Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/b7b996cae19011735d7566c4c43b9432c03a9588.roa
File:                     b7b996cae19011735d7566c4c43b9432c03a9588.roa (raw, json)
Hash identifier:          fHPNMGXrG3xNKFqDAC1J4jJV2r2xYvLsnbvKB6k805I=
Subject key identifier:   4B:B5:0A:D3:91:D4:2A:5D:64:33:9D:73:1B:DD:59:38:9E:4B:32:7B
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0ED38D
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/b7b996cae19011735d7566c4c43b9432c03a9588.roa
Signing time:             Wed 24 Mar 2021 14:29:31 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 971661 (0xed38d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=b7b996cae19011735d7566c4c43b9432c03a9588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:df:99:cc:31:34:11:b9:96:ee:ad:0b:f4:67:
                    98:63:b0:ba:fe:2a:0a:d1:fb:f4:0c:45:1c:35:55:
                    11:cc:8d:6f:c2:07:e8:29:3d:40:fc:64:31:bb:21:
                    f7:97:82:5d:19:9a:d4:dc:f9:d5:c3:e3:e2:a6:73:
                    a2:bc:02:a2:15:3c:1c:6d:7a:12:0b:22:f2:b2:3d:
                    d5:1d:22:2b:94:68:c3:35:1c:65:9d:95:63:3a:4b:
                    99:09:09:7c:96:a0:a0:a6:98:78:ce:8c:7a:ad:dd:
                    c4:9f:dc:c9:60:50:30:f2:cd:3e:d8:ea:63:39:57:
                    72:62:ee:b4:68:03:05:75:53:e2:f6:38:f2:37:73:
                    e0:e9:4a:2b:f6:51:96:25:02:1a:e7:8a:b1:3f:b9:
                    a1:85:ed:c1:b2:e4:95:ad:14:8d:b8:da:92:2c:b9:
                    67:b3:12:71:50:2b:60:56:8c:44:58:90:ac:1f:06:
                    3a:0f:b3:f6:aa:be:0f:c6:c0:b5:36:2a:70:d5:41:
                    e6:f2:ea:89:b1:dc:87:a2:d3:e1:26:74:a8:d4:14:
                    51:62:9d:e8:1a:c0:03:4e:5c:ae:c1:db:f0:4e:ff:
                    ac:72:4a:c5:c3:7a:8e:65:65:2a:73:1d:cc:cc:72:
                    ef:d7:29:b9:b8:e3:3c:72:e2:7e:df:af:73:e9:a0:
                    db:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B5:0A:D3:91:D4:2A:5D:64:33:9D:73:1B:DD:59:38:9E:4B:32:7B
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/b7b996cae19011735d7566c4c43b9432c03a9588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:a5:87:64:f0:27:bc:d2:3d:5e:99:d0:62:7d:5e:a3:ba:77:
         b3:76:6a:27:10:6d:69:61:e8:e1:28:0f:87:9a:e4:b0:b3:48:
         73:7f:94:49:b7:4e:ad:c9:e9:bd:43:9b:75:0b:ca:c6:6b:5e:
         5b:ec:65:57:8c:f6:3e:f9:6b:ec:c2:91:27:26:fc:4e:d5:48:
         ee:ad:86:09:37:65:a0:a0:dd:02:87:3e:86:64:a3:9a:0d:7a:
         f2:1b:c3:51:2b:92:4d:76:c1:79:77:40:e3:03:71:a0:f5:37:
         18:0b:8a:ea:92:59:1a:39:e1:79:6c:10:00:85:12:9d:8b:00:
         57:78:9c:bd:84:8f:b8:e3:12:fd:3f:8a:6d:97:99:14:fd:52:
         4a:e2:5a:a1:f5:8b:4d:4e:3e:6c:58:65:8e:7f:b3:57:47:8d:
         1d:51:ae:ba:78:14:71:75:dd:65:20:74:3d:0f:d9:bd:67:f6:
         2b:e5:b2:d7:89:93:d4:3f:80:ed:22:88:c4:d1:41:b6:1c:b8:
         ad:e6:58:93:39:ab:77:fe:04:7a:36:75:e5:4d:d7:bc:6e:29:
         27:ef:4c:f2:5b:1d:df:21:40:38:c6:d0:7e:70:0a:a5:02:3a:
         66:b1:a8:ad:8c:8f:07:c9:00:d9:9d:78:7b:fd:e8:83:04:b7:
         78:6d:d7:c6
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDtONMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjEwMzI0
MTQyOTI2WhcNMjYwMzI0MTQyOTI2WjAzMTEwLwYDVQQDEyhiN2I5OTZjYWUxOTAx
MTczNWQ3NTY2YzRjNDNiOTQzMmMwM2E5NTg4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk9+ZzDE0EbmW7q0L9GeYY7C6/ioK0fv0DEUcNVURzI1vwgfo
KT1A/GQxuyH3l4JdGZrU3PnVw+PipnOivAKiFTwcbXoSCyLysj3VHSIrlGjDNRxl
nZVjOkuZCQl8lqCgpph4zox6rd3En9zJYFAw8s0+2OpjOVdyYu60aAMFdVPi9jjy
N3Pg6Uor9lGWJQIa54qxP7mhhe3BsuSVrRSNuNqSLLlnsxJxUCtgVoxEWJCsHwY6
D7P2qr4PxsC1Nipw1UHm8uqJsdyHotPhJnSo1BRRYp3oGsADTlyuwdvwTv+sckrF
w3qOZWUqcx3MzHLv1ym5uOM8cuJ+369z6aDb+QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEu1CtOR1CpdZDOdcxvdWTieSzJ7MB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3L2I3Yjk5NmNhZTE5MDExNzM1ZDc1NjZjNGM0M2I5NDMyYzAzYTk1ODgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUQnjANBgkqhkiG9w0BAQsFAAOCAQEAF6WHZPAnvNI9XpnQ
Yn1eo7p3s3ZqJxBtaWHo4SgPh5rksLNIc3+USbdOrcnpvUObdQvKxmteW+xlV4z2
Pvlr7MKRJyb8TtVI7q2GCTdloKDdAoc+hmSjmg168hvDUSuSTXbBeXdA4wNxoPU3
GAuK6pJZGjnheWwQAIUSnYsAV3icvYSPuOMS/T+KbZeZFP1SSuJaofWLTU4+bFhl
jn+zV0eNHVGuungUcXXdZSB0PQ/ZvWf2K+Wy14mT1D+A7SKIxNFBthy4reZYkzmr
d/4EejZ15U3XvG4pJ+9M8lsd3yFAOMbQfnAKpQI6ZrGorYyPB8kA2Z14e/3ogwS3
eG3Xxg==
-----END CERTIFICATE-----