Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/7acef6c9e0993f1eb0ef2c4939301a7c04259fc3.roa
File:                     7acef6c9e0993f1eb0ef2c4939301a7c04259fc3.roa (raw, json)
Hash identifier:          mpK1vLn0iORsB8KCSrNyzY0z2gH/zxmJ64Zy+epCn/A=
Subject key identifier:   DC:B5:BD:64:97:F1:8D:DE:0A:5B:8E:AC:AE:B2:61:80:E7:0D:01:6C
Certificate issuer:       /CN=2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82
Certificate serial:       0D25CF
Authority key identifier: 92:B6:4A:50:EF:06:00:D0:23:FF:00:07:AC:5F:C0:FD:73:E1:A9:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/7acef6c9e0993f1eb0ef2c4939301a7c04259fc3.roa
Signing time:             Tue 10 May 2022 17:24:11 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     271837
IP address blocks:        179.63.20.0/22 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861647 (0xd25cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=7acef6c9e0993f1eb0ef2c4939301a7c04259fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1f:e1:58:83:9d:34:9c:dd:03:54:fd:b4:ac:
                    4f:0b:e1:42:84:56:55:b8:6d:87:f8:d8:0f:0e:7e:
                    af:88:bb:2d:c5:25:fd:31:f6:af:07:f8:e9:c9:e9:
                    ad:62:c6:05:22:28:30:cc:dd:bd:40:d0:cf:b4:66:
                    8e:8c:8c:4e:63:fd:da:78:e1:3e:56:89:a0:c4:c6:
                    ee:f5:41:5e:7c:a4:73:5c:0f:74:3c:b1:9f:e3:fc:
                    de:5f:74:cd:94:39:33:64:72:0b:10:3f:7f:89:a7:
                    12:4a:05:2d:01:be:4a:5e:f6:15:76:9e:d5:62:5a:
                    88:b1:46:b3:98:f1:31:6d:90:b2:90:98:9d:f7:63:
                    c6:01:cb:97:70:6a:9a:13:91:f2:ad:05:75:4f:13:
                    97:fd:04:d1:4c:ba:b3:d0:30:ba:f5:0c:5a:61:56:
                    6c:d3:22:e7:32:88:1a:56:50:d9:c7:a3:e1:3d:81:
                    4c:0c:ea:9b:2c:09:ed:2f:a1:dd:de:2d:a0:45:0e:
                    92:0b:ee:3e:05:a5:e6:46:5e:f3:76:75:f3:1a:92:
                    f7:10:48:2c:6f:66:bb:92:93:72:59:60:b1:dd:dd:
                    28:6e:4d:6f:88:48:c1:25:5d:2e:06:eb:48:38:29:
                    52:7a:2d:16:01:86:68:44:13:5f:44:ac:c4:2d:c0:
                    ab:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B5:BD:64:97:F1:8D:DE:0A:5B:8E:AC:AE:B2:61:80:E7:0D:01:6C
            X509v3 Authority Key Identifier:
                keyid:92:B6:4A:50:EF:06:00:D0:23:FF:00:07:AC:5F:C0:FD:73:E1:A9:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/7acef6c9e0993f1eb0ef2c4939301a7c04259fc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:8a:c9:b6:78:0d:90:53:e8:92:02:54:97:76:7e:7b:71:bf:
         0d:dd:16:70:c4:0a:29:2e:35:d5:00:f1:ab:01:8a:e1:65:4f:
         95:9c:a5:42:45:b8:e7:a2:07:b4:ac:db:53:60:48:17:7b:62:
         99:d3:65:de:38:be:fa:7f:e7:85:f2:46:5b:94:dd:db:fa:c8:
         b5:8d:e9:c9:30:7d:67:47:e5:01:f3:48:42:ea:28:77:f9:e6:
         a4:b8:b7:f0:6c:4f:89:84:8d:98:37:bd:63:dc:5b:43:a5:6f:
         2b:7d:8e:aa:0f:34:09:24:e7:d6:ea:0c:23:7b:df:9c:08:5c:
         62:b9:ca:1c:ab:49:2e:8b:8a:33:57:59:4e:87:c4:14:a0:ac:
         38:18:c2:fc:b9:7e:27:75:fb:54:a2:df:24:56:44:40:4e:54:
         73:86:ae:ef:c6:77:d4:a0:42:db:0f:36:36:a2:8c:2b:d2:87:
         f8:8d:6a:11:86:59:de:4e:88:64:b2:5c:41:ec:f1:0f:6c:88:
         9f:7b:d5:6e:1a:95:c4:96:91:7f:b3:6f:7a:f2:0d:9e:5a:cc:
         ce:09:73:d2:e9:ea:f8:3c:60:b0:c8:0d:3a:50:a4:b7:e1:3d:
         7f:70:d4:f2:24:13:5c:03:8a:fc:2e:c8:da:ef:c0:d1:5b:ff:
         56:13:fc:e4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDSXPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJi
N2NkNGZiYmFiZmU1NTY1ZTIzMTUwZmE2ZjFlYzQ4YjRmZDNhODIwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg3YWNlZjZjOWUwOTkz
ZjFlYjBlZjJjNDkzOTMwMWE3YzA0MjU5ZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApB/hWIOdNJzdA1T9tKxPC+FChFZVuG2H+NgPDn6viLstxSX9
MfavB/jpyemtYsYFIigwzN29QNDPtGaOjIxOY/3aeOE+VomgxMbu9UFefKRzXA90
PLGf4/zeX3TNlDkzZHILED9/iacSSgUtAb5KXvYVdp7VYlqIsUazmPExbZCykJid
92PGAcuXcGqaE5HyrQV1TxOX/QTRTLqz0DC69QxaYVZs0yLnMogaVlDZx6PhPYFM
DOqbLAntL6Hd3i2gRQ6SC+4+BaXmRl7zdnXzGpL3EEgsb2a7kpNyWWCx3d0obk1v
iEjBJV0uButIOClSei0WAYZoRBNfRKzELcCrDwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNy1vWSX8Y3eCluOrK6yYYDnDQFsMB8GA1UdIwQYMBaAFJK2SlDvBgDQI/8A
B6xfwP1z4anTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmI3Y2Q0
ZmJiYWJmZTU1NjVlMjMxNTBmYTZmMWVjNDhiNGZkM2E4Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjUxYzYzYjctZTEzZS00M2JmLWIwMTAtMjY1Y2Ix
ZjBiMTgyLzdhY2VmNmM5ZTA5OTNmMWViMGVmMmM0OTM5MzAxYTdjMDQyNTlmYzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTFjNjNiNy1lMTNlLTQzYmYtYjAxMC0yNjVj
YjFmMGIxODIvMmI3Y2Q0ZmJiYWJmZTU1NjVlMjMxNTBmYTZmMWVjNDhiNGZkM2E4
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArM/FDANBgkqhkiG9w0BAQsFAAOCAQEACIrJtngNkFPokgJU
l3Z+e3G/Dd0WcMQKKS411QDxqwGK4WVPlZylQkW456IHtKzbU2BIF3timdNl3ji+
+n/nhfJGW5Td2/rItY3pyTB9Z0flAfNIQuood/nmpLi38GxPiYSNmDe9Y9xbQ6Vv
K32Oqg80CSTn1uoMI3vfnAhcYrnKHKtJLouKM1dZTofEFKCsOBjC/Ll+J3X7VKLf
JFZEQE5Uc4au78Z31KBC2w82NqKMK9KH+I1qEYZZ3k6IZLJcQezxD2yIn3vVbhqV
xJaRf7NvevINnlrMzglz0unq+DxgsMgNOlCkt+E9f3DU8iQTXAOK/C7I2u/A0Vv/
VhP85A==
-----END CERTIFICATE-----