Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/4c052f47beeeb5cd69c78f54ab89bc98b8fb141d.roa
File:                     4c052f47beeeb5cd69c78f54ab89bc98b8fb141d.roa (raw, json)
Hash identifier:          pMiVurTmz7g5OBhShigmIhdzIdLK6D3dAc8ccN+ZGgs=
Subject key identifier:   5F:28:36:08:8F:B5:D7:77:75:A2:5A:D7:57:4B:16:28:C2:FA:83:CF
Certificate issuer:       /CN=9e6663fb5d62a6c45845d461b066de1127b3e069
Certificate serial:       21BD7E
Authority key identifier: 4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/4c052f47beeeb5cd69c78f54ab89bc98b8fb141d.roa
Signing time:             Fri 25 Aug 2023 12:30:53 +0000
ROA not before:           Thu 24 Aug 2023 12:30:53 +0000
ROA not after:            Mon 25 Aug 2025 12:30:53 +0000
asID:                     52436
IP address blocks:        132.255.112.0/22 maxlen: 22
                          168.181.208.0/22 maxlen: 24
                          168.196.32.0/22 maxlen: 24
                          138.97.176.0/22 maxlen: 24
                          207.248.124.0/22 maxlen: 24
                          190.120.244.0/22 maxlen: 22
                          179.42.168.0/22 maxlen: 24
                          190.122.180.0/22 maxlen: 24
                          2803:b900::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2211198 (0x21bd7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e6663fb5d62a6c45845d461b066de1127b3e069
        Validity
            Not Before: Aug 24 12:30:53 2023 GMT
            Not After : Aug 25 12:30:53 2025 GMT
        Subject: CN=4c052f47beeeb5cd69c78f54ab89bc98b8fb141d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9a:75:58:5b:f6:e0:05:c2:81:31:b5:8e:f7:
                    f3:79:da:28:04:43:94:f9:97:b9:fa:c2:64:d6:8f:
                    16:a9:16:ea:a3:da:8b:30:e3:2a:0b:21:c2:b1:d2:
                    cf:10:e0:4e:8f:d9:1f:2c:f3:c8:50:d6:ed:b1:f3:
                    8c:5d:01:4d:95:4f:8f:b9:f1:e2:dc:0c:94:2c:50:
                    dd:3c:80:84:34:0a:de:24:c7:17:06:63:86:e5:22:
                    7d:95:4b:73:1d:c8:28:cd:f1:7b:54:fd:be:94:8c:
                    86:5f:41:6b:df:c2:6c:5f:f9:25:85:cb:2e:9f:a9:
                    3f:18:c1:63:8e:3a:a7:48:e1:05:96:35:c3:18:f3:
                    09:e8:88:e4:e9:df:20:84:64:57:5d:52:59:fa:40:
                    a0:00:ec:7c:0b:94:7d:55:33:27:9e:0f:6f:c6:48:
                    3a:d2:e9:05:cf:71:bd:73:5b:ca:b9:52:41:d3:70:
                    fe:54:cd:6c:7e:d6:f4:e3:09:71:0f:dc:a9:44:96:
                    91:f2:f2:67:d3:15:f0:bd:dc:94:3c:08:21:a9:9c:
                    84:ad:f2:48:7e:75:57:40:2c:66:4d:c0:49:d8:76:
                    52:b1:ed:d3:02:be:30:17:31:70:33:4f:84:95:e1:
                    18:5d:c1:5a:52:07:bc:41:77:06:8e:0a:9d:67:0c:
                    77:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:28:36:08:8F:B5:D7:77:75:A2:5A:D7:57:4B:16:28:C2:FA:83:CF
            X509v3 Authority Key Identifier:
                keyid:4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/4c052f47beeeb5cd69c78f54ab89bc98b8fb141d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/9e6663fb5d62a6c45845d461b066de1127b3e069.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.112.0/22
                  138.97.176.0/22
                  168.181.208.0/22
                  168.196.32.0/22
                  179.42.168.0/22
                  190.120.244.0/22
                  190.122.180.0/22
                  207.248.124.0/22
                IPv6:
                  2803:b900::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:79:65:f1:60:a6:2b:c7:91:8e:c2:e9:09:5e:13:2c:1f:92:
         c2:94:ed:44:fe:dd:ec:b2:c7:15:46:c6:f9:49:59:f2:72:06:
         18:f5:41:4d:50:28:5f:40:4e:08:ad:34:58:33:78:ec:e4:5d:
         4c:be:c9:6b:d1:68:3e:4e:8c:e1:c6:d1:ad:9e:cd:80:83:68:
         02:a9:b4:68:32:e9:48:ba:a4:6d:18:78:10:1a:77:85:32:f2:
         cb:56:ce:e1:bd:0b:6f:a3:83:c4:68:3a:7c:d8:3a:7e:03:34:
         24:30:96:a1:99:78:37:8d:5f:f4:ef:a3:08:96:2e:99:83:b8:
         34:41:be:14:78:6c:f6:de:f9:85:64:34:53:a1:41:20:77:31:
         f0:83:66:64:bd:fe:3e:39:f9:1c:2e:b7:13:21:90:9a:ae:68:
         74:96:ec:e4:bb:03:bb:76:d6:dd:64:ef:89:c7:bf:8f:c7:37:
         e3:33:d5:4d:b7:35:26:1f:a5:48:ca:f3:f7:0a:4b:43:39:2e:
         6b:96:e3:90:26:a5:41:0b:0e:5d:a0:b0:36:54:d1:c3:2c:d8:
         21:a4:f7:76:53:b5:0c:5b:69:ba:4e:5b:d3:fe:87:07:dc:47:
         48:d4:0b:fa:ea:96:43:02:71:9b:ac:05:2a:d3:b0:f3:2c:a4:
         e1:b4:f7:39
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIDIb1+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDll
NjY2M2ZiNWQ2MmE2YzQ1ODQ1ZDQ2MWIwNjZkZTExMjdiM2UwNjkwHhcNMjMwODI0
MTIzMDUzWhcNMjUwODI1MTIzMDUzWjAzMTEwLwYDVQQDEyg0YzA1MmY0N2JlZWVi
NWNkNjljNzhmNTRhYjg5YmM5OGI4ZmIxNDFkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjpp1WFv24AXCgTG1jvfzedooBEOU+Ze5+sJk1o8WqRbqo9qL
MOMqCyHCsdLPEOBOj9kfLPPIUNbtsfOMXQFNlU+PufHi3AyULFDdPICENAreJMcX
BmOG5SJ9lUtzHcgozfF7VP2+lIyGX0Fr38JsX/klhcsun6k/GMFjjjqnSOEFljXD
GPMJ6Ijk6d8ghGRXXVJZ+kCgAOx8C5R9VTMnng9vxkg60ukFz3G9c1vKuVJB03D+
VM1sftb04wlxD9ypRJaR8vJn0xXwvdyUPAghqZyErfJIfnVXQCxmTcBJ2HZSse3T
Ar4wFzFwM0+EleEYXcFaUge8QXcGjgqdZwx3VwIDAQABo4IClDCCApAwHQYDVR0O
BBYEFF8oNgiPtdd3daJa11dLFijC+oPPMB8GA1UdIwQYMBaAFE762/rMCWR6WNc6
yjRIk1JTzAtSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWU2NjYz
ZmI1ZDYyYTZjNDU4NDVkNDYxYjA2NmRlMTEyN2IzZTA2OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzg1NTIwZTYtMWY5OC00OTZiLThkOWUtMTVkZjll
MDc3MmNlLzRjMDUyZjQ3YmVlZWI1Y2Q2OWM3OGY1NGFiODliYzk4YjhmYjE0MWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODU1MjBlNi0xZjk4LTQ5NmItOGQ5ZS0xNWRm
OWUwNzcyY2UvOWU2NjYzZmI1ZDYyYTZjNDU4NDVkNDYxYjA2NmRlMTEyN2IzZTA2
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBYBggrBgEFBQcBBwEB/wRJ
MEcwNgQCAAEwMAMEAoT/cAMEAophsAMEAqi10AMEAqjEIAMEArMqqAMEAr549AME
Ar56tAMEAs/4fDANBAIAAjAHAwUAKAO5ADANBgkqhkiG9w0BAQsFAAOCAQEAX3ll
8WCmK8eRjsLpCV4TLB+SwpTtRP7d7LLHFUbG+UlZ8nIGGPVBTVAoX0BOCK00WDN4
7ORdTL7Ja9FoPk6M4cbRrZ7NgINoAqm0aDLpSLqkbRh4EBp3hTLyy1bO4b0Lb6OD
xGg6fNg6fgM0JDCWoZl4N41f9O+jCJYumYO4NEG+FHhs9t75hWQ0U6FBIHcx8INm
ZL3+Pjn5HC63EyGQmq5odJbs5LsDu3bW3WTvice/j8c34zPVTbc1Jh+lSMrz9wpL
Qzkua5bjkCalQQsOXaCwNlTRwyzYIaT3dlO1DFtpuk5b0/6HB9xHSNQL+uqWQwJx
m6wFKtOw8yyk4bT3OQ==
-----END CERTIFICATE-----