Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/0822e7c8efe6903d94371272678f76610d9b122c.roa
File:                     0822e7c8efe6903d94371272678f76610d9b122c.roa (raw, json)
Hash identifier:          GIXVdcPAifHTb+BPsQjbxETpx4+RT8gpn4H2lNskNcI=
Subject key identifier:   F3:7A:6D:C8:E9:37:24:34:72:9B:02:35:99:BF:D7:C7:49:DF:10:8F
Certificate issuer:       /CN=62a2147e821b0c697078021ef06a9b4b9bf02ef3
Certificate serial:       0C5DD5
Authority key identifier: CF:58:10:B7:13:2B:C8:29:72:26:7F:9F:7D:FB:82:A5:7F:CF:E3:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a2147e821b0c697078021ef06a9b4b9bf02ef3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/0822e7c8efe6903d94371272678f76610d9b122c.roa
Signing time:             Wed 24 Mar 2021 14:42:07 +0000
ROA not before:           Wed 24 Mar 2021 14:42:07 +0000
ROA not after:            Tue 24 Mar 2026 14:42:07 +0000
asID:                     267828
IP address blocks:        45.173.216.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 810453 (0xc5dd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a2147e821b0c697078021ef06a9b4b9bf02ef3
        Validity
            Not Before: Mar 24 14:42:07 2021 GMT
            Not After : Mar 24 14:42:07 2026 GMT
        Subject: CN=0822e7c8efe6903d94371272678f76610d9b122c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:43:51:7b:36:c6:e3:a5:a3:d7:5e:1f:06:fc:
                    f7:45:f2:4d:4f:b1:53:6a:9d:83:46:0f:d8:b2:de:
                    de:60:6e:d4:ef:39:13:25:31:31:6a:53:97:73:12:
                    47:f6:2a:61:1c:9b:6c:67:cd:33:17:f9:f0:21:69:
                    fc:2b:ad:76:8b:95:e6:da:c4:07:dd:30:36:8b:91:
                    76:12:27:90:83:cc:44:e9:c2:cc:bc:48:df:3d:e8:
                    f8:77:98:40:f0:47:30:31:24:5b:04:3b:ce:97:6e:
                    c0:b0:79:7e:82:e1:91:ab:3d:ce:b5:db:2f:79:5c:
                    5a:c4:26:a2:23:d0:c8:51:24:39:ea:d2:23:dd:3c:
                    18:4a:0e:d6:2c:05:9a:77:72:ac:a8:ea:f2:66:12:
                    fd:52:ad:d8:a7:ac:fb:81:f1:2e:89:3e:b0:9e:6f:
                    34:78:86:30:62:ad:7b:96:1b:eb:5b:3f:c5:a6:9c:
                    5f:e7:94:08:9e:04:a9:a1:22:92:bc:32:80:d7:94:
                    ca:e9:0c:3d:0c:fd:2f:d5:39:42:ef:4e:57:04:1d:
                    0d:cb:aa:13:1f:04:f2:af:45:c1:ae:26:6f:00:3d:
                    24:e2:f9:65:e5:78:47:17:65:1a:16:a8:d2:26:0a:
                    2d:e1:21:82:bb:8b:8b:09:fd:1c:be:97:3f:30:e0:
                    ad:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7A:6D:C8:E9:37:24:34:72:9B:02:35:99:BF:D7:C7:49:DF:10:8F
            X509v3 Authority Key Identifier:
                keyid:CF:58:10:B7:13:2B:C8:29:72:26:7F:9F:7D:FB:82:A5:7F:CF:E3:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a2147e821b0c697078021ef06a9b4b9bf02ef3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/0822e7c8efe6903d94371272678f76610d9b122c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/62a2147e821b0c697078021ef06a9b4b9bf02ef3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:6c:9a:48:6e:05:76:f6:55:37:9f:ea:52:ef:12:d7:01:78:
         49:85:7f:89:e0:5e:5c:20:6e:4b:ad:6c:6a:81:96:77:61:6e:
         b7:7c:bf:6d:c5:9c:90:b7:df:47:80:71:96:32:e1:1c:3a:ae:
         64:ea:64:7b:0e:39:7f:65:73:3e:d2:1c:63:5a:66:0e:6d:d9:
         e5:07:e8:e5:d3:a7:bd:b5:3b:3e:00:71:00:0b:26:97:4d:57:
         69:3b:a2:df:6a:3d:4c:63:4c:0b:0a:23:fd:46:6f:b1:9a:75:
         1c:30:23:ed:fd:09:9d:b7:61:ca:db:5c:66:0e:e8:33:8e:dc:
         8b:15:9b:71:0c:7c:9d:65:00:a8:93:8a:3f:7f:98:62:58:9b:
         ab:14:fe:b7:ea:9e:86:6b:82:b7:05:47:4b:1d:ab:05:a2:bf:
         13:0f:69:43:c4:27:0f:1d:a3:74:1f:75:bb:71:0a:cd:a1:0c:
         53:7a:27:f0:86:06:88:85:04:91:ff:41:f1:34:af:51:16:d7:
         d8:75:2a:4b:d4:31:15:33:af:84:a3:20:03:e8:6a:bf:5b:56:
         ef:21:81:c8:41:a0:d7:ee:39:db:30:76:b9:20:87:e8:b5:ac:
         31:dd:b6:d0:52:b3:0a:7d:81:f0:d0:22:d0:4d:b4:01:2f:a4:
         9c:a7:f9:87
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDF3VMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYy
YTIxNDdlODIxYjBjNjk3MDc4MDIxZWYwNmE5YjRiOWJmMDJlZjMwHhcNMjEwMzI0
MTQ0MjA3WhcNMjYwMzI0MTQ0MjA3WjAzMTEwLwYDVQQDEygwODIyZTdjOGVmZTY5
MDNkOTQzNzEyNzI2NzhmNzY2MTBkOWIxMjJjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl0NRezbG46Wj114fBvz3RfJNT7FTap2DRg/Yst7eYG7U7zkT
JTExalOXcxJH9iphHJtsZ80zF/nwIWn8K612i5Xm2sQH3TA2i5F2EieQg8xE6cLM
vEjfPej4d5hA8EcwMSRbBDvOl27AsHl+guGRqz3OtdsveVxaxCaiI9DIUSQ56tIj
3TwYSg7WLAWad3KsqOryZhL9Uq3Yp6z7gfEuiT6wnm80eIYwYq17lhvrWz/Fppxf
55QIngSpoSKSvDKA15TK6Qw9DP0v1TlC705XBB0Ny6oTHwTyr0XBriZvAD0k4vll
5XhHF2UaFqjSJgot4SGCu4uLCf0cvpc/MOCt9QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPN6bcjpNyQ0cpsCNZm/18dJ3xCPMB8GA1UdIwQYMBaAFM9YELcTK8gpciZ/
n337gqV/z+N2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjJhMjE0
N2U4MjFiMGM2OTcwNzgwMjFlZjA2YTliNGI5YmYwMmVmMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmU5NTZlNzQtNTVlMy00YTg1LWJlMzAtNDNkNzc2
MWZiNWQyLzA4MjJlN2M4ZWZlNjkwM2Q5NDM3MTI3MjY3OGY3NjYxMGQ5YjEyMmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ZTk1NmU3NC01NWUzLTRhODUtYmUzMC00M2Q3
NzYxZmI1ZDIvNjJhMjE0N2U4MjFiMGM2OTcwNzgwMjFlZjA2YTliNGI5YmYwMmVm
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2t2DANBgkqhkiG9w0BAQsFAAOCAQEAPmyaSG4FdvZVN5/q
Uu8S1wF4SYV/ieBeXCBuS61saoGWd2Fut3y/bcWckLffR4BxljLhHDquZOpkew45
f2VzPtIcY1pmDm3Z5Qfo5dOnvbU7PgBxAAsml01XaTui32o9TGNMCwoj/UZvsZp1
HDAj7f0JnbdhyttcZg7oM47cixWbcQx8nWUAqJOKP3+YYlibqxT+t+qehmuCtwVH
Sx2rBaK/Ew9pQ8QnDx2jdB91u3EKzaEMU3on8IYGiIUEkf9B8TSvURbX2HUqS9Qx
FTOvhKMgA+hqv1tW7yGByEGg1+452zB2uSCH6LWsMd220FKzCn2B8NAi0E20AS+k
nKf5hw==
-----END CERTIFICATE-----