Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/92140193-e487-40b2-9d2d-928f7d97e4aa/8ba9d8571ef86c9fe4c05b57187f0f829ba3723f.roa
File:                     8ba9d8571ef86c9fe4c05b57187f0f829ba3723f.roa (raw, json)
Hash identifier:          wz7WAULwjFpYsC7XCSgJt2F1tZehIjkMiWptFGrcWAQ=
Subject key identifier:   32:33:CC:98:27:85:7A:E3:C8:59:0C:4C:D6:9B:9B:E8:9B:AC:21:DF
Certificate issuer:       /CN=acbcc335140e03f3496bf0d53c0820b47ef82ea6
Certificate serial:       04FF42
Authority key identifier: 04:A0:1A:C7:10:0C:80:37:43:ED:CB:47:56:0A:70:9B:62:BD:B2:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acbcc335140e03f3496bf0d53c0820b47ef82ea6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/92140193-e487-40b2-9d2d-928f7d97e4aa/8ba9d8571ef86c9fe4c05b57187f0f829ba3723f.roa
Signing time:             Wed 24 Mar 2021 14:41:16 +0000
ROA not before:           Wed 24 Mar 2021 14:41:16 +0000
ROA not after:            Tue 24 Mar 2026 14:41:16 +0000
asID:                     52468
IP address blocks:        190.171.80.0/22 maxlen: 24
                          2803:17e0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327490 (0x4ff42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acbcc335140e03f3496bf0d53c0820b47ef82ea6
        Validity
            Not Before: Mar 24 14:41:16 2021 GMT
            Not After : Mar 24 14:41:16 2026 GMT
        Subject: CN=8ba9d8571ef86c9fe4c05b57187f0f829ba3723f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:59:b3:d7:d7:4f:42:1a:91:6b:6c:9e:91:86:
                    ef:93:90:03:7f:ce:63:cc:24:e1:e4:24:08:fe:88:
                    09:ec:57:64:86:9e:87:12:ca:5f:ef:93:e6:0f:7b:
                    4f:3d:4e:f9:8c:20:04:f1:50:ab:0a:69:9a:47:93:
                    64:a1:15:aa:06:96:82:86:dc:23:7e:b7:2b:a5:d0:
                    ce:04:25:a9:31:29:aa:38:ad:bc:cb:dd:e5:1f:4d:
                    90:bc:e1:82:71:fc:00:75:ba:ff:7e:a0:36:7a:7e:
                    1c:d0:73:20:be:4c:65:d5:d8:6f:a2:c4:8e:26:45:
                    5b:04:f9:40:9b:0f:73:c7:f5:b8:01:af:22:39:a0:
                    63:4e:6c:d8:93:80:a7:d3:a3:76:38:48:c8:d4:ce:
                    36:43:f6:40:fc:9a:e1:f5:e7:c2:0d:82:40:f7:b9:
                    ac:c6:87:af:6c:26:ab:b6:1a:88:4a:3c:70:46:d8:
                    4b:d8:3b:2f:5d:f6:15:61:4e:c5:d5:20:8f:86:07:
                    c9:89:39:50:ef:82:48:22:90:06:00:f2:d0:c2:42:
                    0f:c9:86:40:fb:3c:47:94:7d:1d:16:ff:34:86:79:
                    99:1b:b0:d7:54:be:7b:ab:6d:33:05:15:44:51:ef:
                    3e:79:97:af:58:a6:df:e3:5b:ff:3d:5b:c6:77:98:
                    87:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:33:CC:98:27:85:7A:E3:C8:59:0C:4C:D6:9B:9B:E8:9B:AC:21:DF
            X509v3 Authority Key Identifier:
                keyid:04:A0:1A:C7:10:0C:80:37:43:ED:CB:47:56:0A:70:9B:62:BD:B2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acbcc335140e03f3496bf0d53c0820b47ef82ea6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/92140193-e487-40b2-9d2d-928f7d97e4aa/8ba9d8571ef86c9fe4c05b57187f0f829ba3723f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/92140193-e487-40b2-9d2d-928f7d97e4aa/acbcc335140e03f3496bf0d53c0820b47ef82ea6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.80.0/22
                IPv6:
                  2803:17e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:62:2c:66:a3:31:15:d3:ac:5a:2b:69:cf:c7:25:0f:18:40:
         2e:25:36:a0:e9:2b:56:16:ac:52:f6:a1:5f:7a:33:9a:c8:96:
         12:24:6a:18:df:78:6b:a6:19:dc:48:d1:e8:10:21:57:e5:a6:
         e9:ad:95:54:dc:f5:dc:71:b7:60:40:d4:6e:d6:a4:04:2d:89:
         45:40:18:78:21:31:43:0b:78:0a:eb:f6:6f:0b:2a:e2:a2:9b:
         c6:2c:a5:72:c5:6d:78:13:0d:9b:6e:52:e4:bb:2e:ab:61:39:
         ca:79:7d:13:78:31:78:11:f4:22:e5:2d:be:57:1f:8b:01:62:
         e7:44:a6:f3:77:59:04:c5:b0:0f:50:0f:d1:e6:1f:7c:18:48:
         14:ab:2c:59:13:9f:ba:e2:95:38:df:e5:ea:70:3f:78:fd:f7:
         f9:6e:a3:d7:1d:5b:25:5a:a3:a3:26:a4:22:ee:1c:7c:a2:2f:
         53:7a:fd:33:08:fb:66:79:aa:52:56:28:c1:5e:35:63:b7:52:
         31:11:8d:fe:0a:62:6e:cf:49:12:2e:2d:90:72:f3:2b:60:88:
         31:e2:5a:8b:42:47:9a:88:9e:70:a0:74:91:b3:ea:a2:43:a7:
         ba:58:90:4d:8b:45:69:ed:2a:92:9a:d8:b9:07:cf:30:35:a3:
         6b:99:70:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDBP9CMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFj
YmNjMzM1MTQwZTAzZjM0OTZiZjBkNTNjMDgyMGI0N2VmODJlYTYwHhcNMjEwMzI0
MTQ0MTE2WhcNMjYwMzI0MTQ0MTE2WjAzMTEwLwYDVQQDEyg4YmE5ZDg1NzFlZjg2
YzlmZTRjMDViNTcxODdmMGY4MjliYTM3MjNmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA7Fmz19dPQhqRa2yekYbvk5ADf85jzCTh5CQI/ogJ7Fdkhp6H
Espf75PmD3tPPU75jCAE8VCrCmmaR5NkoRWqBpaChtwjfrcrpdDOBCWpMSmqOK28
y93lH02QvOGCcfwAdbr/fqA2en4c0HMgvkxl1dhvosSOJkVbBPlAmw9zx/W4Aa8i
OaBjTmzYk4Cn06N2OEjI1M42Q/ZA/Jrh9efCDYJA97msxoevbCarthqISjxwRthL
2DsvXfYVYU7F1SCPhgfJiTlQ74JIIpAGAPLQwkIPyYZA+zxHlH0dFv80hnmZG7DX
VL57q20zBRVEUe8+eZevWKbf41v/PVvGd5iH8wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFDIzzJgnhXrjyFkMTNabm+ibrCHfMB8GA1UdIwQYMBaAFASgGscQDIA3Q+3L
R1YKcJtivbJLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWNiY2Mz
MzUxNDBlMDNmMzQ5NmJmMGQ1M2MwODIwYjQ3ZWY4MmVhNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTIxNDAxOTMtZTQ4Ny00MGIyLTlkMmQtOTI4Zjdk
OTdlNGFhLzhiYTlkODU3MWVmODZjOWZlNGMwNWI1NzE4N2YwZjgyOWJhMzcyM2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85MjE0MDE5My1lNDg3LTQwYjItOWQyZC05Mjhm
N2Q5N2U0YWEvYWNiY2MzMzUxNDBlMDNmMzQ5NmJmMGQ1M2MwODIwYjQ3ZWY4MmVh
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAr6rUDANBAIAAjAHAwUAKAMX4DANBgkqhkiG9w0BAQsFAAOC
AQEAWWIsZqMxFdOsWitpz8clDxhALiU2oOkrVhasUvahX3ozmsiWEiRqGN94a6YZ
3EjR6BAhV+Wm6a2VVNz13HG3YEDUbtakBC2JRUAYeCExQwt4Cuv2bwsq4qKbxiyl
csVteBMNm25S5Lsuq2E5ynl9E3gxeBH0IuUtvlcfiwFi50Sm83dZBMWwD1AP0eYf
fBhIFKssWROfuuKVON/l6nA/eP33+W6j1x1bJVqjoyakIu4cfKIvU3r9Mwj7Znmq
UlYowV41Y7dSMRGN/gpibs9JEi4tkHLzK2CIMeJai0JHmoiecKB0kbPqokOnuliQ
TYtFae0qkprYuQfPMDWja5lwNQ==
-----END CERTIFICATE-----