Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/53b808912e16b2854fcda34e136b419dd6b6d2f6.roa
File:                     53b808912e16b2854fcda34e136b419dd6b6d2f6.roa (raw, json)
Hash identifier:          HL3hRGviDk1nExNIB0UIB/TU68Ja5TtJxlqDSBVjNZI=
Subject key identifier:   5F:F7:F4:AE:DC:38:1D:1E:6F:84:4D:FC:95:6E:8F:AF:EA:6C:A2:1E
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       0EC32C
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/53b808912e16b2854fcda34e136b419dd6b6d2f6.roa
Signing time:             Tue 13 Apr 2021 21:52:03 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     28000
IP address blocks:        190.112.52.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 967468 (0xec32c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=53b808912e16b2854fcda34e136b419dd6b6d2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:44:c8:11:e6:fb:f4:59:1f:ed:70:a3:6d:37:
                    d6:40:c2:a1:54:4a:b3:e1:cd:0b:f8:cb:02:20:a4:
                    fe:ae:d9:df:5f:fe:6c:2c:f5:e9:d4:a7:c5:fe:b2:
                    57:b3:9c:c7:0d:79:0f:bc:06:6b:c8:a1:b4:f3:de:
                    98:22:61:51:75:61:a3:9f:30:8c:ac:17:c0:6b:72:
                    7e:11:06:4b:15:b6:d6:db:70:ab:c6:e6:a0:8a:9d:
                    bb:1b:65:f9:aa:50:49:d5:6c:b6:23:7c:54:27:6a:
                    bf:30:f6:b5:30:b6:2b:61:ed:78:aa:5d:40:3e:80:
                    e7:cd:cd:2c:fe:37:f8:50:a1:41:79:32:1e:99:9c:
                    d7:44:13:eb:d6:82:a6:e8:b0:83:21:48:2f:1d:79:
                    84:27:eb:86:90:e5:39:15:28:01:a9:84:85:e4:c2:
                    d3:0d:53:ca:64:89:56:93:6d:3c:d3:32:4a:a0:27:
                    c7:9a:fa:f6:83:d7:25:10:4b:5f:b8:d5:0d:ad:7d:
                    87:83:ff:a8:90:8b:f4:1a:22:05:ab:9d:88:7f:fe:
                    93:f0:5b:11:a1:70:97:0d:a5:23:9e:6d:08:22:21:
                    fd:f7:e6:ee:59:66:83:90:97:13:f5:67:a6:64:89:
                    7c:39:c2:9e:c7:fb:1e:3e:ae:c9:cc:5a:e2:d8:58:
                    98:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F7:F4:AE:DC:38:1D:1E:6F:84:4D:FC:95:6E:8F:AF:EA:6C:A2:1E
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/53b808912e16b2854fcda34e136b419dd6b6d2f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:15:f5:ea:0e:0b:63:35:8e:94:b3:ae:0f:25:14:c9:3b:62:
         f9:e6:8e:7a:ce:ce:66:9f:fe:0c:e1:7f:a8:5c:b1:6e:c3:96:
         46:63:86:32:25:c7:df:56:68:56:da:58:27:fd:54:4d:f2:03:
         02:16:d4:71:96:65:88:61:6e:e5:26:7d:22:85:8f:18:43:b7:
         ec:e1:71:bf:8b:bf:eb:50:77:c4:1c:13:22:83:23:98:44:d5:
         cf:25:d7:a9:1d:e0:a5:17:0e:e2:47:4a:da:68:51:48:b9:f0:
         80:30:a2:74:00:b0:8c:ab:5c:66:40:53:ee:42:70:b8:22:a3:
         0a:e4:fa:94:be:63:61:c2:a2:a3:5a:14:bf:2d:aa:44:82:7f:
         41:54:56:28:3f:ca:ec:7b:13:c7:1c:b2:e0:48:a2:d7:4e:24:
         9c:ea:2a:d6:a6:88:2e:38:f6:c1:46:92:bf:d6:d8:0e:95:9c:
         ca:aa:a0:41:de:d1:9d:13:57:0a:ff:fe:d2:b6:57:4b:13:0a:
         d8:91:56:ba:53:fe:dd:63:60:25:56:d6:8f:f6:70:22:a4:26:
         4c:5a:30:fe:89:60:d9:d2:59:25:84:95:b1:50:11:86:56:7e:
         0f:0a:dd:cd:49:9c:36:07:2a:87:d0:50:2e:0d:76:7b:5b:da:
         9f:04:18:fe
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDsMsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
ZDNiNjMyNTJmYWZiY2Q2YmFlNmUxZjRjZWJiMDJmY2MyYWY4ZDIwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg1M2I4MDg5MTJlMTZi
Mjg1NGZjZGEzNGUxMzZiNDE5ZGQ2YjZkMmY2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgkTIEeb79Fkf7XCjbTfWQMKhVEqz4c0L+MsCIKT+rtnfX/5s
LPXp1KfF/rJXs5zHDXkPvAZryKG0896YImFRdWGjnzCMrBfAa3J+EQZLFbbW23Cr
xuagip27G2X5qlBJ1Wy2I3xUJ2q/MPa1MLYrYe14ql1APoDnzc0s/jf4UKFBeTIe
mZzXRBPr1oKm6LCDIUgvHXmEJ+uGkOU5FSgBqYSF5MLTDVPKZIlWk2080zJKoCfH
mvr2g9clEEtfuNUNrX2Hg/+okIv0GiIFq52If/6T8FsRoXCXDaUjnm0IIiH99+bu
WWaDkJcT9WemZIl8OcKex/sePq7JzFri2FiYyQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFF/39K7cOB0eb4RN/JVuj6/qbKIeMB8GA1UdIwQYMBaAFH+Jf8zsEQtTeV2M
m5FVamZ66VzVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWJkM2I2
MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhkMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjIyYzBjMjgtY2M3ZC00MjFkLWI0NWItOWFjMmI3
Y2VkMjA5LzUzYjgwODkxMmUxNmIyODU0ZmNkYTM0ZTEzNmI0MTlkZDZiNmQyZjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjJjMGMyOC1jYzdkLTQyMWQtYjQ1Yi05YWMy
YjdjZWQyMDkvOWJkM2I2MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhk
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr5wNDANBgkqhkiG9w0BAQsFAAOCAQEAShX16g4LYzWOlLOu
DyUUyTti+eaOes7OZp/+DOF/qFyxbsOWRmOGMiXH31ZoVtpYJ/1UTfIDAhbUcZZl
iGFu5SZ9IoWPGEO37OFxv4u/61B3xBwTIoMjmETVzyXXqR3gpRcO4kdK2mhRSLnw
gDCidACwjKtcZkBT7kJwuCKjCuT6lL5jYcKio1oUvy2qRIJ/QVRWKD/K7HsTxxyy
4Eii104knOoq1qaILjj2wUaSv9bYDpWcyqqgQd7RnRNXCv/+0rZXSxMK2JFWulP+
3WNgJVbWj/ZwIqQmTFow/olg2dJZJYSVsVARhlZ+DwrdzUmcNgcqh9BQLg12e1va
nwQY/g==
-----END CERTIFICATE-----