Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/47d3a4a455a0c43905e09c182d69b9b28792918a.roa
File:                     47d3a4a455a0c43905e09c182d69b9b28792918a.roa (raw, json)
Hash identifier:          oBMTotm5VuIOjJ1u1a5h4uX6snnw2RlZrTwsrlzNeeo=
Subject key identifier:   47:96:00:30:2C:E0:DC:D3:2A:8F:FE:74:D4:DB:80:82:26:4F:D1:CF
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       0D84D9
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/47d3a4a455a0c43905e09c182d69b9b28792918a.roa
Signing time:             Wed 24 Mar 2021 14:40:20 +0000
ROA not before:           Wed 24 Mar 2021 14:40:20 +0000
ROA not after:            Tue 24 Mar 2026 14:40:20 +0000
asID:                     264668
IP address blocks:        177.234.192.0/18 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885977 (0xd84d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: Mar 24 14:40:20 2021 GMT
            Not After : Mar 24 14:40:20 2026 GMT
        Subject: CN=47d3a4a455a0c43905e09c182d69b9b28792918a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dd:d8:35:97:30:ed:ae:a1:75:ce:d8:58:17:
                    b1:e1:45:6f:be:2b:a5:8d:32:d7:bf:5e:2b:19:07:
                    4b:04:9e:66:ce:6f:80:59:b9:0e:f6:7e:16:c6:06:
                    c6:d3:de:d0:84:d4:d2:cc:90:fa:f8:78:07:8b:e9:
                    12:99:0d:8f:f3:32:67:6e:52:80:a4:43:ed:fe:52:
                    5b:48:71:1b:6b:3f:7c:b3:07:bb:24:5a:5b:44:ca:
                    fe:6c:2c:5a:2d:24:b6:36:0b:fa:a6:25:44:6a:61:
                    59:bc:1c:7f:9d:c5:04:cc:03:8b:56:ab:f9:6f:49:
                    33:2c:58:45:73:e4:41:65:58:60:12:1a:73:de:7b:
                    e1:4f:35:47:4c:a8:6c:e4:94:5d:fa:62:21:7a:d5:
                    76:e1:28:e9:d9:47:9b:d9:fb:bc:52:4d:46:ea:75:
                    76:ee:eb:8d:36:77:8b:f5:b4:e9:f2:8c:87:dc:d6:
                    e8:b0:2e:dc:99:f1:46:ff:d5:46:1a:c1:56:f9:22:
                    7d:cf:8c:69:0f:e1:12:c3:7d:1e:dc:5d:a0:2f:8a:
                    74:ab:ba:98:76:04:3f:b3:50:96:1d:e1:2c:de:10:
                    96:84:d1:d5:ca:09:52:9c:8d:56:79:45:42:db:36:
                    5f:d1:62:77:a0:79:26:00:bc:0e:06:bd:64:fc:2f:
                    8a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:96:00:30:2C:E0:DC:D3:2A:8F:FE:74:D4:DB:80:82:26:4F:D1:CF
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/47d3a4a455a0c43905e09c182d69b9b28792918a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1b:e5:23:0f:3b:e9:28:a1:3f:a7:65:f3:fe:5b:0d:9e:c3:84:
         1f:19:1d:cc:26:57:92:7c:67:03:4c:94:f4:61:90:d1:e0:c4:
         e2:5d:37:68:8e:a3:f1:98:a4:2b:51:d6:e5:51:4a:a8:f8:d0:
         9d:04:ae:53:a8:16:cd:97:07:31:2d:9f:59:14:d6:3e:5a:94:
         2e:e4:2b:ac:78:96:90:a3:d8:72:04:bb:ea:15:ae:82:f6:c3:
         d9:70:a6:de:35:e4:eb:7e:85:db:de:6c:72:90:ff:80:c4:67:
         a6:8b:fd:9e:ab:d6:15:1d:e0:40:46:17:1a:27:77:71:fe:ef:
         ad:02:03:c8:e9:25:bc:29:a3:a1:e8:47:26:6a:34:02:63:df:
         d4:b8:1b:44:cb:ca:d7:b6:a6:99:b2:8b:a7:ab:be:f8:9a:9d:
         a2:31:a9:27:5a:69:fe:ba:b7:fb:f5:e0:87:1e:7c:40:7f:8d:
         c0:7c:3b:83:da:9c:97:5e:a4:68:5c:77:7e:24:20:c0:df:39:
         06:16:c3:99:82:e9:bd:a5:f9:f5:05:38:3b:49:0c:66:7b:96:
         10:b5:19:10:c7:e5:0b:cb:ec:6a:bc:16:b3:c8:7e:01:a4:25:
         8e:28:9c:25:43:f6:d4:e8:70:61:bf:ce:7f:ad:b2:0b:e3:1c:
         50:f2:a1:43
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDYTZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
M2Q2MDAyMjc2ZTIyOTUyMDBjODVhNjYxMjljNDJlNGQ0ODNjMzQwHhcNMjEwMzI0
MTQ0MDIwWhcNMjYwMzI0MTQ0MDIwWjAzMTEwLwYDVQQDEyg0N2QzYTRhNDU1YTBj
NDM5MDVlMDljMTgyZDY5YjliMjg3OTI5MThhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApt3YNZcw7a6hdc7YWBex4UVvviuljTLXv14rGQdLBJ5mzm+A
WbkO9n4WxgbG097QhNTSzJD6+HgHi+kSmQ2P8zJnblKApEPt/lJbSHEbaz98swe7
JFpbRMr+bCxaLSS2Ngv6piVEamFZvBx/ncUEzAOLVqv5b0kzLFhFc+RBZVhgEhpz
3nvhTzVHTKhs5JRd+mIhetV24Sjp2Ueb2fu8Uk1G6nV27uuNNneL9bTp8oyH3Nbo
sC7cmfFG/9VGGsFW+SJ9z4xpD+ESw30e3F2gL4p0q7qYdgQ/s1CWHeEs3hCWhNHV
yglSnI1WeUVC2zZf0WJ3oHkmALwOBr1k/C+KfQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEeWADAs4NzTKo/+dNTbgIImT9HPMB8GA1UdIwQYMBaAFDAh+wtyXfK860HI
D7qAy4I4YPkKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWIzZDYw
MDIyNzZlMjI5NTIwMGM4NWE2NjEyOWM0MmU0ZDQ4M2MzNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTI2M2RjNTctZTExYy00NjA4LTlhZjItYmRmYjE2
ZTIxNmRjLzQ3ZDNhNGE0NTVhMGM0MzkwNWUwOWMxODJkNjliOWIyODc5MjkxOGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMjYzZGM1Ny1lMTFjLTQ2MDgtOWFmMi1iZGZi
MTZlMjE2ZGMvOWIzZDYwMDIyNzZlMjI5NTIwMGM4NWE2NjEyOWM0MmU0ZDQ4M2Mz
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBrHqwDANBgkqhkiG9w0BAQsFAAOCAQEAG+UjDzvpKKE/p2Xz
/lsNnsOEHxkdzCZXknxnA0yU9GGQ0eDE4l03aI6j8ZikK1HW5VFKqPjQnQSuU6gW
zZcHMS2fWRTWPlqULuQrrHiWkKPYcgS76hWugvbD2XCm3jXk636F295scpD/gMRn
pov9nqvWFR3gQEYXGid3cf7vrQIDyOklvCmjoehHJmo0AmPf1LgbRMvK17ammbKL
p6u++JqdojGpJ1pp/rq3+/Xghx58QH+NwHw7g9qcl16kaFx3fiQgwN85BhbDmYLp
vaX59QU4O0kMZnuWELUZEMflC8vsarwWs8h+AaQljiicJUP21OhwYb/Of62yC+Mc
UPKhQw==
-----END CERTIFICATE-----