Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b9e4891-891f-4dd4-87a7-4377f41bdde3/1a54795eb541ea8b8d6773e5fe861a36365f4a03.roa
File:                     1a54795eb541ea8b8d6773e5fe861a36365f4a03.roa (raw, json)
Hash identifier:          /+yuGpg5b9UNNCHDoI1ZNZnINQHQaqbcGm/7hEh4dSw=
Subject key identifier:   D9:60:56:E4:7F:77:71:81:09:31:92:9D:78:DC:EE:98:4C:22:DA:21
Certificate issuer:       /CN=1d62648247a07842830526428e27c3af77e158dd
Certificate serial:       0455
Authority key identifier: 5D:CF:93:2E:84:94:C3:FB:CE:F2:7E:C9:40:C0:AC:68:8F:94:A2:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d62648247a07842830526428e27c3af77e158dd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b9e4891-891f-4dd4-87a7-4377f41bdde3/1a54795eb541ea8b8d6773e5fe861a36365f4a03.roa
Signing time:             Thu 13 Oct 2022 10:35:28 +0000
ROA not before:           Wed 12 Oct 2022 10:30:29 +0000
ROA not after:            Sun 13 Oct 2024 10:30:29 +0000
asID:                     265554
IP address blocks:        45.163.120.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1109 (0x455)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d62648247a07842830526428e27c3af77e158dd
        Validity
            Not Before: Oct 12 10:30:29 2022 GMT
            Not After : Oct 13 10:30:29 2024 GMT
        Subject: CN=1a54795eb541ea8b8d6773e5fe861a36365f4a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:aa:f6:c1:95:79:2d:6f:21:7b:47:01:c8:20:
                    ab:8c:6a:71:81:c8:77:40:87:e0:5e:d9:b4:79:27:
                    3e:5c:d5:c1:09:10:f3:a8:b3:36:3f:f8:71:b8:97:
                    ac:c8:ca:e9:29:d4:fa:a7:2a:ff:7a:3b:da:e3:40:
                    d0:e9:a8:6e:38:d6:b7:09:93:23:10:cc:40:f1:15:
                    59:38:6c:2d:71:68:73:e4:30:5b:cd:83:4c:19:fe:
                    67:2a:2a:42:ce:ac:5c:41:ce:1c:be:b6:0e:a7:6d:
                    fc:0c:c3:87:90:96:2e:3d:1a:59:08:ba:7c:43:07:
                    3b:14:14:bd:6a:86:09:d1:bd:42:6d:3c:25:14:e0:
                    19:d0:bc:c1:fb:bc:a3:cd:97:42:a1:b9:e5:53:19:
                    cd:bb:29:57:e2:ee:8a:34:71:b6:b3:f9:8a:5e:63:
                    b1:f6:b8:5e:f6:45:f7:9a:23:54:b4:69:9a:a3:50:
                    ef:8e:7a:fe:cc:aa:48:f7:88:ad:d6:30:46:f4:f5:
                    2b:ed:a9:99:bb:83:4e:a5:63:e1:a7:86:b2:e8:94:
                    39:1b:f1:d6:9d:59:96:00:4d:f5:d1:4f:75:f5:78:
                    ca:78:a0:f7:02:dc:6b:51:e3:4c:c1:a5:1b:ff:43:
                    4b:fd:88:14:cf:ca:c7:91:c5:1a:e4:94:e3:d9:65:
                    a0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:60:56:E4:7F:77:71:81:09:31:92:9D:78:DC:EE:98:4C:22:DA:21
            X509v3 Authority Key Identifier:
                keyid:5D:CF:93:2E:84:94:C3:FB:CE:F2:7E:C9:40:C0:AC:68:8F:94:A2:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d62648247a07842830526428e27c3af77e158dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b9e4891-891f-4dd4-87a7-4377f41bdde3/1a54795eb541ea8b8d6773e5fe861a36365f4a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b9e4891-891f-4dd4-87a7-4377f41bdde3/1d62648247a07842830526428e27c3af77e158dd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:22:fb:27:d6:9a:3b:1a:56:e7:30:b3:b4:84:7b:68:45:4d:
         0e:21:79:62:93:97:22:ee:35:c4:90:85:29:cf:9a:b7:5c:8b:
         ab:4c:64:ba:9a:a0:da:1d:56:96:9b:81:7d:3b:b5:11:94:89:
         c7:87:1d:d5:23:7e:96:78:0c:a0:c4:6e:28:11:c8:f1:5a:7e:
         8e:d1:9a:08:fb:c2:ec:ab:07:db:84:41:82:84:74:fd:d3:fa:
         7e:a2:54:7d:f3:d6:fa:26:21:a4:5e:f6:76:5a:4b:fe:94:21:
         4b:e1:56:e8:dd:ff:e6:e2:92:9f:79:70:3a:34:fa:65:56:06:
         b7:c5:8d:94:84:5e:f7:e3:90:eb:33:cf:f8:30:f3:ca:96:9d:
         70:bf:56:5e:aa:c3:46:e3:22:a8:56:12:db:ba:8a:1d:ac:b5:
         64:8e:e8:ff:18:ef:f8:e1:f4:e4:a5:4b:ae:7d:32:06:bf:18:
         c7:e2:ad:94:7d:c5:71:de:e4:a7:89:2d:43:bf:cc:3f:a7:7d:
         c6:13:4a:77:e7:37:c3:f9:75:1c:05:74:04:30:77:88:6e:53:
         e7:fe:2d:80:57:70:1a:bb:30:1b:e3:72:8a:7f:48:c5:bd:de:
         9d:9b:f7:2e:8e:c2:b9:a8:c6:6a:4e:13:47:6b:f4:73:fd:1c:
         5d:46:49:70
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMWQ2
MjY0ODI0N2EwNzg0MjgzMDUyNjQyOGUyN2MzYWY3N2UxNThkZDAeFw0yMjEwMTIx
MDMwMjlaFw0yNDEwMTMxMDMwMjlaMDMxMTAvBgNVBAMTKDFhNTQ3OTVlYjU0MWVh
OGI4ZDY3NzNlNWZlODYxYTM2MzY1ZjRhMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCUqvbBlXktbyF7RwHIIKuManGByHdAh+Be2bR5Jz5c1cEJEPOo
szY/+HG4l6zIyukp1PqnKv96O9rjQNDpqG441rcJkyMQzEDxFVk4bC1xaHPkMFvN
g0wZ/mcqKkLOrFxBzhy+tg6nbfwMw4eQli49GlkIunxDBzsUFL1qhgnRvUJtPCUU
4BnQvMH7vKPNl0KhueVTGc27KVfi7oo0cbaz+YpeY7H2uF72RfeaI1S0aZqjUO+O
ev7Mqkj3iK3WMEb09SvtqZm7g06lY+GnhrLolDkb8dadWZYATfXRT3X1eMp4oPcC
3GtR40zBpRv/Q0v9iBTPyseRxRrklOPZZaC7AgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQU2WBW5H93cYEJMZKdeNzumEwi2iEwHwYDVR0jBBgwFoAUXc+TLoSUw/vO8n7J
QMCsaI+UorIwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8xZDYyNjQ4
MjQ3YTA3ODQyODMwNTI2NDI4ZTI3YzNhZjc3ZTE1OGRkLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy85YjllNDg5MS04OTFmLTRkZDQtODdhNy00Mzc3ZjQx
YmRkZTMvMWE1NDc5NWViNTQxZWE4YjhkNjc3M2U1ZmU4NjFhMzYzNjVmNGEwMy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzliOWU0ODkxLTg5MWYtNGRkNC04N2E3LTQzNzdm
NDFiZGRlMy8xZDYyNjQ4MjQ3YTA3ODQyODMwNTI2NDI4ZTI3YzNhZjc3ZTE1OGRk
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCLaN4MA0GCSqGSIb3DQEBCwUAA4IBAQAmIvsn1po7GlbnMLO0
hHtoRU0OIXlik5ci7jXEkIUpz5q3XIurTGS6mqDaHVaWm4F9O7URlInHhx3VI36W
eAygxG4oEcjxWn6O0ZoI+8LsqwfbhEGChHT90/p+olR989b6JiGkXvZ2Wkv+lCFL
4Vbo3f/m4pKfeXA6NPplVga3xY2UhF7345DrM8/4MPPKlp1wv1ZeqsNG4yKoVhLb
uoodrLVkjuj/GO/44fTkpUuufTIGvxjH4q2UfcVx3uSniS1Dv8w/p33GE0p35zfD
+XUcBXQEMHeIblPn/i2AV3AauzAb43KKf0jFvd6dm/cujsK5qMZqThNHa/Rz/Rxd
Rklw
-----END CERTIFICATE-----