Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/1d15bf04d5a9cf9696d5ee3d8c2fb29ab5720f00.roa
File:                     1d15bf04d5a9cf9696d5ee3d8c2fb29ab5720f00.roa (raw, json)
Hash identifier:          ZGvRt90fUuaQv+JuT/vtV0R+634I4oXasRkgGYuQMlo=
Subject key identifier:   3A:40:06:BF:70:2D:97:43:41:AC:1D:C8:8D:43:41:7F:9A:B9:BE:A2
Certificate issuer:       /CN=5436c9c8d57c3e3253e79ac263352d27de50cae3
Certificate serial:       05F9C3
Authority key identifier: 5C:11:CA:8B:F5:92:F1:72:E3:70:30:D8:B5:50:29:7A:D3:5A:B9:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5436c9c8d57c3e3253e79ac263352d27de50cae3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/1d15bf04d5a9cf9696d5ee3d8c2fb29ab5720f00.roa
Signing time:             Wed 24 Mar 2021 14:34:39 +0000
ROA not before:           Wed 24 Mar 2021 14:34:39 +0000
ROA not after:            Tue 24 Mar 2026 14:34:39 +0000
asID:                     18678
IP address blocks:        45.162.76.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391619 (0x5f9c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5436c9c8d57c3e3253e79ac263352d27de50cae3
        Validity
            Not Before: Mar 24 14:34:39 2021 GMT
            Not After : Mar 24 14:34:39 2026 GMT
        Subject: CN=1d15bf04d5a9cf9696d5ee3d8c2fb29ab5720f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:5f:68:94:e7:78:11:5a:9a:e0:38:89:77:
                    fd:fb:2b:40:81:57:f2:2e:a5:72:b9:b7:9a:fb:c2:
                    54:ae:97:83:eb:b4:ae:f0:a3:85:97:f7:3f:bd:8b:
                    8e:77:07:1a:56:60:60:45:09:88:88:e9:00:4b:7e:
                    41:60:c2:13:8c:73:dd:bc:ed:8d:fd:49:39:ea:d4:
                    a8:0b:eb:52:b9:82:ff:e1:b4:76:fa:d4:9a:66:04:
                    ca:38:6d:77:2c:d1:79:55:98:07:38:0b:a2:54:f0:
                    70:05:2f:10:8a:e0:b4:c7:51:d2:67:2e:88:63:9f:
                    fd:3a:c1:ad:95:30:8d:dd:01:8b:4f:b3:bb:46:63:
                    0d:74:cb:9a:df:85:51:b5:af:34:18:79:b6:3f:a2:
                    b9:6a:0c:7d:f7:9d:b4:1f:a6:84:5e:08:35:48:b3:
                    f7:6b:e9:8b:40:28:1e:c7:8e:a9:2d:d5:9c:86:a6:
                    f0:40:ec:ec:71:bd:4e:c5:b9:af:c1:ba:a1:45:a9:
                    38:8b:af:8c:00:a8:2d:9a:02:19:23:39:44:de:f5:
                    9f:fa:41:97:fe:3c:b1:00:a7:c6:ec:77:06:66:51:
                    a9:b8:b3:d1:aa:5c:73:e9:26:3e:90:2c:8e:38:75:
                    d6:14:81:34:e4:38:62:fe:3f:17:bd:0e:c2:a4:a6:
                    60:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:40:06:BF:70:2D:97:43:41:AC:1D:C8:8D:43:41:7F:9A:B9:BE:A2
            X509v3 Authority Key Identifier:
                keyid:5C:11:CA:8B:F5:92:F1:72:E3:70:30:D8:B5:50:29:7A:D3:5A:B9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5436c9c8d57c3e3253e79ac263352d27de50cae3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/1d15bf04d5a9cf9696d5ee3d8c2fb29ab5720f00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/5436c9c8d57c3e3253e79ac263352d27de50cae3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:3b:f1:8a:05:60:fc:2f:30:26:30:fd:2c:3d:f6:57:a0:61:
         f9:62:96:7d:74:45:1e:81:73:fe:56:f8:ea:e0:cc:b6:2d:b8:
         0e:a7:ad:d0:3f:70:23:10:81:65:79:62:80:81:df:4c:7e:7e:
         52:e9:21:1d:af:1d:93:53:6e:32:9e:92:b4:ba:4a:77:3a:f1:
         7b:ce:fb:03:c5:61:33:66:ca:97:35:db:49:d5:e9:cd:1e:79:
         80:39:c6:40:15:68:1a:cd:4e:93:45:ca:7b:b8:d7:fd:7a:5b:
         f5:75:dd:cb:76:3f:16:cd:d2:78:16:ab:6b:4e:da:16:4c:dd:
         60:51:01:61:7d:1f:16:dd:78:5d:91:4b:da:6a:f2:65:52:b3:
         63:5c:77:58:49:b3:3f:ec:28:5a:ab:b7:80:0d:2a:77:4e:37:
         28:74:31:cc:92:86:cf:43:55:7e:a7:40:24:ee:38:4c:97:29:
         ec:1e:68:8e:34:7c:b9:34:67:3e:bd:3c:b7:db:4b:97:b1:d1:
         d8:2e:01:27:19:d0:22:26:09:17:48:83:c6:81:46:83:8c:9d:
         01:f5:2d:4b:7a:20:84:ca:57:24:b3:f2:90:38:a3:89:05:4e:
         8f:c2:a7:22:5d:22:86:b7:60:b6:22:06:c2:ec:e3:e3:6f:41:
         2d:87:ae:39
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBfnDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU0
MzZjOWM4ZDU3YzNlMzI1M2U3OWFjMjYzMzUyZDI3ZGU1MGNhZTMwHhcNMjEwMzI0
MTQzNDM5WhcNMjYwMzI0MTQzNDM5WjAzMTEwLwYDVQQDEygxZDE1YmYwNGQ1YTlj
Zjk2OTZkNWVlM2Q4YzJmYjI5YWI1NzIwZjAwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwQFfaJTneBFamuA4iXf9+ytAgVfyLqVyubea+8JUrpeD67Su
8KOFl/c/vYuOdwcaVmBgRQmIiOkAS35BYMITjHPdvO2N/Uk56tSoC+tSuYL/4bR2
+tSaZgTKOG13LNF5VZgHOAuiVPBwBS8QiuC0x1HSZy6IY5/9OsGtlTCN3QGLT7O7
RmMNdMua34VRta80GHm2P6K5agx99520H6aEXgg1SLP3a+mLQCgex46pLdWchqbw
QOzscb1OxbmvwbqhRak4i6+MAKgtmgIZIzlE3vWf+kGX/jyxAKfG7HcGZlGpuLPR
qlxz6SY+kCyOOHXWFIE05Dhi/j8XvQ7CpKZg5wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDpABr9wLZdDQawdyI1DQX+aub6iMB8GA1UdIwQYMBaAFFwRyov1kvFy43Aw
2LVQKXrTWrm1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTQzNmM5
YzhkNTdjM2UzMjUzZTc5YWMyNjMzNTJkMjdkZTUwY2FlMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjA2NWYzMTEtNDBhNS00YmRiLWFiOGQtYjBmYTli
ZmM0YTY2LzFkMTViZjA0ZDVhOWNmOTY5NmQ1ZWUzZDhjMmZiMjlhYjU3MjBmMDAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MDY1ZjMxMS00MGE1LTRiZGItYWI4ZC1iMGZh
OWJmYzRhNjYvNTQzNmM5YzhkNTdjM2UzMjUzZTc5YWMyNjMzNTJkMjdkZTUwY2Fl
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2iTDANBgkqhkiG9w0BAQsFAAOCAQEArzvxigVg/C8wJjD9
LD32V6Bh+WKWfXRFHoFz/lb46uDMti24Dqet0D9wIxCBZXligIHfTH5+UukhHa8d
k1NuMp6StLpKdzrxe877A8VhM2bKlzXbSdXpzR55gDnGQBVoGs1Ok0XKe7jX/Xpb
9XXdy3Y/Fs3SeBara07aFkzdYFEBYX0fFt14XZFL2mryZVKzY1x3WEmzP+woWqu3
gA0qd043KHQxzJKGz0NVfqdAJO44TJcp7B5ojjR8uTRnPr08t9tLl7HR2C4BJxnQ
IiYJF0iDxoFGg4ydAfUtS3oghMpXJLPykDijiQVOj8KnIl0ihrdgtiIGwuzj429B
LYeuOQ==
-----END CERTIFICATE-----