Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/3f5d9920015f5d9b973f5dc4db349ec1a09bebcb.roa
File:                     3f5d9920015f5d9b973f5dc4db349ec1a09bebcb.roa (raw, json)
Hash identifier:          w/R14fgDzeGH/qEC2h3+/FT85zeKbRyw8/lEKoKJk1k=
Subject key identifier:   E9:16:70:DB:4D:4A:C7:EC:78:75:24:E3:34:F0:C3:BB:73:2D:59:91
Certificate issuer:       /CN=1bbd0b26e28ec0e225838e2cda93e25e122b332a
Certificate serial:       0C7515
Authority key identifier: 62:CB:ED:1B:21:A1:AD:2F:E5:F5:B2:63:B3:90:0D:90:EA:E1:C4:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bbd0b26e28ec0e225838e2cda93e25e122b332a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/3f5d9920015f5d9b973f5dc4db349ec1a09bebcb.roa
Signing time:             Wed 24 Mar 2021 14:41:33 +0000
ROA not before:           Wed 24 Mar 2021 14:41:32 +0000
ROA not after:            Tue 24 Mar 2026 14:41:32 +0000
asID:                     48252
IP address blocks:        45.169.164.0/22 maxlen: 24
                          2803:3a0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 816405 (0xc7515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bbd0b26e28ec0e225838e2cda93e25e122b332a
        Validity
            Not Before: Mar 24 14:41:32 2021 GMT
            Not After : Mar 24 14:41:32 2026 GMT
        Subject: CN=3f5d9920015f5d9b973f5dc4db349ec1a09bebcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:86:64:9b:6c:6a:92:15:03:ac:e3:ae:19:
                    6b:6e:ac:1c:e3:d1:95:74:39:46:4d:d7:01:f4:92:
                    5e:6c:23:a3:22:53:1b:d8:9d:90:3f:cc:55:3b:3f:
                    2f:48:af:1e:e3:ee:ea:40:39:eb:21:5d:35:4a:0a:
                    cb:a6:42:1a:f4:8c:15:c5:67:bb:c5:4b:7a:63:13:
                    82:d3:43:ff:43:8a:a5:68:25:07:f9:2e:b4:b6:82:
                    94:a4:e0:94:80:72:62:24:11:a9:48:f2:55:a1:74:
                    22:39:37:87:d6:88:71:58:ab:28:97:d4:53:ee:21:
                    80:1a:60:8c:dc:bb:c7:34:35:37:37:2b:d4:f8:25:
                    79:c1:07:12:52:57:cf:a3:45:cd:84:fa:60:25:cd:
                    07:d4:a6:3e:de:82:63:b2:35:2c:34:17:83:4d:aa:
                    25:f2:66:75:25:54:49:05:7a:d7:a2:6d:67:d6:55:
                    46:2b:df:c4:cc:4a:06:b8:5f:6c:2d:e5:79:ce:cf:
                    42:43:47:78:97:f8:00:5f:d6:58:d2:54:31:60:d6:
                    d8:99:cc:9b:14:9a:d3:8c:62:11:43:fb:9f:99:ad:
                    60:b9:d5:6f:e6:07:c1:5c:89:42:05:d1:35:f3:ab:
                    fc:7b:a9:4f:25:30:a6:13:fc:39:ae:d3:48:89:2f:
                    ce:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:16:70:DB:4D:4A:C7:EC:78:75:24:E3:34:F0:C3:BB:73:2D:59:91
            X509v3 Authority Key Identifier:
                keyid:62:CB:ED:1B:21:A1:AD:2F:E5:F5:B2:63:B3:90:0D:90:EA:E1:C4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bbd0b26e28ec0e225838e2cda93e25e122b332a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/3f5d9920015f5d9b973f5dc4db349ec1a09bebcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/1bbd0b26e28ec0e225838e2cda93e25e122b332a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.164.0/22
                IPv6:
                  2803:3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:56:fe:84:b7:3f:0a:34:15:10:76:86:d2:e9:41:d7:e4:55:
         d5:26:db:dc:55:d8:a0:49:98:29:7d:67:e4:e5:32:03:99:01:
         52:aa:68:71:09:0d:95:4b:15:ec:11:b8:c7:eb:0c:11:83:11:
         95:64:1b:10:fe:e4:3b:d7:7b:b2:28:a1:7f:e8:09:a5:de:65:
         7b:9f:f2:f9:51:bb:be:00:62:7e:b5:c4:a4:dc:a3:db:58:b1:
         f0:16:66:55:1d:13:68:6f:c6:ae:e4:27:0c:93:8e:18:dc:e8:
         fd:e0:d4:3f:37:34:d5:76:04:e0:8e:ea:1a:6a:06:2e:b0:07:
         48:8b:76:05:d0:47:99:21:ef:10:17:2f:76:70:be:87:ac:16:
         0c:d8:c3:d0:e1:31:d2:b2:18:c1:10:ec:ab:2b:6a:36:22:49:
         1e:7c:de:7d:4c:37:32:08:c4:01:c2:6a:65:73:b9:3a:ce:d3:
         bf:c6:26:23:9b:df:59:52:68:cd:0d:1c:0e:1c:6f:29:57:59:
         54:00:5f:52:12:be:f3:b9:5e:f0:c2:c5:27:8f:d1:34:07:d2:
         66:d6:d7:ee:00:8d:14:60:9f:f9:6f:14:2d:4c:7a:87:1f:c8:
         7a:97:b5:8e:3a:94:00:4f:12:b3:a5:c1:af:d0:cc:17:46:8c:
         57:57:9f:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDHUVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFi
YmQwYjI2ZTI4ZWMwZTIyNTgzOGUyY2RhOTNlMjVlMTIyYjMzMmEwHhcNMjEwMzI0
MTQ0MTMyWhcNMjYwMzI0MTQ0MTMyWjAzMTEwLwYDVQQDEygzZjVkOTkyMDAxNWY1
ZDliOTczZjVkYzRkYjM0OWVjMWEwOWJlYmNiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArPOGZJtsapIVA6zjrhlrbqwc49GVdDlGTdcB9JJebCOjIlMb
2J2QP8xVOz8vSK8e4+7qQDnrIV01SgrLpkIa9IwVxWe7xUt6YxOC00P/Q4qlaCUH
+S60toKUpOCUgHJiJBGpSPJVoXQiOTeH1ohxWKsol9RT7iGAGmCM3LvHNDU3NyvU
+CV5wQcSUlfPo0XNhPpgJc0H1KY+3oJjsjUsNBeDTaol8mZ1JVRJBXrXom1n1lVG
K9/EzEoGuF9sLeV5zs9CQ0d4l/gAX9ZY0lQxYNbYmcybFJrTjGIRQ/ufma1gudVv
5gfBXIlCBdE186v8e6lPJTCmE/w5rtNIiS/O6wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFOkWcNtNSsfseHUk4zTww7tzLVmRMB8GA1UdIwQYMBaAFGLL7Rshoa0v5fWy
Y7OQDZDq4cQFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWJiZDBi
MjZlMjhlYzBlMjI1ODM4ZTJjZGE5M2UyNWUxMjJiMzMyYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjg1YjY1OGMtODNjMy00NTQyLTkyOTktYWY1Y2Fj
NWIyZWZlLzNmNWQ5OTIwMDE1ZjVkOWI5NzNmNWRjNGRiMzQ5ZWMxYTA5YmViY2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ODViNjU4Yy04M2MzLTQ1NDItOTI5OS1hZjVj
YWM1YjJlZmUvMWJiZDBiMjZlMjhlYzBlMjI1ODM4ZTJjZGE5M2UyNWUxMjJiMzMy
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2ppDANBAIAAjAHAwUAKAMDoDANBgkqhkiG9w0BAQsFAAOC
AQEAGlb+hLc/CjQVEHaG0ulB1+RV1Sbb3FXYoEmYKX1n5OUyA5kBUqpocQkNlUsV
7BG4x+sMEYMRlWQbEP7kO9d7siihf+gJpd5le5/y+VG7vgBifrXEpNyj21ix8BZm
VR0TaG/GruQnDJOOGNzo/eDUPzc01XYE4I7qGmoGLrAHSIt2BdBHmSHvEBcvdnC+
h6wWDNjD0OEx0rIYwRDsqytqNiJJHnzefUw3MgjEAcJqZXO5Os7Tv8YmI5vfWVJo
zQ0cDhxvKVdZVABfUhK+87le8MLFJ4/RNAfSZtbX7gCNFGCf+W8ULUx6hx/Iepe1
jjqUAE8Ss6XBr9DMF0aMV1efPQ==
-----END CERTIFICATE-----