Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/76c74e29611f576c5272640566e754d3dd855da6.roa
File:                     76c74e29611f576c5272640566e754d3dd855da6.roa (raw, json)
Hash identifier:          0FfcO3OeER2Y9UpqL9aX6QPlFRk8taFzHbYpIyapsh0=
Subject key identifier:   D8:FD:10:73:D2:E3:6D:C8:D7:E8:3B:58:99:E3:56:B1:5C:19:CE:8A
Certificate issuer:       /CN=600a05248a907def76410027882b2f4a8085c07a
Certificate serial:       142304
Authority key identifier: BC:3B:FF:4B:5D:A8:0B:F5:44:27:AE:25:A5:40:BB:0C:11:7C:D2:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/600a05248a907def76410027882b2f4a8085c07a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/76c74e29611f576c5272640566e754d3dd855da6.roa
Signing time:             Fri 28 Jan 2022 16:51:38 +0000
ROA not before:           Wed 24 Nov 2021 03:00:00 +0000
ROA not after:            Mon 24 Nov 2025 03:00:00 +0000
asID:                     8065
IP address blocks:        181.204.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1319684 (0x142304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600a05248a907def76410027882b2f4a8085c07a
        Validity
            Not Before: Nov 24 03:00:00 2021 GMT
            Not After : Nov 24 03:00:00 2025 GMT
        Subject: CN=76c74e29611f576c5272640566e754d3dd855da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8a:51:a0:d4:4c:6b:68:33:22:bf:47:46:a5:
                    58:ef:32:32:b1:6b:a7:3a:bc:e8:bf:79:ab:19:b4:
                    80:37:81:9b:68:3a:5d:b1:15:49:34:44:d3:62:49:
                    bb:b5:fa:c1:eb:ba:e0:74:b7:e7:4c:4f:12:fe:7b:
                    ef:8a:77:86:7a:43:fc:44:9c:bd:9b:81:bf:5c:91:
                    1b:a6:2e:ec:0e:e1:8f:0e:c7:d5:2c:93:d0:2f:88:
                    a8:a6:68:1b:9e:f0:8d:29:05:8a:32:f4:b2:6b:e1:
                    d1:1f:22:3c:2a:79:3b:76:94:6d:3f:00:21:77:05:
                    68:9d:e4:b2:23:9a:55:c0:b8:5b:db:6f:09:9f:f6:
                    91:31:70:63:cc:50:b3:71:8a:9a:cc:ae:59:1e:46:
                    ad:51:c9:f2:36:3f:49:7e:9f:c6:7a:d1:af:69:81:
                    68:99:f2:17:46:e8:15:46:23:4f:46:e5:a1:ef:d6:
                    3b:34:32:6b:d8:c3:34:ff:de:05:b4:d7:5b:36:3d:
                    00:4b:e6:04:d9:72:aa:8d:9d:19:71:81:47:92:fc:
                    f9:98:2d:8f:bb:4b:87:f6:46:c7:59:79:d5:e9:23:
                    d2:bb:54:69:82:23:ca:19:12:1e:58:8a:13:62:f3:
                    1c:2f:f7:89:37:ef:79:4d:0b:7f:cb:cb:53:61:d4:
                    e4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FD:10:73:D2:E3:6D:C8:D7:E8:3B:58:99:E3:56:B1:5C:19:CE:8A
            X509v3 Authority Key Identifier:
                keyid:BC:3B:FF:4B:5D:A8:0B:F5:44:27:AE:25:A5:40:BB:0C:11:7C:D2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/600a05248a907def76410027882b2f4a8085c07a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/76c74e29611f576c5272640566e754d3dd855da6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/600a05248a907def76410027882b2f4a8085c07a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.204.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:bf:eb:ca:91:55:12:13:75:15:76:43:65:dc:47:c0:e9:c5:
         f1:11:29:b7:7e:e3:26:a0:32:46:2c:05:41:ab:3d:de:96:0d:
         a3:bd:63:4f:2f:92:7a:82:ee:87:f9:48:ca:9e:7e:d7:ab:9a:
         49:16:f5:c5:51:30:84:70:d6:8e:ed:c8:e8:01:a8:4c:10:25:
         52:18:c0:df:91:8c:a3:08:9f:a0:6d:42:46:bf:ed:f1:cf:00:
         26:d6:1d:fb:30:fc:43:1f:7b:bf:97:ee:a6:d0:b1:0c:59:99:
         3a:18:f2:09:9e:30:e0:0d:12:c8:b9:06:d9:86:08:e2:2f:47:
         3c:9c:3b:43:45:7a:23:e8:6e:d1:d8:6d:fa:31:55:82:d6:55:
         86:07:28:60:2c:a0:4f:ab:b5:29:7e:e3:51:77:0c:2e:00:e6:
         0e:6a:4d:51:01:77:d3:d6:97:76:c8:f1:6f:e0:9d:10:14:fb:
         88:3a:b9:ae:be:8d:06:eb:96:4e:bc:9f:56:32:74:10:8e:4d:
         ac:9d:24:51:97:fd:92:a1:5c:4b:7b:2b:29:0f:5b:7c:b7:d9:
         b5:07:09:96:b1:04:5a:43:20:e8:16:52:84:3e:03:28:ab:3c:
         37:94:18:09:60:11:37:9a:d8:29:4c:2e:c1:1a:6f:40:6c:c6:
         72:7f:59:3a
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDFCMEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYw
MGEwNTI0OGE5MDdkZWY3NjQxMDAyNzg4MmIyZjRhODA4NWMwN2EwHhcNMjExMTI0
MDMwMDAwWhcNMjUxMTI0MDMwMDAwWjAzMTEwLwYDVQQDEyg3NmM3NGUyOTYxMWY1
NzZjNTI3MjY0MDU2NmU3NTRkM2RkODU1ZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkopRoNRMa2gzIr9HRqVY7zIysWunOrzov3mrGbSAN4GbaDpd
sRVJNETTYkm7tfrB67rgdLfnTE8S/nvvineGekP8RJy9m4G/XJEbpi7sDuGPDsfV
LJPQL4iopmgbnvCNKQWKMvSya+HRHyI8Knk7dpRtPwAhdwVoneSyI5pVwLhb228J
n/aRMXBjzFCzcYqazK5ZHkatUcnyNj9Jfp/GetGvaYFomfIXRugVRiNPRuWh79Y7
NDJr2MM0/94FtNdbNj0AS+YE2XKqjZ0ZcYFHkvz5mC2Pu0uH9kbHWXnV6SPSu1Rp
giPKGRIeWIoTYvMcL/eJN+95TQt/y8tTYdTkpQIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFNj9EHPS423I1+g7WJnjVrFcGc6KMB8GA1UdIwQYMBaAFLw7/0tdqAv1RCeu
JaVAuwwRfNLKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjAwYTA1
MjQ4YTkwN2RlZjc2NDEwMDI3ODgyYjJmNGE4MDg1YzA3YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWJlYTZjYWQtMjlkNi00Mzg1LWE0ZjktY2JlNGJh
M2QxMjFmLzc2Yzc0ZTI5NjExZjU3NmM1MjcyNjQwNTY2ZTc1NGQzZGQ4NTVkYTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YmVhNmNhZC0yOWQ2LTQzODUtYTRmOS1jYmU0
YmEzZDEyMWYvNjAwYTA1MjQ4YTkwN2RlZjc2NDEwMDI3ODgyYjJmNGE4MDg1YzA3
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDALXMMA0GCSqGSIb3DQEBCwUAA4IBAQAZv+vKkVUSE3UVdkNl
3EfA6cXxESm3fuMmoDJGLAVBqz3elg2jvWNPL5J6gu6H+UjKnn7Xq5pJFvXFUTCE
cNaO7cjoAahMECVSGMDfkYyjCJ+gbUJGv+3xzwAm1h37MPxDH3u/l+6m0LEMWZk6
GPIJnjDgDRLIuQbZhgjiL0c8nDtDRXoj6G7R2G36MVWC1lWGByhgLKBPq7UpfuNR
dwwuAOYOak1RAXfT1pd2yPFv4J0QFPuIOrmuvo0G65ZOvJ9WMnQQjk2snSRRl/2S
oVxLeyspD1t8t9m1BwmWsQRaQyDoFlKEPgMoqzw3lBgJYBE3mtgpTC7BGm9AbMZy
f1k6
-----END CERTIFICATE-----