Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/9df3d37afde7e35e222baaaeb2f039f928754baf.roa
File:                     9df3d37afde7e35e222baaaeb2f039f928754baf.roa (raw, json)
Hash identifier:          iXPqAyFOZ37JsbLxNIca0wbY11rs3CFpcDLDBpro+Bs=
Subject key identifier:   5D:77:10:05:6E:58:D2:71:CD:2E:94:FC:FC:C1:BB:C8:4D:A5:58:A8
Certificate issuer:       /CN=44185224cf7ca78dbccca01419f06c7cc212b495
Certificate serial:       18C583
Authority key identifier: DF:52:89:92:E5:35:F4:ED:70:12:21:8E:36:98:5F:3C:90:1E:32:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44185224cf7ca78dbccca01419f06c7cc212b495.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/9df3d37afde7e35e222baaaeb2f039f928754baf.roa
Signing time:             Fri 17 Jun 2022 17:51:30 +0000
ROA not before:           Fri 17 Jun 2022 03:00:00 +0000
ROA not after:            Mon 17 Jun 2024 03:00:00 +0000
asID:                     47869
IP address blocks:        181.225.136.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1623427 (0x18c583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44185224cf7ca78dbccca01419f06c7cc212b495
        Validity
            Not Before: Jun 17 03:00:00 2022 GMT
            Not After : Jun 17 03:00:00 2024 GMT
        Subject: CN=9df3d37afde7e35e222baaaeb2f039f928754baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5f:bf:37:0e:70:bf:bf:a1:db:2a:1a:1b:bb:
                    57:fb:bd:73:d8:f6:23:08:2a:15:2f:e3:a4:fd:7d:
                    a1:1a:57:43:c5:b1:78:50:e9:7a:6d:48:50:89:be:
                    ae:e1:4f:ed:9e:ce:a0:eb:94:c7:6c:2f:1e:30:fa:
                    7d:d1:41:db:c6:2b:45:7f:30:9c:78:76:80:ef:62:
                    b5:1a:d1:79:e2:19:00:a4:b4:73:81:a6:ba:72:4e:
                    7f:38:12:a6:b3:d1:e5:5b:52:2c:8e:a4:82:04:da:
                    eb:c8:b9:c2:9e:b4:58:20:1a:0c:89:68:48:a7:28:
                    33:f5:89:07:84:06:e9:67:a3:d9:70:8d:27:e0:0f:
                    49:d0:82:bc:e6:0f:c5:af:a8:ef:a7:65:ef:91:94:
                    2c:d5:97:e9:8d:64:31:8d:55:77:b7:32:53:3d:08:
                    69:fc:48:9b:4c:0f:97:7d:57:04:2e:27:cd:9f:e0:
                    2f:4d:ba:0d:6c:2e:a0:71:97:7f:06:25:31:38:2a:
                    19:d4:4f:2d:ea:f8:e6:03:fb:8d:c5:01:20:f5:b2:
                    34:30:7a:c3:d7:b0:67:dd:76:fb:f1:87:97:d8:15:
                    49:a7:36:b5:dd:e8:b2:e3:e1:14:f2:e5:eb:7f:a9:
                    42:fa:1b:4e:04:28:b9:0a:79:8f:ff:9d:a4:62:22:
                    9e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:77:10:05:6E:58:D2:71:CD:2E:94:FC:FC:C1:BB:C8:4D:A5:58:A8
            X509v3 Authority Key Identifier:
                keyid:DF:52:89:92:E5:35:F4:ED:70:12:21:8E:36:98:5F:3C:90:1E:32:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44185224cf7ca78dbccca01419f06c7cc212b495.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/9df3d37afde7e35e222baaaeb2f039f928754baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/44185224cf7ca78dbccca01419f06c7cc212b495.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:40:d5:aa:c6:98:05:fa:54:99:a5:48:aa:70:8b:33:9c:a0:
         c2:c0:6b:70:f0:ca:98:86:60:91:69:f1:b8:42:13:10:6c:c2:
         0d:f7:1f:76:32:a0:4b:e5:07:5a:1e:77:16:70:fb:da:f6:53:
         43:19:3a:79:da:48:e7:e7:57:ee:91:84:33:7b:23:31:3d:69:
         a8:cb:a3:e3:d0:61:93:c9:5e:58:90:73:0b:a9:70:d0:58:65:
         0a:e2:c1:0e:20:45:81:23:fa:e1:30:2a:c3:f4:4d:aa:22:ef:
         74:a4:5f:9e:bb:6d:7a:5f:d9:c7:55:a7:f4:6d:69:d2:19:93:
         68:13:c6:02:e4:8e:92:ab:d5:c5:92:8b:0a:a6:9d:aa:37:1e:
         da:34:a1:b7:43:ce:f7:89:7e:02:6e:98:06:59:5b:0c:81:b9:
         0b:33:70:ce:0f:42:37:2c:13:61:68:e5:19:28:83:19:b4:4c:
         36:8a:39:54:a8:b2:7f:a0:1b:9e:36:a0:a8:59:d0:53:d0:85:
         46:b8:61:2a:03:86:eb:19:2c:60:a4:29:8a:29:85:47:bc:0b:
         8d:c6:25:27:89:e4:4e:2e:7b:9b:78:44:22:12:ab:0c:04:a4:
         1c:27:bd:b5:ec:e5:e9:ad:5b:39:0f:20:95:bf:df:7f:7f:57:
         30:f8:44:de
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGMWDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ0
MTg1MjI0Y2Y3Y2E3OGRiY2NjYTAxNDE5ZjA2YzdjYzIxMmI0OTUwHhcNMjIwNjE3
MDMwMDAwWhcNMjQwNjE3MDMwMDAwWjAzMTEwLwYDVQQDEyg5ZGYzZDM3YWZkZTdl
MzVlMjIyYmFhYWViMmYwMzlmOTI4NzU0YmFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjl+/Nw5wv7+h2yoaG7tX+71z2PYjCCoVL+Ok/X2hGldDxbF4
UOl6bUhQib6u4U/tns6g65THbC8eMPp90UHbxitFfzCceHaA72K1GtF54hkApLRz
gaa6ck5/OBKms9HlW1IsjqSCBNrryLnCnrRYIBoMiWhIpygz9YkHhAbpZ6PZcI0n
4A9J0IK85g/Fr6jvp2XvkZQs1ZfpjWQxjVV3tzJTPQhp/EibTA+XfVcELifNn+Av
TboNbC6gcZd/BiUxOCoZ1E8t6vjmA/uNxQEg9bI0MHrD17Bn3Xb78YeX2BVJpza1
3eiy4+EU8uXrf6lC+htOBCi5CnmP/52kYiKetwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFF13EAVuWNJxzS6U/PzBu8hNpVioMB8GA1UdIwQYMBaAFN9SiZLlNfTtcBIh
jjaYXzyQHjIgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDQxODUy
MjRjZjdjYTc4ZGJjY2NhMDE0MTlmMDZjN2NjMjEyYjQ5NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGExYTE2NTItNTQ5OS00ODdmLThiOTctMWExMmVm
MjdkOWQ2LzlkZjNkMzdhZmRlN2UzNWUyMjJiYWFhZWIyZjAzOWY5Mjg3NTRiYWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80YTFhMTY1Mi01NDk5LTQ4N2YtOGI5Ny0xYTEy
ZWYyN2Q5ZDYvNDQxODUyMjRjZjdjYTc4ZGJjY2NhMDE0MTlmMDZjN2NjMjEyYjQ5
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArXhiDANBgkqhkiG9w0BAQsFAAOCAQEAF0DVqsaYBfpUmaVI
qnCLM5ygwsBrcPDKmIZgkWnxuEITEGzCDfcfdjKgS+UHWh53FnD72vZTQxk6edpI
5+dX7pGEM3sjMT1pqMuj49Bhk8leWJBzC6lw0FhlCuLBDiBFgSP64TAqw/RNqiLv
dKRfnrttel/Zx1Wn9G1p0hmTaBPGAuSOkqvVxZKLCqadqjce2jSht0PO94l+Am6Y
BllbDIG5CzNwzg9CNywTYWjlGSiDGbRMNoo5VKiyf6AbnjagqFnQU9CFRrhhKgOG
6xksYKQpiimFR7wLjcYlJ4nkTi57m3hEIhKrDASkHCe9tezl6a1bOQ8glb/ff39X
MPhE3g==
-----END CERTIFICATE-----