Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/48e57726be2330438693ef1cd2d2fc01a295b2e7.roa
File:                     48e57726be2330438693ef1cd2d2fc01a295b2e7.roa (raw, json)
Hash identifier:          gVLvj23L6SplXgIObThkH2TcXf7kCPiQTGcQQnMXn2A=
Subject key identifier:   ED:FC:49:52:25:7B:61:76:7D:A0:32:64:10:1F:FF:9C:96:23:D0:A2
Certificate issuer:       /CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Certificate serial:       0D344A
Authority key identifier: AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/48e57726be2330438693ef1cd2d2fc01a295b2e7.roa
Signing time:             Wed 24 Mar 2021 14:43:09 +0000
ROA not before:           Wed 24 Mar 2021 14:43:08 +0000
ROA not after:            Tue 24 Mar 2026 14:43:08 +0000
asID:                     32098
IP address blocks:        187.251.4.0/23 maxlen: 23
                          187.251.8.0/23 maxlen: 23
                          187.251.12.0/23 maxlen: 23
                          187.251.16.0/23 maxlen: 23
                          187.251.18.0/23 maxlen: 23
                          187.251.20.0/24 maxlen: 24
                          187.251.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865354 (0xd344a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
        Validity
            Not Before: Mar 24 14:43:08 2021 GMT
            Not After : Mar 24 14:43:08 2026 GMT
        Subject: CN=48e57726be2330438693ef1cd2d2fc01a295b2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:30:d1:2e:16:56:74:73:92:e4:af:d6:f8:39:
                    61:96:82:a1:80:11:4c:eb:07:83:23:25:18:5d:9e:
                    99:48:19:60:bb:02:aa:f0:c4:d2:55:d9:5e:4c:22:
                    17:f4:dd:13:ee:47:c5:01:06:3f:61:75:06:81:76:
                    49:7a:c8:9b:13:43:a7:ba:9e:a3:f6:e5:cf:07:08:
                    a8:31:ed:3c:b9:a6:ab:bd:e7:db:ac:71:8f:8e:44:
                    c9:c8:49:29:85:7b:68:32:7e:8b:28:2e:14:63:87:
                    50:ff:4e:aa:e4:a3:63:31:2a:64:7e:e4:42:10:ff:
                    b3:ed:3f:04:dc:b2:9e:b9:ee:c9:0d:6f:03:5e:1c:
                    0d:9e:49:7f:92:31:a1:35:5c:99:f3:8d:80:16:4e:
                    ae:58:be:95:da:c7:13:d4:7d:b0:63:97:64:77:43:
                    21:26:c8:3c:f7:e8:72:a1:16:57:56:84:53:98:83:
                    15:d5:53:29:e9:f3:c9:fa:42:a3:ac:1f:e6:3b:fd:
                    16:4c:b7:56:a4:6f:3c:67:fb:83:a9:de:2b:a6:7a:
                    46:1f:54:0b:a5:21:5e:fd:5e:27:50:d7:5e:3f:8f:
                    83:96:7b:46:6d:81:79:85:1c:f3:a9:a4:9b:3b:d3:
                    70:3b:10:65:ef:f0:6e:2b:1a:7b:6b:26:88:80:8b:
                    85:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FC:49:52:25:7B:61:76:7D:A0:32:64:10:1F:FF:9C:96:23:D0:A2
            X509v3 Authority Key Identifier:
                keyid:AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/48e57726be2330438693ef1cd2d2fc01a295b2e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.4.0/23
                  187.251.8.0/23
                  187.251.12.0/23
                  187.251.16.0-187.251.21.255

    Signature Algorithm: sha256WithRSAEncryption
         04:c5:65:ee:56:ea:4e:2f:51:31:57:1d:6c:34:d6:5b:35:62:
         ce:62:fe:6d:86:59:42:82:a3:28:42:23:fc:46:10:06:c1:d8:
         21:49:0f:f6:d8:e2:ed:b0:b5:11:e4:ec:aa:6b:09:dc:1f:22:
         77:25:0c:95:3b:f1:10:84:a1:eb:cb:2d:69:5d:a3:38:3d:e7:
         be:55:84:76:9b:e3:4c:be:06:8b:39:bd:77:5e:4f:1c:00:5b:
         57:8e:8a:7a:d3:2e:e2:db:d8:69:2a:91:fa:64:27:1b:02:fe:
         40:f0:7f:47:40:bd:33:35:56:b0:ef:1b:81:6d:92:85:ec:a6:
         89:06:40:4e:e1:81:c0:59:07:86:c4:ea:1b:03:3c:06:cb:4d:
         a5:46:fd:c6:5e:bb:c5:0e:9e:bf:79:19:f2:b5:5f:3e:94:7b:
         ce:36:13:14:1c:e7:11:9a:82:e0:f6:6c:6a:8c:b7:5e:e2:a7:
         13:bf:d2:d0:bd:e3:40:82:c2:bc:d8:a0:cd:b5:30:77:d6:f3:
         19:d1:a8:ba:39:21:23:27:18:a4:9d:72:d5:3f:6c:4e:69:79:
         a8:27:64:f0:41:e6:2e:6c:a0:03:ba:95:11:51:f3:d4:ad:f0:
         c7:5b:9a:e6:c0:68:9b:48:f2:12:fa:14:38:3e:fd:ab:a9:0c:
         96:6b:d7:e9
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIDDTRKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNj
ZGI5ZTdhODdkNzJjOTBiYTc1OGEwZGM3MGYwOWIzMjgxY2IwZjEwHhcNMjEwMzI0
MTQ0MzA4WhcNMjYwMzI0MTQ0MzA4WjAzMTEwLwYDVQQDEyg0OGU1NzcyNmJlMjMz
MDQzODY5M2VmMWNkMmQyZmMwMWEyOTViMmU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkjDRLhZWdHOS5K/W+DlhloKhgBFM6weDIyUYXZ6ZSBlguwKq
8MTSVdleTCIX9N0T7kfFAQY/YXUGgXZJesibE0Onup6j9uXPBwioMe08uaarvefb
rHGPjkTJyEkphXtoMn6LKC4UY4dQ/06q5KNjMSpkfuRCEP+z7T8E3LKeue7JDW8D
XhwNnkl/kjGhNVyZ842AFk6uWL6V2scT1H2wY5dkd0MhJsg89+hyoRZXVoRTmIMV
1VMp6fPJ+kKjrB/mO/0WTLdWpG88Z/uDqd4rpnpGH1QLpSFe/V4nUNdeP4+DlntG
bYF5hRzzqaSbO9NwOxBl7/BuKxp7ayaIgIuFbwIDAQABo4ICdTCCAnEwHQYDVR0O
BBYEFO38SVIle2F2faAyZBAf/5yWI9CiMB8GA1UdIwQYMBaAFKx9fX6gnohRJYkL
T9FjI86fNoHnMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2NkYjll
N2E4N2Q3MmM5MGJhNzU4YTBkYzcwZjA5YjMyODFjYjBmMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmRlYjM5YjItZWU0OS00NjE5LTk5OGYtNzM2ODg2
MTY5Njk0LzQ4ZTU3NzI2YmUyMzMwNDM4NjkzZWYxY2QyZDJmYzAxYTI5NWIyZTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ZGViMzliMi1lZTQ5LTQ2MTktOTk4Zi03MzY4
ODYxNjk2OTQvM2NkYjllN2E4N2Q3MmM5MGJhNzU4YTBkYzcwZjA5YjMyODFjYjBm
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQq
MCgwJgQCAAEwIAMEAbv7BAMEAbv7CAMEAbv7DDAMAwQEu/sQAwQBu/sUMA0GCSqG
SIb3DQEBCwUAA4IBAQAExWXuVupOL1ExVx1sNNZbNWLOYv5thllCgqMoQiP8RhAG
wdghSQ/22OLtsLUR5OyqawncHyJ3JQyVO/EQhKHryy1pXaM4Pee+VYR2m+NMvgaL
Ob13Xk8cAFtXjop60y7i29hpKpH6ZCcbAv5A8H9HQL0zNVaw7xuBbZKF7KaJBkBO
4YHAWQeGxOobAzwGy02lRv3GXrvFDp6/eRnytV8+lHvONhMUHOcRmoLg9mxqjLde
4qcTv9LQveNAgsK82KDNtTB31vMZ0ai6OSEjJxiknXLVP2xOaXmoJ2TwQeYubKAD
upURUfPUrfDHW5rmwGibSPIS+hQ4Pv2rqQyWa9fp
-----END CERTIFICATE-----