Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/87015def017c00791488904a2ca06b07f5d0d57b.roa
File:                     87015def017c00791488904a2ca06b07f5d0d57b.roa (raw, json)
Hash identifier:          vSH/qZ5lsGYegYtx4xocHp1LX9+MW5scKaMhhFubSkE=
Subject key identifier:   45:66:6D:A6:CF:11:91:4D:52:B7:E1:B7:17:8E:89:F3:8F:17:2B:23
Certificate issuer:       /CN=4ec9e37ddb578cbbdc4e2281b37679864d80672b
Certificate serial:       10FB94
Authority key identifier: 6A:32:EA:0E:A5:50:8E:89:35:14:6E:9E:46:73:44:A0:B1:21:57:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec9e37ddb578cbbdc4e2281b37679864d80672b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/87015def017c00791488904a2ca06b07f5d0d57b.roa
Signing time:             Fri 03 Sep 2021 11:12:21 +0000
ROA not before:           Fri 03 Sep 2021 03:00:00 +0000
ROA not after:            Thu 02 Sep 2027 03:00:00 +0000
asID:                     60022
IP address blocks:        190.105.192.0/24 maxlen: 24
                          190.121.208.0/23 maxlen: 23
                          190.121.213.0/24 maxlen: 24
                          190.121.214.0/23 maxlen: 23
                          190.121.216.0/23 maxlen: 23
                          190.121.218.0/23 maxlen: 23
                          190.121.220.0/23 maxlen: 23
                          190.121.222.0/24 maxlen: 24
                          2803:f500::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1112980 (0x10fb94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec9e37ddb578cbbdc4e2281b37679864d80672b
        Validity
            Not Before: Sep  3 03:00:00 2021 GMT
            Not After : Sep  2 03:00:00 2027 GMT
        Subject: CN=87015def017c00791488904a2ca06b07f5d0d57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fc:5e:9f:10:89:a4:88:07:a1:d9:1e:35:b7:
                    c5:91:27:e5:3e:c5:f6:d0:a5:b2:7a:92:be:b6:97:
                    f3:59:d2:cb:62:31:7c:ba:8f:14:2f:a9:0f:0d:96:
                    40:47:5d:5e:30:fb:df:34:87:59:c6:69:2f:99:73:
                    9a:e9:c9:71:78:03:de:b6:10:02:78:d5:37:12:3e:
                    2b:6d:49:e0:b4:91:86:f4:3c:38:fd:89:1f:0d:4a:
                    b8:ff:3e:dd:6b:60:fa:a1:35:81:bc:e2:cb:16:7e:
                    36:2a:d8:56:de:f1:db:ad:b6:95:42:33:e0:66:98:
                    f0:23:7d:0e:87:cd:20:50:96:3b:54:fd:58:f4:ef:
                    25:72:61:c5:25:b1:5b:bd:c3:12:85:26:c0:d1:e1:
                    70:57:49:5a:ec:a7:f8:a2:14:34:66:e3:6c:52:b0:
                    ed:9c:81:b2:e2:b6:f1:cd:f2:6f:01:88:a3:23:73:
                    26:3a:8f:16:ae:e5:4a:b3:03:22:08:04:fe:93:a7:
                    82:d6:f5:01:a3:96:94:a2:54:2f:4d:f5:cd:03:40:
                    e3:e5:72:bd:6f:8b:d8:91:59:2c:c4:7e:8c:79:44:
                    f0:5e:15:b4:3e:a1:9f:14:c8:d7:b5:fa:74:fb:21:
                    01:9d:1b:de:dd:5e:c9:4d:ec:30:91:b9:46:ba:46:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:66:6D:A6:CF:11:91:4D:52:B7:E1:B7:17:8E:89:F3:8F:17:2B:23
            X509v3 Authority Key Identifier:
                keyid:6A:32:EA:0E:A5:50:8E:89:35:14:6E:9E:46:73:44:A0:B1:21:57:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec9e37ddb578cbbdc4e2281b37679864d80672b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/87015def017c00791488904a2ca06b07f5d0d57b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/4ec9e37ddb578cbbdc4e2281b37679864d80672b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.192.0/24
                  190.121.208.0/23
                  190.121.213.0-190.121.222.255
                IPv6:
                  2803:f500::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:40:6d:c6:64:eb:ea:2d:f5:b0:cd:0c:b0:37:a1:7f:5b:a8:
         dd:c5:e0:46:48:a1:a2:58:df:05:5e:c2:94:47:0e:16:79:72:
         f2:e2:18:b7:e0:30:0d:0c:33:3c:52:38:cc:d8:92:c7:7b:cb:
         4b:40:da:15:c1:de:97:3f:36:f9:a2:2a:e8:c6:5e:1e:a0:7c:
         9d:68:3d:58:dc:75:17:92:be:19:c6:ee:14:39:14:f0:6f:ad:
         62:a7:27:1f:74:e4:c0:4b:3d:a0:93:f5:6d:13:6a:3f:c7:8d:
         9f:8d:33:6a:5b:f8:d4:1c:0d:8b:11:38:60:4e:96:d7:5b:f8:
         4b:0f:c5:c8:6f:fc:9a:e7:20:32:44:7a:a3:be:49:f7:e5:13:
         f4:94:f5:0f:14:13:44:bd:f3:63:c8:be:34:d9:4b:be:c2:d5:
         dc:14:b4:17:e0:cb:74:65:6e:62:7a:f3:d1:72:b2:cf:b6:cd:
         a7:13:9f:03:01:c1:29:4b:41:e5:74:12:c5:9a:99:ce:75:c1:
         66:5d:e2:6e:86:ee:3d:e9:cd:d8:3e:70:99:fd:ee:f6:bf:4e:
         2f:46:56:f5:a7:fd:c8:e9:bc:81:5c:ee:1e:a4:2a:35:b3:ab:
         02:fc:08:3f:0f:f1:fb:ad:7b:84:cb:e2:41:ac:4c:f5:c7:d0:
         83:d5:07:08
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgIDEPuUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRl
YzllMzdkZGI1NzhjYmJkYzRlMjI4MWIzNzY3OTg2NGQ4MDY3MmIwHhcNMjEwOTAz
MDMwMDAwWhcNMjcwOTAyMDMwMDAwWjAzMTEwLwYDVQQDEyg4NzAxNWRlZjAxN2Mw
MDc5MTQ4ODkwNGEyY2EwNmIwN2Y1ZDBkNTdiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj/xenxCJpIgHodkeNbfFkSflPsX20KWyepK+tpfzWdLLYjF8
uo8UL6kPDZZAR11eMPvfNIdZxmkvmXOa6clxeAPethACeNU3Ej4rbUngtJGG9Dw4
/YkfDUq4/z7da2D6oTWBvOLLFn42KthW3vHbrbaVQjPgZpjwI30Oh80gUJY7VP1Y
9O8lcmHFJbFbvcMShSbA0eFwV0la7Kf4ohQ0ZuNsUrDtnIGy4rbxzfJvAYijI3Mm
Oo8WruVKswMiCAT+k6eC1vUBo5aUolQvTfXNA0Dj5XK9b4vYkVksxH6MeUTwXhW0
PqGfFMjXtfp0+yEBnRve3V7JTewwkblGukZByQIDAQABo4ICfjCCAnowHQYDVR0O
BBYEFEVmbabPEZFNUrfhtxeOifOPFysjMB8GA1UdIwQYMBaAFGoy6g6lUI6JNRRu
nkZzRKCxIVddMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGVjOWUz
N2RkYjU3OGNiYmRjNGUyMjgxYjM3Njc5ODY0ZDgwNjcyYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmU2ZTE4NGMtM2E2ZS00M2FmLWI2M2UtOTVlZTQ1
YThiM2IyLzg3MDE1ZGVmMDE3YzAwNzkxNDg4OTA0YTJjYTA2YjA3ZjVkMGQ1N2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ZTZlMTg0Yy0zYTZlLTQzYWYtYjYzZS05NWVl
NDVhOGIzYjIvNGVjOWUzN2RkYjU3OGNiYmRjNGUyMjgxYjM3Njc5ODY0ZDgwNjcy
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBCBggrBgEFBQcBBwEB/wQz
MDEwIAQCAAEwGgMEAL5pwAMEAb550DAMAwQAvnnVAwQAvnneMA0EAgACMAcDBQAo
A/UAMA0GCSqGSIb3DQEBCwUAA4IBAQBLQG3GZOvqLfWwzQywN6F/W6jdxeBGSKGi
WN8FXsKURw4WeXLy4hi34DANDDM8UjjM2JLHe8tLQNoVwd6XPzb5oiroxl4eoHyd
aD1Y3HUXkr4Zxu4UORTwb61ipycfdOTASz2gk/VtE2o/x42fjTNqW/jUHA2LEThg
TpbXW/hLD8XIb/ya5yAyRHqjvkn35RP0lPUPFBNEvfNjyL402Uu+wtXcFLQX4Mt0
ZW5ievPRcrLPts2nE58DAcEpS0HldBLFmpnOdcFmXeJuhu496c3YPnCZ/e72v04v
Rlb1p/3I6byBXO4epCo1s6sC/Ag/D/H7rXuEy+JBrEz1x9CD1QcI
-----END CERTIFICATE-----