Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/17a45030b0c1cd81d0c3fb4d7616d77310002a4f.roa
File:                     17a45030b0c1cd81d0c3fb4d7616d77310002a4f.roa (raw, json)
Hash identifier:          57/rf8qNhL9fnJnadw9vCFKuyyqLIGQ2I2KCn2VD0hM=
Subject key identifier:   AE:9F:46:9B:64:C3:18:EE:0E:C2:61:13:B5:D2:D1:93:E1:C9:D1:E4
Certificate issuer:       /CN=8b93ccfac824196843701fdd92655044ac70189f
Certificate serial:       11A027
Authority key identifier: 9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/17a45030b0c1cd81d0c3fb4d7616d77310002a4f.roa
Signing time:             Wed 31 May 2023 08:30:01 +0000
ROA not before:           Tue 30 May 2023 08:30:01 +0000
ROA not after:            Thu 29 May 2025 08:30:01 +0000
asID:                     3356
IP address blocks:        200.1.175.0/24 maxlen: 24
                          201.221.124.0/24 maxlen: 24
                          201.221.125.0/24 maxlen: 24
                          179.0.27.0/24 maxlen: 24
                          201.221.124.0/23 maxlen: 23
                          2801:15:4000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1155111 (0x11a027)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b93ccfac824196843701fdd92655044ac70189f
        Validity
            Not Before: May 30 08:30:01 2023 GMT
            Not After : May 29 08:30:01 2025 GMT
        Subject: CN=17a45030b0c1cd81d0c3fb4d7616d77310002a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:5c:b4:8e:fd:f8:a8:9c:99:76:71:ba:ad:
                    b7:67:c3:ff:41:6c:59:69:32:fc:b4:3a:2d:51:0f:
                    54:ad:28:de:90:a5:99:55:a9:90:01:fb:ad:56:58:
                    ed:8e:0e:e4:96:9b:87:93:34:02:7c:ba:b8:f1:9b:
                    56:d4:e6:f4:2d:e5:bd:89:6b:52:29:dc:8f:af:80:
                    fd:3d:52:12:81:55:2c:77:cf:7b:f6:af:11:50:14:
                    91:12:d6:ff:62:21:0e:00:1b:cc:d7:09:5d:de:be:
                    53:01:99:37:26:28:8c:5b:42:e3:fc:1e:a4:b7:ce:
                    8f:10:94:ba:e3:11:a8:7d:ab:19:dd:22:b9:0f:62:
                    26:28:7b:28:d2:26:b0:34:37:df:68:c2:58:46:10:
                    49:ea:53:45:0a:2c:af:43:4e:cf:c5:5a:28:52:79:
                    01:72:5a:c3:1a:6d:9b:ec:de:e9:bd:2e:cd:e4:e0:
                    d0:fa:f3:5e:19:61:04:c9:3c:df:3c:36:ff:39:c2:
                    51:f4:0f:3d:88:a9:49:b8:5d:77:67:bf:e6:49:73:
                    75:2c:89:bf:9e:d3:46:d3:72:52:87:5b:4d:f8:1b:
                    25:5d:78:65:77:c5:47:e8:9f:f6:cc:23:eb:58:29:
                    cf:bd:c4:b1:e8:f8:6e:13:dc:f3:88:74:b3:21:46:
                    17:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9F:46:9B:64:C3:18:EE:0E:C2:61:13:B5:D2:D1:93:E1:C9:D1:E4
            X509v3 Authority Key Identifier:
                keyid:9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/17a45030b0c1cd81d0c3fb4d7616d77310002a4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/8b93ccfac824196843701fdd92655044ac70189f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.27.0/24
                  200.1.175.0/24
                  201.221.124.0/23
                IPv6:
                  2801:15:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:d9:cd:04:33:c5:b7:83:93:1d:ec:03:58:39:c8:a5:ef:a4:
         43:19:a6:68:1b:68:5c:d6:97:0a:14:70:1d:ab:c1:f5:dd:49:
         f9:b2:63:be:b2:d6:55:ac:9a:d3:da:03:57:f0:40:e4:09:af:
         aa:7d:6d:f8:5c:89:ab:ba:b8:b2:2e:09:49:cd:c1:0d:33:c8:
         1e:38:6d:b5:27:f8:16:14:85:e1:d6:e4:eb:58:d9:0b:b0:19:
         81:ef:4e:4c:52:60:b8:d7:ab:5d:ed:8e:97:23:ce:38:e4:97:
         09:25:48:75:8b:9b:19:1c:bd:11:fa:fe:e4:ed:01:70:21:26:
         e2:22:51:f2:a7:39:24:f5:bb:75:f6:e7:d4:37:89:1b:74:cc:
         3c:b9:6f:3e:16:ce:60:aa:03:6e:99:0e:04:04:58:d5:19:7e:
         5e:88:60:54:9d:44:39:1b:fa:da:76:bc:fa:23:8e:9c:8a:2e:
         11:ef:f7:b4:1a:1d:3b:5b:17:19:0d:64:4d:dd:8d:35:a2:29:
         11:58:63:52:5c:5b:47:e4:a1:28:29:4b:a7:27:a2:28:a5:59:
         c7:a2:0d:8b:fb:c3:7f:74:48:cb:9e:37:d3:7c:7d:c1:ae:7c:
         91:c6:dc:d4:74:6e:aa:bd:98:2c:cd:b5:77:b3:94:2c:57:29:
         8c:83:80:20
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIDEaAnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhi
OTNjY2ZhYzgyNDE5Njg0MzcwMWZkZDkyNjU1MDQ0YWM3MDE4OWYwHhcNMjMwNTMw
MDgzMDAxWhcNMjUwNTI5MDgzMDAxWjAzMTEwLwYDVQQDEygxN2E0NTAzMGIwYzFj
ZDgxZDBjM2ZiNGQ3NjE2ZDc3MzEwMDAyYTRmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyQlctI79+KicmXZxuq23Z8P/QWxZaTL8tDotUQ9UrSjekKWZ
VamQAfutVljtjg7klpuHkzQCfLq48ZtW1Ob0LeW9iWtSKdyPr4D9PVISgVUsd897
9q8RUBSREtb/YiEOABvM1wld3r5TAZk3JiiMW0Lj/B6kt86PEJS64xGofasZ3SK5
D2ImKHso0iawNDffaMJYRhBJ6lNFCiyvQ07PxVooUnkBclrDGm2b7N7pvS7N5ODQ
+vNeGWEEyTzfPDb/OcJR9A89iKlJuF13Z7/mSXN1LIm/ntNG03JSh1tN+BslXXhl
d8VH6J/2zCPrWCnPvcSx6PhuE9zziHSzIUYXcQIDAQABo4ICeDCCAnQwHQYDVR0O
BBYEFK6fRptkwxjuDsJhE7XS0ZPhydHkMB8GA1UdIwQYMBaAFJp1Yqy05L51dkGD
kTPYsItBcF6+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGI5M2Nj
ZmFjODI0MTk2ODQzNzAxZmRkOTI2NTUwNDRhYzcwMTg5Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmExZWVjMjEtZjlhMC00NmRjLTliMjctMGM2MmY4
ZGEyZDE3LzE3YTQ1MDMwYjBjMWNkODFkMGMzZmI0ZDc2MTZkNzczMTAwMDJhNGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yYTFlZWMyMS1mOWEwLTQ2ZGMtOWIyNy0wYzYy
ZjhkYTJkMTcvOGI5M2NjZmFjODI0MTk2ODQzNzAxZmRkOTI2NTUwNDRhYzcwMTg5
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8BggrBgEFBQcBBwEB/wQt
MCswGAQCAAEwEgMEALMAGwMEAMgBrwMEAcndfDAPBAIAAjAJAwcAKAEAFUAAMA0G
CSqGSIb3DQEBCwUAA4IBAQAu2c0EM8W3g5Md7ANYOcil76RDGaZoG2hc1pcKFHAd
q8H13Un5smO+stZVrJrT2gNX8EDkCa+qfW34XImruriyLglJzcENM8geOG21J/gW
FIXh1uTrWNkLsBmB705MUmC416td7Y6XI8445JcJJUh1i5sZHL0R+v7k7QFwISbi
IlHypzkk9bt19ufUN4kbdMw8uW8+Fs5gqgNumQ4EBFjVGX5eiGBUnUQ5G/radrz6
I46cii4R7/e0Gh07WxcZDWRN3Y01oikRWGNSXFtH5KEoKUunJ6IopVnHog2L+8N/
dEjLnjfTfH3BrnyRxtzUdG6qvZgszbV3s5QsVymMg4Ag
-----END CERTIFICATE-----