Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66878e2d-2037-43a0-8432-7dba374cc44b/e9aaf65d9dd82b1356c564cc27a58dffcde5a068.roa
File:                     e9aaf65d9dd82b1356c564cc27a58dffcde5a068.roa (raw, json)
Hash identifier:          XvX169gIjmghPR0sfGOQJPN1IamqL9LTCtLonodhK/k=
Subject key identifier:   DF:D0:4F:57:31:18:1E:79:31:87:E3:54:79:85:60:07:BB:B0:E5:9B
Certificate issuer:       /CN=70bd51b247bb1c40b4d3b6bb2f7bd567d86e8287
Certificate serial:       0C963A
Authority key identifier: 80:14:79:54:5E:0A:B4:F5:6E:58:C3:EA:7A:D6:4E:DB:A8:5A:A6:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70bd51b247bb1c40b4d3b6bb2f7bd567d86e8287.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66878e2d-2037-43a0-8432-7dba374cc44b/e9aaf65d9dd82b1356c564cc27a58dffcde5a068.roa
Signing time:             Tue 08 Feb 2022 02:35:59 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27964
IP address blocks:        201.49.132.0/22 maxlen: 24
                          2803:6ee0::/32 maxlen: 64

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 19:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 824890 (0xc963a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70bd51b247bb1c40b4d3b6bb2f7bd567d86e8287
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=e9aaf65d9dd82b1356c564cc27a58dffcde5a068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c9:6a:5e:ae:f3:06:35:07:fb:e6:7c:f9:80:
                    e3:bf:8f:6c:fa:17:71:67:3f:81:13:99:96:15:c6:
                    b3:bd:7e:d8:b8:1b:ee:39:b8:10:d7:4f:96:92:a3:
                    98:1b:e7:d5:ee:42:d7:26:44:8c:80:e0:2e:07:ca:
                    62:49:93:aa:cf:31:c5:7d:7b:c9:8a:15:b5:4f:bd:
                    4c:95:6e:f3:cb:4a:63:91:4f:e5:1c:af:24:ee:a6:
                    ba:56:7c:32:45:38:6a:7a:be:e9:13:d2:11:99:b9:
                    ef:ee:3d:19:c6:7c:01:2f:f5:9c:d0:eb:4c:69:0f:
                    e6:ae:1c:fe:d6:72:1b:01:c6:ff:9c:81:4a:bc:b4:
                    d4:f8:f2:ca:a0:e7:53:9d:73:12:0b:e9:f7:99:03:
                    d7:31:e7:12:eb:e0:d5:b0:ad:b7:92:0b:46:21:5f:
                    2f:88:a1:d3:5d:da:0a:d3:db:8d:9c:e9:1d:a0:d1:
                    d0:4e:26:7e:61:fc:c2:11:d9:67:b1:39:90:06:7a:
                    d5:27:89:e5:59:3b:aa:c6:65:a5:51:9d:f1:e8:b0:
                    b5:59:f6:f2:42:d7:4b:56:99:ba:98:2a:3c:c2:51:
                    02:fe:f2:9e:3f:73:fa:3a:37:d4:6e:fd:16:ed:5c:
                    cd:85:54:8d:74:f6:c3:06:f6:8e:1c:c3:58:08:8f:
                    1d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D0:4F:57:31:18:1E:79:31:87:E3:54:79:85:60:07:BB:B0:E5:9B
            X509v3 Authority Key Identifier:
                keyid:80:14:79:54:5E:0A:B4:F5:6E:58:C3:EA:7A:D6:4E:DB:A8:5A:A6:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70bd51b247bb1c40b4d3b6bb2f7bd567d86e8287.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66878e2d-2037-43a0-8432-7dba374cc44b/e9aaf65d9dd82b1356c564cc27a58dffcde5a068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66878e2d-2037-43a0-8432-7dba374cc44b/70bd51b247bb1c40b4d3b6bb2f7bd567d86e8287.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.132.0/22
                IPv6:
                  2803:6ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:e5:b6:6a:6e:4d:49:63:ee:c5:bb:ff:29:3d:84:44:17:99:
         b9:4a:90:59:00:78:1f:32:6b:7a:d6:ad:f9:44:42:d0:c8:c0:
         30:75:d5:a2:31:4d:00:01:14:53:5a:92:19:fd:6b:f5:9d:c7:
         b0:94:ca:14:07:b1:09:aa:13:de:7a:17:d1:44:ad:97:b7:dc:
         28:b3:92:e4:46:3f:e4:96:b2:41:77:c0:0d:35:52:78:ba:3d:
         27:21:f0:7c:07:71:ec:07:26:2f:59:83:b3:d0:4e:2a:c5:88:
         b8:3e:8d:da:1f:69:bf:15:7f:69:e6:a9:f1:f1:36:38:03:56:
         d0:3b:f8:36:50:00:8a:f3:14:fb:a1:20:38:75:63:ca:a1:74:
         a3:c4:0c:ca:5e:49:51:f9:76:f9:c9:e4:04:14:54:54:b6:ac:
         01:5d:24:4d:86:fe:3e:f9:3f:9d:7d:33:91:64:21:02:a3:f8:
         a6:a1:ae:d4:4f:3a:2c:d0:48:bd:f5:21:40:e0:6d:ce:5d:b2:
         c2:94:94:14:3a:30:de:8a:aa:34:f9:2e:a6:36:63:63:83:6c:
         25:aa:3b:07:68:d7:1e:c1:5a:be:58:e5:8d:ee:bd:66:4c:50:
         e2:9c:45:3e:6e:30:27:1f:7a:ec:e3:7e:0e:db:aa:75:5a:29:
         19:d9:b7:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDJY6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcw
YmQ1MWIyNDdiYjFjNDBiNGQzYjZiYjJmN2JkNTY3ZDg2ZTgyODcwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhlOWFhZjY1ZDlkZDgy
YjEzNTZjNTY0Y2MyN2E1OGRmZmNkZTVhMDY4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzclqXq7zBjUH++Z8+YDjv49s+hdxZz+BE5mWFcazvX7YuBvu
ObgQ10+WkqOYG+fV7kLXJkSMgOAuB8piSZOqzzHFfXvJihW1T71MlW7zy0pjkU/l
HK8k7qa6VnwyRThqer7pE9IRmbnv7j0ZxnwBL/Wc0OtMaQ/mrhz+1nIbAcb/nIFK
vLTU+PLKoOdTnXMSC+n3mQPXMecS6+DVsK23kgtGIV8viKHTXdoK09uNnOkdoNHQ
TiZ+YfzCEdlnsTmQBnrVJ4nlWTuqxmWlUZ3x6LC1WfbyQtdLVpm6mCo8wlEC/vKe
P3P6OjfUbv0W7VzNhVSNdPbDBvaOHMNYCI8d9wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFN/QT1cxGB55MYfjVHmFYAe7sOWbMB8GA1UdIwQYMBaAFIAUeVReCrT1bljD
6nrWTtuoWqYtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzBiZDUx
YjI0N2JiMWM0MGI0ZDNiNmJiMmY3YmQ1NjdkODZlODI4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjY4NzhlMmQtMjAzNy00M2EwLTg0MzItN2RiYTM3
NGNjNDRiL2U5YWFmNjVkOWRkODJiMTM1NmM1NjRjYzI3YTU4ZGZmY2RlNWEwNjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82Njg3OGUyZC0yMDM3LTQzYTAtODQzMi03ZGJh
Mzc0Y2M0NGIvNzBiZDUxYjI0N2JiMWM0MGI0ZDNiNmJiMmY3YmQ1NjdkODZlODI4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAskxhDANBAIAAjAHAwUAKANu4DANBgkqhkiG9w0BAQsFAAOC
AQEABOW2am5NSWPuxbv/KT2ERBeZuUqQWQB4HzJretat+URC0MjAMHXVojFNAAEU
U1qSGf1r9Z3HsJTKFAexCaoT3noX0UStl7fcKLOS5EY/5JayQXfADTVSeLo9JyHw
fAdx7AcmL1mDs9BOKsWIuD6N2h9pvxV/aeap8fE2OANW0Dv4NlAAivMU+6EgOHVj
yqF0o8QMyl5JUfl2+cnkBBRUVLasAV0kTYb+Pvk/nX0zkWQhAqP4pqGu1E86LNBI
vfUhQOBtzl2ywpSUFDow3oqqNPkupjZjY4NsJao7B2jXHsFavljlje69ZkxQ4pxF
Pm4wJx967ON+DtuqdVopGdm3/A==
-----END CERTIFICATE-----