Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3b1c359c-ea18-4773-b98d-de8f644d5bdf/a9ac423f2ff4a37e53f7c9d78b632905f97508ea.roa
File:                     a9ac423f2ff4a37e53f7c9d78b632905f97508ea.roa (raw, json)
Hash identifier:          +OTizhNzXeasQY3NK1VHvSCfSJuLChBSrYqSUEKwFIQ=
Subject key identifier:   3A:3D:C2:05:6E:19:98:29:73:D3:12:F9:7B:6E:6B:D6:74:AC:6E:FA
Certificate issuer:       /CN=fa17fa162b8c63daa4db78d5049749365ad3d60b
Certificate serial:       04DA
Authority key identifier: 0D:D0:B1:C1:C5:51:BE:21:8B:9B:99:DA:9F:C5:19:33:E6:66:86:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa17fa162b8c63daa4db78d5049749365ad3d60b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3b1c359c-ea18-4773-b98d-de8f644d5bdf/a9ac423f2ff4a37e53f7c9d78b632905f97508ea.roa
Signing time:             Thu 06 Oct 2022 13:47:57 +0000
ROA not before:           Thu 06 Oct 2022 13:47:20 +0000
ROA not after:            Sun 06 Oct 2024 13:47:20 +0000
asID:                     264680
IP address blocks:        168.227.4.0/22 maxlen: 22
                          2803:7d40::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1242 (0x4da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa17fa162b8c63daa4db78d5049749365ad3d60b
        Validity
            Not Before: Oct  6 13:47:20 2022 GMT
            Not After : Oct  6 13:47:20 2024 GMT
        Subject: CN=a9ac423f2ff4a37e53f7c9d78b632905f97508ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cf:f6:40:c3:0e:b0:4e:c6:30:4e:af:69:61:
                    17:a0:14:43:d9:77:a1:f0:9c:7c:e4:1b:c3:36:5e:
                    b0:8f:40:a6:24:a3:0d:b5:56:db:fa:b0:23:c8:92:
                    c1:1a:c1:4c:fe:02:d5:38:75:2f:cf:0e:37:54:9c:
                    8b:3b:a6:31:8b:7b:c3:ec:de:6b:e7:d5:3b:54:17:
                    3e:77:de:d2:a7:59:01:2d:fb:d1:58:90:64:53:5b:
                    98:73:d4:df:c7:5d:f1:24:17:d2:33:af:92:ac:40:
                    cb:52:c2:d5:68:44:63:9e:a3:38:b8:f1:3a:41:5b:
                    4f:85:d8:8a:8f:b4:0f:7b:91:4c:d0:88:6f:3f:13:
                    e0:86:c7:bd:05:18:8d:63:c4:31:f3:93:7b:a0:54:
                    ea:78:00:a9:49:64:52:6f:cf:d4:67:04:83:b1:32:
                    c3:fa:ce:a1:f4:60:47:b8:0d:bc:f0:ef:59:4c:6d:
                    84:50:43:0c:e1:e6:e8:19:26:66:6e:4b:b9:1a:2c:
                    fb:44:fd:19:37:2e:59:94:62:ac:e8:6d:7a:0b:35:
                    7b:ec:5e:2c:11:84:a4:98:da:97:b8:b4:2d:71:83:
                    98:f5:dd:77:c7:76:86:84:16:67:8b:79:37:0b:c4:
                    b7:b6:2f:0a:4e:4d:f9:9e:11:ed:f8:10:42:99:21:
                    0f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3D:C2:05:6E:19:98:29:73:D3:12:F9:7B:6E:6B:D6:74:AC:6E:FA
            X509v3 Authority Key Identifier:
                keyid:0D:D0:B1:C1:C5:51:BE:21:8B:9B:99:DA:9F:C5:19:33:E6:66:86:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa17fa162b8c63daa4db78d5049749365ad3d60b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3b1c359c-ea18-4773-b98d-de8f644d5bdf/a9ac423f2ff4a37e53f7c9d78b632905f97508ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3b1c359c-ea18-4773-b98d-de8f644d5bdf/fa17fa162b8c63daa4db78d5049749365ad3d60b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.4.0/22
                IPv6:
                  2803:7d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:51:3c:22:4b:e7:68:95:1a:36:30:d4:15:a8:35:0d:ce:35:
         9b:2c:14:3d:8a:56:f1:0c:ed:58:f4:4a:52:0f:af:d9:91:10:
         a9:b0:33:6f:41:34:73:8d:43:01:15:5d:50:d0:5c:c1:fb:6e:
         e9:69:3c:b7:0b:02:72:e5:0b:49:ef:5e:1f:63:25:1e:30:8d:
         a7:aa:93:95:1a:9b:f1:82:4c:63:73:b4:96:00:cc:a0:01:62:
         40:42:37:94:10:c9:d0:40:29:bb:bc:77:76:70:8c:62:4e:69:
         3a:bd:4e:b8:11:1d:09:27:03:9d:fd:b6:30:89:80:e9:23:3b:
         dc:ef:cf:d8:b1:35:a9:c3:6d:cb:ac:c9:e4:59:e0:68:ed:e4:
         2d:8d:52:54:62:fe:20:9c:bc:d4:9f:c7:55:ca:0d:58:37:89:
         b2:d1:3f:8d:00:f1:31:0c:07:4d:29:0f:87:61:74:55:58:a2:
         72:4b:bb:7a:48:31:73:3f:0b:2c:59:df:ac:b8:1a:fe:88:04:
         2c:85:f8:b1:6b:35:49:f7:c6:ee:15:de:0e:40:cd:94:87:aa:
         db:2b:19:42:c9:85:fd:a3:dc:3f:a1:b2:be:35:9b:52:c0:da:
         82:69:ff:c1:31:5c:16:23:35:ff:b6:a7:36:5d:dc:a2:07:61:
         0a:b4:59:a7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICBNowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZmEx
N2ZhMTYyYjhjNjNkYWE0ZGI3OGQ1MDQ5NzQ5MzY1YWQzZDYwYjAeFw0yMjEwMDYx
MzQ3MjBaFw0yNDEwMDYxMzQ3MjBaMDMxMTAvBgNVBAMTKGE5YWM0MjNmMmZmNGEz
N2U1M2Y3YzlkNzhiNjMyOTA1Zjk3NTA4ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZz/ZAww6wTsYwTq9pYRegFEPZd6HwnHzkG8M2XrCPQKYkow21
Vtv6sCPIksEawUz+AtU4dS/PDjdUnIs7pjGLe8Ps3mvn1TtUFz533tKnWQEt+9FY
kGRTW5hz1N/HXfEkF9Izr5KsQMtSwtVoRGOeozi48TpBW0+F2IqPtA97kUzQiG8/
E+CGx70FGI1jxDHzk3ugVOp4AKlJZFJvz9RnBIOxMsP6zqH0YEe4Dbzw71lMbYRQ
Qwzh5ugZJmZuS7kaLPtE/Rk3LlmUYqzobXoLNXvsXiwRhKSY2pe4tC1xg5j13XfH
doaEFmeLeTcLxLe2LwpOTfmeEe34EEKZIQ+FAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUOj3CBW4ZmClz0xL5e25r1nSsbvowHwYDVR0jBBgwFoAUDdCxwcVRviGLm5na
n8UZM+ZmhiYwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9mYTE3ZmEx
NjJiOGM2M2RhYTRkYjc4ZDUwNDk3NDkzNjVhZDNkNjBiLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8zYjFjMzU5Yy1lYTE4LTQ3NzMtYjk4ZC1kZThmNjQ0
ZDViZGYvYTlhYzQyM2YyZmY0YTM3ZTUzZjdjOWQ3OGI2MzI5MDVmOTc1MDhlYS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzNiMWMzNTljLWVhMTgtNDc3My1iOThkLWRlOGY2
NDRkNWJkZi9mYTE3ZmExNjJiOGM2M2RhYTRkYjc4ZDUwNDk3NDkzNjVhZDNkNjBi
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCqOMEMA0EAgACMAcDBQAoA31AMA0GCSqGSIb3DQEBCwUAA4IB
AQByUTwiS+dolRo2MNQVqDUNzjWbLBQ9ilbxDO1Y9EpSD6/ZkRCpsDNvQTRzjUMB
FV1Q0FzB+27paTy3CwJy5QtJ714fYyUeMI2nqpOVGpvxgkxjc7SWAMygAWJAQjeU
EMnQQCm7vHd2cIxiTmk6vU64ER0JJwOd/bYwiYDpIzvc78/YsTWpw23LrMnkWeBo
7eQtjVJUYv4gnLzUn8dVyg1YN4my0T+NAPExDAdNKQ+HYXRVWKJyS7t6SDFzPwss
Wd+suBr+iAQshfixazVJ98buFd4OQM2Uh6rbKxlCyYX9o9w/obK+NZtSwNqCaf/B
MVwWIzX/tqc2XdyiB2EKtFmn
-----END CERTIFICATE-----