Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d9462a8-9f3c-4527-bb46-c1e9346a9feb/584ec5769980befcf520125c89187367ab5db378.roa
File:                     584ec5769980befcf520125c89187367ab5db378.roa (raw, json)
Hash identifier:          du0cTO/MdLartxNkeu3y/adtDV/4mv96/ZY/WtFGq/M=
Subject key identifier:   D0:AF:42:4B:B5:F8:96:45:FC:CB:D9:54:7D:7A:6D:C9:4B:96:55:B7
Certificate issuer:       /CN=cbd22aa435cb28d447ede265adf51bfeaaba86c5
Certificate serial:       03EE28
Authority key identifier: D5:25:2C:0B:0D:06:46:80:46:17:58:EC:64:B2:28:E5:4E:AC:B7:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbd22aa435cb28d447ede265adf51bfeaaba86c5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d9462a8-9f3c-4527-bb46-c1e9346a9feb/584ec5769980befcf520125c89187367ab5db378.roa
Signing time:             Wed 24 Mar 2021 22:52:11 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     266830
IP address blocks:        45.238.20.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257576 (0x3ee28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd22aa435cb28d447ede265adf51bfeaaba86c5
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=584ec5769980befcf520125c89187367ab5db378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:a5:f9:71:ac:ea:db:cc:13:15:b4:15:f4:
                    e1:1e:00:9d:c7:ac:65:32:aa:83:47:c1:bb:aa:9a:
                    5a:d8:e8:f9:2f:18:3b:0f:2c:d0:9c:c7:c0:03:e7:
                    cf:b3:6b:ed:c8:c2:a4:ae:86:2c:41:f6:66:ce:0b:
                    2e:fe:01:8f:72:f5:a5:fd:c7:de:ab:4b:a9:d1:8b:
                    ae:82:0e:1c:8d:51:f0:0c:0c:e3:26:68:53:80:00:
                    9b:94:0d:26:87:ba:1e:87:35:de:c7:46:bf:cc:41:
                    6f:d7:a0:61:94:4f:1c:a9:f0:5c:36:35:21:33:ca:
                    9a:7c:f3:f4:77:6a:b4:fd:a5:b9:de:31:01:26:b0:
                    7c:bd:b7:05:d5:85:bf:a6:9b:68:b0:46:8f:8b:88:
                    36:af:5d:9f:31:84:aa:80:a2:f0:8f:43:0b:f3:22:
                    b0:36:ef:9b:00:3c:09:cd:ee:40:83:d4:05:7a:2a:
                    fd:3a:cb:4f:6d:b5:28:e7:20:83:c5:8f:09:19:c5:
                    d0:01:4d:aa:56:27:04:e7:d2:f1:9d:67:ba:86:db:
                    ef:35:7c:68:4b:57:37:cb:3b:cc:06:07:ed:41:3a:
                    95:48:bb:84:90:db:a7:98:ea:68:33:97:b0:95:66:
                    6c:a2:0a:64:56:bf:22:02:cd:1c:88:8d:d6:13:1d:
                    44:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AF:42:4B:B5:F8:96:45:FC:CB:D9:54:7D:7A:6D:C9:4B:96:55:B7
            X509v3 Authority Key Identifier:
                keyid:D5:25:2C:0B:0D:06:46:80:46:17:58:EC:64:B2:28:E5:4E:AC:B7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbd22aa435cb28d447ede265adf51bfeaaba86c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d9462a8-9f3c-4527-bb46-c1e9346a9feb/584ec5769980befcf520125c89187367ab5db378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d9462a8-9f3c-4527-bb46-c1e9346a9feb/cbd22aa435cb28d447ede265adf51bfeaaba86c5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:86:1d:a5:ec:69:09:b4:10:dc:f4:a9:14:d2:b0:68:49:29:
         77:c4:dd:68:04:fc:b9:97:da:5c:43:65:9f:91:73:af:58:f1:
         66:ba:b5:3b:82:61:be:4b:57:0d:32:e1:5e:78:0b:82:bf:a5:
         dc:5d:36:25:c0:3d:2b:3e:4f:9b:5a:0c:09:d7:cd:7a:ec:09:
         af:0b:79:dc:41:32:71:82:32:5b:ad:4b:91:98:75:ca:27:b6:
         75:da:46:08:69:35:0f:3b:77:69:95:0f:f4:2e:3f:f6:e8:af:
         4f:73:ff:70:1a:5c:3f:aa:a4:fd:12:87:cb:d1:15:5d:24:fc:
         c8:97:23:be:1e:97:e7:0e:79:60:95:e0:e8:1a:7b:54:ec:dc:
         24:f1:61:85:4e:89:d0:6d:c9:69:66:21:a0:67:e3:0f:fa:15:
         b1:97:40:ce:b2:60:fa:8e:3b:1f:72:67:8f:3f:cf:80:5c:80:
         d6:ff:da:a9:45:96:66:75:c6:c1:e0:19:3a:cc:5f:dd:2b:d6:
         7d:e9:cf:2c:a9:ef:16:ff:7f:3b:f2:d2:d4:0f:d8:3a:24:07:
         7a:5d:04:2b:0a:be:35:c3:24:31:28:61:db:ee:1e:fc:ab:75:
         49:a2:a8:1d:98:39:91:81:08:d8:42:21:1f:b4:cf:43:a3:f0:
         08:07:bc:e4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA+4oMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNi
ZDIyYWE0MzVjYjI4ZDQ0N2VkZTI2NWFkZjUxYmZlYWFiYTg2YzUwHhcNMjEwMzI0
MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEyg1ODRlYzU3Njk5ODBi
ZWZjZjUyMDEyNWM4OTE4NzM2N2FiNWRiMzc4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuGml+XGs6tvMExW0FfThHgCdx6xlMqqDR8G7qppa2Oj5Lxg7
DyzQnMfAA+fPs2vtyMKkroYsQfZmzgsu/gGPcvWl/cfeq0up0Yuugg4cjVHwDAzj
JmhTgACblA0mh7oehzXex0a/zEFv16BhlE8cqfBcNjUhM8qafPP0d2q0/aW53jEB
JrB8vbcF1YW/pptosEaPi4g2r12fMYSqgKLwj0ML8yKwNu+bADwJze5Ag9QFeir9
OstPbbUo5yCDxY8JGcXQAU2qVicE59LxnWe6htvvNXxoS1c3yzvMBgftQTqVSLuE
kNunmOpoM5ewlWZsogpkVr8iAs0ciI3WEx1EUwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNCvQku1+JZF/MvZVH16bclLllW3MB8GA1UdIwQYMBaAFNUlLAsNBkaARhdY
7GSyKOVOrLe7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2JkMjJh
YTQzNWNiMjhkNDQ3ZWRlMjY1YWRmNTFiZmVhYWJhODZjNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWQ5NDYyYTgtOWYzYy00NTI3LWJiNDYtYzFlOTM0
NmE5ZmViLzU4NGVjNTc2OTk4MGJlZmNmNTIwMTI1Yzg5MTg3MzY3YWI1ZGIzNzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZDk0NjJhOC05ZjNjLTQ1MjctYmI0Ni1jMWU5
MzQ2YTlmZWIvY2JkMjJhYTQzNWNiMjhkNDQ3ZWRlMjY1YWRmNTFiZmVhYWJhODZj
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3uFDANBgkqhkiG9w0BAQsFAAOCAQEAj4YdpexpCbQQ3PSp
FNKwaEkpd8TdaAT8uZfaXENln5Fzr1jxZrq1O4JhvktXDTLhXngLgr+l3F02JcA9
Kz5Pm1oMCdfNeuwJrwt53EEycYIyW61LkZh1yie2ddpGCGk1Dzt3aZUP9C4/9uiv
T3P/cBpcP6qk/RKHy9EVXST8yJcjvh6X5w55YJXg6Bp7VOzcJPFhhU6J0G3JaWYh
oGfjD/oVsZdAzrJg+o47H3Jnjz/PgFyA1v/aqUWWZnXGweAZOsxf3SvWfenPLKnv
Fv9/O/LS1A/YOiQHel0EKwq+NcMkMShh2+4e/Kt1SaKoHZg5kYEI2EIhH7TPQ6Pw
CAe85A==
-----END CERTIFICATE-----