Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c7d332f-afb2-4848-9aed-a5da09f66ccf/f05004b0bf3fd6002a4fee96631e121e838af973.roa
File:                     f05004b0bf3fd6002a4fee96631e121e838af973.roa (raw, json)
Hash identifier:          SvBUKzvSFOEyNipYQ9SsuuZJ46XOLm62FF5QaJfF7Cs=
Subject key identifier:   E3:9D:B3:C6:CA:61:A5:17:59:61:6D:A2:FF:9C:71:FD:69:4C:59:C4
Certificate issuer:       /CN=a9639b1f3b25de6401926fd200d3e7a73a364740
Certificate serial:       0DE6D3
Authority key identifier: B4:E7:A9:FC:24:99:08:D1:27:14:5D:7C:0B:1D:E4:1A:FB:B2:7C:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9639b1f3b25de6401926fd200d3e7a73a364740.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c7d332f-afb2-4848-9aed-a5da09f66ccf/f05004b0bf3fd6002a4fee96631e121e838af973.roa
Signing time:             Wed 24 Mar 2021 14:42:11 +0000
ROA not before:           Wed 24 Mar 2021 14:42:11 +0000
ROA not after:            Tue 24 Mar 2026 14:42:11 +0000
asID:                     52468
IP address blocks:        167.250.220.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911059 (0xde6d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9639b1f3b25de6401926fd200d3e7a73a364740
        Validity
            Not Before: Mar 24 14:42:11 2021 GMT
            Not After : Mar 24 14:42:11 2026 GMT
        Subject: CN=f05004b0bf3fd6002a4fee96631e121e838af973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:0e:60:75:93:c8:83:54:6c:ba:61:3c:de:
                    14:28:f3:99:1f:17:b1:ff:d6:d7:8c:6a:b3:6e:56:
                    64:62:20:e3:97:4a:dc:ab:f4:e9:6b:59:9e:a6:c3:
                    15:0e:d5:63:2a:17:74:c1:01:da:45:ec:8e:58:80:
                    29:01:c6:f9:73:1d:f0:09:d5:ef:0a:5f:3c:2c:8a:
                    89:75:27:1f:73:ff:27:20:c7:71:90:30:4b:fa:ef:
                    70:fc:4f:64:66:c5:15:3e:a8:a8:21:54:41:43:ae:
                    c9:f2:e6:56:25:bd:cd:c5:eb:fe:2f:0c:26:47:47:
                    07:89:47:9a:bc:ff:17:95:94:84:5a:26:f6:4f:2c:
                    6c:60:47:00:69:f6:74:02:36:13:cf:2c:05:50:7c:
                    d4:4d:5f:8a:12:69:a0:70:ed:08:9e:32:b8:6d:aa:
                    79:7e:47:15:4d:da:36:2e:97:ec:c2:42:73:e7:dd:
                    47:e4:9d:75:82:47:cd:fb:20:bd:b7:82:5c:ed:f1:
                    c9:ff:17:1c:88:16:95:f6:a6:26:18:8f:a5:ce:5a:
                    56:82:da:6d:2a:40:aa:be:45:a8:8f:c8:2a:02:e6:
                    b2:1c:27:99:4f:15:4a:22:5d:0d:cf:38:0b:22:33:
                    6e:1a:84:ec:fb:a4:0b:8e:6c:a6:7a:8c:24:4e:c8:
                    2e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9D:B3:C6:CA:61:A5:17:59:61:6D:A2:FF:9C:71:FD:69:4C:59:C4
            X509v3 Authority Key Identifier:
                keyid:B4:E7:A9:FC:24:99:08:D1:27:14:5D:7C:0B:1D:E4:1A:FB:B2:7C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9639b1f3b25de6401926fd200d3e7a73a364740.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c7d332f-afb2-4848-9aed-a5da09f66ccf/f05004b0bf3fd6002a4fee96631e121e838af973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c7d332f-afb2-4848-9aed-a5da09f66ccf/a9639b1f3b25de6401926fd200d3e7a73a364740.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:49:38:c1:fd:62:79:c6:8e:2d:a7:d5:0b:54:10:c5:e9:86:
         fc:12:de:24:ba:08:0e:ee:a7:b9:a2:f0:66:a9:dd:6d:04:2c:
         42:c9:89:10:ec:a2:15:f0:98:8f:4d:20:45:21:63:8e:24:c6:
         aa:25:fa:d0:df:d0:63:09:26:2e:6e:ae:61:a0:47:69:37:13:
         a5:87:56:e6:86:11:0e:4f:4b:b6:53:4f:9a:84:fe:44:14:ed:
         0a:85:b0:9b:03:17:47:54:89:a3:d0:fb:59:0b:98:38:6f:0a:
         54:ec:b5:6c:ec:9f:1c:53:71:01:84:e8:6f:c6:11:ca:43:54:
         13:e8:86:68:6b:44:20:74:ea:36:dd:90:b0:e5:e1:33:e9:e7:
         3d:81:8b:a9:eb:94:3a:74:66:e8:90:27:f1:f4:b3:63:2e:09:
         7d:41:ab:1e:b2:f9:c1:d0:bf:52:26:3a:60:4e:c1:ab:b0:f5:
         bc:ba:11:4b:56:ee:4b:64:63:51:b7:d9:49:88:4d:81:b0:93:
         fa:66:ea:5e:d3:74:16:24:35:d4:30:41:82:ac:ee:ba:e7:3b:
         13:7c:35:5b:1e:27:8f:db:8f:d6:bc:5f:bd:76:7a:1c:d4:52:
         22:b8:3e:9f:cf:fa:2d:d4:71:8e:ce:33:96:2a:c5:d3:c3:73:
         ad:4b:2b:9d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDebTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE5
NjM5YjFmM2IyNWRlNjQwMTkyNmZkMjAwZDNlN2E3M2EzNjQ3NDAwHhcNMjEwMzI0
MTQ0MjExWhcNMjYwMzI0MTQ0MjExWjAzMTEwLwYDVQQDEyhmMDUwMDRiMGJmM2Zk
NjAwMmE0ZmVlOTY2MzFlMTIxZTgzOGFmOTczMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzOsOYHWTyINUbLphPN4UKPOZHxex/9bXjGqzblZkYiDjl0rc
q/Tpa1mepsMVDtVjKhd0wQHaReyOWIApAcb5cx3wCdXvCl88LIqJdScfc/8nIMdx
kDBL+u9w/E9kZsUVPqioIVRBQ67J8uZWJb3Nxev+LwwmR0cHiUeavP8XlZSEWib2
TyxsYEcAafZ0AjYTzywFUHzUTV+KEmmgcO0InjK4bap5fkcVTdo2LpfswkJz591H
5J11gkfN+yC9t4Jc7fHJ/xcciBaV9qYmGI+lzlpWgtptKkCqvkWoj8gqAuayHCeZ
TxVKIl0NzzgLIjNuGoTs+6QLjmymeowkTsgufwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOOds8bKYaUXWWFtov+ccf1pTFnEMB8GA1UdIwQYMBaAFLTnqfwkmQjRJxRd
fAsd5Br7snzaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTk2Mzli
MWYzYjI1ZGU2NDAxOTI2ZmQyMDBkM2U3YTczYTM2NDc0MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2M3ZDMzMmYtYWZiMi00ODQ4LTlhZWQtYTVkYTA5
ZjY2Y2NmL2YwNTAwNGIwYmYzZmQ2MDAyYTRmZWU5NjYzMWUxMjFlODM4YWY5NzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83YzdkMzMyZi1hZmIyLTQ4NDgtOWFlZC1hNWRh
MDlmNjZjY2YvYTk2MzliMWYzYjI1ZGU2NDAxOTI2ZmQyMDBkM2U3YTczYTM2NDc0
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaf63DANBgkqhkiG9w0BAQsFAAOCAQEAHUk4wf1iecaOLafV
C1QQxemG/BLeJLoIDu6nuaLwZqndbQQsQsmJEOyiFfCYj00gRSFjjiTGqiX60N/Q
YwkmLm6uYaBHaTcTpYdW5oYRDk9LtlNPmoT+RBTtCoWwmwMXR1SJo9D7WQuYOG8K
VOy1bOyfHFNxAYTob8YRykNUE+iGaGtEIHTqNt2QsOXhM+nnPYGLqeuUOnRm6JAn
8fSzYy4JfUGrHrL5wdC/UiY6YE7Bq7D1vLoRS1buS2RjUbfZSYhNgbCT+mbqXtN0
FiQ11DBBgqzuuuc7E3w1Wx4nj9uP1rxfvXZ6HNRSIrg+n8/6LdRxjs4zlirF08Nz
rUsrnQ==
-----END CERTIFICATE-----