Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5bc3982c-43ca-4aac-8f2a-35895fda0d9f/def51f126ae7e0fc3a0d0f84ae00444f44360e1e.roa
File:                     def51f126ae7e0fc3a0d0f84ae00444f44360e1e.roa (raw, json)
Hash identifier:          nj7AolnwXW1N/2Yeu3vTkuIT11eHF6anEoMF0+8wOpo=
Subject key identifier:   52:FC:41:D2:66:D2:29:8D:9C:C5:B5:8F:37:E7:07:D7:7F:8D:68:55
Certificate issuer:       /CN=a85a48c23c8f35c5b4aa453e1f3b996974053108
Certificate serial:       18A967
Authority key identifier: A4:98:74:3C:96:E1:FE:B4:92:CA:73:A3:63:96:F0:16:C6:16:17:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a85a48c23c8f35c5b4aa453e1f3b996974053108.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5bc3982c-43ca-4aac-8f2a-35895fda0d9f/def51f126ae7e0fc3a0d0f84ae00444f44360e1e.roa
Signing time:             Thu 18 Aug 2022 16:49:54 +0000
ROA not before:           Wed 24 Mar 2021 14:29:10 +0000
ROA not after:            Tue 24 Mar 2026 14:29:10 +0000
asID:                     265663
IP address blocks:        45.175.140.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1616231 (0x18a967)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85a48c23c8f35c5b4aa453e1f3b996974053108
        Validity
            Not Before: Mar 24 14:29:10 2021 GMT
            Not After : Mar 24 14:29:10 2026 GMT
        Subject: CN=def51f126ae7e0fc3a0d0f84ae00444f44360e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ec:16:6a:dc:59:5b:61:08:87:44:23:13:9b:
                    54:ce:85:d9:d0:75:d4:15:fb:50:0d:14:60:1b:28:
                    fe:6c:9d:de:d4:e7:f7:b9:8b:38:a5:6b:05:d8:88:
                    a6:d3:5a:fb:30:e9:4e:c3:04:6f:11:3a:e0:30:c8:
                    a3:b8:e5:71:a6:a7:0f:04:55:8f:e8:a4:51:7d:86:
                    2a:48:cb:1a:6f:48:09:6f:59:96:df:56:5c:2a:d3:
                    a8:4e:f6:ab:67:c1:be:71:5f:f7:bb:6b:bf:2c:30:
                    cd:5c:32:e7:c9:92:ca:77:93:b9:c7:44:ea:54:98:
                    6d:cc:af:34:40:51:7c:32:65:e2:30:c6:da:ba:a9:
                    93:36:06:45:a0:b7:1a:ad:3a:e5:b7:20:67:33:c9:
                    27:ba:99:89:04:a4:c3:0f:6d:80:3c:6e:e1:e6:51:
                    be:45:c0:ea:54:f1:a7:5b:17:cf:67:5d:e7:30:55:
                    d3:3f:62:b5:83:c9:15:9e:4a:aa:1f:d5:d5:a6:77:
                    08:01:06:77:a5:99:7a:62:48:a5:45:f3:41:f4:f3:
                    4c:d2:b2:d9:c0:05:fa:ee:3f:13:1a:89:d8:49:b5:
                    62:fe:38:45:6f:72:3f:8b:5f:b2:79:36:a8:45:8a:
                    22:e1:5e:d8:bf:de:0f:15:fb:2d:a2:48:8d:65:f0:
                    b1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FC:41:D2:66:D2:29:8D:9C:C5:B5:8F:37:E7:07:D7:7F:8D:68:55
            X509v3 Authority Key Identifier:
                keyid:A4:98:74:3C:96:E1:FE:B4:92:CA:73:A3:63:96:F0:16:C6:16:17:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a85a48c23c8f35c5b4aa453e1f3b996974053108.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5bc3982c-43ca-4aac-8f2a-35895fda0d9f/def51f126ae7e0fc3a0d0f84ae00444f44360e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5bc3982c-43ca-4aac-8f2a-35895fda0d9f/a85a48c23c8f35c5b4aa453e1f3b996974053108.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:0a:6a:cb:46:ca:21:20:59:08:12:8e:c4:58:4b:c8:19:68:
         58:a7:b2:00:b4:cd:9c:79:b7:e8:73:f4:2a:e3:63:35:3f:bf:
         8c:61:1b:72:2f:e7:ca:19:94:73:62:bf:ad:66:5a:92:ad:0f:
         46:bd:81:62:9e:0e:90:b5:49:2b:00:15:05:49:61:03:87:b7:
         8b:e2:76:f4:a2:b0:44:b2:84:0c:90:6d:ed:1d:c8:ad:7d:37:
         dc:a7:ce:48:38:e3:26:d7:ab:35:b5:5b:a6:4b:89:29:7e:3d:
         51:d0:ff:63:00:97:1f:5e:6e:87:8c:49:24:18:58:75:ab:11:
         46:9c:f3:18:2a:fa:9c:dc:eb:a7:01:03:ab:f5:cc:e1:dc:3e:
         33:6f:c9:7f:07:b3:f6:78:84:b0:8a:d9:41:87:37:67:2d:97:
         51:eb:c1:6a:af:d8:42:ac:18:e4:4d:ab:2b:75:79:3e:8f:45:
         16:fc:a8:f3:e1:fc:78:9e:cd:38:95:81:ad:d8:01:7c:3a:76:
         61:26:cf:00:f3:37:8b:24:1a:0b:8d:da:c8:ac:a9:a4:d1:d1:
         91:7c:b7:82:76:3e:6b:e4:fc:5d:44:b2:fa:8c:b3:23:b5:8d:
         17:d2:8d:68:37:70:c5:55:4f:b9:90:6a:0a:ea:e9:95:77:76:
         69:b8:39:02
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGKlnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE4
NWE0OGMyM2M4ZjM1YzViNGFhNDUzZTFmM2I5OTY5NzQwNTMxMDgwHhcNMjEwMzI0
MTQyOTEwWhcNMjYwMzI0MTQyOTEwWjAzMTEwLwYDVQQDEyhkZWY1MWYxMjZhZTdl
MGZjM2EwZDBmODRhZTAwNDQ0ZjQ0MzYwZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgewWatxZW2EIh0QjE5tUzoXZ0HXUFftQDRRgGyj+bJ3e1Of3
uYs4pWsF2Iim01r7MOlOwwRvETrgMMijuOVxpqcPBFWP6KRRfYYqSMsab0gJb1mW
31ZcKtOoTvarZ8G+cV/3u2u/LDDNXDLnyZLKd5O5x0TqVJhtzK80QFF8MmXiMMba
uqmTNgZFoLcarTrltyBnM8knupmJBKTDD22APG7h5lG+RcDqVPGnWxfPZ13nMFXT
P2K1g8kVnkqqH9XVpncIAQZ3pZl6YkilRfNB9PNM0rLZwAX67j8TGonYSbVi/jhF
b3I/i1+yeTaoRYoi4V7Yv94PFfstokiNZfCxowIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFL8QdJm0imNnMW1jzfnB9d/jWhVMB8GA1UdIwQYMBaAFKSYdDyW4f60kspz
o2OW8BbGFhfeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTg1YTQ4
YzIzYzhmMzVjNWI0YWE0NTNlMWYzYjk5Njk3NDA1MzEwOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWJjMzk4MmMtNDNjYS00YWFjLThmMmEtMzU4OTVm
ZGEwZDlmL2RlZjUxZjEyNmFlN2UwZmMzYTBkMGY4NGFlMDA0NDRmNDQzNjBlMWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81YmMzOTgyYy00M2NhLTRhYWMtOGYyYS0zNTg5
NWZkYTBkOWYvYTg1YTQ4YzIzYzhmMzVjNWI0YWE0NTNlMWYzYjk5Njk3NDA1MzEw
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2vjDANBgkqhkiG9w0BAQsFAAOCAQEAPQpqy0bKISBZCBKO
xFhLyBloWKeyALTNnHm36HP0KuNjNT+/jGEbci/nyhmUc2K/rWZakq0PRr2BYp4O
kLVJKwAVBUlhA4e3i+J29KKwRLKEDJBt7R3IrX033KfOSDjjJterNbVbpkuJKX49
UdD/YwCXH15uh4xJJBhYdasRRpzzGCr6nNzrpwEDq/XM4dw+M2/Jfwez9niEsIrZ
QYc3Zy2XUevBaq/YQqwY5E2rK3V5Po9FFvyo8+H8eJ7NOJWBrdgBfDp2YSbPAPM3
iyQaC43ayKyppNHRkXy3gnY+a+T8XUSy+oyzI7WNF9KNaDdwxVVPuZBqCurplXd2
abg5Ag==
-----END CERTIFICATE-----