:
                    a3:09:3b:de:49:99:7e:76:85:63:ed:45:c6:46:10:
                    0b:69:9f:b5:5f:93:e2:6d:20:00:e6:ed:15:da:68:
                    89:bc:22:46:44:2f:fb:e3:4a:e4:bc:f8:e2:61:50:
                    96:1f:80:f1:9f:c9:94:a8:90:45:0e:75:d8:03:c6:
                    c2:1b:e7:f3:40:56:64:cc:fd:86:57:0f:35:7c:3f:
                    35:fc:ea:43:5e:c4:90:31:dc:03:24:3e:a6:d3:e4:
                    e3:59:0c:36:fb:4c:72:8d:ac:d8:bb:6a:a9:86:ec:
                    8b:49:7b:3d:4b:ac:f4:ac:d1:30:9b:49:6e:99:95:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:22:3C:6E:B3:70:77:E8:E9:96:2E:83:87:92:9E:A1:10:23:1A:0D
            X509v3 Authority Key Identifier:
                keyid:F5:94:27:0F:83:2E:B2:05:83:30:E3:F6:46:2B:43:F0:6A:5B:3B:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26f7b28f-9407-4c17-84a0-d605f9743ee0/751d6f9e9a5c8dccaebe89506138965aad316ecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/26f7b28f-9407-4c17-84a0-d605f9743ee0/07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:12:ab:a0:45:14:20:a6:b2:5a:f1:bc:b4:09:72:c2:8d:bc:
         d2:0d:b3:20:de:7d:55:c1:c3:0a:5f:5d:ea:9e:19:e2:7f:47:
         8a:bf:c5:83:12:5b:29:96:16:c5:60:aa:60:92:8a:79:33:ec:
         f2:22:30:31:e0:51:8a:0a:ae:29:b9:2f:82:30:15:36:b6:31:
         56:36:e5:ab:d9:df:fe:2d:01:f3:ba:ab:83:47:f8:dd:8f:6c:
         72:10:d2:36:70:54:82:06:40:f7:61:97:9d:fd:1b:cc:51:4d:
         7c:1f:d8:38:42:1b:6f:34:75:22:d3:64:ba:fe:61:9a:36:4b:
         b9:92:4f:0c:58:66:e4:bb:3c:10:b9:cb:56:f5:e1:23:31:88:
         c5:ce:49:38:a9:ff:83:d7:4e:b9:98:ec:2b:f7:7d:dd:74:48:
         e4:43:24:17:68:c2:86:fa:4f:f0:e4:f2:24:80:23:25:5d:4c:
         8f:2b:80:c8:b0:22:cd:29:4a:fa:76:3c:93:f4:e4:4d:60:cb:
         6d:5e:6e:1e:15:2d:48:03:3f:74:7d:36:de:7e:05:82:85:c0:
         61:56:b0:59:63:86:b1:3c:80:1e:de:da:a1:8e:2e:0c:73:76:
         a3:34:ac:47:4f:4e:0e:27:b8:6e:17:2a:ff:70:42:b5:a4:50:
         38:53:ad:e3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCnHfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA3
YzlhZGM4NTFlMmQ2N2I1YjNhYjAxYmNkZjMxMGMxYWUyMmYyZTQwHhcNMjIwMjEy
MDMwMDAwWhcNMjQwMjEyMDMwMDAwWjAzMTEwLwYDVQQDEyg3NTFkNmY5ZTlhNWM4
ZGNjYWViZTg5NTA2MTM4OTY1YWFkMzE2ZWNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAufKYvH4lEbAvWL+9RPKDTDoaF0IMxlVaW9WWGH1r58IeQ1y+
o/84nzHUfpuBQsDatjeIitc2VUER05A2gGlY9Bx3QfPsGOhRb7EM1c1MhK9Ywh1e
EEYXyytvtpwyziG7T+2jpe7fBdmjxGWPQFb6+AJj159RabdbvccbJQPDP6gI1BqI
3e+jCTveSZl+doVj7UXGRhALaZ+1X5PibSAA5u0V2miJvCJGRC/740rkvPjiYVCW
H4Dxn8mUqJBFDnXYA8bCG+fzQFZkzP2GVw81fD81/OpDXsSQMdwDJD6m0+TjWQw2
+0xyjazYu2qphuyLSXs9S6z0rNEwm0lumZUuzwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPkiPG6zcHfo6ZYug4eSnqEQIxoNMB8GA1UdIwQYMBaAFPWUJw+DLrIFgzDj
9kYrQ/BqWztHMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDdjOWFk
Yzg1MWUyZDY3YjViM2FiMDFiY2RmMzEwYzFhZTIyZjJlNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjZmN2IyOGYtOTQwNy00YzE3LTg0YTAtZDYwNWY5
NzQzZWUwLzc1MWQ2ZjllOWE1YzhkY2NhZWJlODk1MDYxMzg5NjVhYWQzMTZlY2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNmY3YjI4Zi05NDA3LTRjMTctODRhMC1kNjA1
Zjk3NDNlZTAvMDdjOWFkYzg1MWUyZDY3YjViM2FiMDFiY2RmMzEwYzFhZTIyZjJl
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsndcDANBgkqhkiG9w0BAQsFAAOCAQEANRKroEUUIKayWvG8
tAlywo280g2zIN59VcHDCl9d6p4Z4n9Hir/FgxJbKZYWxWCqYJKKeTPs8iIwMeBR
igquKbkvgjAVNrYxVjblq9nf/i0B87qrg0f43Y9schDSNnBUggZA92GXnf0bzFFN
fB/YOEIbbzR1ItNkuv5hmjZLuZJPDFhm5Ls8ELnLVvXhIzGIxc5JOKn/g9dOuZjs
K/d93XRI5EMkF2jChvpP8OTyJIAjJV1MjyuAyLAizSlK+nY8k/TkTWDLbV5uHhUt
SAM/dH023n4FgoXAYVawWWOGsTyAHt7aoY4uDHN2ozSsR09ODie4bhcq/3BCtaRQ
OFOt4w==
-----END CERTIFICATE-----