Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/3ba248e896b5f8459ca85f0a16e6caa243d13c9d.roa
File:                     3ba248e896b5f8459ca85f0a16e6caa243d13c9d.roa (raw, json)
Hash identifier:          JVKJgXxkveCxYV0f8WKUEbzmGJs2FIZwRpqqtmbHMSM=
Subject key identifier:   2F:50:FC:4B:AD:9E:F9:69:48:4E:0D:7B:2C:92:31:79:C6:AB:F8:1A
Certificate issuer:       /CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
Certificate serial:       1053CD
Authority key identifier: F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/3ba248e896b5f8459ca85f0a16e6caa243d13c9d.roa
Signing time:             Tue 20 Jul 2021 05:03:00 +0000
ROA not before:           Tue 20 Jul 2021 03:00:00 +0000
ROA not after:            Thu 20 Jul 2023 03:00:00 +0000
asID:                     264668
IP address blocks:        45.70.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070029 (0x1053cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
        Validity
            Not Before: Jul 20 03:00:00 2021 GMT
            Not After : Jul 20 03:00:00 2023 GMT
        Subject: CN=3ba248e896b5f8459ca85f0a16e6caa243d13c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5d:42:82:2e:67:aa:68:05:b0:a2:f0:ad:99:
                    f2:50:d9:29:b4:f3:d5:03:cd:4a:5f:6f:fb:55:1e:
                    ed:f7:0d:ed:af:2d:14:9a:34:a1:b5:53:09:78:a1:
                    29:b7:36:3e:1b:fa:03:be:e6:6e:7b:60:f3:f5:3f:
                    dc:3f:ba:9f:11:cc:31:88:3b:61:12:85:0f:d8:e4:
                    b6:3f:c5:12:40:6c:4f:e7:59:f7:c7:d4:2e:8d:d1:
                    da:1d:60:c4:97:98:ed:50:94:d2:ac:71:18:40:ca:
                    5f:4d:53:8b:5c:26:02:d1:7d:fe:ff:7e:f2:66:fc:
                    2f:98:aa:4e:0e:ce:ec:bc:20:8f:7e:b3:86:b1:35:
                    55:4c:8c:61:0a:cf:6a:0c:43:d7:a0:89:3c:e7:83:
                    74:a1:f7:58:c4:9c:a4:d1:8a:5e:32:44:28:07:f4:
                    84:8a:be:db:e9:d9:06:1f:d0:44:0b:75:26:a9:f0:
                    19:e8:e2:8e:8f:8b:77:32:71:17:ef:66:d1:a9:e2:
                    50:66:25:ec:ec:73:c5:88:6c:d0:2a:d0:84:7e:51:
                    59:bb:4f:fb:23:bd:e8:99:bd:75:9b:5a:4c:7a:a2:
                    55:d0:8c:4e:49:29:80:a0:6d:c3:d3:65:51:74:7b:
                    9a:13:6d:6f:ba:94:1f:bd:3a:94:45:e9:b3:e5:41:
                    2d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:50:FC:4B:AD:9E:F9:69:48:4E:0D:7B:2C:92:31:79:C6:AB:F8:1A
            X509v3 Authority Key Identifier:
                keyid:F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/3ba248e896b5f8459ca85f0a16e6caa243d13c9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/19bdf7eba9512ec4f3179e720563bd1d6965a593.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:75:1a:20:48:11:d2:2b:c9:c9:7f:2c:e4:9a:0a:9c:6b:e0:
         b5:67:73:2d:09:72:05:d5:82:09:76:77:5a:67:8f:ba:75:0f:
         80:45:a3:e4:4e:ee:53:50:38:da:2c:b8:a5:8f:6a:e5:7c:74:
         10:a9:c9:30:b3:f7:df:77:4a:5f:d7:17:48:d3:64:10:bc:80:
         0a:eb:ef:cd:28:2f:02:70:86:d3:89:89:fd:02:9c:57:ec:84:
         23:33:3f:c1:82:17:6b:2a:88:df:02:04:9f:a3:20:ff:95:4b:
         78:93:63:97:60:68:73:61:2a:2c:55:68:c2:2f:a1:d6:71:e5:
         73:ea:d7:40:5b:d2:c3:0e:0b:21:be:18:1f:a5:70:e2:88:9c:
         fb:9e:c8:9e:df:43:f2:2a:d3:ee:c2:a4:3b:fa:73:1b:ed:b1:
         b6:45:46:29:b5:08:50:58:13:75:e5:e4:a6:9b:b0:be:f2:a8:
         e9:6a:bc:1c:30:bd:54:99:d8:cc:87:2c:df:6d:53:b7:e8:a6:
         7f:57:9e:4a:76:8a:12:d4:5c:04:ba:ca:dd:de:a0:d0:ab:c1:
         ed:be:eb:26:4c:ab:41:65:46:06:98:f3:5a:46:c6:6b:8b:29:
         d7:c7:c8:22:39:39:6b:dc:e7:48:a7:19:21:89:89:c1:f0:b0:
         aa:62:7b:c2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEFPNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE5
YmRmN2ViYTk1MTJlYzRmMzE3OWU3MjA1NjNiZDFkNjk2NWE1OTMwHhcNMjEwNzIw
MDMwMDAwWhcNMjMwNzIwMDMwMDAwWjAzMTEwLwYDVQQDEygzYmEyNDhlODk2YjVm
ODQ1OWNhODVmMGExNmU2Y2FhMjQzZDEzYzlkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoV1Cgi5nqmgFsKLwrZnyUNkptPPVA81KX2/7VR7t9w3try0U
mjShtVMJeKEptzY+G/oDvuZue2Dz9T/cP7qfEcwxiDthEoUP2OS2P8USQGxP51n3
x9QujdHaHWDEl5jtUJTSrHEYQMpfTVOLXCYC0X3+/37yZvwvmKpODs7svCCPfrOG
sTVVTIxhCs9qDEPXoIk854N0ofdYxJyk0YpeMkQoB/SEir7b6dkGH9BEC3UmqfAZ
6OKOj4t3MnEX72bRqeJQZiXs7HPFiGzQKtCEflFZu0/7I73omb11m1pMeqJV0IxO
SSmAoG3D02VRdHuaE21vupQfvTqURemz5UEtZQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFC9Q/EutnvlpSE4NeyySMXnGq/gaMB8GA1UdIwQYMBaAFPQUvFb7zZKia6+o
h+KEkdBrq21wMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTliZGY3
ZWJhOTUxMmVjNGYzMTc5ZTcyMDU2M2JkMWQ2OTY1YTU5My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTgzYTc0NGUtZjdkMi00ZTFjLWE1MTYtZTM5OWMy
N2ZmNjY5LzNiYTI0OGU4OTZiNWY4NDU5Y2E4NWYwYTE2ZTZjYWEyNDNkMTNjOWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ODNhNzQ0ZS1mN2QyLTRlMWMtYTUxNi1lMzk5
YzI3ZmY2NjkvMTliZGY3ZWJhOTUxMmVjNGYzMTc5ZTcyMDU2M2JkMWQ2OTY1YTU5
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC1GDDANBgkqhkiG9w0BAQsFAAOCAQEANnUaIEgR0ivJyX8s
5JoKnGvgtWdzLQlyBdWCCXZ3WmePunUPgEWj5E7uU1A42iy4pY9q5Xx0EKnJMLP3
33dKX9cXSNNkELyACuvvzSgvAnCG04mJ/QKcV+yEIzM/wYIXayqI3wIEn6Mg/5VL
eJNjl2Boc2EqLFVowi+h1nHlc+rXQFvSww4LIb4YH6Vw4oic+57Int9D8irT7sKk
O/pzG+2xtkVGKbUIUFgTdeXkppuwvvKo6Wq8HDC9VJnYzIcs321Tt+imf1eeSnaK
EtRcBLrK3d6g0KvB7b7rJkyrQWVGBpjzWkbGa4sp18fIIjk5a9znSKcZIYmJwfCw
qmJ7wg==
-----END CERTIFICATE-----