Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/552354e3-a80c-4580-8cbf-0f6562928048/02345f8cb9319f6081284f948dcf8a1757edfb28.roa
File:                     02345f8cb9319f6081284f948dcf8a1757edfb28.roa (raw, json)
Hash identifier:          M/Nh7PaoaNq9bl14JLMrkRYEfnLufirGw1JSfot8uUs=
Subject key identifier:   25:60:06:CF:FF:F9:26:D5:25:FE:A6:3C:BC:F4:78:FA:C9:B5:5F:0B
Certificate issuer:       /CN=ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61
Certificate serial:       0FBCE3
Authority key identifier: 05:61:57:E5:97:A2:CA:FD:23:C5:CC:DE:4A:3A:9F:B9:13:4F:B9:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/552354e3-a80c-4580-8cbf-0f6562928048/02345f8cb9319f6081284f948dcf8a1757edfb28.roa
Signing time:             Sat 19 Jun 2021 00:53:54 +0000
ROA not before:           Fri 18 Jun 2021 03:00:00 +0000
ROA not after:            Sun 18 Jun 2023 03:00:00 +0000
asID:                     52495
IP address blocks:        190.103.64.0/20 maxlen: 22
                          190.109.224.0/19 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1031395 (0xfbce3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61
        Validity
            Not Before: Jun 18 03:00:00 2021 GMT
            Not After : Jun 18 03:00:00 2023 GMT
        Subject: CN=02345f8cb9319f6081284f948dcf8a1757edfb28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:6b:36:37:54:79:21:6b:d6:57:cb:9e:f0:
                    b9:25:6b:8a:9c:b6:91:e6:00:e1:45:ac:bc:db:a1:
                    63:0c:ca:7e:b2:46:78:43:2b:c5:26:8b:ad:00:6d:
                    51:54:ef:0a:f8:f3:46:62:2f:24:b8:44:e8:78:84:
                    65:17:b6:08:d2:bd:1e:0b:6d:ad:fa:7c:12:65:5c:
                    7a:ba:13:c1:2b:c1:d2:8e:a4:85:32:92:12:d6:49:
                    71:e5:51:98:14:7e:8d:54:ea:3c:15:e4:4e:a7:d8:
                    bb:b9:41:d1:19:c6:de:cd:4c:b8:86:f8:b3:e4:d7:
                    92:a0:ea:5e:b5:97:4c:f9:8c:50:8b:ad:2a:ed:c7:
                    3d:8b:0e:22:bf:f9:6c:6b:1a:65:e9:bb:38:92:89:
                    bd:10:4d:91:b9:d7:8d:7a:f2:eb:92:97:63:c0:37:
                    1b:e6:b7:10:c3:f8:fb:5b:87:ab:be:3e:a0:ad:32:
                    de:28:40:fc:36:7d:cf:09:b4:a3:19:c5:a5:43:2c:
                    e5:3f:f1:5d:e8:42:bb:13:cf:32:75:41:9f:e0:5e:
                    91:b0:32:a5:5b:b1:33:83:73:80:da:d5:61:40:61:
                    b9:db:93:d0:0d:c9:19:60:1b:2d:4b:4d:a8:49:2b:
                    16:45:e3:a9:f8:f0:13:ba:e1:db:be:56:40:f6:8e:
                    e2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:60:06:CF:FF:F9:26:D5:25:FE:A6:3C:BC:F4:78:FA:C9:B5:5F:0B
            X509v3 Authority Key Identifier:
                keyid:05:61:57:E5:97:A2:CA:FD:23:C5:CC:DE:4A:3A:9F:B9:13:4F:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/552354e3-a80c-4580-8cbf-0f6562928048/02345f8cb9319f6081284f948dcf8a1757edfb28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/552354e3-a80c-4580-8cbf-0f6562928048/ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.64.0/20
                  190.109.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:eb:2d:ed:d9:b6:81:12:74:9a:55:70:e1:d2:87:97:c6:67:
         7a:ed:13:e8:4a:41:32:61:ed:70:57:2c:48:52:c1:0c:e6:9a:
         15:10:4e:99:d3:d9:66:2b:85:79:3b:79:4e:b8:55:e6:08:6d:
         79:e7:79:84:1f:28:9b:97:eb:a1:c2:a8:db:43:07:5f:9f:56:
         27:96:89:c6:fa:ec:2a:29:d7:72:a3:2f:77:1a:a8:e9:38:83:
         c8:2c:19:0d:7c:06:a7:06:0e:8d:79:15:31:ed:7b:e4:65:eb:
         9d:fd:ed:d0:80:fe:ff:2f:28:b2:95:90:e3:7b:2c:b7:60:e3:
         ee:d9:36:73:a5:37:44:13:83:43:44:27:9a:27:69:bc:31:83:
         07:f7:61:eb:0e:24:81:43:f5:b1:3a:70:5f:29:b9:38:fb:0f:
         56:d4:5c:5a:4d:39:a5:fa:ec:06:85:f3:f1:8e:ba:3d:4d:56:
         d6:7d:d7:70:27:70:f2:94:cb:53:4f:5f:eb:61:50:f2:67:9f:
         84:45:72:cb:ab:94:60:db:bd:ba:a6:d6:3b:b8:82:eb:91:42:
         6d:45:08:e8:b9:47:f0:f2:88:cd:02:bb:8a:4e:08:b1:0d:23:
         50:b8:b2:5e:80:d8:28:6a:19:d8:98:4d:a0:1d:14:37:c3:2a:
         64:70:95:18
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDD7zjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
N2RjNmE0NmFjODAwM2MwNmM1ZGNjMWM0NGU1ZTMzNGZjYzRhNjEwHhcNMjEwNjE4
MDMwMDAwWhcNMjMwNjE4MDMwMDAwWjAzMTEwLwYDVQQDEygwMjM0NWY4Y2I5MzE5
ZjYwODEyODRmOTQ4ZGNmOGExNzU3ZWRmYjI4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAslxrNjdUeSFr1lfLnvC5JWuKnLaR5gDhRay826FjDMp+skZ4
QyvFJoutAG1RVO8K+PNGYi8kuEToeIRlF7YI0r0eC22t+nwSZVx6uhPBK8HSjqSF
MpIS1klx5VGYFH6NVOo8FeROp9i7uUHRGcbezUy4hviz5NeSoOpetZdM+YxQi60q
7cc9iw4iv/lsaxpl6bs4kom9EE2RudeNevLrkpdjwDcb5rcQw/j7W4ervj6grTLe
KED8Nn3PCbSjGcWlQyzlP/Fd6EK7E88ydUGf4F6RsDKlW7Ezg3OA2tVhQGG525PQ
DckZYBstS02oSSsWReOp+PATuuHbvlZA9o7i4QIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFCVgBs//+SbVJf6mPLz0ePrJtV8LMB8GA1UdIwQYMBaAFAVhV+WXosr9I8XM
3ko6n7kTT7nQMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWI3ZGM2
YTQ2YWM4MDAzYzA2YzVkY2MxYzQ0ZTVlMzM0ZmNjNGE2MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTUyMzU0ZTMtYTgwYy00NTgwLThjYmYtMGY2NTYy
OTI4MDQ4LzAyMzQ1ZjhjYjkzMTlmNjA4MTI4NGY5NDhkY2Y4YTE3NTdlZGZiMjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NTIzNTRlMy1hODBjLTQ1ODAtOGNiZi0wZjY1
NjI5MjgwNDgvYWI3ZGM2YTQ2YWM4MDAzYzA2YzVkY2MxYzQ0ZTVlMzM0ZmNjNGE2
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEBL5nQAMEBb5t4DANBgkqhkiG9w0BAQsFAAOCAQEAVOst7dm2
gRJ0mlVw4dKHl8Zneu0T6EpBMmHtcFcsSFLBDOaaFRBOmdPZZiuFeTt5TrhV5ght
eed5hB8om5frocKo20MHX59WJ5aJxvrsKinXcqMvdxqo6TiDyCwZDXwGpwYOjXkV
Me175GXrnf3t0ID+/y8ospWQ43sst2Dj7tk2c6U3RBODQ0QnmidpvDGDB/dh6w4k
gUP1sTpwXym5OPsPVtRcWk05pfrsBoXz8Y66PU1W1n3XcCdw8pTLU09f62FQ8mef
hEVyy6uUYNu9uqbWO7iC65FCbUUI6LlH8PKIzQK7ik4IsQ0jULiyXoDYKGoZ2JhN
oB0UN8MqZHCVGA==
-----END CERTIFICATE-----