Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/047bb7fdc8ad41098726c495677e90477ad5ef3f.roa
File:                     047bb7fdc8ad41098726c495677e90477ad5ef3f.roa (raw, json)
Hash identifier:          paqFp4zUpF9lfmkyzT2ynLzCPhKfnpiik+mEQHagrwg=
Subject key identifier:   00:E8:1C:2A:C0:09:AC:C1:3B:7E:26:A4:6C:F5:50:56:E9:0E:23:A5
Certificate issuer:       /CN=b0aa757766600ae92f780498bacfcff9762981a2
Certificate serial:       0D9384
Authority key identifier: 11:B2:C6:EC:B1:C2:E0:CA:EE:F2:27:05:A1:35:3B:85:FF:B0:E9:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0aa757766600ae92f780498bacfcff9762981a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/047bb7fdc8ad41098726c495677e90477ad5ef3f.roa
Signing time:             Wed 24 Mar 2021 22:52:14 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     262239
IP address blocks:        186.65.88.0/24 maxlen: 24
                          186.65.89.0/24 maxlen: 24
                          186.65.90.0/24 maxlen: 24
                          186.65.91.0/24 maxlen: 24
                          190.211.146.0/24 maxlen: 24
                          190.211.147.0/24 maxlen: 24
                          2803:9a00:bb::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889732 (0xd9384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0aa757766600ae92f780498bacfcff9762981a2
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=047bb7fdc8ad41098726c495677e90477ad5ef3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b7:ae:3d:c7:d5:29:fd:18:05:b9:8f:8c:75:
                    b9:9d:6f:83:ca:a6:a6:b4:36:73:10:53:b1:87:c0:
                    75:d7:49:9b:f1:d7:a4:33:bf:d7:b6:8b:ed:0f:d4:
                    ce:b2:f8:1b:e0:62:c2:fe:c5:fe:5a:4e:4c:c2:a7:
                    7e:ec:f8:40:fd:4a:e5:ea:2a:cb:42:ae:57:3b:73:
                    5a:59:54:28:b2:46:b5:ac:a0:23:66:fb:34:2d:b3:
                    16:3f:b9:0e:c3:d3:c5:51:94:a5:0c:e7:b0:c6:ff:
                    3e:e8:40:35:01:38:af:ac:8e:60:51:a1:c1:92:ad:
                    ff:c9:e3:6b:6b:ad:e8:5b:e1:f4:c4:20:3f:f7:ea:
                    a8:81:56:29:74:45:bd:f9:a5:22:dc:88:58:99:a0:
                    0a:0d:95:00:31:dc:af:2f:5e:23:f1:bd:2d:39:02:
                    77:1a:89:62:e4:da:3c:a1:a9:be:c7:f5:a8:77:ba:
                    79:a5:0e:e7:1f:47:f8:a3:36:81:95:9f:54:f0:ce:
                    29:f1:29:e6:cc:e7:39:40:d4:e1:f8:60:2b:0c:86:
                    97:6e:77:a7:e0:67:55:a2:be:4d:a6:bd:3a:6b:43:
                    59:13:92:50:b1:64:1e:32:c6:8c:77:f2:5d:fe:37:
                    92:41:1d:38:04:25:95:55:67:11:f7:7d:e0:8e:f4:
                    48:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E8:1C:2A:C0:09:AC:C1:3B:7E:26:A4:6C:F5:50:56:E9:0E:23:A5
            X509v3 Authority Key Identifier:
                keyid:11:B2:C6:EC:B1:C2:E0:CA:EE:F2:27:05:A1:35:3B:85:FF:B0:E9:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0aa757766600ae92f780498bacfcff9762981a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/047bb7fdc8ad41098726c495677e90477ad5ef3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/b0aa757766600ae92f780498bacfcff9762981a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.88.0/22
                  190.211.146.0/23
                IPv6:
                  2803:9a00:bb::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:cd:87:51:8f:ca:b7:03:c4:f4:17:2d:42:0a:43:64:82:e2:
         1e:ab:63:05:b5:b9:5a:ee:33:eb:e6:ac:5c:18:00:29:8c:94:
         77:69:d6:89:25:36:9f:6f:8e:de:bc:b1:0f:ba:38:8b:83:74:
         f6:4a:7c:80:18:bb:38:b2:5b:df:76:e3:e2:2d:80:79:96:6d:
         75:0e:68:1a:cc:52:1a:00:7a:d2:2e:d3:98:b2:d3:5f:52:26:
         49:2d:da:6f:64:4c:6d:f3:cd:7a:5a:75:90:3c:5c:bb:cd:6c:
         8c:8e:84:54:be:07:af:05:97:36:8f:02:cf:e8:86:04:e6:73:
         0e:dc:e8:63:a9:3f:d9:c2:e8:00:31:92:7f:03:a7:1b:a8:86:
         82:79:4a:b6:df:f6:35:db:92:b3:e0:a6:94:39:fc:63:ca:ad:
         32:da:0e:b5:fc:3e:9e:a1:f2:a3:77:42:7a:df:3d:8b:e8:19:
         d2:dd:91:46:3b:d2:4c:c2:18:84:3f:23:b4:b7:56:06:e3:80:
         ca:d4:38:69:e4:4d:1f:72:97:27:49:8a:18:e7:ec:99:84:22:
         a3:c0:03:f5:54:a4:0c:30:04:c8:00:da:39:33:9d:e2:3b:bf:
         87:24:23:53:a8:17:c4:5e:c0:51:93:c3:7d:4b:5c:d4:69:68:
         5f:a7:78:f8
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDDZOEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
YWE3NTc3NjY2MDBhZTkyZjc4MDQ5OGJhY2ZjZmY5NzYyOTgxYTIwHhcNMjEwMzI0
MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEygwNDdiYjdmZGM4YWQ0
MTA5ODcyNmM0OTU2NzdlOTA0NzdhZDVlZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxreuPcfVKf0YBbmPjHW5nW+DyqamtDZzEFOxh8B110mb8dek
M7/XtovtD9TOsvgb4GLC/sX+Wk5Mwqd+7PhA/Url6irLQq5XO3NaWVQoska1rKAj
Zvs0LbMWP7kOw9PFUZSlDOewxv8+6EA1ATivrI5gUaHBkq3/yeNra63oW+H0xCA/
9+qogVYpdEW9+aUi3IhYmaAKDZUAMdyvL14j8b0tOQJ3Goli5No8oam+x/Wod7p5
pQ7nH0f4ozaBlZ9U8M4p8SnmzOc5QNTh+GArDIaXbnen4GdVor5Npr06a0NZE5JQ
sWQeMsaMd/Jd/jeSQR04BCWVVWcR933gjvRItwIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFADoHCrACazBO34mpGz1UFbpDiOlMB8GA1UdIwQYMBaAFBGyxuyxwuDK7vIn
BaE1O4X/sOkjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjBhYTc1
Nzc2NjYwMGFlOTJmNzgwNDk4YmFjZmNmZjk3NjI5ODFhMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTY3ZGY4YzItZmNkNi00MTU4LWEwNmMtYWQyMDk2
MGVhMjA3LzA0N2JiN2ZkYzhhZDQxMDk4NzI2YzQ5NTY3N2U5MDQ3N2FkNWVmM2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NjdkZjhjMi1mY2Q2LTQxNTgtYTA2Yy1hZDIw
OTYwZWEyMDcvYjBhYTc1Nzc2NjYwMGFlOTJmNzgwNDk4YmFjZmNmZjk3NjI5ODFh
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwEgQCAAEwDAMEArpBWAMEAb7TkjAPBAIAAjAJAwcAKAOaAAC7MA0GCSqGSIb3
DQEBCwUAA4IBAQA3zYdRj8q3A8T0Fy1CCkNkguIeq2MFtbla7jPr5qxcGAApjJR3
adaJJTafb47evLEPujiLg3T2SnyAGLs4slvfduPiLYB5lm11DmgazFIaAHrSLtOY
stNfUiZJLdpvZExt8816WnWQPFy7zWyMjoRUvgevBZc2jwLP6IYE5nMO3OhjqT/Z
wugAMZJ/A6cbqIaCeUq23/Y125Kz4KaUOfxjyq0y2g61/D6eofKjd0J63z2L6BnS
3ZFGO9JMwhiEPyO0t1YG44DK1Dhp5E0fcpcnSYoY5+yZhCKjwAP1VKQMMATIANo5
M53iO7+HJCNTqBfEXsBRk8N9S1zUaWhfp3j4
-----END CERTIFICATE-----