Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/f49d0086132846399de150752b494ef8b44d1b97.roa
File:                     f49d0086132846399de150752b494ef8b44d1b97.roa (raw, json)
Hash identifier:          yAnsHsDf0Q3VdC5pxGPT2WJCMPJV8wTwoggLQ69bXpE=
Subject key identifier:   05:46:28:11:84:79:32:F6:84:4E:72:A0:5F:BE:36:95:09:C3:5B:F1
Certificate issuer:       /CN=392ca19b432c483d5aa2dbbefd00061b3e86b29c
Certificate serial:       0F4116
Authority key identifier: 9B:CF:86:21:80:B5:A6:DC:7F:0E:B3:96:24:73:A8:E5:5D:49:83:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/392ca19b432c483d5aa2dbbefd00061b3e86b29c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/f49d0086132846399de150752b494ef8b44d1b97.roa
Signing time:             Fri 10 Jun 2022 15:34:01 +0000
ROA not before:           Wed 08 Jun 2022 03:00:00 +0000
ROA not after:            Sat 08 Jun 2024 03:00:00 +0000
asID:                     52363
IP address blocks:        45.232.204.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 999702 (0xf4116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392ca19b432c483d5aa2dbbefd00061b3e86b29c
        Validity
            Not Before: Jun  8 03:00:00 2022 GMT
            Not After : Jun  8 03:00:00 2024 GMT
        Subject: CN=f49d0086132846399de150752b494ef8b44d1b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:3f:bd:ec:e3:e8:bd:5d:4f:bb:98:86:1e:
                    0b:34:df:bf:68:36:2a:2f:d5:5a:11:fb:be:34:cc:
                    36:eb:e7:bf:5d:a4:d8:f2:c8:6b:87:14:99:80:e2:
                    bd:22:bf:19:f9:cd:7a:24:77:bd:e6:80:a0:d0:e4:
                    49:28:75:ce:ed:3f:64:d0:3c:eb:7b:e4:a5:94:a5:
                    c0:be:26:14:b3:98:8e:c7:b0:8f:fb:f2:00:47:0f:
                    1f:c8:b6:5b:ce:39:16:5d:ea:dc:fe:27:38:e1:e8:
                    6c:5d:5a:ae:51:95:5c:51:d5:d8:e2:d6:7b:44:2f:
                    04:bd:f7:af:ba:63:55:4f:66:94:01:0a:4b:75:32:
                    95:86:35:ec:da:d3:36:6a:37:6d:97:f1:31:8d:52:
                    2b:3f:c7:7f:54:74:95:95:cd:b3:a8:53:76:ca:77:
                    bb:c4:49:5d:4f:e9:41:9a:06:18:0e:dd:dd:82:fa:
                    20:e7:43:a4:ec:78:51:05:7c:a1:1c:f6:82:12:0a:
                    4b:1d:f3:03:4a:67:c6:a5:89:97:b6:27:f2:64:5a:
                    ba:63:3f:96:8a:28:19:f0:6c:43:67:3c:f9:2a:63:
                    41:8e:8d:ef:a3:73:22:34:98:2e:1c:4a:cb:53:29:
                    26:b0:37:ba:08:a7:61:41:87:d1:73:a6:47:72:3b:
                    3f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:46:28:11:84:79:32:F6:84:4E:72:A0:5F:BE:36:95:09:C3:5B:F1
            X509v3 Authority Key Identifier:
                keyid:9B:CF:86:21:80:B5:A6:DC:7F:0E:B3:96:24:73:A8:E5:5D:49:83:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/392ca19b432c483d5aa2dbbefd00061b3e86b29c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/f49d0086132846399de150752b494ef8b44d1b97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/392ca19b432c483d5aa2dbbefd00061b3e86b29c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:8e:9a:10:9c:27:ce:c0:1a:56:94:d2:f1:ab:79:f2:8b:67:
         fa:ee:2f:72:01:e4:c4:81:20:e9:e1:ee:f4:f9:7b:67:ef:db:
         9e:36:4b:ac:48:71:93:da:6c:d1:8d:b9:0d:90:ed:06:82:19:
         39:3e:a2:f6:86:ef:70:f1:64:eb:fe:e6:e9:af:70:67:92:da:
         b1:03:68:5b:17:b2:27:27:56:cd:7f:de:a5:ac:cc:e2:2f:6e:
         f5:8e:da:b4:23:38:76:58:1e:ed:31:2d:57:f7:ae:4e:b3:05:
         45:b1:56:a7:2a:33:fc:23:b4:24:fd:5b:80:64:f0:fb:f4:8d:
         a0:da:b6:c4:bf:e7:1f:59:3c:3a:c3:91:c0:0c:e1:5a:43:41:
         ee:ab:12:16:9b:a3:5b:66:ea:e2:cd:df:57:a1:6a:1b:a4:f4:
         1f:f3:ac:50:da:6c:1f:54:34:ac:f3:03:89:ba:19:10:c0:40:
         ca:ea:b0:44:14:a3:a9:9e:cf:3d:ed:e0:c7:b9:1c:6c:40:25:
         00:65:f8:4d:99:4e:10:2b:01:b4:5f:b7:b3:24:8c:16:db:d8:
         c8:b6:b5:68:68:b2:ab:45:43:ba:2c:00:e9:04:3c:7f:86:bf:
         09:3b:bd:8b:af:59:ad:67:59:dc:66:46:e4:a7:af:d7:c8:dd:
         59:27:4a:3a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDD0EWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM5
MmNhMTliNDMyYzQ4M2Q1YWEyZGJiZWZkMDAwNjFiM2U4NmIyOWMwHhcNMjIwNjA4
MDMwMDAwWhcNMjQwNjA4MDMwMDAwWjAzMTEwLwYDVQQDEyhmNDlkMDA4NjEzMjg0
NjM5OWRlMTUwNzUyYjQ5NGVmOGI0NGQxYjk3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuak/vezj6L1dT7uYhh4LNN+/aDYqL9VaEfu+NMw26+e/XaTY
8shrhxSZgOK9Ir8Z+c16JHe95oCg0ORJKHXO7T9k0Dzre+SllKXAviYUs5iOx7CP
+/IARw8fyLZbzjkWXerc/ic44ehsXVquUZVcUdXY4tZ7RC8EvfevumNVT2aUAQpL
dTKVhjXs2tM2ajdtl/ExjVIrP8d/VHSVlc2zqFN2yne7xEldT+lBmgYYDt3dgvog
50Ok7HhRBXyhHPaCEgpLHfMDSmfGpYmXtifyZFq6Yz+WiigZ8GxDZzz5KmNBjo3v
o3MiNJguHErLUykmsDe6CKdhQYfRc6ZHcjs/CwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAVGKBGEeTL2hE5yoF++NpUJw1vxMB8GA1UdIwQYMBaAFJvPhiGAtabcfw6z
liRzqOVdSYNVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzkyY2Ex
OWI0MzJjNDgzZDVhYTJkYmJlZmQwMDA2MWIzZTg2YjI5Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWVlMDUwMTctYmU4Ny00N2M4LTliMzctNDYxM2Jl
MzZiN2Q3L2Y0OWQwMDg2MTMyODQ2Mzk5ZGUxNTA3NTJiNDk0ZWY4YjQ0ZDFiOTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZWUwNTAxNy1iZTg3LTQ3YzgtOWIzNy00NjEz
YmUzNmI3ZDcvMzkyY2ExOWI0MzJjNDgzZDVhYTJkYmJlZmQwMDA2MWIzZTg2YjI5
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3ozDANBgkqhkiG9w0BAQsFAAOCAQEAoI6aEJwnzsAaVpTS
8at58otn+u4vcgHkxIEg6eHu9Pl7Z+/bnjZLrEhxk9ps0Y25DZDtBoIZOT6i9obv
cPFk6/7m6a9wZ5LasQNoWxeyJydWzX/epazM4i9u9Y7atCM4dlge7TEtV/euTrMF
RbFWpyoz/CO0JP1bgGTw+/SNoNq2xL/nH1k8OsORwAzhWkNB7qsSFpujW2bq4s3f
V6FqG6T0H/OsUNpsH1Q0rPMDiboZEMBAyuqwRBSjqZ7PPe3gx7kcbEAlAGX4TZlO
ECsBtF+3sySMFtvYyLa1aGiyq0VDuiwA6QQ8f4a/CTu9i69ZrWdZ3GZG5Kev18jd
WSdKOg==
-----END CERTIFICATE-----