Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/9871152f922542c40cb4aabf5089b221c611c20d.roa
File:                     9871152f922542c40cb4aabf5089b221c611c20d.roa (raw, json)
Hash identifier:          8wtvrxWqprwhnQ+ER9AvLpNQd7bRuEFS96sipTCiz/8=
Subject key identifier:   29:4B:30:36:8E:67:7A:0A:2D:62:2F:B0:D5:A2:53:B3:EA:A8:59:FF
Certificate issuer:       /CN=a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba
Certificate serial:       1A64D9
Authority key identifier: B2:AD:96:76:80:84:36:EE:12:47:AD:3A:21:31:E4:59:D6:EC:71:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/9871152f922542c40cb4aabf5089b221c611c20d.roa
Signing time:             Wed 12 Oct 2022 17:25:17 +0000
ROA not before:           Wed 09 Jun 2021 03:00:00 +0000
ROA not after:            Fri 09 Jun 2023 03:00:00 +0000
asID:                     265777
IP address blocks:        181.191.64.0/22 maxlen: 24
                          2803:4fc0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1729753 (0x1a64d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba
        Validity
            Not Before: Jun  9 03:00:00 2021 GMT
            Not After : Jun  9 03:00:00 2023 GMT
        Subject: CN=9871152f922542c40cb4aabf5089b221c611c20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:fa:f8:d3:39:10:a7:51:b0:83:39:be:e7:
                    33:35:48:f9:cf:72:8c:35:cb:c5:b5:38:b9:20:c8:
                    9b:55:14:c0:18:5d:e8:d1:5c:ba:61:5f:2d:eb:b3:
                    59:63:39:e9:ef:34:b9:f0:e3:e9:7f:9c:a6:e8:a2:
                    24:43:f8:b6:8e:18:a8:77:3c:42:42:e5:46:49:3a:
                    0b:b8:70:3d:3f:0f:3d:bf:48:e4:00:ae:0a:18:ef:
                    aa:c4:eb:c7:44:a4:39:eb:2d:f8:19:64:4a:af:53:
                    d6:50:3d:08:f9:7e:4a:36:fe:75:01:fd:02:aa:bc:
                    1a:39:d7:2f:c2:86:f7:f1:eb:ea:27:a4:e7:ee:24:
                    1a:56:c4:71:91:99:43:bb:cb:f5:8f:12:72:b4:e4:
                    7d:0a:f3:7c:0d:5b:72:23:3a:53:04:3e:bc:42:68:
                    88:f9:9d:a9:11:2e:d1:03:52:be:dd:5a:3a:76:90:
                    98:15:3f:0b:72:59:6f:c8:8c:81:9b:27:e5:b6:72:
                    61:6e:9a:70:73:c8:43:d6:76:34:3d:d3:35:a9:c3:
                    54:f8:b3:68:94:b7:0b:bc:11:21:23:07:a8:bd:3d:
                    f6:76:60:03:80:c1:21:b2:12:98:bf:94:81:37:37:
                    c4:33:56:ca:e1:44:8b:91:53:98:77:72:13:90:ab:
                    d3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4B:30:36:8E:67:7A:0A:2D:62:2F:B0:D5:A2:53:B3:EA:A8:59:FF
            X509v3 Authority Key Identifier:
                keyid:B2:AD:96:76:80:84:36:EE:12:47:AD:3A:21:31:E4:59:D6:EC:71:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/9871152f922542c40cb4aabf5089b221c611c20d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.64.0/22
                IPv6:
                  2803:4fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:63:0e:58:ba:c9:ed:ad:7f:03:20:36:58:df:8b:2a:f0:
         8c:f9:e8:03:eb:02:60:18:e8:13:97:51:b1:79:ff:06:7c:9a:
         4b:b7:e3:62:61:12:ed:f1:54:50:00:3d:4e:e4:f8:7f:4d:90:
         07:9d:01:35:c6:f4:a1:ef:0e:bc:97:88:95:f2:87:ea:be:6a:
         45:cb:3e:5f:b3:07:22:d6:39:fb:82:0c:68:67:79:e7:e1:09:
         2f:4d:c1:98:1a:49:df:b4:22:2f:7f:af:60:b3:6a:f8:db:d1:
         e8:bf:17:2e:34:04:44:ad:a1:f9:e2:38:9d:98:bb:c0:4c:31:
         01:bb:84:99:cc:00:90:53:84:95:2d:36:76:b5:80:6b:85:cf:
         79:8b:e0:47:c0:3b:fb:da:33:3e:11:3e:83:be:74:27:ab:ea:
         98:2f:2b:2e:fa:05:14:6a:5b:80:67:32:85:63:de:0a:a2:59:
         e1:87:9d:1b:0d:05:10:23:e6:fc:37:df:ac:ab:d8:b8:d1:e2:
         8d:ba:87:05:5a:d0:76:c6:29:9f:75:c0:6d:cd:2c:97:00:55:
         bf:c8:52:49:05:2a:b9:e5:8c:24:7f:a1:6b:2d:5b:a9:de:63:
         48:35:4e:f3:2f:84:36:f1:d7:f5:5c:41:ba:35:56:e1:c0:a8:
         f2:ea:eb:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDGmTZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE4
MDhmZTMxNjljOWEzNjg1NTJiYzlkN2NkMTFiOTNmYTBkNWUxYmEwHhcNMjEwNjA5
MDMwMDAwWhcNMjMwNjA5MDMwMDAwWjAzMTEwLwYDVQQDEyg5ODcxMTUyZjkyMjU0
MmM0MGNiNGFhYmY1MDg5YjIyMWM2MTFjMjBkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtw76+NM5EKdRsIM5vuczNUj5z3KMNcvFtTi5IMibVRTAGF3o
0Vy6YV8t67NZYznp7zS58OPpf5ym6KIkQ/i2jhiodzxCQuVGSToLuHA9Pw89v0jk
AK4KGO+qxOvHRKQ56y34GWRKr1PWUD0I+X5KNv51Af0CqrwaOdcvwob38evqJ6Tn
7iQaVsRxkZlDu8v1jxJytOR9CvN8DVtyIzpTBD68QmiI+Z2pES7RA1K+3Vo6dpCY
FT8LcllvyIyBmyfltnJhbppwc8hD1nY0PdM1qcNU+LNolLcLvBEhIweovT32dmAD
gMEhshKYv5SBNzfEM1bK4USLkVOYd3ITkKvTmQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFClLMDaOZ3oKLWIvsNWiU7PqqFn/MB8GA1UdIwQYMBaAFLKtlnaAhDbuEket
OiEx5FnW7HHTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTgwOGZl
MzE2OWM5YTM2ODU1MmJjOWQ3Y2QxMWI5M2ZhMGQ1ZTFiYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODk4NjMxODAtOWUzMC00NTU1LWI0NGQtNWQ2YTQ3
NGVjYTdiLzk4NzExNTJmOTIyNTQyYzQwY2I0YWFiZjUwODliMjIxYzYxMWMyMGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84OTg2MzE4MC05ZTMwLTQ1NTUtYjQ0ZC01ZDZh
NDc0ZWNhN2IvYTgwOGZlMzE2OWM5YTM2ODU1MmJjOWQ3Y2QxMWI5M2ZhMGQ1ZTFi
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEArW/QDANBAIAAjAHAwUAKANPwDANBgkqhkiG9w0BAQsFAAOC
AQEAbYdjDli6ye2tfwMgNljfiyrwjPnoA+sCYBjoE5dRsXn/BnyaS7fjYmES7fFU
UAA9TuT4f02QB50BNcb0oe8OvJeIlfKH6r5qRcs+X7MHItY5+4IMaGd55+EJL03B
mBpJ37QiL3+vYLNq+NvR6L8XLjQERK2h+eI4nZi7wEwxAbuEmcwAkFOElS02drWA
a4XPeYvgR8A7+9ozPhE+g750J6vqmC8rLvoFFGpbgGcyhWPeCqJZ4YedGw0FECPm
/DffrKvYuNHijbqHBVrQdsYpn3XAbc0slwBVv8hSSQUqueWMJH+hay1bqd5jSDVO
8y+ENvHX9VxBujVW4cCo8urrKw==
-----END CERTIFICATE-----