Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/95765284ece71ae6220bad19ed2988c71b8db1d8.roa
File:                     95765284ece71ae6220bad19ed2988c71b8db1d8.roa (raw, json)
Hash identifier:          qDhir6M58iCw/WBpxwPv51ebT1Zbw1KWbGP8PHp5MBw=
Subject key identifier:   C0:BF:61:FD:17:C6:A1:28:AC:AF:8F:B6:15:F5:B4:AB:DC:AD:DF:FD
Certificate issuer:       /CN=5d6739fb330fec46825943b9c33eaee7782d7827
Certificate serial:       1AEBC3
Authority key identifier: 4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/95765284ece71ae6220bad19ed2988c71b8db1d8.roa
Signing time:             Mon 03 Oct 2022 16:53:49 +0000
ROA not before:           Mon 03 Oct 2022 16:51:34 +0000
ROA not after:            Thu 03 Oct 2024 17:51:34 +0000
asID:                     3816
IP address blocks:        179.42.172.0/22 maxlen: 22
                          2803:ac80::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1764291 (0x1aebc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6739fb330fec46825943b9c33eaee7782d7827
        Validity
            Not Before: Oct  3 16:51:34 2022 GMT
            Not After : Oct  3 17:51:34 2024 GMT
        Subject: CN=95765284ece71ae6220bad19ed2988c71b8db1d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:78:40:f5:c8:44:f3:0c:29:b4:5c:b3:83:85:
                    fc:26:0a:86:8e:4b:ac:d1:30:45:6c:5b:97:c2:f4:
                    d6:62:a0:f3:5f:36:b2:d9:14:4b:c6:a9:f8:52:90:
                    4f:52:d9:d5:c7:1e:f4:e7:be:65:95:f6:e3:23:86:
                    25:c8:47:0e:1e:69:ba:0e:d2:f9:63:3e:1f:06:04:
                    26:01:74:b3:2c:d8:9b:d0:f4:5b:d0:6e:eb:a3:24:
                    27:d1:fe:a9:e3:5a:77:db:b3:8e:19:cf:34:5b:ea:
                    3b:43:50:37:7f:cd:b5:88:9e:9c:4c:88:59:a4:80:
                    1b:08:1d:94:bc:48:a1:80:56:40:8e:03:43:62:af:
                    bf:fe:72:41:27:eb:25:d6:b4:25:30:0a:90:87:69:
                    a3:7a:ec:8d:ce:ed:72:a9:5c:6f:57:d6:10:a7:89:
                    4a:e0:44:24:cb:9a:12:bd:b2:60:f8:cc:ee:d5:41:
                    e2:35:92:71:d0:4e:42:fb:50:01:8f:db:c2:91:ea:
                    20:51:fa:6e:99:fa:5a:ac:44:4a:d6:bd:cb:12:0a:
                    4e:13:76:42:e4:e1:e4:b4:ea:85:c4:3c:8b:91:7e:
                    17:cf:53:e8:2f:31:2a:43:dc:55:3e:96:36:75:0d:
                    47:2c:85:2d:34:76:69:6f:7f:73:26:2a:0b:f6:da:
                    44:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BF:61:FD:17:C6:A1:28:AC:AF:8F:B6:15:F5:B4:AB:DC:AD:DF:FD
            X509v3 Authority Key Identifier:
                keyid:4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/95765284ece71ae6220bad19ed2988c71b8db1d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/5d6739fb330fec46825943b9c33eaee7782d7827.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.172.0/22
                IPv6:
                  2803:ac80::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:1c:39:23:1c:ca:66:19:ff:57:86:80:50:71:02:62:55:49:
         35:4d:40:af:68:52:5a:d5:79:75:83:47:74:b1:ee:38:b5:bd:
         5c:72:79:01:12:ae:64:f0:6b:31:0b:6e:8f:f5:9b:74:75:25:
         98:1a:fe:9d:4e:04:9c:a9:c1:09:4b:1f:b7:21:3f:7c:be:e9:
         10:39:89:e7:c5:38:d9:59:63:75:e6:83:e6:4a:ad:ed:bf:bb:
         a8:ce:5e:80:bb:5c:c9:e4:20:0d:88:f7:48:f6:7f:58:e8:9b:
         c0:de:c5:50:0f:58:b0:38:eb:98:91:92:72:12:31:d3:55:2f:
         a2:33:9a:53:ed:a0:c6:0e:04:91:93:2f:50:05:ed:ad:60:dc:
         68:7b:b9:b3:0d:49:12:7b:22:ae:11:34:e0:0a:39:bf:ee:7c:
         15:5a:8d:77:51:8f:55:6e:86:7e:92:df:3c:7c:94:89:3a:65:
         92:1a:35:9f:34:8f:2e:d5:6e:e6:48:c0:81:f6:bb:6e:8f:ea:
         8d:7f:d3:ff:18:28:b8:d3:bb:5e:91:ad:04:7d:d3:4d:81:5e:
         a8:b6:fd:a2:cb:f7:49:af:1f:c7:4a:1f:16:be:01:20:8d:4f:
         94:b8:ba:90:64:71:0e:ee:9c:7a:29:27:62:ee:b8:73:f1:d3:
         6a:83:09:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDGuvDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVk
NjczOWZiMzMwZmVjNDY4MjU5NDNiOWMzM2VhZWU3NzgyZDc4MjcwHhcNMjIxMDAz
MTY1MTM0WhcNMjQxMDAzMTc1MTM0WjAzMTEwLwYDVQQDEyg5NTc2NTI4NGVjZTcx
YWU2MjIwYmFkMTllZDI5ODhjNzFiOGRiMWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi3hA9chE8wwptFyzg4X8JgqGjkus0TBFbFuXwvTWYqDzXzay
2RRLxqn4UpBPUtnVxx70575llfbjI4YlyEcOHmm6DtL5Yz4fBgQmAXSzLNib0PRb
0G7royQn0f6p41p327OOGc80W+o7Q1A3f821iJ6cTIhZpIAbCB2UvEihgFZAjgND
Yq+//nJBJ+sl1rQlMAqQh2mjeuyNzu1yqVxvV9YQp4lK4EQky5oSvbJg+Mzu1UHi
NZJx0E5C+1ABj9vCkeogUfpumfparERK1r3LEgpOE3ZC5OHktOqFxDyLkX4Xz1Po
LzEqQ9xVPpY2dQ1HLIUtNHZpb39zJioL9tpEbwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFMC/Yf0XxqEorK+PthX1tKvcrd/9MB8GA1UdIwQYMBaAFEsCxjmldtSgQ0Bd
542qYYQGaS98MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWQ2NzM5
ZmIzMzBmZWM0NjgyNTk0M2I5YzMzZWFlZTc3ODJkNzgyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWUzODYzODUtMjJjOS00NGVkLTgyMDUtNWMyOWE2
OTUwMGE2Lzk1NzY1Mjg0ZWNlNzFhZTYyMjBiYWQxOWVkMjk4OGM3MWI4ZGIxZDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZTM4NjM4NS0yMmM5LTQ0ZWQtODIwNS01YzI5
YTY5NTAwYTYvNWQ2NzM5ZmIzMzBmZWM0NjgyNTk0M2I5YzMzZWFlZTc3ODJkNzgy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEArMqrDANBAIAAjAHAwUAKAOsgDANBgkqhkiG9w0BAQsFAAOC
AQEAVBw5IxzKZhn/V4aAUHECYlVJNU1Ar2hSWtV5dYNHdLHuOLW9XHJ5ARKuZPBr
MQtuj/WbdHUlmBr+nU4EnKnBCUsftyE/fL7pEDmJ58U42VljdeaD5kqt7b+7qM5e
gLtcyeQgDYj3SPZ/WOibwN7FUA9YsDjrmJGSchIx01UvojOaU+2gxg4EkZMvUAXt
rWDcaHu5sw1JEnsirhE04Ao5v+58FVqNd1GPVW6GfpLfPHyUiTplkho1nzSPLtVu
5kjAgfa7bo/qjX/T/xgouNO7XpGtBH3TTYFeqLb9osv3Sa8fx0ofFr4BII1PlLi6
kGRxDu6ceiknYu64c/HTaoMJQA==
-----END CERTIFICATE-----