Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/2346425a7a8ae69fa5f4763df17f4d4d3233b95b.roa
File:                     2346425a7a8ae69fa5f4763df17f4d4d3233b95b.roa (raw, json)
Hash identifier:          7zlFRxgISWpFd/fz4bb4I6FSdDSqTzuB2E+MdY4awk4=
Subject key identifier:   68:EC:86:C9:5B:5D:07:C3:94:37:71:47:65:58:C8:01:65:50:5E:07
Certificate issuer:       /CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
Certificate serial:       071AC3
Authority key identifier: B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/2346425a7a8ae69fa5f4763df17f4d4d3233b95b.roa
Signing time:             Fri 18 Feb 2022 16:19:19 +0000
ROA not before:           Fri 18 Feb 2022 03:00:00 +0000
ROA not after:            Sun 18 Feb 2024 03:00:00 +0000
asID:                     265772
IP address blocks:        131.196.80.0/22 maxlen: 24
                          2803:37c0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465603 (0x71ac3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
        Validity
            Not Before: Feb 18 03:00:00 2022 GMT
            Not After : Feb 18 03:00:00 2024 GMT
        Subject: CN=2346425a7a8ae69fa5f4763df17f4d4d3233b95b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fe:94:32:27:34:e7:2d:43:7c:b5:af:81:dd:
                    b1:1e:9f:b8:46:84:78:9e:80:c7:6a:c0:5a:56:1e:
                    1d:61:18:3d:dc:d9:6d:24:ba:6d:05:d1:73:ba:61:
                    80:5c:46:b9:f2:9c:a7:9e:c1:1b:d8:f7:f2:f4:4c:
                    50:e7:59:62:ea:73:d4:4d:d8:29:f0:80:34:b9:11:
                    69:69:0e:05:52:03:57:ce:64:a2:ab:3c:94:47:a1:
                    66:00:00:ca:97:17:13:5b:45:e9:c1:12:bd:8c:b3:
                    6f:40:d0:76:33:18:84:e9:a9:0c:b4:ea:a3:61:e9:
                    63:19:ee:2e:c4:fd:6d:64:c6:7b:7d:9e:86:56:46:
                    b2:6e:cd:86:da:1c:c4:8f:2e:e8:57:05:32:f1:c4:
                    e3:c8:0f:d5:bc:7d:1c:9c:96:4c:15:a3:cf:20:fc:
                    f6:01:c5:15:b2:31:8d:f4:1d:71:1e:ff:36:00:b4:
                    08:f1:f0:63:f4:46:e5:44:18:8d:00:0c:c5:b8:58:
                    6c:37:23:97:6b:db:e6:55:58:5e:e5:20:be:ea:59:
                    78:dd:17:1c:9c:12:fc:ca:c6:f5:1b:b2:37:f7:5e:
                    16:7c:bb:a5:9b:f0:44:f8:4d:c7:c1:ed:5d:38:ce:
                    f8:8f:4c:32:db:58:03:78:10:a3:f7:e3:63:43:c6:
                    d7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EC:86:C9:5B:5D:07:C3:94:37:71:47:65:58:C8:01:65:50:5E:07
            X509v3 Authority Key Identifier:
                keyid:B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/2346425a7a8ae69fa5f4763df17f4d4d3233b95b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/e8fffda6ca924f9f16686182b1a4d40171f239c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.80.0/22
                IPv6:
                  2803:37c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:63:42:33:d3:9c:88:a2:c5:0f:f2:19:7b:3b:2e:4c:06:cc:
         ea:e0:22:71:f6:b2:25:f8:cf:25:64:47:9d:ce:88:3d:1d:ea:
         13:79:42:b0:1e:12:18:6a:f6:50:bb:c4:ca:03:1d:f0:f8:c6:
         bb:03:79:4a:3e:90:c3:75:3a:c3:e8:73:ad:11:19:01:66:4d:
         68:2d:9c:d5:5a:4b:cd:d7:46:5f:02:c9:33:f2:0c:9c:0f:e2:
         2f:a3:df:2b:27:81:e4:98:fd:6d:d7:19:33:0e:a0:3c:2c:ac:
         f4:95:97:ef:99:ee:1a:71:16:c7:4a:d5:67:f9:6c:f9:2b:71:
         b1:62:37:05:ff:45:56:6f:14:04:48:9b:13:9a:df:41:01:f7:
         cf:a7:25:05:42:b4:57:62:28:cf:5a:8a:10:e5:fe:07:f3:e5:
         99:c6:25:18:b8:9f:e6:15:ab:f9:7c:f5:f4:d8:97:ec:13:4a:
         a3:9b:a3:c3:09:70:61:7f:45:7f:ee:c7:69:58:f2:1e:a7:dd:
         a2:84:5d:eb:c4:58:83:73:a2:79:08:60:6c:61:f1:b8:ea:ac:
         ab:4e:a8:72:42:d7:9f:15:26:ad:5e:b9:6d:18:07:cc:64:bd:
         7b:93:0d:e3:6f:52:06:bf:9f:31:1e:d8:5f:e9:38:f2:a3:d9:
         53:24:1d:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDBxrDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU4
ZmZmZGE2Y2E5MjRmOWYxNjY4NjE4MmIxYTRkNDAxNzFmMjM5YzEwHhcNMjIwMjE4
MDMwMDAwWhcNMjQwMjE4MDMwMDAwWjAzMTEwLwYDVQQDEygyMzQ2NDI1YTdhOGFl
NjlmYTVmNDc2M2RmMTdmNGQ0ZDMyMzNiOTViMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAv/6UMic05y1DfLWvgd2xHp+4RoR4noDHasBaVh4dYRg93Nlt
JLptBdFzumGAXEa58pynnsEb2Pfy9ExQ51li6nPUTdgp8IA0uRFpaQ4FUgNXzmSi
qzyUR6FmAADKlxcTW0XpwRK9jLNvQNB2MxiE6akMtOqjYeljGe4uxP1tZMZ7fZ6G
Vkaybs2G2hzEjy7oVwUy8cTjyA/VvH0cnJZMFaPPIPz2AcUVsjGN9B1xHv82ALQI
8fBj9EblRBiNAAzFuFhsNyOXa9vmVVhe5SC+6ll43RccnBL8ysb1G7I3914WfLul
m/BE+E3Hwe1dOM74j0wy21gDeBCj9+NjQ8bX0wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFGjshslbXQfDlDdxR2VYyAFlUF4HMB8GA1UdIwQYMBaAFLiCJ5zaYRvfggV8
BdwiymcW1T3iMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZThmZmZk
YTZjYTkyNGY5ZjE2Njg2MTgyYjFhNGQ0MDE3MWYyMzljMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzk2Y2UzZWItYjcyMS00NmQwLWIxNTQtZDNkNDdk
ZjI2OTUwLzIzNDY0MjVhN2E4YWU2OWZhNWY0NzYzZGYxN2Y0ZDRkMzIzM2I5NWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83OTZjZTNlYi1iNzIxLTQ2ZDAtYjE1NC1kM2Q0
N2RmMjY5NTAvZThmZmZkYTZjYTkyNGY5ZjE2Njg2MTgyYjFhNGQ0MDE3MWYyMzlj
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAoPEUDANBAIAAjAHAwUAKAM3wDANBgkqhkiG9w0BAQsFAAOC
AQEAgGNCM9OciKLFD/IZezsuTAbM6uAicfayJfjPJWRHnc6IPR3qE3lCsB4SGGr2
ULvEygMd8PjGuwN5Sj6Qw3U6w+hzrREZAWZNaC2c1VpLzddGXwLJM/IMnA/iL6Pf
KyeB5Jj9bdcZMw6gPCys9JWX75nuGnEWx0rVZ/ls+StxsWI3Bf9FVm8UBEibE5rf
QQH3z6clBUK0V2Ioz1qKEOX+B/PlmcYlGLif5hWr+Xz19NiX7BNKo5ujwwlwYX9F
f+7HaVjyHqfdooRd68RYg3OieQhgbGHxuOqsq06ockLXnxUmrV65bRgHzGS9e5MN
429SBr+fMR7YX+k48qPZUyQd6A==
-----END CERTIFICATE-----