Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/aa31255ebed2c5981f2cc451d79098302b38336f.roa
File:                     aa31255ebed2c5981f2cc451d79098302b38336f.roa (raw, json)
Hash identifier:          ZIK5mNVQvSpIkP+xNEOsSgO6+U17dqsOWjoDNR5VlSQ=
Subject key identifier:   E0:FC:CE:FC:2F:53:AC:58:7D:AB:C2:B5:CD:EA:4E:EE:46:41:0B:21
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       165146
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/aa31255ebed2c5981f2cc451d79098302b38336f.roa
Signing time:             Fri 27 May 2022 19:58:19 +0000
ROA not before:           Fri 27 May 2022 03:00:00 +0000
ROA not after:            Sat 27 May 2023 03:00:00 +0000
asID:                     64130
IP address blocks:        201.218.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1462598 (0x165146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: May 27 03:00:00 2022 GMT
            Not After : May 27 03:00:00 2023 GMT
        Subject: CN=aa31255ebed2c5981f2cc451d79098302b38336f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2f:26:ef:56:dd:65:c5:3d:c7:b0:a0:5a:32:
                    aa:2f:0a:cf:d3:68:23:d0:d8:51:b1:5f:0b:05:78:
                    37:ad:4d:7c:39:0b:87:bf:02:aa:49:d7:50:ad:a0:
                    e6:59:3a:e9:b7:72:c8:4b:cf:17:d8:cb:54:10:79:
                    e6:f0:cf:da:e4:90:7b:81:46:a2:20:b4:4a:b2:24:
                    81:b6:5b:69:f4:05:cd:05:95:8d:80:5f:ff:dd:c8:
                    20:8d:98:89:5a:7d:2d:59:d2:aa:00:1b:0a:8a:a6:
                    fc:1c:de:dd:3e:80:1f:df:15:9d:d6:77:02:d3:75:
                    bf:0f:8d:f2:e0:75:3f:28:ba:b7:2d:d1:c6:71:1f:
                    c8:3e:b9:be:f1:60:14:9b:b9:75:20:cb:f0:37:cc:
                    96:f9:a0:0f:5f:bb:cf:0e:f7:ba:51:17:82:de:ad:
                    cb:77:1f:c2:77:99:e6:97:57:b1:90:09:03:d3:03:
                    89:d9:db:f6:f2:a4:c2:58:17:90:9a:cc:d8:e3:7a:
                    4b:d6:f1:b6:20:f5:10:db:3f:31:fa:a7:3e:21:b3:
                    66:cf:91:86:58:84:2e:9b:9a:68:73:bc:21:4b:48:
                    36:19:48:d7:48:44:5f:8c:9e:21:6d:24:18:d7:53:
                    ee:1b:88:d6:15:28:27:b6:5b:49:ba:81:41:74:34:
                    4e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FC:CE:FC:2F:53:AC:58:7D:AB:C2:B5:CD:EA:4E:EE:46:41:0B:21
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/aa31255ebed2c5981f2cc451d79098302b38336f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:3d:95:af:79:ab:86:f4:b6:6c:e2:be:9d:3d:1f:aa:ea:b6:
         dc:7e:00:2a:ed:ab:5d:2b:84:91:40:6d:33:ad:81:e2:27:5e:
         c3:cd:b3:7f:06:0e:eb:7f:a8:8c:21:74:8b:6a:ef:f0:1a:4a:
         15:12:7b:c2:8f:7f:02:30:9f:a8:36:ee:9f:d4:c8:3a:9f:ff:
         d8:2d:79:f7:e6:40:17:ba:c8:34:07:74:1f:2c:c2:04:a0:2a:
         7a:29:b8:bc:2d:93:8c:e0:55:dd:21:65:35:92:10:8a:3c:30:
         b4:a5:cf:17:64:6a:95:d8:b1:c9:d7:e7:7b:f7:35:ce:e8:e6:
         49:9b:48:ed:1b:3c:f7:42:df:14:cc:c0:0b:ab:f8:81:3f:2c:
         b6:c4:bd:b8:c5:35:f8:98:45:fa:08:4e:f7:46:98:1e:27:51:
         70:bc:ff:9e:89:7f:c4:15:2d:ba:8f:21:1c:c0:4d:b3:5b:90:
         25:cf:b9:62:ad:8a:bc:aa:b3:27:c8:16:b0:ee:6c:3b:c1:e5:
         7c:6c:e7:1a:5f:a7:03:24:e5:74:98:11:9d:ad:ae:94:fd:08:
         88:bb:1b:3c:1c:13:21:03:f0:fb:f3:36:61:91:30:f9:9a:ec:
         52:22:55:68:18:e9:9e:d1:2d:e5:a4:99:e1:59:01:22:cb:f3:
         22:95:3d:55
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFlFGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVk
MzI2MjNiMzNlMDRmYWRjMWFmODBmY2NmNmQxMmFhYmJjZmJmYTUwHhcNMjIwNTI3
MDMwMDAwWhcNMjMwNTI3MDMwMDAwWjAzMTEwLwYDVQQDEyhhYTMxMjU1ZWJlZDJj
NTk4MWYyY2M0NTFkNzkwOTgzMDJiMzgzMzZmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnC8m71bdZcU9x7CgWjKqLwrP02gj0NhRsV8LBXg3rU18OQuH
vwKqSddQraDmWTrpt3LIS88X2MtUEHnm8M/a5JB7gUaiILRKsiSBtltp9AXNBZWN
gF//3cggjZiJWn0tWdKqABsKiqb8HN7dPoAf3xWd1ncC03W/D43y4HU/KLq3LdHG
cR/IPrm+8WAUm7l1IMvwN8yW+aAPX7vPDve6UReC3q3Ldx/Cd5nml1exkAkD0wOJ
2dv28qTCWBeQmszY43pL1vG2IPUQ2z8x+qc+IbNmz5GGWIQum5poc7whS0g2GUjX
SERfjJ4hbSQY11PuG4jWFSgntltJuoFBdDROMwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOD8zvwvU6xYfavCtc3qTu5GQQshMB8GA1UdIwQYMBaAFH49PYRaISZ7nH72
VKhTBe2GfukbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWQzMjYy
M2IzM2UwNGZhZGMxYWY4MGZjY2Y2ZDEyYWFiYmNmYmZhNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTc3ZDNkMzUtYmJlYy00Y2FkLWEwYzUtMDYwN2Ey
OWUxZjBmL2FhMzEyNTVlYmVkMmM1OTgxZjJjYzQ1MWQ3OTA5ODMwMmIzODMzNmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NzdkM2QzNS1iYmVjLTRjYWQtYTBjNS0wNjA3
YTI5ZTFmMGYvNWQzMjYyM2IzM2UwNGZhZGMxYWY4MGZjY2Y2ZDEyYWFiYmNmYmZh
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnahjANBgkqhkiG9w0BAQsFAAOCAQEAHz2Vr3mrhvS2bOK+
nT0fquq23H4AKu2rXSuEkUBtM62B4idew82zfwYO63+ojCF0i2rv8BpKFRJ7wo9/
AjCfqDbun9TIOp//2C159+ZAF7rINAd0HyzCBKAqeim4vC2TjOBV3SFlNZIQijww
tKXPF2Rqldixydfne/c1zujmSZtI7Rs890LfFMzAC6v4gT8stsS9uMU1+JhF+ghO
90aYHidRcLz/nol/xBUtuo8hHMBNs1uQJc+5Yq2KvKqzJ8gWsO5sO8HlfGznGl+n
AyTldJgRna2ulP0IiLsbPBwTIQPw+/M2YZEw+ZrsUiJVaBjpntEt5aSZ4VkBIsvz
IpU9VQ==
-----END CERTIFICATE-----