Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9921c959-d03a-4a53-bd7a-f46e914dddf6/734ca4ba118eea22c57ec6222bd430a9407b7783.roa
File:                     734ca4ba118eea22c57ec6222bd430a9407b7783.roa (raw, json)
Hash identifier:          17oe5hFLM/LSLPf/ApEpVFY2NndRmEZZgar64ejSaUA=
Subject key identifier:   4E:6F:58:70:97:4E:B2:27:A6:B7:B6:E1:95:27:AE:99:87:92:15:80
Certificate issuer:       /CN=7e02bc3ca022a8018c29af8772e06cbe046b81de
Certificate serial:       0D7879
Authority key identifier: 3B:C2:AA:A6:50:CD:02:92:37:43:C7:A0:27:A5:87:8C:61:BB:CF:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e02bc3ca022a8018c29af8772e06cbe046b81de.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9921c959-d03a-4a53-bd7a-f46e914dddf6/734ca4ba118eea22c57ec6222bd430a9407b7783.roa
Signing time:             Wed 24 Mar 2021 14:34:30 +0000
ROA not before:           Wed 24 Mar 2021 14:34:30 +0000
ROA not after:            Tue 24 Mar 2026 14:34:30 +0000
asID:                     22047
IP address blocks:        186.156.0.0/17 maxlen: 24
                          186.156.128.0/17 maxlen: 24
                          190.44.0.0/16 maxlen: 24
                          190.45.0.0/16 maxlen: 24
                          190.46.0.0/16 maxlen: 24
                          190.47.0.0/16 maxlen: 24
                          190.100.0.0/16 maxlen: 24
                          190.101.0.0/17 maxlen: 24
                          190.101.128.0/17 maxlen: 24
                          190.160.0.0/16 maxlen: 24
                          190.161.0.0/16 maxlen: 24
                          190.162.0.0/16 maxlen: 24
                          190.163.0.0/16 maxlen: 24
                          190.164.0.0/17 maxlen: 24
                          190.164.128.0/17 maxlen: 24
                          200.30.192.0/18 maxlen: 24
                          200.73.224.0/19 maxlen: 24
                          200.74.0.0/17 maxlen: 24
                          200.83.0.0/16 maxlen: 24
                          200.86.0.0/16 maxlen: 24
                          200.104.0.0/16 maxlen: 24
                          200.120.0.0/16 maxlen: 24
                          201.214.0.0/16 maxlen: 24
                          201.215.0.0/16 maxlen: 24
                          201.239.0.0/16 maxlen: 24
                          201.241.0.0/16 maxlen: 24
                          2800:150::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882809 (0xd7879)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e02bc3ca022a8018c29af8772e06cbe046b81de
        Validity
            Not Before: Mar 24 14:34:30 2021 GMT
            Not After : Mar 24 14:34:30 2026 GMT
        Subject: CN=734ca4ba118eea22c57ec6222bd430a9407b7783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3d:25:df:6b:36:c1:3e:e9:a7:a2:7a:dc:eb:
                    af:90:c7:f9:ce:e4:eb:d7:8e:f2:82:b5:61:15:b3:
                    3f:aa:10:91:0a:73:ee:79:cb:d6:d8:fe:dd:e9:fa:
                    92:1d:28:d4:b3:84:63:7f:38:d6:24:f0:b3:92:c0:
                    9f:06:b9:1e:cf:04:2f:4c:9c:30:7a:88:47:bb:f0:
                    d0:65:8c:5a:d5:80:8c:f2:80:4f:d2:6d:c7:56:52:
                    be:59:c5:21:e6:6f:3b:8e:0b:04:06:df:42:94:aa:
                    e7:df:a5:2a:ab:df:47:c0:3d:36:a5:7e:3f:ef:1e:
                    97:26:f1:03:bb:1e:4d:1d:ff:14:67:59:04:30:da:
                    38:14:9c:0e:78:bc:88:8d:71:b0:26:3e:f9:3b:bf:
                    4a:e0:71:4a:dc:56:df:94:08:8d:8b:5f:49:65:b2:
                    f9:36:34:4f:fb:b2:4c:f2:ea:9e:3b:fb:b0:e4:03:
                    f8:df:21:9a:95:09:5f:0f:cf:0b:0a:3d:5d:09:6e:
                    95:f5:cf:fd:d8:b0:e4:0a:24:13:59:8c:73:db:fc:
                    99:39:da:d4:d6:58:f7:0e:90:1b:ec:b2:51:f2:d3:
                    a0:ad:18:91:97:d5:36:37:a6:f6:df:e5:12:d5:45:
                    5b:fa:7a:db:e7:8b:6f:a4:35:61:60:75:0a:7b:ea:
                    51:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6F:58:70:97:4E:B2:27:A6:B7:B6:E1:95:27:AE:99:87:92:15:80
            X509v3 Authority Key Identifier:
                keyid:3B:C2:AA:A6:50:CD:02:92:37:43:C7:A0:27:A5:87:8C:61:BB:CF:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e02bc3ca022a8018c29af8772e06cbe046b81de.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9921c959-d03a-4a53-bd7a-f46e914dddf6/734ca4ba118eea22c57ec6222bd430a9407b7783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9921c959-d03a-4a53-bd7a-f46e914dddf6/7e02bc3ca022a8018c29af8772e06cbe046b81de.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.156.0.0/16
                  190.44.0.0/14
                  190.100.0.0/15
                  190.160.0.0-190.164.255.255
                  200.30.192.0/18
                  200.73.224.0-200.74.127.255
                  200.83.0.0/16
                  200.86.0.0/16
                  200.104.0.0/16
                  200.120.0.0/16
                  201.214.0.0/15
                  201.239.0.0/16
                  201.241.0.0/16
                IPv6:
                  2800:150::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:81:5a:e0:9b:63:d0:be:3b:21:c9:ac:1f:c4:c8:f8:f7:47:
         48:0b:55:cb:44:fe:49:16:11:fa:b6:68:af:12:44:68:0b:e7:
         22:93:fa:6c:87:ec:c6:58:fe:ea:a3:46:8b:a6:26:72:4b:7b:
         e0:b3:6c:38:eb:13:2a:cf:99:5a:dd:87:aa:f9:c7:e2:f0:74:
         7f:6c:82:dd:bb:e5:5b:9c:08:06:31:27:8c:8e:71:8e:6f:20:
         37:5b:85:1f:b7:ff:b1:68:6b:43:7e:24:bc:1e:4d:d0:57:cb:
         e7:10:98:03:95:63:37:ee:35:df:69:71:3a:bf:46:90:f7:af:
         88:52:97:ea:91:0d:44:85:05:b0:5d:b0:c1:68:97:58:1f:de:
         1c:28:17:29:ab:bc:56:5c:db:48:cc:ba:26:ef:8c:be:2a:87:
         3e:47:13:56:10:53:41:f7:2c:97:4e:7c:63:39:06:02:45:ed:
         79:84:02:07:38:dc:8f:84:59:dc:33:44:ed:b1:b9:79:54:3a:
         5d:f6:fc:0e:b0:32:67:96:b1:fc:d3:90:f3:f8:b2:04:dd:8c:
         35:69:9d:34:3d:b8:87:f3:76:f9:cb:0c:0a:87:7b:2d:6d:90:
         69:3a:75:bb:81:d1:44:49:d3:a1:f0:6c:c5:d6:89:dd:67:55:
         ea:13:5e:81
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIDDXh5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdl
MDJiYzNjYTAyMmE4MDE4YzI5YWY4NzcyZTA2Y2JlMDQ2YjgxZGUwHhcNMjEwMzI0
MTQzNDMwWhcNMjYwMzI0MTQzNDMwWjAzMTEwLwYDVQQDEyg3MzRjYTRiYTExOGVl
YTIyYzU3ZWM2MjIyYmQ0MzBhOTQwN2I3NzgzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApz0l32s2wT7pp6J63OuvkMf5zuTr147ygrVhFbM/qhCRCnPu
ecvW2P7d6fqSHSjUs4RjfzjWJPCzksCfBrkezwQvTJwweohHu/DQZYxa1YCM8oBP
0m3HVlK+WcUh5m87jgsEBt9ClKrn36Uqq99HwD02pX4/7x6XJvEDux5NHf8UZ1kE
MNo4FJwOeLyIjXGwJj75O79K4HFK3FbflAiNi19JZbL5NjRP+7JM8uqeO/uw5AP4
3yGalQlfD88LCj1dCW6V9c/92LDkCiQTWYxz2/yZOdrU1lj3DpAb7LJR8tOgrRiR
l9U2N6b23+US1UVb+nrb54tvpDVhYHUKe+pRWwIDAQABo4ICtjCCArIwHQYDVR0O
BBYEFE5vWHCXTrInpre24ZUnrpmHkhWAMB8GA1UdIwQYMBaAFDvCqqZQzQKSN0PH
oCelh4xhu887MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2UwMmJj
M2NhMDIyYTgwMThjMjlhZjg3NzJlMDZjYmUwNDZiODFkZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTkyMWM5NTktZDAzYS00YTUzLWJkN2EtZjQ2ZTkx
NGRkZGY2LzczNGNhNGJhMTE4ZWVhMjJjNTdlYzYyMjJiZDQzMGE5NDA3Yjc3ODMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85OTIxYzk1OS1kMDNhLTRhNTMtYmQ3YS1mNDZl
OTE0ZGRkZjYvN2UwMmJjM2NhMDIyYTgwMThjMjlhZjg3NzJlMDZjYmUwNDZiODFk
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB6BggrBgEFBQcBBwEB/wRr
MGkwWAQCAAEwUgMDALqcAwMCviwDAwG+ZDAKAwMFvqADAwC+pAMEBsgewDAMAwQF
yEngAwQHyEoAAwMAyFMDAwDIVgMDAMhoAwMAyHgDAwHJ1gMDAMnvAwMAyfEwDQQC
AAIwBwMFACgAAVAwDQYJKoZIhvcNAQELBQADggEBABGBWuCbY9C+OyHJrB/EyPj3
R0gLVctE/kkWEfq2aK8SRGgL5yKT+myH7MZY/uqjRoumJnJLe+CzbDjrEyrPmVrd
h6r5x+LwdH9sgt275VucCAYxJ4yOcY5vIDdbhR+3/7Foa0N+JLweTdBXy+cQmAOV
YzfuNd9pcTq/RpD3r4hSl+qRDUSFBbBdsMFol1gf3hwoFymrvFZc20jMuibvjL4q
hz5HE1YQU0H3LJdOfGM5BgJF7XmEAgc43I+EWdwzRO2xuXlUOl32/A6wMmeWsfzT
kPP4sgTdjDVpnTQ9uIfzdvnLDAqHey1tkGk6dbuB0URJ06HwbMXWid1nVeoTXoE=
-----END CERTIFICATE-----