Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/dbc69929765ac6f548ec866dabe3fef4d13dc22c.roa
File:                     dbc69929765ac6f548ec866dabe3fef4d13dc22c.roa (raw, json)
Hash identifier:          FX2Gep0HLzuQszvG1fHmrjSKQdgqoFsQaXOS/ZyQMpY=
Subject key identifier:   1A:13:11:C5:ED:74:24:CF:C9:41:D3:E3:92:C8:31:47:77:00:A0:75
Certificate issuer:       /CN=62a2147e821b0c697078021ef06a9b4b9bf02ef3
Certificate serial:       0C6205
Authority key identifier: CF:58:10:B7:13:2B:C8:29:72:26:7F:9F:7D:FB:82:A5:7F:CF:E3:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a2147e821b0c697078021ef06a9b4b9bf02ef3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/dbc69929765ac6f548ec866dabe3fef4d13dc22c.roa
Signing time:             Wed 24 Mar 2021 14:42:08 +0000
ROA not before:           Wed 24 Mar 2021 14:42:07 +0000
ROA not after:            Tue 24 Mar 2026 14:42:07 +0000
asID:                     267828
IP address blocks:        45.173.218.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811525 (0xc6205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a2147e821b0c697078021ef06a9b4b9bf02ef3
        Validity
            Not Before: Mar 24 14:42:07 2021 GMT
            Not After : Mar 24 14:42:07 2026 GMT
        Subject: CN=dbc69929765ac6f548ec866dabe3fef4d13dc22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fa:93:02:52:ef:be:47:50:5e:00:f2:31:32:
                    ef:8d:56:56:d4:cd:cd:1f:c7:42:05:b9:ea:d0:ae:
                    2f:e7:b0:b4:67:c1:3a:d5:4e:9f:7f:e0:bc:92:53:
                    99:dd:93:79:6f:cc:9b:69:3f:4c:3f:9c:20:f9:66:
                    6f:99:27:85:72:1c:9d:63:a8:b3:6f:ff:45:0e:d6:
                    61:71:b0:be:a6:9f:a0:55:c0:49:1f:d5:48:d0:dc:
                    d5:71:3a:75:b7:66:76:5d:40:83:bb:f9:c3:81:9d:
                    24:3e:cb:02:43:b0:5d:af:81:d9:26:59:b9:a8:fe:
                    e7:b8:3c:6c:89:90:26:f7:a1:46:80:ab:93:34:91:
                    d3:13:a7:ba:f4:d3:88:c0:a8:82:65:bf:25:97:cd:
                    4e:5a:7a:fc:4f:5c:51:98:f4:e6:43:30:ff:c3:36:
                    ec:14:fa:df:72:7f:b1:11:45:20:f1:e8:7a:14:12:
                    54:15:2e:a6:fe:01:64:41:9c:18:a1:b9:bb:7c:4a:
                    29:15:04:a1:82:df:88:64:5f:1b:c7:f6:af:4d:ab:
                    02:00:86:87:fd:7e:22:9b:fc:1b:27:11:69:a9:a6:
                    98:f7:01:c2:39:4f:b8:6e:7c:9a:2d:9c:37:4d:fe:
                    30:2e:f4:02:9b:63:eb:6f:d2:3e:98:44:7b:cb:21:
                    f5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:13:11:C5:ED:74:24:CF:C9:41:D3:E3:92:C8:31:47:77:00:A0:75
            X509v3 Authority Key Identifier:
                keyid:CF:58:10:B7:13:2B:C8:29:72:26:7F:9F:7D:FB:82:A5:7F:CF:E3:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a2147e821b0c697078021ef06a9b4b9bf02ef3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/dbc69929765ac6f548ec866dabe3fef4d13dc22c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/62a2147e821b0c697078021ef06a9b4b9bf02ef3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:67:1f:62:90:a4:ef:7a:f2:5f:06:42:ed:3f:f5:a8:36:61:
         80:f4:a5:56:27:49:00:95:4e:e8:25:4f:0b:f3:a4:a9:49:8a:
         b0:27:4e:e5:19:67:49:21:c4:3b:2c:f6:66:63:b5:2f:36:07:
         1a:ce:ea:30:07:81:47:55:3a:c0:6f:4b:9c:ea:0c:98:f9:74:
         f1:83:85:bc:0f:5e:5b:de:6c:3f:40:37:f2:06:4c:ae:6a:e0:
         e3:97:d6:89:01:1a:54:d6:10:64:02:7d:f7:3d:86:ef:b6:71:
         5d:5f:7c:23:56:ed:85:c5:5b:eb:b6:6a:ef:d3:8e:de:76:2a:
         23:98:cc:7b:7e:6b:3f:12:42:1d:8f:3e:69:46:74:4b:e5:4d:
         f9:43:e8:28:35:eb:1c:59:12:de:b9:e5:9f:d5:b0:b6:af:06:
         18:fd:e0:18:df:46:48:e4:2e:d7:23:3d:a3:da:39:b9:29:33:
         70:31:be:6c:76:66:3e:c9:03:8c:f5:88:6a:00:3d:82:b9:a9:
         47:47:94:72:38:50:cc:5f:83:5e:b0:7d:df:c7:61:ce:3b:5a:
         f8:54:e8:d2:86:d9:ce:4a:a5:43:e1:c5:ed:ed:c7:d5:eb:59:
         10:a0:e3:fb:3b:ff:67:bc:3c:3c:2a:65:1f:6b:26:08:3f:bc:
         ca:76:09:cb
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDGIFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYy
YTIxNDdlODIxYjBjNjk3MDc4MDIxZWYwNmE5YjRiOWJmMDJlZjMwHhcNMjEwMzI0
MTQ0MjA3WhcNMjYwMzI0MTQ0MjA3WjAzMTEwLwYDVQQDEyhkYmM2OTkyOTc2NWFj
NmY1NDhlYzg2NmRhYmUzZmVmNGQxM2RjMjJjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4PqTAlLvvkdQXgDyMTLvjVZW1M3NH8dCBbnq0K4v57C0Z8E6
1U6ff+C8klOZ3ZN5b8ybaT9MP5wg+WZvmSeFchydY6izb/9FDtZhcbC+pp+gVcBJ
H9VI0NzVcTp1t2Z2XUCDu/nDgZ0kPssCQ7Bdr4HZJlm5qP7nuDxsiZAm96FGgKuT
NJHTE6e69NOIwKiCZb8ll81OWnr8T1xRmPTmQzD/wzbsFPrfcn+xEUUg8eh6FBJU
FS6m/gFkQZwYobm7fEopFQShgt+IZF8bx/avTasCAIaH/X4im/wbJxFpqaaY9wHC
OU+4bnyaLZw3Tf4wLvQCm2Prb9I+mER7yyH1hwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBoTEcXtdCTPyUHT45LIMUd3AKB1MB8GA1UdIwQYMBaAFM9YELcTK8gpciZ/
n337gqV/z+N2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjJhMjE0
N2U4MjFiMGM2OTcwNzgwMjFlZjA2YTliNGI5YmYwMmVmMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmU5NTZlNzQtNTVlMy00YTg1LWJlMzAtNDNkNzc2
MWZiNWQyL2RiYzY5OTI5NzY1YWM2ZjU0OGVjODY2ZGFiZTNmZWY0ZDEzZGMyMmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ZTk1NmU3NC01NWUzLTRhODUtYmUzMC00M2Q3
NzYxZmI1ZDIvNjJhMjE0N2U4MjFiMGM2OTcwNzgwMjFlZjA2YTliNGI5YmYwMmVm
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAS2t2jANBgkqhkiG9w0BAQsFAAOCAQEAZ2cfYpCk73ryXwZC
7T/1qDZhgPSlVidJAJVO6CVPC/OkqUmKsCdO5RlnSSHEOyz2ZmO1LzYHGs7qMAeB
R1U6wG9LnOoMmPl08YOFvA9eW95sP0A38gZMrmrg45fWiQEaVNYQZAJ99z2G77Zx
XV98I1bthcVb67Zq79OO3nYqI5jMe35rPxJCHY8+aUZ0S+VN+UPoKDXrHFkS3rnl
n9Wwtq8GGP3gGN9GSOQu1yM9o9o5uSkzcDG+bHZmPskDjPWIagA9grmpR0eUcjhQ
zF+DXrB938dhzjta+FTo0obZzkqlQ+HF7e3H1etZEKDj+zv/Z7w8PCplH2smCD+8
ynYJyw==
-----END CERTIFICATE-----