Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/634140a7-d7a1-4984-842a-89da493b06a9/25976e395e70ac4a19e57e1124794aefe0335b9e.roa
File:                     25976e395e70ac4a19e57e1124794aefe0335b9e.roa (raw, json)
Hash identifier:          +9Ha81WSQ7Y/RldLAx5S9A3XDi90O9ofG8EZXSzRUP4=
Subject key identifier:   CA:25:AD:59:C3:50:8D:2F:E1:BC:A5:93:34:66:9C:6A:9E:29:19:4A
Certificate issuer:       /CN=5e60935bdbaf84edd159cb54bb8fad0298ca5126
Certificate serial:       1A36B7
Authority key identifier: 60:76:86:83:41:24:9B:61:C5:B5:42:87:21:D1:76:DF:30:24:90:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e60935bdbaf84edd159cb54bb8fad0298ca5126.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/634140a7-d7a1-4984-842a-89da493b06a9/25976e395e70ac4a19e57e1124794aefe0335b9e.roa
Signing time:             Wed 21 Sep 2022 05:42:04 +0000
ROA not before:           Wed 21 Sep 2022 05:41:57 +0000
ROA not after:            Sat 21 Sep 2024 05:41:57 +0000
asID:                     264768
IP address blocks:        168.196.140.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1717943 (0x1a36b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e60935bdbaf84edd159cb54bb8fad0298ca5126
        Validity
            Not Before: Sep 21 05:41:57 2022 GMT
            Not After : Sep 21 05:41:57 2024 GMT
        Subject: CN=25976e395e70ac4a19e57e1124794aefe0335b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f3:b5:bd:a8:f4:a9:a3:8f:75:09:11:bd:86:
                    39:0e:ce:14:46:74:cb:25:a6:a8:5d:68:4e:fc:b0:
                    5d:80:14:00:5a:f2:44:2e:22:e7:3a:22:29:b3:3d:
                    04:09:a9:01:48:5c:bf:f7:40:05:6d:7b:83:bd:5c:
                    99:8d:06:ef:a2:c6:79:56:91:62:f0:a7:9e:d4:1f:
                    bc:33:a1:38:a9:6d:cd:b7:85:1b:31:e8:ec:b0:2b:
                    7a:5a:4d:cd:1c:47:04:72:7c:53:2a:fe:d9:3d:b2:
                    a8:dc:09:86:65:53:89:ac:e3:3c:8d:5b:5e:0d:da:
                    89:c8:45:a3:45:bb:81:0a:f6:49:47:2f:1d:c9:a5:
                    54:aa:3d:73:37:a6:a4:11:0c:3a:78:21:50:df:89:
                    6c:c7:15:3f:98:04:48:de:1d:00:a2:58:8e:c4:5c:
                    d7:d4:d5:c3:0d:a1:65:35:14:2d:4a:09:b9:ba:11:
                    6a:55:75:5f:25:b2:d3:ce:d2:e4:60:be:f0:06:c1:
                    90:ba:fc:c0:e4:4d:79:73:5e:12:6b:e1:8b:1a:38:
                    b6:7c:ac:a1:5c:e0:3a:34:99:c4:28:a0:72:b8:53:
                    f4:1f:68:3f:d6:39:46:e8:5a:dc:48:89:47:cc:ef:
                    2a:03:d9:9c:92:4b:45:b1:82:d3:2a:47:cd:69:73:
                    70:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:25:AD:59:C3:50:8D:2F:E1:BC:A5:93:34:66:9C:6A:9E:29:19:4A
            X509v3 Authority Key Identifier:
                keyid:60:76:86:83:41:24:9B:61:C5:B5:42:87:21:D1:76:DF:30:24:90:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e60935bdbaf84edd159cb54bb8fad0298ca5126.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/634140a7-d7a1-4984-842a-89da493b06a9/25976e395e70ac4a19e57e1124794aefe0335b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/634140a7-d7a1-4984-842a-89da493b06a9/5e60935bdbaf84edd159cb54bb8fad0298ca5126.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:02:e9:ff:14:ac:3b:17:85:bb:0f:bf:b9:51:f5:bd:25:04:
         59:52:4a:55:93:be:8e:b3:0a:6b:5a:af:ad:43:2b:09:53:91:
         dd:c4:4e:f9:17:ec:fa:4f:75:ba:6a:82:ca:5e:5f:8d:3f:ad:
         d3:e6:fd:76:cf:f1:2d:f6:59:d9:56:a7:46:b9:60:80:b0:50:
         4e:b8:65:5d:85:21:94:52:69:89:21:d3:3d:7c:72:aa:98:06:
         00:1b:3c:67:11:08:8c:ae:3d:ed:0a:11:de:cb:e3:36:da:16:
         60:57:0f:a2:80:99:d6:b0:14:9d:bf:99:fc:a1:8f:de:79:8d:
         3c:85:d9:24:3e:2e:d5:93:18:de:c1:cb:cd:78:bb:36:40:e4:
         08:20:fb:7e:cd:cc:cb:de:db:35:42:af:43:b3:4d:4e:c4:39:
         4d:d4:ae:f0:24:4f:da:80:ff:6f:8b:05:5e:25:77:3f:9c:ec:
         e9:f1:8d:56:85:98:e8:04:85:32:e1:40:b5:2f:2b:6a:e4:31:
         e5:6a:ef:2f:df:24:34:0d:57:00:cf:15:24:ea:f2:35:70:9f:
         66:f8:f5:57:10:69:62:21:d5:17:55:c6:28:f9:08:a9:0b:45:
         08:e8:87:9f:56:fe:8b:53:91:42:c4:9e:5b:0b:eb:30:aa:9a:
         79:95:72:20
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGja3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVl
NjA5MzViZGJhZjg0ZWRkMTU5Y2I1NGJiOGZhZDAyOThjYTUxMjYwHhcNMjIwOTIx
MDU0MTU3WhcNMjQwOTIxMDU0MTU3WjAzMTEwLwYDVQQDEygyNTk3NmUzOTVlNzBh
YzRhMTllNTdlMTEyNDc5NGFlZmUwMzM1YjllMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjfO1vaj0qaOPdQkRvYY5Ds4URnTLJaaoXWhO/LBdgBQAWvJE
LiLnOiIpsz0ECakBSFy/90AFbXuDvVyZjQbvosZ5VpFi8Kee1B+8M6E4qW3Nt4Ub
MejssCt6Wk3NHEcEcnxTKv7ZPbKo3AmGZVOJrOM8jVteDdqJyEWjRbuBCvZJRy8d
yaVUqj1zN6akEQw6eCFQ34lsxxU/mARI3h0AoliOxFzX1NXDDaFlNRQtSgm5uhFq
VXVfJbLTztLkYL7wBsGQuvzA5E15c14Sa+GLGji2fKyhXOA6NJnEKKByuFP0H2g/
1jlG6FrcSIlHzO8qA9mckktFsYLTKkfNaXNw4wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMolrVnDUI0v4bylkzRmnGqeKRlKMB8GA1UdIwQYMBaAFGB2hoNBJJthxbVC
hyHRdt8wJJDoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWU2MDkz
NWJkYmFmODRlZGQxNTljYjU0YmI4ZmFkMDI5OGNhNTEyNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjM0MTQwYTctZDdhMS00OTg0LTg0MmEtODlkYTQ5
M2IwNmE5LzI1OTc2ZTM5NWU3MGFjNGExOWU1N2UxMTI0Nzk0YWVmZTAzMzViOWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MzQxNDBhNy1kN2ExLTQ5ODQtODQyYS04OWRh
NDkzYjA2YTkvNWU2MDkzNWJkYmFmODRlZGQxNTljYjU0YmI4ZmFkMDI5OGNhNTEy
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKjEjDANBgkqhkiG9w0BAQsFAAOCAQEAhALp/xSsOxeFuw+/
uVH1vSUEWVJKVZO+jrMKa1qvrUMrCVOR3cRO+Rfs+k91umqCyl5fjT+t0+b9ds/x
LfZZ2VanRrlggLBQTrhlXYUhlFJpiSHTPXxyqpgGABs8ZxEIjK497QoR3svjNtoW
YFcPooCZ1rAUnb+Z/KGP3nmNPIXZJD4u1ZMY3sHLzXi7NkDkCCD7fs3My97bNUKv
Q7NNTsQ5TdSu8CRP2oD/b4sFXiV3P5zs6fGNVoWY6ASFMuFAtS8rauQx5WrvL98k
NA1XAM8VJOryNXCfZvj1VxBpYiHVF1XGKPkIqQtFCOiHn1b+i1ORQsSeWwvrMKqa
eZVyIA==
-----END CERTIFICATE-----