Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d82f455-9f92-4d48-9af8-1dfad19dadb6/cae4c6315eacd56bc3288f66ed1a2653f920c912.roa
File:                     cae4c6315eacd56bc3288f66ed1a2653f920c912.roa (raw, json)
Hash identifier:          qYrzQsq87/aUVyzhW6VtTV5bBrTjfDut7UKvI7r/dw4=
Subject key identifier:   D6:74:6E:11:66:1F:E9:F6:73:46:90:35:5E:60:C5:42:91:DF:D7:20
Certificate issuer:       /CN=a1cac4218e010e3d59d004f744b976a5437d792e
Certificate serial:       0237
Authority key identifier: 33:DA:8B:64:E0:09:0D:1E:40:76:A8:EB:28:FD:03:BF:10:8E:9D:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1cac4218e010e3d59d004f744b976a5437d792e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2d82f455-9f92-4d48-9af8-1dfad19dadb6/cae4c6315eacd56bc3288f66ed1a2653f920c912.roa
Signing time:             Fri 15 Oct 2021 18:33:25 +0000
ROA not before:           Fri 15 Oct 2021 03:00:00 +0000
ROA not after:            Sun 15 Oct 2023 03:00:00 +0000
asID:                     52507
IP address blocks:        45.230.60.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1cac4218e010e3d59d004f744b976a5437d792e
        Validity
            Not Before: Oct 15 03:00:00 2021 GMT
            Not After : Oct 15 03:00:00 2023 GMT
        Subject: CN=cae4c6315eacd56bc3288f66ed1a2653f920c912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:73:3b:72:6b:1c:ad:4f:85:8d:80:0a:c4:7d:
                    ad:a7:2b:85:1c:86:a1:ff:91:8a:67:12:15:2d:16:
                    42:68:af:02:4d:b3:99:80:80:e2:c3:58:cf:4e:a7:
                    7a:a3:1d:a1:2c:88:37:15:10:32:ea:e9:4b:36:f5:
                    cb:98:c3:7b:b6:16:8a:0c:41:bc:c0:9b:23:fa:25:
                    9f:b6:1e:2a:0a:8d:30:84:25:35:f4:a8:36:b9:b9:
                    98:ce:37:29:3b:31:2c:a3:1a:dc:33:e0:52:62:ce:
                    00:86:6a:ca:e5:a0:1c:1a:2d:0d:80:ef:9e:36:36:
                    56:1f:88:db:22:fb:d3:44:f1:19:b5:67:d7:37:08:
                    8a:37:1d:bc:fa:a8:65:6f:e9:7b:9d:ae:e9:9f:69:
                    2b:f0:e9:f8:2f:9a:fa:3a:6a:04:2e:6f:fc:06:e9:
                    05:8a:21:d2:86:88:f5:58:18:22:dd:1a:e8:56:02:
                    54:8a:5a:2a:a3:ee:e3:6a:b2:cc:ae:5f:60:b1:57:
                    41:e7:01:81:07:05:13:e2:63:63:f2:16:68:95:d5:
                    df:8f:19:9f:a1:3f:c1:64:10:b1:94:0b:6e:1e:85:
                    08:ea:36:15:a2:0f:66:75:74:b9:cd:2d:92:39:f0:
                    86:52:45:70:42:af:23:50:17:1e:cd:8a:0e:70:5f:
                    24:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:74:6E:11:66:1F:E9:F6:73:46:90:35:5E:60:C5:42:91:DF:D7:20
            X509v3 Authority Key Identifier:
                keyid:33:DA:8B:64:E0:09:0D:1E:40:76:A8:EB:28:FD:03:BF:10:8E:9D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1cac4218e010e3d59d004f744b976a5437d792e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d82f455-9f92-4d48-9af8-1dfad19dadb6/cae4c6315eacd56bc3288f66ed1a2653f920c912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2d82f455-9f92-4d48-9af8-1dfad19dadb6/a1cac4218e010e3d59d004f744b976a5437d792e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:e4:97:5b:53:94:25:ce:a4:4b:a7:42:b3:86:b7:21:d2:50:
         62:df:3f:a6:08:be:96:d0:93:26:18:1d:d2:ec:35:49:f2:3a:
         5c:07:88:4a:95:f0:ee:e7:ad:c7:b6:49:78:f3:7b:1b:95:3f:
         86:2b:c0:ad:63:a0:53:96:5d:57:f7:d2:aa:49:2b:88:7a:a1:
         ed:70:a1:18:69:53:23:3c:3d:28:d2:83:9a:34:e8:8f:7c:7a:
         99:ea:13:7c:33:fa:7e:f7:9a:7b:30:cf:74:18:06:ab:c4:be:
         a5:e7:76:53:a9:dd:02:a9:00:f2:8e:f6:86:d3:50:b3:e3:ba:
         03:1b:ae:73:ea:c5:f0:ce:6a:5b:9f:99:c8:e9:d0:c0:ec:62:
         01:fc:ff:f8:49:da:e5:43:d8:9a:68:a6:32:53:e8:ce:78:3f:
         15:80:ea:59:86:68:c4:7d:5b:6d:50:8a:03:1c:7f:f3:9d:42:
         ba:5c:a6:a2:1b:61:b2:ee:14:99:ed:db:ab:12:67:4c:03:24:
         c0:73:65:7e:3b:e7:7f:e9:77:7d:e6:0e:31:ba:30:a8:de:58:
         13:29:ab:72:88:9c:eb:60:c4:1c:5c:3a:00:6b:3d:63:6e:be:
         74:ca:18:24:dc:43:71:8d:ba:b7:15:a1:7f:fd:28:12:52:a7:
         50:de:aa:05
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYTFj
YWM0MjE4ZTAxMGUzZDU5ZDAwNGY3NDRiOTc2YTU0MzdkNzkyZTAeFw0yMTEwMTUw
MzAwMDBaFw0yMzEwMTUwMzAwMDBaMDMxMTAvBgNVBAMTKGNhZTRjNjMxNWVhY2Q1
NmJjMzI4OGY2NmVkMWEyNjUzZjkyMGM5MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmcztyaxytT4WNgArEfa2nK4UchqH/kYpnEhUtFkJorwJNs5mA
gOLDWM9Op3qjHaEsiDcVEDLq6Us29cuYw3u2FooMQbzAmyP6JZ+2HioKjTCEJTX0
qDa5uZjONyk7MSyjGtwz4FJizgCGasrloBwaLQ2A7542NlYfiNsi+9NE8Rm1Z9c3
CIo3Hbz6qGVv6XudrumfaSvw6fgvmvo6agQub/wG6QWKIdKGiPVYGCLdGuhWAlSK
Wiqj7uNqssyuX2CxV0HnAYEHBRPiY2PyFmiV1d+PGZ+hP8FkELGUC24ehQjqNhWi
D2Z1dLnNLZI58IZSRXBCryNQFx7Nig5wXySxAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQU1nRuEWYf6fZzRpA1XmDFQpHf1yAwHwYDVR0jBBgwFoAUM9qLZOAJDR5Adqjr
KP0DvxCOnWMwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9hMWNhYzQy
MThlMDEwZTNkNTlkMDA0Zjc0NGI5NzZhNTQzN2Q3OTJlLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8yZDgyZjQ1NS05ZjkyLTRkNDgtOWFmOC0xZGZhZDE5
ZGFkYjYvY2FlNGM2MzE1ZWFjZDU2YmMzMjg4ZjY2ZWQxYTI2NTNmOTIwYzkxMi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzJkODJmNDU1LTlmOTItNGQ0OC05YWY4LTFkZmFk
MTlkYWRiNi9hMWNhYzQyMThlMDEwZTNkNTlkMDA0Zjc0NGI5NzZhNTQzN2Q3OTJl
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCLeY8MA0GCSqGSIb3DQEBCwUAA4IBAQAq5JdbU5QlzqRLp0Kz
hrch0lBi3z+mCL6W0JMmGB3S7DVJ8jpcB4hKlfDu563Htkl483sblT+GK8CtY6BT
ll1X99KqSSuIeqHtcKEYaVMjPD0o0oOaNOiPfHqZ6hN8M/p+95p7MM90GAarxL6l
53ZTqd0CqQDyjvaG01Cz47oDG65z6sXwzmpbn5nI6dDA7GIB/P/4SdrlQ9iaaKYy
U+jOeD8VgOpZhmjEfVttUIoDHH/znUK6XKaiG2Gy7hSZ7durEmdMAyTAc2V+O+d/
6Xd95g4xujCo3lgTKatyiJzrYMQcXDoAaz1jbr50yhgk3ENxjbq3FaF//SgSUqdQ
3qoF
-----END CERTIFICATE-----