Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/4f4017ca5007fe1039d8cf17d830820b6d3957e1.roa
File:                     4f4017ca5007fe1039d8cf17d830820b6d3957e1.roa (raw, json)
Hash identifier:          RFEuTk04WDxQkuNX17PuZkXsV4p9Eq5N7M58b84b4IE=
Subject key identifier:   FC:85:4B:B3:40:C9:6C:AB:0A:EC:FC:FD:05:90:07:B3:8B:B9:D2:F4
Certificate issuer:       /CN=d47f00a274e03808fa0dec44674469fe93bc88ba
Certificate serial:       103B43
Authority key identifier: 47:94:24:3D:15:EE:FD:D9:0D:CC:35:66:1F:C3:72:3C:74:CC:70:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d47f00a274e03808fa0dec44674469fe93bc88ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/4f4017ca5007fe1039d8cf17d830820b6d3957e1.roa
Signing time:             Mon 30 Aug 2021 13:16:23 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     9009
IP address blocks:        45.225.75.0/24 maxlen: 24
                          45.225.75.241/32 maxlen: 32
                          2803:1920::/32 maxlen: 32
                          2803:1920::b4b2:5f61:d37f:0/112 maxlen: 112

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1063747 (0x103b43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d47f00a274e03808fa0dec44674469fe93bc88ba
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=4f4017ca5007fe1039d8cf17d830820b6d3957e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f4:7d:6c:44:85:02:d0:3c:4c:c1:56:e2:17:
                    78:f8:23:03:07:16:48:78:27:a2:fa:be:89:0d:47:
                    60:fc:13:4a:2b:af:28:39:22:4c:82:8f:02:6a:db:
                    c3:d1:d4:17:b7:b3:a6:e5:b2:3e:02:24:90:eb:3a:
                    0d:13:2c:39:df:87:e7:9c:12:03:d2:1d:69:b4:a2:
                    fa:86:b4:ff:d8:09:1c:49:a2:65:8d:5d:65:89:b8:
                    cf:3d:fd:4c:02:e9:ab:92:23:f9:b6:96:40:0c:4f:
                    ad:66:c9:3a:e7:65:13:53:c3:ba:20:45:53:e1:64:
                    d9:13:5c:c8:be:74:40:32:59:6a:e6:ea:3f:d5:49:
                    e5:0e:c5:09:cd:80:37:53:18:eb:26:66:87:cc:16:
                    ec:ed:a9:bc:50:88:f0:6e:06:64:04:ee:8f:b9:4a:
                    87:9b:9e:04:af:3c:fd:49:ab:90:7f:fd:f1:03:aa:
                    74:d4:d5:7d:14:0f:51:6d:7d:ce:af:a9:2d:3e:45:
                    9b:30:c7:dc:5b:33:cf:30:d4:53:9a:2f:ee:23:78:
                    d2:ba:0b:ca:d8:a5:b8:43:f1:4e:67:ba:0c:5c:e7:
                    47:9f:57:3c:2a:59:41:83:f6:62:a3:83:5f:5b:26:
                    12:e1:aa:aa:bd:62:1c:07:ae:50:a1:dc:0f:45:7e:
                    f1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:85:4B:B3:40:C9:6C:AB:0A:EC:FC:FD:05:90:07:B3:8B:B9:D2:F4
            X509v3 Authority Key Identifier:
                keyid:47:94:24:3D:15:EE:FD:D9:0D:CC:35:66:1F:C3:72:3C:74:CC:70:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d47f00a274e03808fa0dec44674469fe93bc88ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/4f4017ca5007fe1039d8cf17d830820b6d3957e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/d47f00a274e03808fa0dec44674469fe93bc88ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.75.0/24
                IPv6:
                  2803:1920::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:45:28:29:b6:d6:5b:08:c2:fb:a0:f0:b3:eb:5e:58:4a:30:
         3a:62:3c:fb:9b:75:3d:66:ce:bd:77:86:8c:c4:6e:88:1b:31:
         41:4d:33:04:0c:7d:18:94:46:ac:fc:51:32:48:2b:48:16:38:
         1b:b4:6b:c9:b8:fb:ee:23:df:1f:18:6f:9e:e8:11:ae:21:c6:
         86:ec:33:d1:ac:a5:d7:8a:40:89:f8:de:8c:9c:23:b3:92:1a:
         3f:c1:6d:de:a2:1b:f3:d3:9a:2c:0e:6e:2b:e6:24:bd:ee:56:
         8a:ca:c5:14:d5:b6:ce:71:91:fd:1b:13:2c:28:a1:13:e6:75:
         bc:26:3a:e3:3d:5c:3b:bf:44:ad:3d:da:96:1a:21:a1:19:e3:
         6e:ba:a1:8d:7e:45:ce:36:e7:3a:12:7f:1f:4a:79:91:f4:79:
         68:a0:15:18:73:1c:f1:dc:ed:06:81:1a:58:7c:a1:bd:b4:bb:
         a7:91:cd:f1:12:f0:5d:13:bf:bf:fc:1d:3c:92:3d:99:01:83:
         56:be:f7:59:64:71:e3:46:00:00:32:ae:a9:72:dc:8d:bb:e9:
         44:6b:0d:c3:fa:f1:85:77:fb:2b:c5:fe:e6:15:35:48:d3:0d:
         9a:4e:ab:2a:ee:19:e7:36:a9:a3:74:d0:14:ac:0b:85:d9:e1:
         16:c3:c6:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDEDtDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ0
N2YwMGEyNzRlMDM4MDhmYTBkZWM0NDY3NDQ2OWZlOTNiYzg4YmEwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg0ZjQwMTdjYTUwMDdm
ZTEwMzlkOGNmMTdkODMwODIwYjZkMzk1N2UxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsPR9bESFAtA8TMFW4hd4+CMDBxZIeCei+r6JDUdg/BNKK68o
OSJMgo8CatvD0dQXt7Om5bI+AiSQ6zoNEyw534fnnBID0h1ptKL6hrT/2AkcSaJl
jV1libjPPf1MAumrkiP5tpZADE+tZsk652UTU8O6IEVT4WTZE1zIvnRAMllq5uo/
1UnlDsUJzYA3UxjrJmaHzBbs7am8UIjwbgZkBO6PuUqHm54Erzz9SauQf/3xA6p0
1NV9FA9RbX3Or6ktPkWbMMfcWzPPMNRTmi/uI3jSugvK2KW4Q/FOZ7oMXOdHn1c8
KllBg/Zio4NfWyYS4aqqvWIcB65QodwPRX7xtQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFPyFS7NAyWyrCuz8/QWQB7OLudL0MB8GA1UdIwQYMBaAFEeUJD0V7v3ZDcw1
Zh/Dcjx0zHBCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDQ3ZjAw
YTI3NGUwMzgwOGZhMGRlYzQ0Njc0NDY5ZmU5M2JjODhiYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2MxNGRjNzgtZGQ2Zi00M2U3LWE3ODYtNDdjZWMw
ZDdiZTExLzRmNDAxN2NhNTAwN2ZlMTAzOWQ4Y2YxN2Q4MzA4MjBiNmQzOTU3ZTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83YzE0ZGM3OC1kZDZmLTQzZTctYTc4Ni00N2Nl
YzBkN2JlMTEvZDQ3ZjAwYTI3NGUwMzgwOGZhMGRlYzQ0Njc0NDY5ZmU5M2JjODhi
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAC3hSzANBAIAAjAHAwUAKAMZIDANBgkqhkiG9w0BAQsFAAOC
AQEAvkUoKbbWWwjC+6Dws+teWEowOmI8+5t1PWbOvXeGjMRuiBsxQU0zBAx9GJRG
rPxRMkgrSBY4G7Rrybj77iPfHxhvnugRriHGhuwz0ayl14pAifjejJwjs5IaP8Ft
3qIb89OaLA5uK+Ykve5WisrFFNW2znGR/RsTLCihE+Z1vCY64z1cO79ErT3alhoh
oRnjbrqhjX5FzjbnOhJ/H0p5kfR5aKAVGHMc8dztBoEaWHyhvbS7p5HN8RLwXRO/
v/wdPJI9mQGDVr73WWRx40YAADKuqXLcjbvpRGsNw/rxhXf7K8X+5hU1SNMNmk6r
Ku4Z5zapo3TQFKwLhdnhFsPGVg==
-----END CERTIFICATE-----