Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/e05f0278281b69bf20f8d41fcf3b483d8207654d.roa
File:                     e05f0278281b69bf20f8d41fcf3b483d8207654d.roa (raw, json)
Hash identifier:          FDF57FzIXqbfkV5kGb/9SHNF6DX03oEp5eVj+KcBof4=
Subject key identifier:   B7:C6:9F:0F:F8:36:CE:FF:F2:9B:E3:32:FB:31:5E:C1:41:1A:86:63
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       09EC97
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/e05f0278281b69bf20f8d41fcf3b483d8207654d.roa
Signing time:             Wed 24 Mar 2021 14:43:17 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        201.148.64.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 650391 (0x9ec97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=e05f0278281b69bf20f8d41fcf3b483d8207654d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2d:7d:d7:a3:17:9c:72:7f:79:a1:1e:01:b8:
                    d9:75:cd:3b:f9:f2:a0:b3:9b:2d:bd:c9:01:90:ca:
                    71:dc:3b:3b:67:86:e3:30:0d:e6:6f:4a:aa:74:74:
                    3f:a6:b3:a1:fe:29:64:95:00:8e:9e:4c:17:d3:89:
                    ff:42:db:37:dc:95:13:61:85:9e:91:9d:4d:c0:cc:
                    33:ae:49:b8:4b:48:28:e4:98:7d:c1:b7:c5:c7:8d:
                    cc:28:3a:3a:d9:9c:8c:e3:63:69:38:4c:29:7d:b3:
                    f5:52:fd:ac:06:27:65:e9:85:53:ca:6b:e3:06:a9:
                    7a:7e:b9:ea:58:3b:25:49:aa:29:07:8f:70:f8:08:
                    24:54:11:76:bb:93:f7:81:c9:17:ec:f5:0e:29:4a:
                    54:1a:b1:ac:91:62:e2:95:34:b5:fb:02:3c:c3:1d:
                    c2:e6:e4:82:52:61:78:94:d9:10:ba:5e:ba:a1:ff:
                    8a:4e:cd:a9:df:4f:ad:68:81:ce:56:2b:27:ef:ec:
                    54:18:5d:b9:b8:b2:ba:14:2d:48:15:f2:5a:c1:d9:
                    8f:64:f0:e5:6b:c1:f0:8f:87:c7:bf:27:c2:56:6f:
                    e1:38:1c:82:44:25:80:16:f6:3d:a9:12:99:fd:3d:
                    7a:60:b9:d2:6a:86:ec:9f:f8:f5:eb:6f:cc:53:eb:
                    72:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C6:9F:0F:F8:36:CE:FF:F2:9B:E3:32:FB:31:5E:C1:41:1A:86:63
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/e05f0278281b69bf20f8d41fcf3b483d8207654d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0d:b6:d5:5d:da:b4:e1:1a:67:ae:3f:17:7f:ff:de:10:87:99:
         6d:18:73:c3:68:46:8e:ef:a1:60:3e:5f:2f:5b:18:50:4e:07:
         74:0d:a8:d4:49:50:80:6b:2e:fc:56:b5:f8:ab:aa:00:7e:3e:
         1c:31:91:60:75:0c:66:8a:a4:ff:fd:56:d5:cb:93:4d:29:1e:
         dc:dd:b3:c2:95:72:fc:05:c9:8e:2b:e7:f8:2d:47:9f:9d:f5:
         88:db:2a:dc:23:8e:33:ba:c0:f0:76:7e:38:a1:15:3e:49:5c:
         37:a2:ef:7c:95:4d:a0:52:46:9f:34:5c:d6:7d:08:f7:04:0a:
         76:42:c1:90:df:93:53:d0:3d:e0:56:af:2a:9e:d2:75:43:e6:
         a0:63:66:95:d3:5d:f5:96:e0:d5:68:ff:b7:9f:35:c3:ac:99:
         1c:bc:e8:e4:0b:c6:e0:cf:da:40:f6:2f:8b:89:a0:bc:24:ab:
         63:21:96:85:27:2e:dc:cd:f6:e5:02:ea:0f:95:de:71:21:be:
         97:a1:15:ae:43:09:b4:1c:3d:a2:3d:3d:ee:b1:36:23:16:8d:
         79:85:4d:e2:eb:ee:bb:c6:fc:0a:21:0b:c4:0c:a6:ee:a1:d9:
         47:c6:75:1f:1e:32:96:64:58:d3:97:8e:20:c6:4d:5c:20:e9:
         6b:67:0a:06
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCeyXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk3
ODNhYzliYWQyYjdiOTIyZjY0OGM5MGU4ODFiZjQ0OTc4MDY5YWQwHhcNMjEwMzI0
MTQ0MzE2WhcNMjYwMzI0MTQ0MzE2WjAzMTEwLwYDVQQDEyhlMDVmMDI3ODI4MWI2
OWJmMjBmOGQ0MWZjZjNiNDgzZDgyMDc2NTRkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzy1916MXnHJ/eaEeAbjZdc07+fKgs5stvckBkMpx3Ds7Z4bj
MA3mb0qqdHQ/prOh/ilklQCOnkwX04n/Qts33JUTYYWekZ1NwMwzrkm4S0go5Jh9
wbfFx43MKDo62ZyM42NpOEwpfbP1Uv2sBidl6YVTymvjBql6frnqWDslSaopB49w
+AgkVBF2u5P3gckX7PUOKUpUGrGskWLilTS1+wI8wx3C5uSCUmF4lNkQul66of+K
Ts2p30+taIHOVisn7+xUGF25uLK6FC1IFfJawdmPZPDla8Hwj4fHvyfCVm/hOByC
RCWAFvY9qRKZ/T16YLnSaobsn/j162/MU+tyRQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLfGnw/4Ns7/8pvjMvsxXsFBGoZjMB8GA1UdIwQYMBaAFMqL6Qa6lrLFhJ+G
RkANLQxgDZdgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTc4M2Fj
OWJhZDJiN2I5MjJmNjQ4YzkwZTg4MWJmNDQ5NzgwNjlhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTBjNGI0YTAtNjQxNy00YTdjLTg3NTgtOWU2ZjRi
MGU5Njc5L2UwNWYwMjc4MjgxYjY5YmYyMGY4ZDQxZmNmM2I0ODNkODIwNzY1NGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMGM0YjRhMC02NDE3LTRhN2MtODc1OC05ZTZm
NGIwZTk2NzkvOTc4M2FjOWJhZDJiN2I5MjJmNjQ4YzkwZTg4MWJmNDQ5NzgwNjlh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBcmUQDANBgkqhkiG9w0BAQsFAAOCAQEADbbVXdq04Rpnrj8X
f//eEIeZbRhzw2hGju+hYD5fL1sYUE4HdA2o1ElQgGsu/Fa1+KuqAH4+HDGRYHUM
Zoqk//1W1cuTTSke3N2zwpVy/AXJjivn+C1Hn531iNsq3COOM7rA8HZ+OKEVPklc
N6LvfJVNoFJGnzRc1n0I9wQKdkLBkN+TU9A94FavKp7SdUPmoGNmldNd9Zbg1Wj/
t581w6yZHLzo5AvG4M/aQPYvi4mgvCSrYyGWhScu3M325QLqD5XecSG+l6EVrkMJ
tBw9oj097rE2IxaNeYVN4uvuu8b8CiELxAym7qHZR8Z1Hx4ylmRY05eOIMZNXCDp
a2cKBg==
-----END CERTIFICATE-----