Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/146e9f5cad1ea787bfdd83e91761794eec481017.roa
File:                     146e9f5cad1ea787bfdd83e91761794eec481017.roa (raw, json)
Hash identifier:          SaX62vBi7A1xxDm/O8sjF3hAoGfKFfKPd0dmjUWYCRg=
Subject key identifier:   EF:A3:6C:CF:11:D7:F7:C4:39:6A:9E:36:01:07:43:62:58:E5:11:B7
Certificate issuer:       /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial:       0D81B5
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/146e9f5cad1ea787bfdd83e91761794eec481017.roa
Signing time:             Wed 24 Mar 2021 14:34:52 +0000
ROA not before:           Wed 24 Mar 2021 14:34:51 +0000
ROA not after:            Tue 24 Mar 2026 14:34:51 +0000
asID:                     28094
IP address blocks:        190.242.32.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885173 (0xd81b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Validity
            Not Before: Mar 24 14:34:51 2021 GMT
            Not After : Mar 24 14:34:51 2026 GMT
        Subject: CN=146e9f5cad1ea787bfdd83e91761794eec481017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:60:d8:14:df:79:ca:d0:78:8d:8e:4c:a9:47:
                    7a:a3:f5:7e:c5:48:c5:93:e4:a8:9b:f7:ab:88:9b:
                    4f:29:91:d3:db:9a:05:c0:1e:af:6f:7f:13:ee:d9:
                    c7:98:69:f3:15:15:85:08:e8:53:45:fb:6a:3a:6f:
                    f4:cd:9f:ec:79:2a:b5:12:2d:2a:27:46:eb:33:b1:
                    fd:16:05:14:33:ca:9b:1c:9d:60:df:f1:c3:2b:53:
                    e2:1c:43:c7:73:04:35:de:dd:01:96:0d:5f:ce:55:
                    42:38:da:14:fd:b8:08:57:1a:fd:32:aa:e3:70:d7:
                    54:98:65:29:7d:4e:0b:9a:41:d1:23:8e:2a:4c:66:
                    3f:e4:9b:14:01:98:14:50:ca:59:a3:ab:82:f6:de:
                    3e:fb:1e:e6:24:77:fe:6e:6a:6d:be:25:d4:43:3e:
                    8c:18:b5:0e:88:5c:3a:4b:1e:1d:50:c4:39:18:a2:
                    07:b1:27:68:3c:bc:7a:a6:08:58:86:55:9a:61:53:
                    50:9b:0e:45:4a:df:6e:b0:18:8f:44:9d:ed:2f:15:
                    21:46:1a:88:29:16:ad:ba:38:cd:e0:2f:1e:77:44:
                    82:c8:17:4a:c7:86:a8:92:38:e0:27:14:df:cc:fb:
                    19:0c:24:d4:59:bf:ca:21:b3:2f:96:23:60:1d:ee:
                    1e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A3:6C:CF:11:D7:F7:C4:39:6A:9E:36:01:07:43:62:58:E5:11:B7
            X509v3 Authority Key Identifier:
                keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/146e9f5cad1ea787bfdd83e91761794eec481017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:74:49:a4:a4:c1:54:95:d0:89:dc:f8:34:aa:c5:9d:30:b3:
         79:33:a8:62:67:c2:01:34:63:7b:5a:43:6c:f5:22:f9:75:55:
         ed:55:53:b0:a3:bc:e4:b0:93:73:94:7f:27:57:c6:d0:7d:6f:
         f9:c9:7d:a5:99:20:68:ed:de:5e:a6:37:6e:ce:60:78:c8:0c:
         36:64:dd:65:66:17:6f:5a:37:7a:15:37:18:62:a7:ce:83:c2:
         b7:94:75:07:7c:a5:48:fa:dc:e6:c0:a2:7f:23:02:75:19:0f:
         a5:da:a5:4d:bf:9c:47:9f:0c:73:e8:8c:6d:fe:af:f4:22:dc:
         da:75:ec:85:9d:25:5d:f2:f8:4a:07:27:24:54:76:84:90:f8:
         85:c1:f2:3e:89:a4:0f:c3:50:52:10:6c:07:d5:b0:ef:a6:23:
         33:f9:4f:6f:73:9b:b0:2f:d0:cf:38:24:6d:fd:95:ca:cb:4c:
         7d:6d:77:03:3d:8f:22:36:a2:9e:d1:32:d7:3c:39:00:f2:77:
         40:52:c9:df:c5:11:ca:48:68:39:bf:8f:af:d1:45:9c:b8:1e:
         1a:55:d2:d3:dc:12:95:e1:50:5c:89:8b:31:d4:66:1c:1e:c5:
         3a:8b:b4:7e:58:aa:00:cb:be:84:02:8d:1c:4c:fc:ff:c4:75:
         54:6b:4a:a7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDYG1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYx
ZGVlNWI5NDkzM2IxYzEwMzc3ZmQ4NmVjOTcwZDNiNDExN2FlM2QwHhcNMjEwMzI0
MTQzNDUxWhcNMjYwMzI0MTQzNDUxWjAzMTEwLwYDVQQDEygxNDZlOWY1Y2FkMWVh
Nzg3YmZkZDgzZTkxNzYxNzk0ZWVjNDgxMDE3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhmDYFN95ytB4jY5MqUd6o/V+xUjFk+Som/eriJtPKZHT25oF
wB6vb38T7tnHmGnzFRWFCOhTRftqOm/0zZ/seSq1Ei0qJ0brM7H9FgUUM8qbHJ1g
3/HDK1PiHEPHcwQ13t0Blg1fzlVCONoU/bgIVxr9MqrjcNdUmGUpfU4LmkHRI44q
TGY/5JsUAZgUUMpZo6uC9t4++x7mJHf+bmptviXUQz6MGLUOiFw6Sx4dUMQ5GKIH
sSdoPLx6pghYhlWaYVNQmw5FSt9usBiPRJ3tLxUhRhqIKRatujjN4C8ed0SCyBdK
x4aokjjgJxTfzPsZDCTUWb/KIbMvliNgHe4egQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFO+jbM8R1/fEOWqeNgEHQ2JY5RG3MB8GA1UdIwQYMBaAFMzp856PZQjUy+Hu
JaXLHHMFbWyTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjFkZWU1
Yjk0OTMzYjFjMTAzNzdmZDg2ZWM5NzBkM2I0MTE3YWUzZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjdlZDkwMDgtYWUzNC00NGJlLTg4MmYtNTkzODEy
MDFiMWUxLzE0NmU5ZjVjYWQxZWE3ODdiZmRkODNlOTE3NjE3OTRlZWM0ODEwMTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82N2VkOTAwOC1hZTM0LTQ0YmUtODgyZi01OTM4
MTIwMWIxZTEvNjFkZWU1Yjk0OTMzYjFjMTAzNzdmZDg2ZWM5NzBkM2I0MTE3YWUz
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr7yIDANBgkqhkiG9w0BAQsFAAOCAQEAbnRJpKTBVJXQidz4
NKrFnTCzeTOoYmfCATRje1pDbPUi+XVV7VVTsKO85LCTc5R/J1fG0H1v+cl9pZkg
aO3eXqY3bs5geMgMNmTdZWYXb1o3ehU3GGKnzoPCt5R1B3ylSPrc5sCifyMCdRkP
pdqlTb+cR58Mc+iMbf6v9CLc2nXshZ0lXfL4SgcnJFR2hJD4hcHyPomkD8NQUhBs
B9Ww76YjM/lPb3ObsC/Qzzgkbf2VystMfW13Az2PIjaintEy1zw5APJ3QFLJ38UR
ykhoOb+Pr9FFnLgeGlXS09wSleFQXImLMdRmHB7FOou0fliqAMu+hAKNHEz8/8R1
VGtKpw==
-----END CERTIFICATE-----