Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7f112c7d-862c-4867-ba49-772b4d6018ab/d15c72bdf441d324c4859216d8ce3df5e5223cc8.roa
File:                     d15c72bdf441d324c4859216d8ce3df5e5223cc8.roa (raw, json)
Hash identifier:          KeL/yitU/BUx8p80hK530unAPcoHrE0EaLRIcfvjWZw=
Subject key identifier:   7D:9F:20:1B:90:C9:0A:F5:FE:D9:3F:B1:69:0F:B3:34:91:37:C8:83
Certificate issuer:       /CN=ae12d182092cdf9310f84c5937df4c7b73df4145
Certificate serial:       0CF52C
Authority key identifier: B4:63:15:8F:59:B6:3A:2D:3E:11:99:EF:4C:95:1B:1C:0C:99:36:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae12d182092cdf9310f84c5937df4c7b73df4145.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7f112c7d-862c-4867-ba49-772b4d6018ab/d15c72bdf441d324c4859216d8ce3df5e5223cc8.roa
Signing time:             Wed 24 Mar 2021 14:48:11 +0000
ROA not before:           Wed 24 Mar 2021 14:48:10 +0000
ROA not after:            Tue 24 Mar 2026 14:48:10 +0000
asID:                     27889
IP address blocks:        181.17.0.0/16 maxlen: 20
                          181.18.0.0/15 maxlen: 20
                          181.34.0.0/15 maxlen: 20
                          186.26.0.0/18 maxlen: 20
                          186.26.128.0/17 maxlen: 20
                          200.107.192.0/21 maxlen: 21
                          201.238.0.0/19 maxlen: 20
                          201.238.32.0/19 maxlen: 20
                          2800:500::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 849196 (0xcf52c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae12d182092cdf9310f84c5937df4c7b73df4145
        Validity
            Not Before: Mar 24 14:48:10 2021 GMT
            Not After : Mar 24 14:48:10 2026 GMT
        Subject: CN=d15c72bdf441d324c4859216d8ce3df5e5223cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:45:db:93:6f:d8:e1:27:10:5f:c9:a6:95:b8:
                    8d:c0:df:35:db:96:5b:f3:05:b3:b4:ee:c7:db:0d:
                    10:d2:b8:1b:18:c7:60:68:cb:ca:14:16:23:09:d2:
                    0a:d5:7e:58:31:21:b5:f0:70:09:18:0f:b2:ca:89:
                    8d:8c:e4:ef:c3:bc:1b:f5:66:e3:72:25:48:b5:aa:
                    f2:cb:31:63:ea:91:20:8b:4f:96:ce:03:d3:7a:8e:
                    50:7f:ed:83:e6:d8:01:90:5f:cb:aa:b5:e2:11:ba:
                    f5:ed:0f:ee:dd:09:14:db:5d:2f:34:6b:67:95:e1:
                    4f:46:65:58:94:bb:93:2c:31:d5:d0:1e:f6:79:10:
                    a8:3f:c0:d3:d1:46:f5:a6:3b:72:8e:69:8d:ad:29:
                    91:45:5b:6f:1f:c8:17:23:2f:d0:c5:4a:de:d8:b3:
                    e5:da:ad:73:56:da:1e:99:82:b7:24:fc:b4:12:a1:
                    54:f4:5b:4c:ce:75:d3:62:68:48:54:8b:86:47:3c:
                    15:b8:ac:c3:0a:ad:18:0a:f3:dc:d8:33:fb:df:72:
                    69:d3:c3:39:d1:0f:ba:7e:b4:68:f0:bd:7a:d8:aa:
                    f9:ac:70:3b:13:79:97:12:77:1d:24:1c:78:f1:61:
                    5e:1c:0e:45:f6:ca:46:ca:75:c1:f8:63:3a:6e:36:
                    38:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9F:20:1B:90:C9:0A:F5:FE:D9:3F:B1:69:0F:B3:34:91:37:C8:83
            X509v3 Authority Key Identifier:
                keyid:B4:63:15:8F:59:B6:3A:2D:3E:11:99:EF:4C:95:1B:1C:0C:99:36:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae12d182092cdf9310f84c5937df4c7b73df4145.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7f112c7d-862c-4867-ba49-772b4d6018ab/d15c72bdf441d324c4859216d8ce3df5e5223cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7f112c7d-862c-4867-ba49-772b4d6018ab/ae12d182092cdf9310f84c5937df4c7b73df4145.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.17.0.0-181.19.255.255
                  181.34.0.0/15
                  186.26.0.0/18
                  186.26.128.0/17
                  200.107.192.0/21
                  201.238.0.0/18
                IPv6:
                  2800:500::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:9a:b8:25:db:e2:e7:1e:68:8c:1e:a3:bd:09:70:86:3f:b5:
         4d:7e:0c:d0:e0:7a:38:16:d7:52:76:38:6f:78:ee:7c:dd:9c:
         3a:0c:b7:99:ec:da:38:c3:dd:82:cc:16:08:0c:b0:00:a1:d9:
         9a:f8:a5:86:9f:e4:62:22:56:19:f8:a6:b2:e5:2e:fd:27:0f:
         80:d5:fa:0f:a1:cb:fd:05:4c:b6:44:87:c5:0f:d6:7e:f8:88:
         2d:55:5e:d0:07:14:b2:94:ba:b3:22:c3:d0:c1:fe:ae:38:96:
         e4:ac:54:df:68:44:f1:5e:e7:f1:1d:8e:0d:90:01:53:cb:a6:
         32:8e:6f:70:66:fc:66:18:e2:98:d0:9b:91:d8:70:22:5c:e8:
         8f:e4:94:ad:9b:2f:d1:7d:b6:69:ea:1b:7b:58:17:ad:f0:1b:
         80:d1:46:58:ee:6a:26:1b:c0:64:26:b4:35:4a:12:2e:8b:76:
         a6:31:57:78:e0:89:f7:db:c2:f9:fc:37:4e:2d:15:5d:1a:f3:
         53:fb:3e:9e:b9:94:f6:6b:f0:7c:bf:a8:6c:d2:00:b1:63:31:
         31:06:57:a5:4d:9b:54:ae:54:d9:d7:8d:c3:59:0b:39:db:6b:
         90:87:3b:43:cf:ef:5e:33:ff:7d:9d:ec:53:0e:d9:9a:f6:80:
         4a:f4:c9:a9
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDDPUsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFl
MTJkMTgyMDkyY2RmOTMxMGY4NGM1OTM3ZGY0YzdiNzNkZjQxNDUwHhcNMjEwMzI0
MTQ0ODEwWhcNMjYwMzI0MTQ0ODEwWjAzMTEwLwYDVQQDEyhkMTVjNzJiZGY0NDFk
MzI0YzQ4NTkyMTZkOGNlM2RmNWU1MjIzY2M4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk0Xbk2/Y4ScQX8mmlbiNwN8125Zb8wWztO7H2w0Q0rgbGMdg
aMvKFBYjCdIK1X5YMSG18HAJGA+yyomNjOTvw7wb9WbjciVItaryyzFj6pEgi0+W
zgPTeo5Qf+2D5tgBkF/LqrXiEbr17Q/u3QkU210vNGtnleFPRmVYlLuTLDHV0B72
eRCoP8DT0Ub1pjtyjmmNrSmRRVtvH8gXIy/QxUre2LPl2q1zVtoemYK3JPy0EqFU
9FtMznXTYmhIVIuGRzwVuKzDCq0YCvPc2DP733Jp08M50Q+6frRo8L162Kr5rHA7
E3mXEncdJBx48WFeHA5F9spGynXB+GM6bjY4UQIDAQABo4ICjTCCAokwHQYDVR0O
BBYEFH2fIBuQyQr1/tk/sWkPszSRN8iDMB8GA1UdIwQYMBaAFLRjFY9ZtjotPhGZ
70yVGxwMmTa6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWUxMmQx
ODIwOTJjZGY5MzEwZjg0YzU5MzdkZjRjN2I3M2RmNDE0NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2YxMTJjN2QtODYyYy00ODY3LWJhNDktNzcyYjRk
NjAxOGFiL2QxNWM3MmJkZjQ0MWQzMjRjNDg1OTIxNmQ4Y2UzZGY1ZTUyMjNjYzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83ZjExMmM3ZC04NjJjLTQ4NjctYmE0OS03NzJi
NGQ2MDE4YWIvYWUxMmQxODIwOTJjZGY5MzEwZjg0YzU5MzdkZjRjN2I3M2RmNDE0
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBRBggrBgEFBQcBBwEB/wRC
MEAwLwQCAAEwKTAKAwMAtREDAwK1EAMDAbUiAwQGuhoAAwQHuhqAAwQDyGvAAwQG
ye4AMA0EAgACMAcDBQAoAAUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7mrgl2+LnHmiM
HqO9CXCGP7VNfgzQ4Ho4FtdSdjhveO583Zw6DLeZ7No4w92CzBYIDLAAodma+KWG
n+RiIlYZ+Kay5S79Jw+A1foPocv9BUy2RIfFD9Z++IgtVV7QBxSylLqzIsPQwf6u
OJbkrFTfaETxXufxHY4NkAFTy6Yyjm9wZvxmGOKY0JuR2HAiXOiP5JStmy/RfbZp
6ht7WBet8BuA0UZY7momG8BkJrQ1ShIui3amMVd44In328L5/DdOLRVdGvNT+z6e
uZT2a/B8v6hs0gCxYzExBlelTZtUrlTZ143DWQs522uQhztDz+9eM/99nexTDtma
9oBK9Mmp
-----END CERTIFICATE-----