Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/06704e7aff4c53cff705509e22b7b8c0ead0828d.roa
File:                     06704e7aff4c53cff705509e22b7b8c0ead0828d.roa (raw, json)
Hash identifier:          b3WBZ7gGslAfAAPZSSaE+WgyX2TEH1hdL0kK6fU2uXA=
Subject key identifier:   7C:60:DA:84:0D:35:6C:FC:0F:9F:6E:0B:FC:81:BA:FA:DD:A5:5F:5C
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       109544
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/06704e7aff4c53cff705509e22b7b8c0ead0828d.roa
Signing time:             Tue 24 Oct 2023 16:01:04 +0000
ROA not before:           Tue 24 Oct 2023 16:00:56 +0000
ROA not after:            Tue 24 Oct 2028 16:00:56 +0000
asID:                     22927
IP address blocks:        181.20.0.0/14 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1086788 (0x109544)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Oct 24 16:00:56 2023 GMT
            Not After : Oct 24 16:00:56 2028 GMT
        Subject: CN=06704e7aff4c53cff705509e22b7b8c0ead0828d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d0:91:08:af:43:f0:ce:af:fe:24:10:7e:63:
                    54:23:cf:d4:99:f2:04:2c:ae:bc:ff:24:4a:19:8f:
                    30:c6:fa:f8:73:5a:77:91:a8:fa:9d:27:79:e5:36:
                    6b:87:3b:26:d4:6d:7a:7d:20:73:76:d9:35:d2:76:
                    a3:b0:6a:3a:c3:45:68:de:5c:b0:8a:74:84:46:b7:
                    b8:fc:89:3a:4a:ed:96:a3:17:57:b7:f5:29:af:3b:
                    f2:52:3e:36:11:df:16:58:cc:b2:1b:2d:05:19:3c:
                    d5:78:39:dc:52:6a:a4:73:2a:2b:da:d6:ab:e3:d3:
                    04:1c:da:bf:9c:17:21:2c:de:7b:d7:4a:9b:aa:c3:
                    3e:97:58:03:2c:6f:44:6d:b2:ba:3c:48:e5:d2:63:
                    a1:a7:4e:c5:86:f1:cf:5c:29:de:86:ca:07:38:77:
                    fd:26:bc:89:a5:a6:df:86:60:c4:2c:1b:dc:d4:d8:
                    39:3c:0c:18:58:81:f7:35:e0:82:e7:50:49:17:d8:
                    40:35:ee:15:45:ea:b0:7a:f4:f3:8a:fd:d3:23:0c:
                    9a:5d:fb:fc:90:b4:b6:35:8f:67:6d:24:58:64:26:
                    12:0a:0e:ce:73:95:11:42:c5:f3:d3:39:f0:30:5d:
                    ce:43:7a:d8:71:76:8e:3f:e8:fc:49:f9:49:db:a9:
                    aa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:60:DA:84:0D:35:6C:FC:0F:9F:6E:0B:FC:81:BA:FA:DD:A5:5F:5C
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/06704e7aff4c53cff705509e22b7b8c0ead0828d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.20.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         6f:fe:8c:bf:6f:6c:51:8c:5a:4c:32:97:c9:63:78:54:57:e8:
         c1:10:cc:ff:43:50:f9:7b:3b:0b:2e:8b:99:4a:30:74:50:96:
         c9:16:ce:f5:f2:2a:41:0b:af:b7:16:ce:e6:96:65:90:18:a9:
         0b:12:d3:ff:48:3d:ff:f9:b6:da:1e:99:bf:57:4b:5b:f8:d1:
         22:fa:2c:f5:f5:7e:1e:2f:75:d6:d0:9b:80:26:20:25:05:d4:
         bd:f5:53:62:39:70:cc:32:ea:f5:33:c1:5f:01:58:39:b2:6f:
         88:ed:60:8d:23:de:81:f5:6e:77:8f:a9:17:c7:13:b6:1e:d6:
         6f:b8:2e:f8:26:3a:b5:29:bc:ce:73:ac:0b:0c:a3:e3:4d:ca:
         e1:98:86:ed:a4:1d:35:fb:34:bb:b5:83:c1:76:65:59:c5:1e:
         5c:85:5d:e9:a6:83:b6:02:3b:f3:60:7e:87:21:a7:ad:37:a7:
         62:89:a0:e1:a1:97:21:85:d7:cb:d3:fb:1c:66:80:02:40:30:
         26:ef:e8:d3:da:5a:33:de:23:96:c5:b2:99:a6:3d:4d:3f:60:
         3c:51:97:8a:f9:dc:9a:4a:67:c3:75:67:7a:03:90:5c:89:54:
         8b:cf:14:1e:fa:63:e2:30:40:ed:50:52:af:fe:fa:9e:e0:ff:
         7a:8a:7d:74
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDEJVEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmI0ZDNhNmRkNWU2NDlhNjU1NGM0ODE3Y2UwZWQyNzc0MjkxMzYwHhcNMjMxMDI0
MTYwMDU2WhcNMjgxMDI0MTYwMDU2WjAzMTEwLwYDVQQDEygwNjcwNGU3YWZmNGM1
M2NmZjcwNTUwOWUyMmI3YjhjMGVhZDA4MjhkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAndCRCK9D8M6v/iQQfmNUI8/UmfIELK68/yRKGY8wxvr4c1p3
kaj6nSd55TZrhzsm1G16fSBzdtk10najsGo6w0Vo3lywinSERre4/Ik6Su2WoxdX
t/UprzvyUj42Ed8WWMyyGy0FGTzVeDncUmqkcyor2tar49MEHNq/nBchLN5710qb
qsM+l1gDLG9EbbK6PEjl0mOhp07FhvHPXCnehsoHOHf9JryJpabfhmDELBvc1Ng5
PAwYWIH3NeCC51BJF9hANe4VReqwevTziv3TIwyaXfv8kLS2NY9nbSRYZCYSCg7O
c5URQsXz0znwMF3OQ3rYcXaOP+j8SflJ26mqTwIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFHxg2oQNNWz8D59uC/yBuvrdpV9cMB8GA1UdIwQYMBaAFHZ/Qk1INAbEIOXf
Gb6+mT9yWve2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiYjRk
M2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2LzA2NzA0ZTdhZmY0YzUzY2ZmNzA1NTA5ZTIyYjdiOGMwZWFkMDgyOGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvYmZiYjRkM2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDArUUMA0GCSqGSIb3DQEBCwUAA4IBAQBv/oy/b2xRjFpMMpfJ
Y3hUV+jBEMz/Q1D5ezsLLouZSjB0UJbJFs718ipBC6+3Fs7mlmWQGKkLEtP/SD3/
+bbaHpm/V0tb+NEi+iz19X4eL3XW0JuAJiAlBdS99VNiOXDMMur1M8FfAVg5sm+I
7WCNI96B9W53j6kXxxO2HtZvuC74Jjq1KbzOc6wLDKPjTcrhmIbtpB01+zS7tYPB
dmVZxR5chV3ppoO2AjvzYH6HIaetN6diiaDhoZchhdfL0/scZoACQDAm7+jT2loz
3iOWxbKZpj1NP2A8UZeK+dyaSmfDdWd6A5BciVSLzxQe+mPiMEDtUFKv/vqe4P96
in10
-----END CERTIFICATE-----