Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/8419d7a8691fe0ffb0e32e86edf7c94e9ebc0895.roa
File:                     8419d7a8691fe0ffb0e32e86edf7c94e9ebc0895.roa (raw, json)
Hash identifier:          RZtqQmk0CQFzZPJvR+Cz8HziseyhzOSDMwfUhZa0llA=
Subject key identifier:   66:4C:86:D4:50:F2:BA:5A:B4:5A:1B:41:7A:99:7C:2D:DA:FA:A7:F5
Certificate issuer:       /CN=32c356bf43c9220bb625d50596a7ec3c7542fb23
Certificate serial:       0460
Authority key identifier: 68:D5:F4:5A:FB:FD:05:72:58:30:FA:E5:30:66:98:91:22:81:15:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32c356bf43c9220bb625d50596a7ec3c7542fb23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/8419d7a8691fe0ffb0e32e86edf7c94e9ebc0895.roa
Signing time:             Mon 04 Oct 2021 22:58:47 +0000
ROA not before:           Mon 04 Oct 2021 03:00:00 +0000
ROA not after:            Wed 04 Oct 2023 03:00:00 +0000
asID:                     53856
IP address blocks:        45.224.252.0/22 maxlen: 22
                          2803:2a20::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120 (0x460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32c356bf43c9220bb625d50596a7ec3c7542fb23
        Validity
            Not Before: Oct  4 03:00:00 2021 GMT
            Not After : Oct  4 03:00:00 2023 GMT
        Subject: CN=8419d7a8691fe0ffb0e32e86edf7c94e9ebc0895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1c:53:5a:a6:ef:5a:62:24:dd:a1:eb:a8:0c:
                    ab:8c:6d:b8:41:f6:13:82:45:30:a7:35:f4:21:98:
                    7f:9a:e5:f0:43:08:72:d2:47:f0:ef:1c:81:e1:8c:
                    ca:8e:69:0d:d1:71:ea:95:1f:63:d5:39:ce:23:68:
                    48:5b:49:c6:e6:67:ca:a8:23:aa:a2:1a:5c:fb:18:
                    55:a3:68:bc:00:29:7a:1d:4c:de:80:42:6d:99:e0:
                    a7:61:3c:c2:6a:2a:60:b2:29:4a:e6:d7:0b:0a:8c:
                    5b:51:c7:b1:1d:a8:3b:fe:2d:5a:d6:e6:8d:b3:1d:
                    56:95:b2:8d:2e:88:3d:77:6c:5b:ca:00:dd:9f:63:
                    c5:bd:f1:01:0a:d4:56:b3:80:88:6c:b9:9d:b7:b2:
                    97:47:a3:dc:90:90:22:fd:14:bf:a6:5a:54:3a:e1:
                    5b:38:35:c9:10:10:b5:32:87:48:53:54:3e:7d:bb:
                    dc:05:d0:fb:08:b9:3b:ed:9a:e6:5a:d0:68:1b:cf:
                    cd:c6:9a:2c:9e:3d:de:16:4c:72:4c:fd:1e:5d:1e:
                    b9:99:db:0b:1a:2b:b2:d8:36:f2:eb:22:7d:0b:7a:
                    6b:0c:6c:4f:eb:70:33:c3:20:a4:5a:2f:b3:9a:b0:
                    d1:28:8c:a8:58:4d:5b:bc:58:0b:2e:98:0c:2d:70:
                    8c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4C:86:D4:50:F2:BA:5A:B4:5A:1B:41:7A:99:7C:2D:DA:FA:A7:F5
            X509v3 Authority Key Identifier:
                keyid:68:D5:F4:5A:FB:FD:05:72:58:30:FA:E5:30:66:98:91:22:81:15:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32c356bf43c9220bb625d50596a7ec3c7542fb23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/8419d7a8691fe0ffb0e32e86edf7c94e9ebc0895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/32c356bf43c9220bb625d50596a7ec3c7542fb23.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.252.0/22
                IPv6:
                  2803:2a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:01:dd:03:56:71:78:0b:94:9f:c3:c3:7f:27:14:29:13:5a:
         d7:c1:b0:91:8d:22:22:40:f4:c5:d3:04:35:1b:d2:32:30:5e:
         31:d3:81:2d:91:55:c8:c7:11:9b:2e:85:60:e4:7a:4f:84:0c:
         8e:9d:ae:ef:2b:f8:fd:79:a5:0d:ca:32:c2:ad:a6:24:22:0d:
         86:25:e2:c3:5b:53:48:eb:b2:b0:51:0a:b2:49:a9:0e:aa:78:
         89:cb:f8:e2:03:aa:54:d6:94:58:cf:db:8c:77:da:e2:26:7a:
         70:a8:57:e8:b0:41:a3:13:0b:42:4b:4e:f4:8a:92:28:a1:af:
         7c:21:c1:a7:cf:10:26:09:20:a1:9a:62:c3:56:90:25:7e:7e:
         1a:91:fe:18:be:f8:71:5f:2e:8c:90:1b:c9:53:10:42:48:83:
         c5:00:ea:45:4a:67:92:56:cd:45:4d:6c:be:5b:5c:86:4f:6c:
         d2:7e:ef:39:e9:c5:02:ba:bb:56:8b:a6:89:8d:6c:e6:c8:11:
         e2:8b:d0:29:39:e3:75:69:44:ca:58:71:7c:6a:cd:6a:e8:d0:
         95:7a:1e:4a:2e:f8:14:a6:77:e1:f3:4d:2b:5f:9d:0a:e7:8e:
         1e:98:3e:80:98:6e:37:d0:2a:6d:7b:9f:45:ca:13:a9:d4:d4:
         2c:bc:f1:60
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzJj
MzU2YmY0M2M5MjIwYmI2MjVkNTA1OTZhN2VjM2M3NTQyZmIyMzAeFw0yMTEwMDQw
MzAwMDBaFw0yMzEwMDQwMzAwMDBaMDMxMTAvBgNVBAMTKDg0MTlkN2E4NjkxZmUw
ZmZiMGUzMmU4NmVkZjdjOTRlOWViYzA4OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgHFNapu9aYiTdoeuoDKuMbbhB9hOCRTCnNfQhmH+a5fBDCHLS
R/DvHIHhjMqOaQ3RceqVH2PVOc4jaEhbScbmZ8qoI6qiGlz7GFWjaLwAKXodTN6A
Qm2Z4KdhPMJqKmCyKUrm1wsKjFtRx7EdqDv+LVrW5o2zHVaVso0uiD13bFvKAN2f
Y8W98QEK1FazgIhsuZ23spdHo9yQkCL9FL+mWlQ64Vs4NckQELUyh0hTVD59u9wF
0PsIuTvtmuZa0Ggbz83GmiyePd4WTHJM/R5dHrmZ2wsaK7LYNvLrIn0LemsMbE/r
cDPDIKRaL7OasNEojKhYTVu8WAsumAwtcIwlAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUZkyG1FDyulq0WhtBepl8Ldr6p/UwHwYDVR0jBBgwFoAUaNX0Wvv9BXJYMPrl
MGaYkSKBFQEwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8zMmMzNTZi
ZjQzYzkyMjBiYjYyNWQ1MDU5NmE3ZWMzYzc1NDJmYjIzLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9hMmQ3NDcwNS00ZjJiLTRjZTQtYmU4OS0yYmZkZjM2
MDRlMjkvODQxOWQ3YTg2OTFmZTBmZmIwZTMyZTg2ZWRmN2M5NGU5ZWJjMDg5NS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2EyZDc0NzA1LTRmMmItNGNlNC1iZTg5LTJiZmRm
MzYwNGUyOS8zMmMzNTZiZjQzYzkyMjBiYjYyNWQ1MDU5NmE3ZWMzYzc1NDJmYjIz
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCLeD8MA0EAgACMAcDBQAoAyogMA0GCSqGSIb3DQEBCwUAA4IB
AQBhAd0DVnF4C5Sfw8N/JxQpE1rXwbCRjSIiQPTF0wQ1G9IyMF4x04EtkVXIxxGb
LoVg5HpPhAyOna7vK/j9eaUNyjLCraYkIg2GJeLDW1NI67KwUQqySakOqniJy/ji
A6pU1pRYz9uMd9riJnpwqFfosEGjEwtCS070ipIooa98IcGnzxAmCSChmmLDVpAl
fn4akf4YvvhxXy6MkBvJUxBCSIPFAOpFSmeSVs1FTWy+W1yGT2zSfu856cUCurtW
i6aJjWzmyBHii9ApOeN1aUTKWHF8as1q6NCVeh5KLvgUpnfh800rX50K544emD6A
mG430Cpte59FyhOp1NQsvPFg
-----END CERTIFICATE-----