Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/c72a5ee702be3bf64abbe28692dc4e66eabf02fd.roa
File:                     c72a5ee702be3bf64abbe28692dc4e66eabf02fd.roa (raw, json)
Hash identifier:          +bIwQBZ4Qw5mswPZ3h9rwjms3P6tXifgdkB+Guechh4=
Subject key identifier:   FC:10:13:94:72:E5:FB:1B:35:3C:D2:A8:6C:FF:6F:A6:3D:4C:50:74
Certificate issuer:       /CN=5436c9c8d57c3e3253e79ac263352d27de50cae3
Certificate serial:       177463
Authority key identifier: 5C:11:CA:8B:F5:92:F1:72:E3:70:30:D8:B5:50:29:7A:D3:5A:B9:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5436c9c8d57c3e3253e79ac263352d27de50cae3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/c72a5ee702be3bf64abbe28692dc4e66eabf02fd.roa
Signing time:             Tue 28 Feb 2023 06:15:21 +0000
ROA not before:           Sun 26 Feb 2023 06:11:46 +0000
ROA not after:            Fri 28 Feb 2025 06:11:46 +0000
asID:                     262589
IP address blocks:        45.162.76.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1537123 (0x177463)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5436c9c8d57c3e3253e79ac263352d27de50cae3
        Validity
            Not Before: Feb 26 06:11:46 2023 GMT
            Not After : Feb 28 06:11:46 2025 GMT
        Subject: CN=c72a5ee702be3bf64abbe28692dc4e66eabf02fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ee:58:8a:0c:95:ef:2f:a2:b5:df:8e:85:95:
                    d5:d6:ab:ca:53:b3:a9:40:67:29:18:2a:0e:e8:c1:
                    d0:d5:bd:ed:fd:5e:43:aa:ee:73:0a:ad:38:18:82:
                    73:dc:91:d1:14:8f:5a:6d:39:c1:4c:38:58:5a:d1:
                    55:83:87:39:0f:68:78:59:c8:7c:f4:a1:e5:e3:52:
                    59:5f:c6:b8:80:7c:a0:ae:35:cb:37:81:e2:29:89:
                    d7:8b:1d:c6:26:ab:00:c0:a4:3c:07:29:34:ad:0b:
                    42:01:81:65:b2:f3:97:18:ff:7d:20:cc:39:ae:a2:
                    1c:c1:11:bf:b0:b2:6f:ea:db:19:2f:48:a3:88:e8:
                    9a:66:2f:3e:a8:77:0a:e8:23:d3:1b:f7:45:61:9f:
                    6e:aa:9e:83:1d:bb:09:a6:ab:b9:f5:c2:f3:64:04:
                    5d:8a:44:9e:af:ab:2f:0c:45:a6:77:bb:78:d6:dd:
                    14:6d:1b:8f:93:3d:98:b3:bb:7c:51:7c:09:06:7a:
                    04:ad:3b:2f:f0:22:80:50:df:cd:41:85:95:17:98:
                    19:b5:78:bd:6f:04:81:cd:6a:87:d0:d2:86:29:5b:
                    47:cb:5d:7c:d6:f7:da:a8:75:ca:a5:44:17:a7:cc:
                    e9:6b:bc:ee:5f:cc:76:1b:81:73:1d:cc:27:bd:5f:
                    5d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:10:13:94:72:E5:FB:1B:35:3C:D2:A8:6C:FF:6F:A6:3D:4C:50:74
            X509v3 Authority Key Identifier:
                keyid:5C:11:CA:8B:F5:92:F1:72:E3:70:30:D8:B5:50:29:7A:D3:5A:B9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5436c9c8d57c3e3253e79ac263352d27de50cae3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/c72a5ee702be3bf64abbe28692dc4e66eabf02fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/5436c9c8d57c3e3253e79ac263352d27de50cae3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:61:10:31:75:67:13:1a:18:b6:e9:c6:85:8a:e7:75:50:a9:
         1d:7b:cc:f2:03:7a:a4:01:38:c9:57:a2:3c:2c:0d:75:d8:44:
         a1:b0:52:70:3d:0a:eb:03:08:67:d5:27:41:5b:08:ec:3a:23:
         88:37:86:21:31:fe:8b:ef:c0:c0:70:20:48:36:16:eb:21:c7:
         3a:9c:8e:cd:13:32:26:32:46:43:28:54:87:3e:57:41:e8:62:
         63:0c:eb:38:ca:61:d1:76:3d:73:93:ca:c5:88:d1:a3:28:4c:
         6a:55:ce:0e:6d:07:57:07:ec:46:1d:96:1f:a7:5a:bc:81:19:
         2e:e6:c4:63:b5:7b:5e:4c:99:83:52:fe:8b:bd:66:52:7d:e8:
         47:85:fb:fe:5d:ab:39:be:e5:c8:35:52:7f:9b:b7:09:d6:f8:
         e7:53:e3:aa:3b:a9:e8:21:c9:e4:98:30:7d:3c:df:12:b7:02:
         80:aa:bf:82:aa:45:6d:62:b8:20:98:18:14:c6:56:48:a8:97:
         91:7c:00:0c:ec:1d:53:63:d9:e1:7f:47:90:82:93:a0:6d:a7:
         ac:12:c0:29:69:da:44:27:42:6d:17:66:2a:29:f9:49:d7:b8:
         a8:0d:e8:b8:88:29:72:f4:c1:c7:0b:8c:e5:37:6d:fd:55:cc:
         34:54:38:5f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDF3RjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU0
MzZjOWM4ZDU3YzNlMzI1M2U3OWFjMjYzMzUyZDI3ZGU1MGNhZTMwHhcNMjMwMjI2
MDYxMTQ2WhcNMjUwMjI4MDYxMTQ2WjAzMTEwLwYDVQQDEyhjNzJhNWVlNzAyYmUz
YmY2NGFiYmUyODY5MmRjNGU2NmVhYmYwMmZkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl+5YigyV7y+itd+OhZXV1qvKU7OpQGcpGCoO6MHQ1b3t/V5D
qu5zCq04GIJz3JHRFI9abTnBTDhYWtFVg4c5D2h4Wch89KHl41JZX8a4gHygrjXL
N4HiKYnXix3GJqsAwKQ8Byk0rQtCAYFlsvOXGP99IMw5rqIcwRG/sLJv6tsZL0ij
iOiaZi8+qHcK6CPTG/dFYZ9uqp6DHbsJpqu59cLzZARdikSer6svDEWmd7t41t0U
bRuPkz2Ys7t8UXwJBnoErTsv8CKAUN/NQYWVF5gZtXi9bwSBzWqH0NKGKVtHy118
1vfaqHXKpUQXp8zpa7zuX8x2G4FzHcwnvV9dgQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPwQE5Ry5fsbNTzSqGz/b6Y9TFB0MB8GA1UdIwQYMBaAFFwRyov1kvFy43Aw
2LVQKXrTWrm1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTQzNmM5
YzhkNTdjM2UzMjUzZTc5YWMyNjMzNTJkMjdkZTUwY2FlMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjA2NWYzMTEtNDBhNS00YmRiLWFiOGQtYjBmYTli
ZmM0YTY2L2M3MmE1ZWU3MDJiZTNiZjY0YWJiZTI4NjkyZGM0ZTY2ZWFiZjAyZmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MDY1ZjMxMS00MGE1LTRiZGItYWI4ZC1iMGZh
OWJmYzRhNjYvNTQzNmM5YzhkNTdjM2UzMjUzZTc5YWMyNjMzNTJkMjdkZTUwY2Fl
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2iTDANBgkqhkiG9w0BAQsFAAOCAQEAp2EQMXVnExoYtunG
hYrndVCpHXvM8gN6pAE4yVeiPCwNddhEobBScD0K6wMIZ9UnQVsI7DojiDeGITH+
i+/AwHAgSDYW6yHHOpyOzRMyJjJGQyhUhz5XQehiYwzrOMph0XY9c5PKxYjRoyhM
alXODm0HVwfsRh2WH6davIEZLubEY7V7XkyZg1L+i71mUn3oR4X7/l2rOb7lyDVS
f5u3Cdb451Pjqjup6CHJ5JgwfTzfErcCgKq/gqpFbWK4IJgYFMZWSKiXkXwADOwd
U2PZ4X9HkIKToG2nrBLAKWnaRCdCbRdmKin5Sde4qA3ouIgpcvTBxwuM5Tdt/VXM
NFQ4Xw==
-----END CERTIFICATE-----