Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/11b421b7ce55c04a6e6a76ae4329ec8176791f83.roa
File:                     11b421b7ce55c04a6e6a76ae4329ec8176791f83.roa (raw, json)
Hash identifier:          2u4azqCVDN5Iuzp9ZSJShAqI2kIdJO42g9rlPkJM5hs=
Subject key identifier:   0F:05:F9:27:BB:94:3F:C0:76:A3:C7:04:BD:24:1A:AA:D4:2E:A6:02
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       224632
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/11b421b7ce55c04a6e6a76ae4329ec8176791f83.roa
Signing time:             Thu 27 Apr 2023 15:56:01 +0000
ROA not before:           Wed 26 Apr 2023 15:55:49 +0000
ROA not after:            Sun 27 Apr 2025 15:55:49 +0000
asID:                     52271
IP address blocks:        181.16.216.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2246194 (0x224632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Apr 26 15:55:49 2023 GMT
            Not After : Apr 27 15:55:49 2025 GMT
        Subject: CN=11b421b7ce55c04a6e6a76ae4329ec8176791f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5f:cd:8f:ea:fc:fb:76:da:3f:81:23:4d:69:
                    8c:53:33:ed:cf:b2:a4:d2:66:f4:ce:25:3d:5c:48:
                    bf:8f:d9:d7:25:c0:81:b3:06:06:3b:67:84:50:a4:
                    f5:83:61:2e:32:a4:b0:20:73:ab:66:2c:54:da:d1:
                    ef:1f:81:0c:e3:27:08:73:d5:71:33:ac:e1:ca:31:
                    f5:16:c2:f8:ca:3a:8c:9c:57:92:b2:f5:ca:4a:6c:
                    c5:e3:2e:8c:68:5a:63:99:b7:d9:63:0c:f1:7b:bb:
                    dd:f7:4b:20:c1:c4:f5:87:ce:f9:20:07:a6:c5:ee:
                    fa:a7:e9:64:12:49:23:0d:79:89:bc:c8:33:d7:ff:
                    46:ae:bd:bb:57:9d:79:e3:7a:bd:a2:4a:a8:9d:dc:
                    95:17:c3:90:2d:94:20:13:a5:44:e5:e7:c4:6f:7d:
                    ae:fa:89:c6:6c:05:4e:a0:4f:7d:69:6b:e1:a4:a4:
                    06:70:e7:ee:3a:fc:b6:a4:ea:f4:2d:4e:21:eb:6e:
                    07:42:16:7c:7a:6b:c6:15:f2:4b:04:55:df:30:da:
                    9b:c7:57:49:80:98:14:46:f4:5e:3b:e5:b9:20:45:
                    5f:13:18:1a:56:3e:72:44:0b:85:16:9e:83:81:36:
                    e3:6b:cc:bf:84:03:7f:05:2d:09:0a:e4:be:db:09:
                    58:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:05:F9:27:BB:94:3F:C0:76:A3:C7:04:BD:24:1A:AA:D4:2E:A6:02
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/11b421b7ce55c04a6e6a76ae4329ec8176791f83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:4a:30:2b:66:9b:3c:38:cb:81:da:ee:2b:08:74:29:f7:fa:
         c1:52:65:8b:86:69:ac:52:f6:10:86:a9:a4:e2:73:fa:f8:3c:
         6a:e0:b2:c7:f0:7d:50:c9:78:a6:5d:07:63:9c:17:40:14:d4:
         df:d5:37:4c:64:09:54:70:ff:6c:ea:c6:e4:24:1c:9d:14:bb:
         28:37:b1:8e:d2:74:20:86:c9:04:18:e0:99:98:27:5d:62:0c:
         75:ad:0a:b8:2a:99:79:1d:ac:f2:80:f7:ce:72:73:1e:c0:8c:
         50:e8:74:e6:9a:97:49:5d:55:c3:ea:05:0f:01:9c:41:26:74:
         89:06:73:7b:94:16:62:4a:02:1d:37:c1:07:64:84:e3:74:7f:
         39:8e:de:f7:16:73:37:af:ef:d2:9a:f1:9e:8f:8d:ce:b6:64:
         6c:38:e8:f0:78:5f:10:50:fc:28:2d:d9:27:dc:fc:27:45:a2:
         74:bd:60:14:32:e4:7b:e4:aa:f5:ce:5b:ff:2c:c6:10:71:a7:
         5d:84:6a:79:9e:bc:71:c7:f6:af:f6:17:74:fa:09:f8:46:1e:
         43:23:c1:bc:5c:a5:7d:a3:59:34:ba:18:0b:91:93:fc:51:64:
         0e:89:c6:15:d8:17:6f:87:4a:20:d9:87:a1:73:f8:6d:74:c7:
         0e:e8:7c:a5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIkYyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjMwNDI2
MTU1NTQ5WhcNMjUwNDI3MTU1NTQ5WjAzMTEwLwYDVQQDEygxMWI0MjFiN2NlNTVj
MDRhNmU2YTc2YWU0MzI5ZWM4MTc2NzkxZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAll/Nj+r8+3baP4EjTWmMUzPtz7Kk0mb0ziU9XEi/j9nXJcCB
swYGO2eEUKT1g2EuMqSwIHOrZixU2tHvH4EM4ycIc9VxM6zhyjH1FsL4yjqMnFeS
svXKSmzF4y6MaFpjmbfZYwzxe7vd90sgwcT1h875IAemxe76p+lkEkkjDXmJvMgz
1/9Grr27V51543q9okqondyVF8OQLZQgE6VE5efEb32u+onGbAVOoE99aWvhpKQG
cOfuOvy2pOr0LU4h624HQhZ8emvGFfJLBFXfMNqbx1dJgJgURvReO+W5IEVfExga
Vj5yRAuFFp6DgTbja8y/hAN/BS0JCuS+2wlY7wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFA8F+Se7lD/AdqPHBL0kGqrULqYCMB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3LzExYjQyMWI3Y2U1NWMwNGE2ZTZhNzZhZTQzMjllYzgxNzY3OTFmODMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA7UQ2DANBgkqhkiG9w0BAQsFAAOCAQEAGEowK2abPDjLgdru
Kwh0Kff6wVJli4ZprFL2EIappOJz+vg8auCyx/B9UMl4pl0HY5wXQBTU39U3TGQJ
VHD/bOrG5CQcnRS7KDexjtJ0IIbJBBjgmZgnXWIMda0KuCqZeR2s8oD3znJzHsCM
UOh05pqXSV1Vw+oFDwGcQSZ0iQZze5QWYkoCHTfBB2SE43R/OY7e9xZzN6/v0prx
no+NzrZkbDjo8HhfEFD8KC3ZJ9z8J0WidL1gFDLke+Sq9c5b/yzGEHGnXYRqeZ68
ccf2r/YXdPoJ+EYeQyPBvFylfaNZNLoYC5GT/FFkDonGFdgXb4dKINmHoXP4bXTH
Duh8pQ==
-----END CERTIFICATE-----