Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/fafb4f02766f5dd82498c6578c521010c09d90ef.roa
File:                     fafb4f02766f5dd82498c6578c521010c09d90ef.roa (raw, json)
Hash identifier:          AbadLqYJGRHn3Eh1Tgape7Wn9aaWmRsqjPoiK1mrP8w=
Subject key identifier:   61:87:A9:B1:2A:0D:09:91:2C:F6:CA:2C:B6:62:E5:25:64:5C:EA:EF
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       0A00CA
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/fafb4f02766f5dd82498c6578c521010c09d90ef.roa
Signing time:             Wed 24 Mar 2021 14:43:17 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        189.204.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655562 (0xa00ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=fafb4f02766f5dd82498c6578c521010c09d90ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:30:1b:c9:33:d7:0b:8f:32:16:c0:13:7a:a6:
                    08:60:b5:02:d5:83:e3:07:6f:26:ed:bb:40:86:99:
                    ae:55:ab:3b:5e:06:6d:10:5a:1f:bd:4d:cc:69:6b:
                    1e:2f:f9:2d:1a:7c:f0:05:0d:09:8c:bb:2b:29:1d:
                    3f:07:0e:24:3a:3c:31:8b:d2:65:41:f1:1a:a8:0d:
                    59:cb:f8:44:80:5d:93:a4:32:3b:ad:38:b8:d9:66:
                    17:a5:62:0b:25:f4:05:ed:3c:bb:4a:c8:77:ec:8a:
                    1c:2a:ee:ee:8a:a2:99:dc:8d:df:c7:8a:1d:be:5d:
                    97:ff:e7:7b:b3:77:af:37:ea:f6:93:d9:08:6b:c0:
                    ef:c4:93:42:fe:a8:ff:e2:a0:5e:09:c4:23:29:ee:
                    49:b2:0f:57:17:a7:30:bb:e5:eb:c8:95:6f:3a:0a:
                    75:88:01:88:59:b8:f3:9f:a9:dc:3e:50:0f:72:65:
                    0b:04:fe:5d:63:a9:61:94:9c:07:2c:ea:d8:bc:47:
                    a7:8a:33:47:ac:ab:56:f2:79:d8:4b:43:d0:9e:df:
                    c7:4c:8e:7e:60:90:33:6c:4e:ec:71:29:98:c1:5e:
                    8a:7a:90:9c:69:e0:67:da:75:17:26:e2:f4:7a:cb:
                    b3:c5:ce:66:da:44:67:7e:1d:e9:ab:e3:75:b3:e2:
                    04:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:87:A9:B1:2A:0D:09:91:2C:F6:CA:2C:B6:62:E5:25:64:5C:EA:EF
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/fafb4f02766f5dd82498c6578c521010c09d90ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.204.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         95:9a:39:9b:f1:1d:46:f1:b4:45:50:4d:56:91:05:61:32:d4:
         19:21:de:89:85:c7:32:15:91:93:bd:aa:bb:a0:54:bb:87:0e:
         74:66:e2:90:4a:d8:d7:eb:9d:b6:51:85:02:6b:ea:6c:5f:8d:
         bd:75:d2:bf:7b:fe:4a:aa:3d:51:26:1b:80:e4:cb:e6:ae:64:
         d1:56:19:f1:f3:48:af:1e:32:c7:3b:50:42:ad:db:42:31:42:
         f0:b9:c5:f3:47:5d:64:53:d3:70:78:61:c5:91:21:ee:8c:4b:
         b1:bd:33:da:66:59:d0:7a:ea:a2:ae:3d:96:dc:e9:29:6b:c8:
         e0:50:dd:b2:ae:68:0b:c0:a5:58:f0:19:2c:5f:bd:e7:a8:96:
         23:fe:98:9a:63:53:72:5f:96:fa:16:1e:53:9a:55:ec:e3:d6:
         49:53:d3:46:54:2c:5d:93:e4:1f:36:fe:61:de:f7:5c:1d:3a:
         fe:20:49:cf:82:42:d0:8e:eb:7f:f0:ab:25:df:07:fa:6d:0a:
         26:16:14:86:fd:e3:27:9d:f0:ab:f1:a3:37:5d:25:82:ec:35:
         1c:5c:a2:55:a8:37:88:61:bc:26:a8:f9:68:03:22:a5:e6:d4:
         93:41:cb:c8:38:be:34:91:98:cc:d4:03:cf:e1:cf:25:ee:a2:
         48:5a:ad:43
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCgDKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk3
ODNhYzliYWQyYjdiOTIyZjY0OGM5MGU4ODFiZjQ0OTc4MDY5YWQwHhcNMjEwMzI0
MTQ0MzE2WhcNMjYwMzI0MTQ0MzE2WjAzMTEwLwYDVQQDEyhmYWZiNGYwMjc2NmY1
ZGQ4MjQ5OGM2NTc4YzUyMTAxMGMwOWQ5MGVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiTAbyTPXC48yFsATeqYIYLUC1YPjB28m7btAhpmuVas7XgZt
EFofvU3MaWseL/ktGnzwBQ0JjLsrKR0/Bw4kOjwxi9JlQfEaqA1Zy/hEgF2TpDI7
rTi42WYXpWILJfQF7Ty7Ssh37IocKu7uiqKZ3I3fx4odvl2X/+d7s3evN+r2k9kI
a8DvxJNC/qj/4qBeCcQjKe5Jsg9XF6cwu+XryJVvOgp1iAGIWbjzn6ncPlAPcmUL
BP5dY6lhlJwHLOrYvEenijNHrKtW8nnYS0PQnt/HTI5+YJAzbE7scSmYwV6KepCc
aeBn2nUXJuL0esuzxc5m2kRnfh3pq+N1s+IEuQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGGHqbEqDQmRLPbKLLZi5SVkXOrvMB8GA1UdIwQYMBaAFMqL6Qa6lrLFhJ+G
RkANLQxgDZdgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTc4M2Fj
OWJhZDJiN2I5MjJmNjQ4YzkwZTg4MWJmNDQ5NzgwNjlhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTBjNGI0YTAtNjQxNy00YTdjLTg3NTgtOWU2ZjRi
MGU5Njc5L2ZhZmI0ZjAyNzY2ZjVkZDgyNDk4YzY1NzhjNTIxMDEwYzA5ZDkwZWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMGM0YjRhMC02NDE3LTRhN2MtODc1OC05ZTZm
NGIwZTk2NzkvOTc4M2FjOWJhZDJiN2I5MjJmNjQ4YzkwZTg4MWJmNDQ5NzgwNjlh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEB73MgDANBgkqhkiG9w0BAQsFAAOCAQEAlZo5m/EdRvG0RVBN
VpEFYTLUGSHeiYXHMhWRk72qu6BUu4cOdGbikErY1+udtlGFAmvqbF+NvXXSv3v+
Sqo9USYbgOTL5q5k0VYZ8fNIrx4yxztQQq3bQjFC8LnF80ddZFPTcHhhxZEh7oxL
sb0z2mZZ0Hrqoq49ltzpKWvI4FDdsq5oC8ClWPAZLF+956iWI/6YmmNTcl+W+hYe
U5pV7OPWSVPTRlQsXZPkHzb+Yd73XB06/iBJz4JC0I7rf/CrJd8H+m0KJhYUhv3j
J53wq/GjN10lguw1HFyiVag3iGG8Jqj5aAMipebUk0HLyDi+NJGYzNQDz+HPJe6i
SFqtQw==
-----END CERTIFICATE-----