Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/3145129b235760c88e9ebd4cfdf39f7b7d92992e.roa
File:                     3145129b235760c88e9ebd4cfdf39f7b7d92992e.roa (raw, json)
Hash identifier:          FaA7k8qxXWf8BgG6fwqbgIeuKmAozyMYfJeLUY/7LOA=
Subject key identifier:   0C:52:60:AF:31:D4:7C:D1:72:0A:E8:21:11:6D:BC:21:DD:D6:81:3F
Certificate issuer:       /CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
Certificate serial:       1A04AD
Authority key identifier: 2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/3145129b235760c88e9ebd4cfdf39f7b7d92992e.roa
Signing time:             Mon 24 Oct 2022 11:39:27 +0000
ROA not before:           Sat 24 Sep 2022 00:36:25 +0000
ROA not after:            Thu 26 Sep 2024 00:36:25 +0000
asID:                     263703
IP address blocks:        45.186.208.0/22 maxlen: 24
                          45.186.208.0/24 maxlen: 24
                          45.186.209.0/24 maxlen: 24
                          45.186.210.0/24 maxlen: 24
                          45.186.211.0/24 maxlen: 24
                          190.97.224.0/19 maxlen: 24
                          143.255.84.0/22 maxlen: 24
                          2803:7800::/32 maxlen: 48
                          2803:d760::/34 maxlen: 34
                          2803:d760:4000::/34 maxlen: 34
                          2803:d760:8000::/34 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1705133 (0x1a04ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
        Validity
            Not Before: Sep 24 00:36:25 2022 GMT
            Not After : Sep 26 00:36:25 2024 GMT
        Subject: CN=3145129b235760c88e9ebd4cfdf39f7b7d92992e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:89:0c:d6:08:d4:c0:7e:5e:e9:89:75:8b:9d:
                    31:26:4d:dd:41:d2:4d:4f:15:09:61:3c:cb:21:2f:
                    ef:13:d0:d2:1e:fe:ae:53:b0:e4:b8:9f:ce:c6:0e:
                    9f:d7:c5:60:ed:2d:c0:c1:1c:75:48:2b:ed:78:5e:
                    6b:27:1f:c3:47:f3:94:d4:87:ab:ac:73:9d:ba:c2:
                    9e:b1:dc:a3:28:b7:68:50:9b:31:96:e4:c0:26:21:
                    ad:aa:19:f9:51:9a:ca:d6:bf:61:85:e8:14:e3:26:
                    f5:fd:8e:fb:04:d2:eb:10:36:b9:10:01:03:a5:99:
                    f0:79:a6:fc:df:d6:c8:d0:75:c4:13:62:11:c6:2e:
                    96:32:af:1d:f0:6b:dd:66:aa:d3:f5:88:cd:8a:1a:
                    2f:e5:e8:37:1b:f7:85:8e:ac:18:8c:5c:3c:42:12:
                    e4:29:74:c6:35:b5:4c:5c:ba:dc:93:38:82:10:7c:
                    3f:4b:0f:5d:99:6a:fb:84:4c:91:e6:4b:5d:9f:01:
                    c6:11:f3:3a:b4:e1:32:ba:57:80:70:23:14:a8:6f:
                    c8:dd:71:7c:bb:05:69:ca:f7:a6:e4:1a:5d:be:a4:
                    f4:2e:81:77:78:47:54:f9:c5:c4:c6:26:a3:85:05:
                    02:e8:ce:99:b1:6e:fb:2a:6b:14:e9:64:d8:78:f5:
                    7e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:52:60:AF:31:D4:7C:D1:72:0A:E8:21:11:6D:BC:21:DD:D6:81:3F
            X509v3 Authority Key Identifier:
                keyid:2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/3145129b235760c88e9ebd4cfdf39f7b7d92992e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.208.0/22
                  143.255.84.0/22
                  190.97.224.0/19
                IPv6:
                  2803:7800::/32
                  2803:d760::-2803:d760:bfff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         19:cc:2f:60:04:53:71:fc:f7:86:86:e6:c2:95:c4:80:b8:f1:
         c0:f0:b9:e1:67:3f:43:37:b5:c9:41:c2:2a:35:0c:97:90:89:
         7b:dd:20:7b:43:3e:a9:e1:5b:61:7d:92:6f:f8:d2:e8:79:4c:
         61:14:b6:5c:3e:0f:72:5e:a3:9d:7c:3d:8b:c4:c0:d1:84:8c:
         1b:bc:f1:35:76:f6:0e:fb:7a:02:b8:ba:ed:d2:72:dc:c9:00:
         bf:af:a9:c5:4f:0e:1e:91:b3:37:23:24:a7:ec:b9:45:31:3e:
         b7:29:e3:cb:8e:e8:e1:72:02:57:06:34:26:ef:47:bd:36:40:
         48:85:f7:0a:14:8f:7a:ef:1a:3d:4d:32:2e:0a:a9:67:81:dc:
         80:52:b7:e4:6d:9c:d9:b2:cf:ce:c2:dc:63:d9:f2:21:0c:d4:
         95:5e:dc:7a:bf:5e:22:f1:f2:bb:1e:a1:21:8b:3b:57:f1:8e:
         22:ab:1e:42:77:a2:45:7f:dd:77:e1:5a:fb:e9:ce:86:6a:b1:
         ad:ad:d8:88:e3:9c:44:62:dd:09:b1:35:b6:1a:a8:d1:d3:c5:
         58:89:3b:63:12:43:3f:01:5e:cc:1d:f5:4a:65:71:30:a3:dd:
         0c:e4:de:0c:85:52:ff:51:89:ec:37:8b:1f:34:7b:56:62:83:
         11:c4:74:00
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIDGgStMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNj
OWJiYzYxMzA5Y2ViNmMyY2YyYTNlNDFmZGUzNWFiZWEyYmQyYzEwHhcNMjIwOTI0
MDAzNjI1WhcNMjQwOTI2MDAzNjI1WjAzMTEwLwYDVQQDEygzMTQ1MTI5YjIzNTc2
MGM4OGU5ZWJkNGNmZGYzOWY3YjdkOTI5OTJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAt4kM1gjUwH5e6Yl1i50xJk3dQdJNTxUJYTzLIS/vE9DSHv6u
U7DkuJ/Oxg6f18Vg7S3AwRx1SCvteF5rJx/DR/OU1IerrHOdusKesdyjKLdoUJsx
luTAJiGtqhn5UZrK1r9hhegU4yb1/Y77BNLrEDa5EAEDpZnweab839bI0HXEE2IR
xi6WMq8d8GvdZqrT9YjNihov5eg3G/eFjqwYjFw8QhLkKXTGNbVMXLrckziCEHw/
Sw9dmWr7hEyR5ktdnwHGEfM6tOEyuleAcCMUqG/I3XF8uwVpyvem5BpdvqT0LoF3
eEdU+cXExiajhQUC6M6ZsW77KmsU6WTYePV+IQIDAQABo4IChzCCAoMwHQYDVR0O
BBYEFAxSYK8x1HzRcgroIRFtvCHd1oE/MB8GA1UdIwQYMBaAFC1C7rgpUmiID+FH
G0E/H3YF0GfAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2M5YmJj
NjEzMDljZWI2YzJjZjJhM2U0MWZkZTM1YWJlYTJiZDJjMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvM2RjMjMwNTUtOTQ2Ni00OTVlLTk3OTgtMzdhMzNm
NTBjMTM3LzMxNDUxMjliMjM1NzYwYzg4ZTllYmQ0Y2ZkZjM5ZjdiN2Q5Mjk5MmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zZGMyMzA1NS05NDY2LTQ5NWUtOTc5OC0zN2Ez
M2Y1MGMxMzcvY2M5YmJjNjEzMDljZWI2YzJjZjJhM2U0MWZkZTM1YWJlYTJiZDJj
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBLBggrBgEFBQcBBwEB/wQ8
MDowGAQCAAEwEgMEAi260AMEAo//VAMEBb5h4DAeBAIAAjAYAwUAKAN4ADAPAwUF
KAPXYAMGBigD12CAMA0GCSqGSIb3DQEBCwUAA4IBAQAZzC9gBFNx/PeGhubClcSA
uPHA8LnhZz9DN7XJQcIqNQyXkIl73SB7Qz6p4VthfZJv+NLoeUxhFLZcPg9yXqOd
fD2LxMDRhIwbvPE1dvYO+3oCuLrt0nLcyQC/r6nFTw4ekbM3IySn7LlFMT63KePL
jujhcgJXBjQm70e9NkBIhfcKFI967xo9TTIuCqlngdyAUrfkbZzZss/Owtxj2fIh
DNSVXtx6v14i8fK7HqEhiztX8Y4iqx5Cd6JFf9134Vr76c6GarGtrdiI45xEYt0J
sTW2GqjR08VYiTtjEkM/AV7MHfVKZXEwo90M5N4MhVL/UYnsN4sfNHtWYoMRxHQA
-----END CERTIFICATE-----