Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d78d36b4906f028dd747aff6d9b674319cec31e8.roa
File:                     d78d36b4906f028dd747aff6d9b674319cec31e8.roa (raw, json)
Hash identifier:          kx8nZ26Q33sOZQ80NU+osSKzGypT4cMSD1QXlRCeh0I=
Subject key identifier:   9C:3F:43:9C:FE:A8:F3:69:EF:F9:7A:DF:AA:80:6A:42:B4:C6:59:53
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0E75DA
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d78d36b4906f028dd747aff6d9b674319cec31e8.roa
Signing time:             Wed 24 Mar 2021 14:29:29 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 947674 (0xe75da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=d78d36b4906f028dd747aff6d9b674319cec31e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:80:c5:1b:17:c9:68:4b:0e:a4:fd:85:5b:
                    75:91:49:f6:3f:9d:c1:e8:79:4b:7a:01:6f:e7:7f:
                    e2:cc:f1:1b:36:80:c3:27:05:0e:2b:43:4a:1f:9a:
                    9e:e2:07:90:18:6b:ee:e8:4c:5b:4e:b8:74:82:ca:
                    14:5b:97:1c:12:f9:05:df:71:43:4a:ba:ae:b1:78:
                    ec:31:b1:cd:c1:94:96:d7:f8:df:1a:3c:e5:57:00:
                    0c:f7:db:fb:e3:04:20:fe:a8:15:4c:41:03:f1:28:
                    e9:a5:d0:71:be:fa:86:97:81:19:c3:3e:38:49:b2:
                    9e:55:dd:8d:eb:08:c4:ec:75:44:18:0b:39:1b:d7:
                    95:24:a3:60:5f:6a:96:c8:05:12:75:f7:ec:3f:bd:
                    c9:ac:32:a3:34:19:f4:cf:0c:af:8a:a1:a4:3b:36:
                    54:be:1f:e2:c2:80:c8:5c:eb:57:e0:8d:f4:5c:69:
                    b5:ea:67:13:88:2d:bd:bc:ae:25:5e:a2:de:00:73:
                    6a:43:7a:66:3a:cf:77:c2:a9:5f:bd:de:52:7b:4d:
                    df:4b:db:49:4f:e0:1a:16:57:0c:2c:17:ac:0b:46:
                    40:9d:73:6e:e1:9f:77:67:ba:8a:6e:6d:3e:34:29:
                    1e:7e:8c:7a:02:0c:19:ce:0f:e7:a3:48:ba:34:18:
                    bd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3F:43:9C:FE:A8:F3:69:EF:F9:7A:DF:AA:80:6A:42:B4:C6:59:53
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d78d36b4906f028dd747aff6d9b674319cec31e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:cb:d6:cf:fe:01:52:f6:7d:20:a4:02:c3:59:a9:94:a5:b1:
         49:77:f1:f6:3a:42:ae:bb:58:ff:00:4e:c6:4f:12:66:76:ac:
         bc:1c:3b:09:c2:8c:61:68:34:4d:a9:01:8d:a6:9b:0e:38:f1:
         28:d6:ee:e2:c1:d3:d4:64:e5:36:f4:8b:83:a7:c3:6c:d3:b7:
         fe:73:37:e0:14:31:ce:bd:27:54:0d:c5:5f:83:b8:e5:a2:c4:
         79:c4:6e:73:db:84:2e:c9:42:e4:a6:84:2b:19:d3:e3:e4:67:
         99:87:32:18:3f:78:f0:97:17:c9:36:05:55:46:40:6b:4c:34:
         5c:3c:a4:2f:cd:9e:16:d5:95:dc:b5:b4:31:bf:41:3f:93:46:
         07:76:8c:77:9b:4f:e3:8b:35:0f:d2:b6:c3:12:95:d3:ff:c8:
         9f:36:d7:50:08:af:03:96:6b:f9:ea:74:98:94:27:8c:20:8f:
         b6:fc:14:e9:cd:8c:af:ec:bf:8c:a8:08:4e:69:d2:72:bb:5c:
         5c:af:35:d0:93:45:02:26:2e:dc:b5:59:b9:b4:ad:4e:3f:28:
         37:f7:a1:ef:b0:27:1c:ab:82:fa:1e:18:ec:dd:49:39:e7:0e:
         c5:53:9e:03:27:fd:60:86:6e:25:cb:36:c4:00:18:f1:97:bf:
         0b:00:1d:b6
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDnXaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjEwMzI0
MTQyOTI2WhcNMjYwMzI0MTQyOTI2WjAzMTEwLwYDVQQDEyhkNzhkMzZiNDkwNmYw
MjhkZDc0N2FmZjZkOWI2NzQzMTljZWMzMWU4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwLyAxRsXyWhLDqT9hVt1kUn2P53B6HlLegFv53/izPEbNoDD
JwUOK0NKH5qe4geQGGvu6ExbTrh0gsoUW5ccEvkF33FDSrqusXjsMbHNwZSW1/jf
GjzlVwAM99v74wQg/qgVTEED8SjppdBxvvqGl4EZwz44SbKeVd2N6wjE7HVEGAs5
G9eVJKNgX2qWyAUSdffsP73JrDKjNBn0zwyviqGkOzZUvh/iwoDIXOtX4I30XGm1
6mcTiC29vK4lXqLeAHNqQ3pmOs93wqlfvd5Se03fS9tJT+AaFlcMLBesC0ZAnXNu
4Z93Z7qKbm0+NCkefox6AgwZzg/no0i6NBi9NQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJw/Q5z+qPNp7/l636qAakK0xllTMB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3L2Q3OGQzNmI0OTA2ZjAyOGRkNzQ3YWZmNmQ5YjY3NDMxOWNlYzMxZTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUQoDANBgkqhkiG9w0BAQsFAAOCAQEAEcvWz/4BUvZ9IKQC
w1mplKWxSXfx9jpCrrtY/wBOxk8SZnasvBw7CcKMYWg0TakBjaabDjjxKNbu4sHT
1GTlNvSLg6fDbNO3/nM34BQxzr0nVA3FX4O45aLEecRuc9uELslC5KaEKxnT4+Rn
mYcyGD948JcXyTYFVUZAa0w0XDykL82eFtWV3LW0Mb9BP5NGB3aMd5tP44s1D9K2
wxKV0//InzbXUAivA5Zr+ep0mJQnjCCPtvwU6c2Mr+y/jKgITmnScrtcXK810JNF
AiYu3LVZubStTj8oN/eh77AnHKuC+h4Y7N1JOecOxVOeAyf9YIZuJcs2xAAY8Ze/
CwAdtg==
-----END CERTIFICATE-----