Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/e74ef297b9bef98bc38d3a7bb3c7a02126f04eb4.roa
File:                     e74ef297b9bef98bc38d3a7bb3c7a02126f04eb4.roa (raw, json)
Hash identifier:          DEbN75bfXj0IblnPwN3MW/WE9wNnjrd/bNIzCkTRGAg=
Subject key identifier:   D4:F0:EB:F1:2F:76:14:8E:4B:47:A3:1B:B1:F1:5C:72:E8:D4:50:D8
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0E90E1
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/e74ef297b9bef98bc38d3a7bb3c7a02126f04eb4.roa
Signing time:             Wed 24 Mar 2021 14:29:29 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.239.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 954593 (0xe90e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=e74ef297b9bef98bc38d3a7bb3c7a02126f04eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:b1:8d:93:47:1d:78:39:58:e8:1f:7d:ed:
                    1a:a3:55:cd:57:f1:42:a7:16:98:96:fe:f5:2d:fe:
                    3c:f7:f8:c4:e4:62:d7:ef:d6:e0:24:1f:37:c1:40:
                    de:5a:02:68:44:df:1f:8e:0c:2d:56:23:da:eb:35:
                    d4:40:42:c8:a8:d0:5b:54:63:ee:4b:3f:0c:56:c8:
                    29:48:aa:1c:4c:1a:a8:d2:7b:38:a8:c7:6c:a0:6e:
                    59:12:7d:6e:46:33:00:f5:b0:84:8f:1b:de:20:bb:
                    fd:17:ff:05:c7:94:43:9d:41:ae:38:f7:42:de:47:
                    be:03:8b:93:64:98:17:92:22:ea:cc:92:fd:3a:6a:
                    bb:d8:d1:b1:fd:4f:19:d8:f6:1f:6b:f6:ec:00:1c:
                    dd:e3:0a:c8:a0:83:f8:64:d3:d4:bc:9e:fd:09:af:
                    37:9a:04:3f:76:a1:89:da:ba:69:9e:b2:1d:c4:a5:
                    c1:71:d8:81:39:fe:87:b4:02:74:6b:5c:a2:c5:56:
                    1d:12:3c:0d:8c:3e:fc:20:c5:78:63:31:fa:d5:68:
                    38:1b:38:71:ff:5d:8c:12:32:2e:b2:c9:74:53:87:
                    07:a2:cc:95:9c:8e:dd:bc:45:3d:16:3b:77:fb:e8:
                    46:3e:c7:f2:54:13:8c:74:b7:22:f0:aa:a4:5f:43:
                    d6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F0:EB:F1:2F:76:14:8E:4B:47:A3:1B:B1:F1:5C:72:E8:D4:50:D8
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/e74ef297b9bef98bc38d3a7bb3c7a02126f04eb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:3f:5d:58:dc:f8:82:69:2f:6f:e6:ba:b5:3b:c4:b5:05:79:
         9f:de:5c:be:94:b4:07:d6:ec:1d:c6:78:e0:35:9e:c0:5a:68:
         7f:4e:83:2c:ba:8c:19:e3:fb:16:ef:b7:29:d7:7d:d7:46:56:
         bf:45:a7:a6:50:07:44:51:33:5b:dc:ab:84:a9:e3:27:28:ce:
         9d:9c:59:dd:d0:17:86:c7:aa:d1:6f:d7:7b:fb:d1:8d:60:42:
         18:29:d5:91:bd:6e:f6:49:84:c0:47:d3:8f:62:69:a7:90:f4:
         b9:ae:65:f9:70:61:3e:fb:56:db:a6:5c:a0:99:96:cc:14:08:
         0d:af:3d:f1:5e:90:94:bc:4b:da:39:83:ac:04:f1:88:35:cb:
         e8:7e:bc:c0:d7:b3:77:e4:65:e5:97:1d:cf:5d:56:d2:5b:8b:
         28:75:14:a7:39:dd:a8:6d:37:69:f4:f0:ca:9b:4c:6d:8b:93:
         18:01:45:c8:db:e2:ee:54:00:f3:71:5c:a5:a3:3b:f5:23:c1:
         3b:04:2e:12:12:dc:27:92:95:e0:b1:e8:78:84:bf:de:25:57:
         58:e1:93:f6:35:dd:9e:03:47:6a:1b:23:c9:a5:75:a2:be:ef:
         17:6e:b0:be:16:da:75:d0:bd:4e:8e:78:6a:2c:d8:58:e5:f3:
         c0:7e:f6:e1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDpDhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjEwMzI0
MTQyOTI2WhcNMjYwMzI0MTQyOTI2WjAzMTEwLwYDVQQDEyhlNzRlZjI5N2I5YmVm
OThiYzM4ZDNhN2JiM2M3YTAyMTI2ZjA0ZWI0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoJOxjZNHHXg5WOgffe0ao1XNV/FCpxaYlv71Lf489/jE5GLX
79bgJB83wUDeWgJoRN8fjgwtViPa6zXUQELIqNBbVGPuSz8MVsgpSKocTBqo0ns4
qMdsoG5ZEn1uRjMA9bCEjxveILv9F/8Fx5RDnUGuOPdC3ke+A4uTZJgXkiLqzJL9
Omq72NGx/U8Z2PYfa/bsABzd4wrIoIP4ZNPUvJ79Ca83mgQ/dqGJ2rppnrIdxKXB
cdiBOf6HtAJ0a1yixVYdEjwNjD78IMV4YzH61Wg4Gzhx/12MEjIussl0U4cHosyV
nI7dvEU9Fjt3++hGPsfyVBOMdLci8KqkX0PWWwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNTw6/EvdhSOS0ejG7HxXHLo1FDYMB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3L2U3NGVmMjk3YjliZWY5OGJjMzhkM2E3YmIzYzdhMDIxMjZmMDRlYjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUQ7zANBgkqhkiG9w0BAQsFAAOCAQEAez9dWNz4gmkvb+a6
tTvEtQV5n95cvpS0B9bsHcZ44DWewFpof06DLLqMGeP7Fu+3Kdd910ZWv0WnplAH
RFEzW9yrhKnjJyjOnZxZ3dAXhseq0W/Xe/vRjWBCGCnVkb1u9kmEwEfTj2Jpp5D0
ua5l+XBhPvtW26ZcoJmWzBQIDa898V6QlLxL2jmDrATxiDXL6H68wNezd+Rl5Zcd
z11W0luLKHUUpzndqG03afTwyptMbYuTGAFFyNvi7lQA83FcpaM79SPBOwQuEhLc
J5KV4LHoeIS/3iVXWOGT9jXdngNHahsjyaV1or7vF26wvhbaddC9To54aizYWOXz
wH724Q==
-----END CERTIFICATE-----