Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/c2ed3f54dd361b3a615b235de9c60216f880ffc3.roa
File:                     c2ed3f54dd361b3a615b235de9c60216f880ffc3.roa (raw, json)
Hash identifier:          z7KojvAenXcZ/Get2N+ZSEsRqMIuie5n+F6fUAubXNg=
Subject key identifier:   6E:9A:71:C9:DE:D5:1C:03:A1:DA:46:57:E8:DD:90:70:1B:9B:7D:DF
Certificate issuer:       /CN=27dd18c956e9fcc73465d89de8aa38f3385acb6e
Certificate serial:       21ADF2
Authority key identifier: D8:FE:8D:3B:A1:29:B1:1B:12:17:DA:72:C8:A1:F2:E5:C8:25:6A:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27dd18c956e9fcc73465d89de8aa38f3385acb6e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/c2ed3f54dd361b3a615b235de9c60216f880ffc3.roa
Signing time:             Thu 06 Jul 2023 04:41:17 +0000
ROA not before:           Wed 05 Jul 2023 04:41:17 +0000
ROA not after:            Sun 06 Jul 2025 04:41:17 +0000
asID:                     52468
IP address blocks:        164.163.132.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2207218 (0x21adf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27dd18c956e9fcc73465d89de8aa38f3385acb6e
        Validity
            Not Before: Jul  5 04:41:17 2023 GMT
            Not After : Jul  6 04:41:17 2025 GMT
        Subject: CN=c2ed3f54dd361b3a615b235de9c60216f880ffc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d6:4e:21:9a:d4:6d:b1:58:e2:ed:b9:b8:b6:
                    7d:1d:14:d9:97:0d:00:4c:5b:d6:e6:72:c1:fd:5f:
                    44:3b:df:37:6f:6b:1b:a5:75:4e:e0:d6:ef:17:40:
                    6a:f9:61:ef:86:af:6a:60:3f:7f:df:4c:38:06:38:
                    d9:06:85:7d:30:e1:a2:41:a2:bd:ab:ba:41:8b:bf:
                    d7:3d:e4:29:09:29:41:c8:3d:02:e1:bc:6a:13:31:
                    28:89:23:b7:f9:85:1e:f4:f2:7b:77:bc:33:81:a2:
                    e2:02:0f:be:0b:d6:3e:fb:89:e0:5f:01:6b:db:4c:
                    02:d9:e2:ec:40:e5:db:34:10:90:6d:04:25:cd:88:
                    37:d7:6a:91:21:6f:52:5e:3a:2d:13:c2:a6:bf:bf:
                    0b:ab:0c:7f:be:56:47:77:4f:ed:1f:86:9c:26:ba:
                    90:21:3e:5b:c8:66:63:8a:bf:85:54:54:85:8c:8b:
                    9e:e6:a4:19:9e:2b:31:7f:50:b7:ee:43:4f:1c:42:
                    8a:05:62:15:e8:c4:af:bc:1a:48:63:3e:b8:cd:ae:
                    26:cd:4d:da:b0:cd:52:51:32:2d:7a:b5:db:24:a1:
                    30:b5:18:9a:89:fa:9b:9c:e6:9d:2a:03:12:8c:2d:
                    5a:9f:8e:dd:f8:8c:72:94:4a:79:6e:60:c0:67:dc:
                    12:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9A:71:C9:DE:D5:1C:03:A1:DA:46:57:E8:DD:90:70:1B:9B:7D:DF
            X509v3 Authority Key Identifier:
                keyid:D8:FE:8D:3B:A1:29:B1:1B:12:17:DA:72:C8:A1:F2:E5:C8:25:6A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27dd18c956e9fcc73465d89de8aa38f3385acb6e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/c2ed3f54dd361b3a615b235de9c60216f880ffc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/27dd18c956e9fcc73465d89de8aa38f3385acb6e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:80:c2:60:ec:72:e9:4b:10:45:70:67:c4:47:31:16:af:5b:
         fc:cc:29:08:dc:38:85:b5:c6:5c:7d:b5:7c:85:ec:b5:6a:e5:
         51:d5:96:41:cc:db:7f:70:de:9b:1a:ce:53:81:91:ef:45:af:
         60:e0:c7:ca:39:81:8d:50:e3:c3:22:64:8c:cc:ed:2b:59:0c:
         7a:28:cb:f7:45:7e:9e:9e:d8:07:e1:a0:ba:d9:fa:c0:ff:a4:
         24:d7:57:78:32:f0:f9:71:0b:8d:48:e3:d4:50:0c:fc:d8:0e:
         67:df:2f:32:2f:61:37:11:f5:bf:d4:3e:8d:99:9e:91:8c:0f:
         c2:ea:ca:5e:3b:80:39:13:7f:c6:cc:38:e3:0b:95:45:8e:66:
         ab:25:52:26:dc:b9:ba:d6:69:43:88:97:7e:06:9f:4e:40:c8:
         26:6f:38:42:78:cc:98:52:25:dc:1d:b1:05:18:dd:7c:b6:d7:
         61:8c:2a:c8:89:b3:82:54:e8:4b:59:dd:d1:fd:4f:e1:a5:16:
         d3:92:1c:9c:03:54:d1:c6:58:8d:a7:74:3a:65:6f:d3:d7:1e:
         ff:15:b3:b9:b4:19:4a:83:17:25:5f:cf:18:e3:f9:f5:63:62:
         05:69:7b:d9:8e:20:a6:a7:ef:ca:54:ef:70:28:89:6c:c1:8d:
         41:a7:39:44
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIa3yMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI3
ZGQxOGM5NTZlOWZjYzczNDY1ZDg5ZGU4YWEzOGYzMzg1YWNiNmUwHhcNMjMwNzA1
MDQ0MTE3WhcNMjUwNzA2MDQ0MTE3WjAzMTEwLwYDVQQDEyhjMmVkM2Y1NGRkMzYx
YjNhNjE1YjIzNWRlOWM2MDIxNmY4ODBmZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxdZOIZrUbbFY4u25uLZ9HRTZlw0ATFvW5nLB/V9EO983b2sb
pXVO4NbvF0Bq+WHvhq9qYD9/30w4BjjZBoV9MOGiQaK9q7pBi7/XPeQpCSlByD0C
4bxqEzEoiSO3+YUe9PJ7d7wzgaLiAg++C9Y++4ngXwFr20wC2eLsQOXbNBCQbQQl
zYg312qRIW9SXjotE8Kmv78Lqwx/vlZHd0/tH4acJrqQIT5byGZjir+FVFSFjIue
5qQZnisxf1C37kNPHEKKBWIV6MSvvBpIYz64za4mzU3asM1SUTIterXbJKEwtRia
ifqbnOadKgMSjC1an47d+IxylEp5bmDAZ9wSDQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFG6accne1RwDodpGV+jdkHAbm33fMB8GA1UdIwQYMBaAFNj+jTuhKbEbEhfa
csih8uXIJWoeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjdkZDE4
Yzk1NmU5ZmNjNzM0NjVkODlkZThhYTM4ZjMzODVhY2I2ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTRjYTYwYTMtMjA1NS00MGZkLTk0Y2MtMDlhZDg3
NDhhNGY4L2MyZWQzZjU0ZGQzNjFiM2E2MTViMjM1ZGU5YzYwMjE2Zjg4MGZmYzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NGNhNjBhMy0yMDU1LTQwZmQtOTRjYy0wOWFk
ODc0OGE0ZjgvMjdkZDE4Yzk1NmU5ZmNjNzM0NjVkODlkZThhYTM4ZjMzODVhY2I2
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqSjhDANBgkqhkiG9w0BAQsFAAOCAQEAI4DCYOxy6UsQRXBn
xEcxFq9b/MwpCNw4hbXGXH21fIXstWrlUdWWQczbf3DemxrOU4GR70WvYODHyjmB
jVDjwyJkjMztK1kMeijL90V+np7YB+Ggutn6wP+kJNdXeDLw+XELjUjj1FAM/NgO
Z98vMi9hNxH1v9Q+jZmekYwPwurKXjuAORN/xsw44wuVRY5mqyVSJty5utZpQ4iX
fgafTkDIJm84QnjMmFIl3B2xBRjdfLbXYYwqyImzglToS1nd0f1P4aUW05IcnANU
0cZYjad0OmVv09ce/xWzubQZSoMXJV/PGOP59WNiBWl72Y4gpqfvylTvcCiJbMGN
Qac5RA==
-----END CERTIFICATE-----