Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/d5bf52be40f8442292a4fbbca2382eed26c71f9b.roa
File:                     d5bf52be40f8442292a4fbbca2382eed26c71f9b.roa (raw, json)
Hash identifier:          r5q5y5IiqyY9eX/TEfAK7wk2f1hRvNxb/P/bfty2YDI=
Subject key identifier:   5A:71:93:1F:10:2A:57:AC:AF:42:80:46:E5:10:92:41:E7:63:A3:88
Certificate issuer:       /CN=2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82
Certificate serial:       0D2B18
Authority key identifier: 92:B6:4A:50:EF:06:00:D0:23:FF:00:07:AC:5F:C0:FD:73:E1:A9:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/d5bf52be40f8442292a4fbbca2382eed26c71f9b.roa
Signing time:             Tue 10 May 2022 17:24:51 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     264668
IP address blocks:        179.63.20.0/22 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 863000 (0xd2b18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=d5bf52be40f8442292a4fbbca2382eed26c71f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:6b:3a:fe:da:e4:53:bd:b1:a1:9a:5d:c0:
                    eb:44:02:25:2e:d2:8d:8a:de:75:64:7e:14:4f:d9:
                    dc:e0:25:0c:90:78:e5:ed:dd:0b:a0:70:ac:bf:cd:
                    8e:97:9f:b0:25:0d:08:fa:e6:f6:d7:ba:3b:eb:e3:
                    85:57:09:04:fc:a9:20:a4:40:2a:33:67:0d:23:b8:
                    41:2f:b1:1c:5a:71:2c:db:62:2b:60:5f:46:3b:75:
                    47:2b:6c:c7:20:65:c3:13:52:ff:e5:ec:bd:e2:2c:
                    c6:39:18:68:4e:23:f8:e0:b5:41:db:9d:7b:3e:a7:
                    2a:f6:5f:02:11:40:4b:d3:40:c8:81:56:c0:a3:dc:
                    b5:90:77:cd:b6:e6:41:d1:8c:24:53:d2:5f:c5:ff:
                    9a:4d:b1:67:68:1f:48:9c:9c:02:8b:98:d9:a3:0b:
                    c6:61:af:70:30:2f:21:5f:4a:fd:ba:12:d0:06:54:
                    0a:8b:ba:1d:ae:c8:a0:4a:11:96:03:bc:f6:e2:8a:
                    07:84:6f:f7:65:8a:10:27:9c:ba:78:17:fc:27:b1:
                    ad:1b:ef:1e:27:c0:39:01:54:5e:09:fc:2b:0f:95:
                    a9:da:3e:f1:ee:32:db:03:41:fc:23:3b:f4:a6:12:
                    35:03:e4:72:68:f7:39:d4:f4:61:b2:ea:2d:5b:67:
                    d1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:71:93:1F:10:2A:57:AC:AF:42:80:46:E5:10:92:41:E7:63:A3:88
            X509v3 Authority Key Identifier:
                keyid:92:B6:4A:50:EF:06:00:D0:23:FF:00:07:AC:5F:C0:FD:73:E1:A9:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/d5bf52be40f8442292a4fbbca2382eed26c71f9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:04:00:13:1b:b4:0d:14:b3:56:1e:ac:cd:d9:23:6c:2c:06:
         72:1a:87:fa:7f:a7:c8:97:21:58:4d:22:a5:e2:f4:78:65:01:
         d0:29:63:8b:52:49:17:a2:47:c6:1d:a3:61:6d:a5:0e:d9:39:
         33:26:36:e6:ed:a7:b9:33:ac:cf:78:79:2c:ec:10:02:fc:40:
         85:05:ab:f3:d8:8a:1b:77:a4:3a:8b:b8:02:05:67:4c:f8:45:
         d7:59:5c:0a:d5:c3:36:3d:b9:55:fa:d2:a0:40:78:b5:72:50:
         a5:1d:50:c4:3a:bc:ca:55:c8:6c:e2:17:46:f6:90:81:ed:ff:
         e5:1a:f3:4b:b3:3e:82:8c:28:d3:b3:15:a7:b6:57:01:9a:a7:
         fc:4f:eb:7c:b6:f5:ef:77:7d:a2:8a:7d:c7:49:cb:4e:c9:75:
         bd:4e:c0:77:3d:71:96:13:6d:2c:af:df:00:b1:4b:d8:29:ff:
         14:ab:c6:c0:71:0e:47:2e:87:3f:6f:bf:4c:c5:c2:77:71:cb:
         b6:fc:7a:51:81:6d:9a:7e:3a:57:2e:cb:46:82:42:72:ef:cc:
         66:83:22:79:a4:57:0c:5a:91:86:9f:d4:09:fe:a8:d5:e7:19:
         43:2e:62:52:51:c2:b6:e0:3b:d1:81:ff:81:2b:f4:3b:3d:2e:
         f4:8d:5e:f2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDSsYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJi
N2NkNGZiYmFiZmU1NTY1ZTIzMTUwZmE2ZjFlYzQ4YjRmZDNhODIwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhkNWJmNTJiZTQwZjg0
NDIyOTJhNGZiYmNhMjM4MmVlZDI2YzcxZjliMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuotrOv7a5FO9saGaXcDrRAIlLtKNit51ZH4UT9nc4CUMkHjl
7d0LoHCsv82Ol5+wJQ0I+ub217o76+OFVwkE/KkgpEAqM2cNI7hBL7EcWnEs22Ir
YF9GO3VHK2zHIGXDE1L/5ey94izGORhoTiP44LVB2517Pqcq9l8CEUBL00DIgVbA
o9y1kHfNtuZB0YwkU9Jfxf+aTbFnaB9InJwCi5jZowvGYa9wMC8hX0r9uhLQBlQK
i7odrsigShGWA7z24ooHhG/3ZYoQJ5y6eBf8J7GtG+8eJ8A5AVReCfwrD5Wp2j7x
7jLbA0H8Izv0phI1A+RyaPc51PRhsuotW2fRxQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFpxkx8QKlesr0KARuUQkkHnY6OIMB8GA1UdIwQYMBaAFJK2SlDvBgDQI/8A
B6xfwP1z4anTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmI3Y2Q0
ZmJiYWJmZTU1NjVlMjMxNTBmYTZmMWVjNDhiNGZkM2E4Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjUxYzYzYjctZTEzZS00M2JmLWIwMTAtMjY1Y2Ix
ZjBiMTgyL2Q1YmY1MmJlNDBmODQ0MjI5MmE0ZmJiY2EyMzgyZWVkMjZjNzFmOWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTFjNjNiNy1lMTNlLTQzYmYtYjAxMC0yNjVj
YjFmMGIxODIvMmI3Y2Q0ZmJiYWJmZTU1NjVlMjMxNTBmYTZmMWVjNDhiNGZkM2E4
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArM/FDANBgkqhkiG9w0BAQsFAAOCAQEAKgQAExu0DRSzVh6s
zdkjbCwGchqH+n+nyJchWE0ipeL0eGUB0Clji1JJF6JHxh2jYW2lDtk5MyY25u2n
uTOsz3h5LOwQAvxAhQWr89iKG3ekOou4AgVnTPhF11lcCtXDNj25VfrSoEB4tXJQ
pR1QxDq8ylXIbOIXRvaQge3/5RrzS7M+gowo07MVp7ZXAZqn/E/rfLb173d9oop9
x0nLTsl1vU7Adz1xlhNtLK/fALFL2Cn/FKvGwHEORy6HP2+/TMXCd3HLtvx6UYFt
mn46Vy7LRoJCcu/MZoMieaRXDFqRhp/UCf6o1ecZQy5iUlHCtuA70YH/gSv0Oz0u
9I1e8g==
-----END CERTIFICATE-----