Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e8c68e9-ce58-4583-bfb1-4a7056ed8fec/8bdc34e8d2fa57facaaebd7898388611c1b1fc18.roa
File:                     8bdc34e8d2fa57facaaebd7898388611c1b1fc18.roa (raw, json)
Hash identifier:          cS9FogpmROEV4J8baewK6MftvswkSFTL7CvKe6E3oA4=
Subject key identifier:   7B:D5:68:C5:AC:9F:4F:6D:9C:23:15:D8:3F:0B:63:93:BE:16:EC:0A
Certificate issuer:       /CN=8a1fb2a948dd0ade62e316b2f9231b002d40088e
Certificate serial:       09AAE3
Authority key identifier: 40:F5:A6:AF:1D:7A:85:94:04:37:DA:93:ED:C9:6C:5B:AA:4C:27:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a1fb2a948dd0ade62e316b2f9231b002d40088e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e8c68e9-ce58-4583-bfb1-4a7056ed8fec/8bdc34e8d2fa57facaaebd7898388611c1b1fc18.roa
Signing time:             Wed 24 Mar 2021 22:52:10 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     269912
IP address blocks:        187.62.110.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633571 (0x9aae3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a1fb2a948dd0ade62e316b2f9231b002d40088e
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=8bdc34e8d2fa57facaaebd7898388611c1b1fc18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a7:01:82:99:0b:c2:d7:7b:df:70:25:a6:f7:
                    84:b9:c5:38:e8:4b:87:83:00:02:98:83:59:13:f0:
                    81:75:5d:26:b7:35:46:d0:88:62:93:fa:78:7e:ad:
                    9b:01:80:68:b8:c7:e7:3f:92:5a:d8:9f:3c:9b:1c:
                    61:11:3c:9f:77:3c:0b:d9:b3:09:a7:92:bd:28:4b:
                    5b:e1:69:fe:52:b4:b6:1a:f0:09:c4:05:99:e7:56:
                    6c:e9:ac:07:e8:5f:57:58:66:79:20:e4:ff:4b:f9:
                    c8:2a:da:05:bd:fe:5d:66:88:5c:e9:62:b7:c5:7c:
                    df:b2:bf:50:fd:73:02:8f:b5:b0:22:5f:b1:fd:12:
                    ee:1a:cc:5e:8d:3f:46:83:93:10:c2:b1:93:00:7c:
                    da:4a:08:27:58:f8:6e:b5:6a:f1:a8:9e:aa:9b:54:
                    a3:fa:5a:b9:94:6d:50:8b:0b:57:da:cf:9a:3c:b7:
                    4b:ea:4e:90:54:2b:70:c7:f6:df:c9:7f:1f:03:1d:
                    52:36:7f:1f:01:b4:7b:93:d7:fd:91:1c:5a:13:2e:
                    71:db:99:cc:f9:57:38:f0:f4:7d:0a:27:14:58:1b:
                    c0:50:fa:16:f6:e3:9b:3f:29:d6:3b:3d:61:29:70:
                    89:8f:ac:05:69:4a:cd:31:9e:d0:f0:40:31:7a:05:
                    82:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D5:68:C5:AC:9F:4F:6D:9C:23:15:D8:3F:0B:63:93:BE:16:EC:0A
            X509v3 Authority Key Identifier:
                keyid:40:F5:A6:AF:1D:7A:85:94:04:37:DA:93:ED:C9:6C:5B:AA:4C:27:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a1fb2a948dd0ade62e316b2f9231b002d40088e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e8c68e9-ce58-4583-bfb1-4a7056ed8fec/8bdc34e8d2fa57facaaebd7898388611c1b1fc18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e8c68e9-ce58-4583-bfb1-4a7056ed8fec/8a1fb2a948dd0ade62e316b2f9231b002d40088e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:96:31:6a:3c:93:46:6a:62:d6:b0:cc:d8:5e:4e:e4:29:e7:
         23:6b:a5:ab:68:43:a6:7b:28:a2:36:2d:52:8d:75:48:d6:6f:
         12:00:be:15:ed:5e:c1:c3:6e:db:dc:30:70:45:23:66:cf:7f:
         a7:55:08:49:d3:8e:5c:96:1f:6d:4d:3f:5b:0d:dc:04:b9:74:
         d5:b7:85:9d:9b:eb:7b:8d:df:df:2c:48:26:68:80:35:28:c1:
         66:19:c0:79:38:b1:54:9e:5f:e0:ba:ba:2f:a4:92:46:36:de:
         2e:5d:36:b5:25:fc:ee:f0:39:d3:93:b2:2f:c2:50:8b:2f:cb:
         6f:1b:3e:44:45:f0:32:df:41:30:c9:7c:28:e2:c9:4f:fc:18:
         8d:aa:4a:54:87:fe:8f:8f:8c:99:a4:98:73:5c:5f:99:37:bc:
         bd:72:35:22:d5:2c:1e:d8:c1:92:ec:48:ac:57:72:3e:62:17:
         2d:51:d4:31:40:ca:38:ec:13:17:49:b2:fa:5a:e3:17:4e:47:
         cf:fc:e4:16:02:1c:fe:d9:fe:02:6f:ee:41:da:f7:82:43:ed:
         07:3d:4c:aa:2e:b0:12:99:df:05:27:3e:7a:dd:c1:27:67:9f:
         67:4c:6d:8c:3a:f8:17:dd:58:8a:64:a7:aa:22:e4:3d:6c:d6:
         27:3b:38:f6
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCarjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhh
MWZiMmE5NDhkZDBhZGU2MmUzMTZiMmY5MjMxYjAwMmQ0MDA4OGUwHhcNMjEwMzI0
MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEyg4YmRjMzRlOGQyZmE1
N2ZhY2FhZWJkNzg5ODM4ODYxMWMxYjFmYzE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh6cBgpkLwtd733AlpveEucU46EuHgwACmINZE/CBdV0mtzVG
0Ihik/p4fq2bAYBouMfnP5Ja2J88mxxhETyfdzwL2bMJp5K9KEtb4Wn+UrS2GvAJ
xAWZ51Zs6awH6F9XWGZ5IOT/S/nIKtoFvf5dZohc6WK3xXzfsr9Q/XMCj7WwIl+x
/RLuGsxejT9Gg5MQwrGTAHzaSggnWPhutWrxqJ6qm1Sj+lq5lG1QiwtX2s+aPLdL
6k6QVCtwx/bfyX8fAx1SNn8fAbR7k9f9kRxaEy5x25nM+Vc48PR9CicUWBvAUPoW
9uObPynWOz1hKXCJj6wFaUrNMZ7Q8EAxegWCcQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHvVaMWsn09tnCMV2D8LY5O+FuwKMB8GA1UdIwQYMBaAFED1pq8deoWUBDfa
k+3JbFuqTCfZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGExZmIy
YTk0OGRkMGFkZTYyZTMxNmIyZjkyMzFiMDAyZDQwMDg4ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGU4YzY4ZTktY2U1OC00NTgzLWJmYjEtNGE3MDU2
ZWQ4ZmVjLzhiZGMzNGU4ZDJmYTU3ZmFjYWFlYmQ3ODk4Mzg4NjExYzFiMWZjMTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZThjNjhlOS1jZTU4LTQ1ODMtYmZiMS00YTcw
NTZlZDhmZWMvOGExZmIyYTk0OGRkMGFkZTYyZTMxNmIyZjkyMzFiMDAyZDQwMDg4
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAbs+bjANBgkqhkiG9w0BAQsFAAOCAQEAPZYxajyTRmpi1rDM
2F5O5CnnI2ulq2hDpnsoojYtUo11SNZvEgC+Fe1ewcNu29wwcEUjZs9/p1UISdOO
XJYfbU0/Ww3cBLl01beFnZvre43f3yxIJmiANSjBZhnAeTixVJ5f4Lq6L6SSRjbe
Ll02tSX87vA505OyL8JQiy/Lbxs+REXwMt9BMMl8KOLJT/wYjapKVIf+j4+MmaSY
c1xfmTe8vXI1ItUsHtjBkuxIrFdyPmIXLVHUMUDKOOwTF0my+lrjF05Hz/zkFgIc
/tn+Am/uQdr3gkPtBz1Mqi6wEpnfBSc+et3BJ2efZ0xtjDr4F91YimSnqiLkPWzW
Jzs49g==
-----END CERTIFICATE-----