Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67b128d5-859d-42df-9e5d-2b852b3887dc/8b6fe29d003e1156cde1e384e97d0cf7f4399c64.roa
File:                     8b6fe29d003e1156cde1e384e97d0cf7f4399c64.roa (raw, json)
Hash identifier:          wgsPplF14uzdpHKeoEx57ZIg41TfToeRd9GLLem6Ars=
Subject key identifier:   3E:5C:8E:0C:81:EF:17:6B:1B:DE:66:E6:C2:02:77:C7:57:EB:B8:8C
Certificate issuer:       /CN=01841a826a17e6bb639e5155153b2415763ecb52
Certificate serial:       208E
Authority key identifier: 64:DF:4C:43:49:C5:AF:E3:28:C3:4B:3E:A2:85:47:9F:FE:6E:3C:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01841a826a17e6bb639e5155153b2415763ecb52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67b128d5-859d-42df-9e5d-2b852b3887dc/8b6fe29d003e1156cde1e384e97d0cf7f4399c64.roa
Signing time:             Mon 16 Aug 2021 16:12:53 +0000
ROA not before:           Tue 10 Aug 2021 03:00:00 +0000
ROA not after:            Thu 10 Aug 2023 03:00:00 +0000
asID:                     11340
IP address blocks:        152.74.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8334 (0x208e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01841a826a17e6bb639e5155153b2415763ecb52
        Validity
            Not Before: Aug 10 03:00:00 2021 GMT
            Not After : Aug 10 03:00:00 2023 GMT
        Subject: CN=8b6fe29d003e1156cde1e384e97d0cf7f4399c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:97:b9:72:16:8f:d1:16:f9:59:c3:da:94:c9:
                    84:e9:da:9b:95:e9:93:6d:1c:29:f1:19:63:d2:e7:
                    9e:02:2a:7a:08:e4:cd:63:9c:56:8d:32:7d:06:a3:
                    99:fd:b7:4e:fb:12:86:6f:df:a2:0b:b3:c2:76:6d:
                    8e:48:ea:de:6e:b7:50:4f:90:b7:9b:90:65:18:01:
                    cd:61:b3:85:03:2f:b3:c1:56:80:9a:16:c0:44:31:
                    43:50:c9:d0:b5:d0:ed:db:71:1d:07:c2:45:ed:8a:
                    77:e8:21:7f:9b:86:b8:35:8a:09:62:ea:b1:3d:6b:
                    aa:16:29:94:ba:76:78:37:73:44:be:a4:53:f4:65:
                    aa:f1:e1:96:22:6b:79:30:88:6e:6f:d4:9e:4d:59:
                    a9:6a:7d:5b:ed:83:e6:49:31:7e:c6:24:0a:ac:93:
                    64:f3:4b:48:d7:7a:cc:32:16:18:2d:f9:55:0a:10:
                    1f:fa:d2:bf:49:66:48:3f:c2:cb:88:21:22:d7:48:
                    d3:da:40:90:ce:8b:d7:ac:78:54:0f:2d:1d:c1:93:
                    1d:c0:8c:f9:a0:4c:cb:06:1c:c3:2e:dc:3a:50:bf:
                    56:bb:48:56:83:93:48:43:69:9b:2d:b6:c4:63:32:
                    3d:f6:37:11:87:36:3a:38:3a:95:5e:80:c4:27:28:
                    5e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5C:8E:0C:81:EF:17:6B:1B:DE:66:E6:C2:02:77:C7:57:EB:B8:8C
            X509v3 Authority Key Identifier:
                keyid:64:DF:4C:43:49:C5:AF:E3:28:C3:4B:3E:A2:85:47:9F:FE:6E:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01841a826a17e6bb639e5155153b2415763ecb52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67b128d5-859d-42df-9e5d-2b852b3887dc/8b6fe29d003e1156cde1e384e97d0cf7f4399c64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67b128d5-859d-42df-9e5d-2b852b3887dc/01841a826a17e6bb639e5155153b2415763ecb52.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.74.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         07:f0:7e:c0:fa:ec:48:a9:b0:a8:96:23:1e:8b:87:74:d4:d5:
         c4:9c:ad:fe:77:63:fc:db:78:5a:ed:f7:e0:d8:0e:63:c1:18:
         d1:b3:98:6a:45:97:28:2c:04:90:7d:5d:02:a6:b0:2f:93:dc:
         2d:18:1c:f0:8d:12:be:11:25:76:d1:17:d4:b5:6f:5f:7b:07:
         91:e0:98:d5:fa:ce:ea:b7:fa:d4:2c:31:79:bc:6d:69:ca:f3:
         f0:f5:84:cd:e4:e7:4a:a4:4e:12:b0:e6:e9:a4:15:08:f2:c5:
         0e:f5:99:f0:12:df:d3:07:82:1e:50:81:9c:d9:19:ae:7c:bb:
         ec:d5:5b:dd:0f:a3:a6:83:01:19:f5:56:ca:f6:19:8e:58:17:
         92:36:ed:b6:76:28:d4:82:4e:7c:3f:f9:8e:d7:64:ef:9c:bf:
         d3:eb:e9:9f:79:72:b8:f6:e5:a6:4a:5f:04:a1:b2:24:02:19:
         30:31:eb:ba:2c:dc:30:05:ec:a6:3d:33:a1:60:e3:69:d6:70:
         bd:05:49:ce:de:12:c1:e8:3e:3f:40:48:4e:63:d9:f8:af:f4:
         1c:d9:d4:45:63:23:e9:5c:12:50:8c:c7:fc:e0:37:f6:59:c4:
         57:b6:ad:ac:0f:87:67:85:a8:02:77:35:6d:45:03:8f:a6:c6:
         83:01:ef:e9
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICII4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDE4
NDFhODI2YTE3ZTZiYjYzOWU1MTU1MTUzYjI0MTU3NjNlY2I1MjAeFw0yMTA4MTAw
MzAwMDBaFw0yMzA4MTAwMzAwMDBaMDMxMTAvBgNVBAMTKDhiNmZlMjlkMDAzZTEx
NTZjZGUxZTM4NGU5N2QwY2Y3ZjQzOTljNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCOl7lyFo/RFvlZw9qUyYTp2puV6ZNtHCnxGWPS554CKnoI5M1j
nFaNMn0Go5n9t077EoZv36ILs8J2bY5I6t5ut1BPkLebkGUYAc1hs4UDL7PBVoCa
FsBEMUNQydC10O3bcR0HwkXtinfoIX+bhrg1igli6rE9a6oWKZS6dng3c0S+pFP0
Zarx4ZYia3kwiG5v1J5NWalqfVvtg+ZJMX7GJAqsk2TzS0jXeswyFhgt+VUKEB/6
0r9JZkg/wsuIISLXSNPaQJDOi9eseFQPLR3Bkx3AjPmgTMsGHMMu3DpQv1a7SFaD
k0hDaZsttsRjMj32NxGHNjo4OpVegMQnKF75AgMBAAGjggJaMIICVjAdBgNVHQ4E
FgQUPlyODIHvF2sb3mbmwgJ3x1fruIwwHwYDVR0jBBgwFoAUZN9MQ0nFr+Mow0s+
ooVHn/5uPLswDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8wMTg0MWE4
MjZhMTdlNmJiNjM5ZTUxNTUxNTNiMjQxNTc2M2VjYjUyLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy82N2IxMjhkNS04NTlkLTQyZGYtOWU1ZC0yYjg1MmIz
ODg3ZGMvOGI2ZmUyOWQwMDNlMTE1NmNkZTFlMzg0ZTk3ZDBjZjdmNDM5OWM2NC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzY3YjEyOGQ1LTg1OWQtNDJkZi05ZTVkLTJiODUy
YjM4ODdkYy8wMTg0MWE4MjZhMTdlNmJiNjM5ZTUxNTUxNTNiMjQxNTc2M2VjYjUy
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8w
DTALBAIAATAFAwMAmEowDQYJKoZIhvcNAQELBQADggEBAAfwfsD67EipsKiWIx6L
h3TU1cScrf53Y/zbeFrt9+DYDmPBGNGzmGpFlygsBJB9XQKmsC+T3C0YHPCNEr4R
JXbRF9S1b197B5HgmNX6zuq3+tQsMXm8bWnK8/D1hM3k50qkThKw5umkFQjyxQ71
mfAS39MHgh5QgZzZGa58u+zVW90Po6aDARn1Vsr2GY5YF5I27bZ2KNSCTnw/+Y7X
ZO+cv9Pr6Z95crj25aZKXwShsiQCGTAx67os3DAF7KY9M6Fg42nWcL0FSc7eEsHo
Pj9ASE5j2fiv9BzZ1EVjI+lcElCMx/zgN/ZZxFe2rawPh2eFqAJ3NW1FA4+mxoMB
7+k=
-----END CERTIFICATE-----