Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58b48363-8d7d-4a83-9f91-04dce3c34c3d/264796b6cbcf82ca2354ec593b9da7c991db9afa.roa
File:                     264796b6cbcf82ca2354ec593b9da7c991db9afa.roa (raw, json)
Hash identifier:          sjY8PGoCZD81P9rT8IX8BNm8uZSzTBoXzWuZoC5vVsQ=
Subject key identifier:   AC:06:BD:19:A1:9A:3B:A9:D6:FD:87:08:9D:31:F8:75:75:C6:A5:36
Certificate issuer:       /CN=b1eadf44e23f1448be60c0468eb9f4738d5692ba
Certificate serial:       11E210
Authority key identifier: E2:F3:81:5E:62:68:44:E2:76:86:2B:C2:EE:C5:28:ED:89:97:0F:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1eadf44e23f1448be60c0468eb9f4738d5692ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58b48363-8d7d-4a83-9f91-04dce3c34c3d/264796b6cbcf82ca2354ec593b9da7c991db9afa.roa
Signing time:             Wed 26 Oct 2022 21:39:01 +0000
ROA not before:           Tue 25 Oct 2022 21:14:44 +0000
ROA not after:            Sat 26 Oct 2024 21:14:44 +0000
asID:                     42
IP address blocks:        189.201.244.0/23 maxlen: 23
                          2801:c4:c0::/44 maxlen: 44

Validation:               Failed, certificate revoked on Sat 27 Jan 2024 04:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1171984 (0x11e210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1eadf44e23f1448be60c0468eb9f4738d5692ba
        Validity
            Not Before: Oct 25 21:14:44 2022 GMT
            Not After : Oct 26 21:14:44 2024 GMT
        Subject: CN=264796b6cbcf82ca2354ec593b9da7c991db9afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:0d:a1:b8:c5:b4:34:e7:72:48:de:8f:ba:
                    08:4d:55:39:e7:85:f0:b2:f8:40:0c:f4:a0:73:0a:
                    5c:8c:30:e6:d3:5f:36:24:92:37:fa:bc:d0:90:c6:
                    e7:de:d4:11:43:75:2b:52:34:64:e1:51:fd:37:7b:
                    9c:d1:65:3e:c6:22:a8:69:46:62:60:a6:b2:92:5e:
                    b8:b3:e6:3e:8f:48:e6:32:af:d0:c9:77:6a:f3:aa:
                    7a:39:b9:75:c5:05:5d:26:4a:eb:0a:dd:43:f5:48:
                    36:9f:0c:88:ef:d2:10:4b:ea:81:5a:a6:99:eb:d0:
                    c6:3a:ee:be:8b:60:d3:9a:36:c6:41:5d:99:c7:b8:
                    47:23:18:71:cb:11:32:d0:a1:be:14:39:af:00:3f:
                    ea:f2:c4:17:90:98:f6:67:ee:d9:5d:09:59:af:a3:
                    12:8f:3a:79:f5:c1:f5:40:61:b0:a6:50:9b:7b:99:
                    dc:e8:99:6f:a3:00:06:c8:ec:81:4e:29:d2:3d:7d:
                    f0:c4:c0:6d:7e:ee:dd:f2:b7:fe:11:87:95:ce:be:
                    68:3b:de:5f:84:d3:36:73:f2:1e:f6:1a:a5:30:b0:
                    2c:04:81:46:b1:3b:07:ba:3f:5a:3c:ef:5a:34:18:
                    d6:eb:9a:41:dd:d6:bd:2f:80:70:a9:7b:31:13:42:
                    1f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:06:BD:19:A1:9A:3B:A9:D6:FD:87:08:9D:31:F8:75:75:C6:A5:36
            X509v3 Authority Key Identifier:
                keyid:E2:F3:81:5E:62:68:44:E2:76:86:2B:C2:EE:C5:28:ED:89:97:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1eadf44e23f1448be60c0468eb9f4738d5692ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58b48363-8d7d-4a83-9f91-04dce3c34c3d/264796b6cbcf82ca2354ec593b9da7c991db9afa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58b48363-8d7d-4a83-9f91-04dce3c34c3d/b1eadf44e23f1448be60c0468eb9f4738d5692ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.244.0/23
                IPv6:
                  2801:c4:c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         72:a4:67:be:10:a0:46:92:f2:45:96:a7:c1:27:df:2f:c9:df:
         d1:ed:d5:41:05:ab:02:85:81:e7:70:a7:e3:98:1d:ff:06:f2:
         f9:be:dd:54:4b:fe:2d:4f:60:94:ea:3f:e4:25:2f:37:f1:14:
         93:f1:b5:d1:bf:25:a2:29:e3:89:80:a1:da:b5:18:8f:1e:50:
         d3:42:3f:e9:0a:b3:e6:98:0d:6b:1e:3e:72:01:46:80:6d:7c:
         a7:c9:cf:9a:ca:9a:85:7e:fb:50:3c:e3:68:c4:7b:0e:ec:90:
         18:eb:b3:2b:30:1a:31:e4:a0:88:68:1e:52:38:d6:1d:11:20:
         5c:f5:bf:1e:92:1a:4c:2e:2d:a8:a4:84:dc:ad:96:cd:5c:62:
         58:c9:c3:27:90:ab:a4:7b:7d:84:1b:7e:40:17:40:56:2c:8c:
         ea:2c:90:32:68:19:4c:d7:c2:fa:d1:88:c6:69:e1:e7:14:9c:
         8d:61:b4:42:12:97:89:69:74:4d:3a:7a:85:e8:89:f8:5a:ea:
         b0:5c:cd:5d:18:f6:e2:23:e4:58:ca:79:51:c9:d1:a3:d0:53:
         24:12:48:0b:db:c4:3f:e4:71:9e:bf:df:51:61:92:f0:41:37:
         10:60:17:a8:6d:16:82:2d:79:78:f5:cc:05:49:67:60:f1:26:
         05:af:6f:9d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDEeIQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIx
ZWFkZjQ0ZTIzZjE0NDhiZTYwYzA0NjhlYjlmNDczOGQ1NjkyYmEwHhcNMjIxMDI1
MjExNDQ0WhcNMjQxMDI2MjExNDQ0WjAzMTEwLwYDVQQDEygyNjQ3OTZiNmNiY2Y4
MmNhMjM1NGVjNTkzYjlkYTdjOTkxZGI5YWZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxGgNobjFtDTnckjej7oITVU554XwsvhADPSgcwpcjDDm0182
JJI3+rzQkMbn3tQRQ3UrUjRk4VH9N3uc0WU+xiKoaUZiYKaykl64s+Y+j0jmMq/Q
yXdq86p6Obl1xQVdJkrrCt1D9Ug2nwyI79IQS+qBWqaZ69DGOu6+i2DTmjbGQV2Z
x7hHIxhxyxEy0KG+FDmvAD/q8sQXkJj2Z+7ZXQlZr6MSjzp59cH1QGGwplCbe5nc
6JlvowAGyOyBTinSPX3wxMBtfu7d8rf+EYeVzr5oO95fhNM2c/Ie9hqlMLAsBIFG
sTsHuj9aPO9aNBjW65pB3da9L4BwqXsxE0IfRQIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFKwGvRmhmjup1v2HCJ0x+HV1xqU2MB8GA1UdIwQYMBaAFOLzgV5iaETidoYr
wu7FKO2Jlw/xMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjFlYWRm
NDRlMjNmMTQ0OGJlNjBjMDQ2OGViOWY0NzM4ZDU2OTJiYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThiNDgzNjMtOGQ3ZC00YTgzLTlmOTEtMDRkY2Uz
YzM0YzNkLzI2NDc5NmI2Y2JjZjgyY2EyMzU0ZWM1OTNiOWRhN2M5OTFkYjlhZmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGI0ODM2My04ZDdkLTRhODMtOWY5MS0wNGRj
ZTNjMzRjM2QvYjFlYWRmNDRlMjNmMTQ0OGJlNjBjMDQ2OGViOWY0NzM4ZDU2OTJi
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAb3J9DAPBAIAAjAJAwcEKAEAxADAMA0GCSqGSIb3DQEBCwUA
A4IBAQBypGe+EKBGkvJFlqfBJ98vyd/R7dVBBasChYHncKfjmB3/BvL5vt1US/4t
T2CU6j/kJS838RST8bXRvyWiKeOJgKHatRiPHlDTQj/pCrPmmA1rHj5yAUaAbXyn
yc+aypqFfvtQPONoxHsO7JAY67MrMBox5KCIaB5SONYdESBc9b8ekhpMLi2opITc
rZbNXGJYycMnkKuke32EG35AF0BWLIzqLJAyaBlM18L60YjGaeHnFJyNYbRCEpeJ
aXRNOnqF6In4WuqwXM1dGPbiI+RYynlRydGj0FMkEkgL28Q/5HGev99RYZLwQTcQ
YBeobRaCLXl49cwFSWdg8SYFr2+d
-----END CERTIFICATE-----