Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/347815351ec2f8836a20b7b0ebf286e70c21ad97.roa
File:                     347815351ec2f8836a20b7b0ebf286e70c21ad97.roa (raw, json)
Hash identifier:          a+c/H/HWAkaUdKY4YQQh5k7KuoCDqfaeSfe8mBtPKxo=
Subject key identifier:   AE:15:16:BD:13:C2:5F:C0:3C:0E:D1:E0:ED:F2:D7:32:F5:ED:F4:7A
Certificate issuer:       /CN=4ebda0b19a36926365ea456c1ad0f1fdf7ec2327
Certificate serial:       0B8AAB
Authority key identifier: E6:BA:70:06:4E:24:60:88:72:C6:B6:1E:E5:86:51:3B:23:86:5D:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ebda0b19a36926365ea456c1ad0f1fdf7ec2327.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/347815351ec2f8836a20b7b0ebf286e70c21ad97.roa
Signing time:             Wed 24 Mar 2021 14:40:15 +0000
ROA not before:           Wed 24 Mar 2021 14:40:14 +0000
ROA not after:            Tue 24 Mar 2026 14:40:14 +0000
asID:                     269805
IP address blocks:        45.184.224.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 756395 (0xb8aab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ebda0b19a36926365ea456c1ad0f1fdf7ec2327
        Validity
            Not Before: Mar 24 14:40:14 2021 GMT
            Not After : Mar 24 14:40:14 2026 GMT
        Subject: CN=347815351ec2f8836a20b7b0ebf286e70c21ad97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:41:2a:a3:86:ed:07:d5:e3:44:5e:a1:c3:07:
                    e0:95:74:50:3a:4d:24:79:5c:19:89:7f:0b:23:3d:
                    dd:0b:ec:08:96:c4:e4:77:07:60:26:62:4c:d3:b0:
                    e2:ca:12:80:00:9a:af:3a:ac:a7:90:46:cf:d4:c9:
                    e4:ee:e5:ed:c6:68:53:e9:55:8f:2f:c9:3c:59:33:
                    19:02:6d:88:2e:ca:be:6e:cd:b0:51:ee:18:53:ee:
                    9f:e6:da:50:13:4d:c9:f7:44:c6:f1:00:00:40:ec:
                    02:ea:b0:fe:5f:6c:60:1a:1d:fe:51:7c:f7:71:a2:
                    ac:81:ae:82:e9:62:aa:0f:af:1b:1c:f8:38:e0:f7:
                    ee:16:7c:02:3f:65:aa:57:8b:a5:25:05:45:84:10:
                    27:5b:f1:0e:7c:04:98:71:ca:64:c1:e0:73:e6:9d:
                    91:dd:e3:ce:c7:e0:8b:74:80:6c:22:00:78:9e:af:
                    89:dc:b2:59:b9:b2:3f:9e:bc:25:06:ed:86:28:70:
                    5e:6c:61:f6:a7:02:e5:f5:d7:f2:06:b5:75:c1:60:
                    cb:f2:5c:06:26:81:9b:e3:ad:60:7d:66:4a:a8:2f:
                    54:56:5f:b7:77:19:12:ad:05:c8:84:26:c1:02:88:
                    15:1e:de:be:99:98:8b:c5:21:7c:e7:9f:99:ff:42:
                    c5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:15:16:BD:13:C2:5F:C0:3C:0E:D1:E0:ED:F2:D7:32:F5:ED:F4:7A
            X509v3 Authority Key Identifier:
                keyid:E6:BA:70:06:4E:24:60:88:72:C6:B6:1E:E5:86:51:3B:23:86:5D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ebda0b19a36926365ea456c1ad0f1fdf7ec2327.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/347815351ec2f8836a20b7b0ebf286e70c21ad97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/4ebda0b19a36926365ea456c1ad0f1fdf7ec2327.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:c1:cb:d8:fc:b6:d7:d6:1c:f8:8d:83:c3:24:64:5b:6c:6e:
         24:99:31:71:6b:bf:7b:6c:3b:97:f8:16:2d:7f:67:a7:f4:bf:
         e6:c4:06:12:14:bd:95:87:bc:12:40:17:5c:d1:1f:78:77:ae:
         51:2d:75:ca:94:31:ab:0a:06:31:23:5f:bf:25:9a:57:87:04:
         79:2f:76:9d:16:14:36:aa:e9:e8:ac:91:09:dd:16:ab:92:0c:
         70:cd:12:42:62:d0:e0:14:a7:4a:22:33:0f:b1:62:8c:83:d5:
         de:c6:7a:cd:cf:ba:ff:d8:32:0e:ba:78:c1:8b:bb:0a:f0:36:
         e8:1a:c3:fc:81:f2:4e:4f:26:a4:de:ed:f7:c1:29:69:c4:65:
         5f:5e:2c:33:37:45:a0:ac:3e:62:6e:16:e2:52:b9:9a:b6:19:
         fc:a3:21:c5:8e:c8:50:1c:31:2e:51:20:10:16:65:85:a0:5c:
         70:de:bb:84:b0:fd:d4:5c:21:22:05:c3:38:69:e7:70:5b:08:
         86:d5:7f:b1:a2:00:4b:53:b7:40:0c:07:83:71:4a:69:49:b1:
         4a:c5:d2:01:52:c5:a9:93:c0:81:b9:7d:c0:70:5b:e9:a9:5e:
         c5:77:73:3a:e3:08:18:c6:9b:8b:29:8f:26:75:bc:a9:0d:78:
         88:d9:93:db
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC4qrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRl
YmRhMGIxOWEzNjkyNjM2NWVhNDU2YzFhZDBmMWZkZjdlYzIzMjcwHhcNMjEwMzI0
MTQ0MDE0WhcNMjYwMzI0MTQ0MDE0WjAzMTEwLwYDVQQDEygzNDc4MTUzNTFlYzJm
ODgzNmEyMGI3YjBlYmYyODZlNzBjMjFhZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmEEqo4btB9XjRF6hwwfglXRQOk0keVwZiX8LIz3dC+wIlsTk
dwdgJmJM07DiyhKAAJqvOqynkEbP1Mnk7uXtxmhT6VWPL8k8WTMZAm2ILsq+bs2w
Ue4YU+6f5tpQE03J90TG8QAAQOwC6rD+X2xgGh3+UXz3caKsga6C6WKqD68bHPg4
4PfuFnwCP2WqV4ulJQVFhBAnW/EOfASYccpkweBz5p2R3ePOx+CLdIBsIgB4nq+J
3LJZubI/nrwlBu2GKHBebGH2pwLl9dfyBrV1wWDL8lwGJoGb461gfWZKqC9UVl+3
dxkSrQXIhCbBAogVHt6+mZiLxSF855+Z/0LFiQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFK4VFr0Twl/APA7R4O3y1zL17fR6MB8GA1UdIwQYMBaAFOa6cAZOJGCIcsa2
HuWGUTsjhl3hMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGViZGEw
YjE5YTM2OTI2MzY1ZWE0NTZjMWFkMGYxZmRmN2VjMjMyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODlkZGVmZTEtMjQ3YS00MjkwLTk4ZmQtZDhjYWI5
ODFlMDkwLzM0NzgxNTM1MWVjMmY4ODM2YTIwYjdiMGViZjI4NmU3MGMyMWFkOTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84OWRkZWZlMS0yNDdhLTQyOTAtOThmZC1kOGNh
Yjk4MWUwOTAvNGViZGEwYjE5YTM2OTI2MzY1ZWE0NTZjMWFkMGYxZmRmN2VjMjMy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi244DANBgkqhkiG9w0BAQsFAAOCAQEAdMHL2Py219Yc+I2D
wyRkW2xuJJkxcWu/e2w7l/gWLX9np/S/5sQGEhS9lYe8EkAXXNEfeHeuUS11ypQx
qwoGMSNfvyWaV4cEeS92nRYUNqrp6KyRCd0Wq5IMcM0SQmLQ4BSnSiIzD7FijIPV
3sZ6zc+6/9gyDrp4wYu7CvA26BrD/IHyTk8mpN7t98EpacRlX14sMzdFoKw+Ym4W
4lK5mrYZ/KMhxY7IUBwxLlEgEBZlhaBccN67hLD91FwhIgXDOGnncFsIhtV/saIA
S1O3QAwHg3FKaUmxSsXSAVLFqZPAgbl9wHBb6alexXdzOuMIGMabiymPJnW8qQ14
iNmT2w==
-----END CERTIFICATE-----