Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/8e95303e73a4c5328e5694c5dc07cb8615e7bdea.roa
File:                     8e95303e73a4c5328e5694c5dc07cb8615e7bdea.roa (raw, json)
Hash identifier:          fzFDPOGvzRUmoRRuDZXF1x/o3TxU+XAcTceiND9H3bI=
Subject key identifier:   56:76:D8:7A:16:0A:01:BE:CA:EC:A1:11:0C:F0:B1:BF:01:5B:34:E9
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       0D9334
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/8e95303e73a4c5328e5694c5dc07cb8615e7bdea.roa
Signing time:             Wed 24 Mar 2021 14:35:13 +0000
ROA not before:           Wed 24 Mar 2021 14:35:11 +0000
ROA not after:            Tue 24 Mar 2026 14:35:11 +0000
asID:                     19429
IP address blocks:        186.154.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889652 (0xd9334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Mar 24 14:35:11 2021 GMT
            Not After : Mar 24 14:35:11 2026 GMT
        Subject: CN=8e95303e73a4c5328e5694c5dc07cb8615e7bdea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:71:10:fc:ac:ab:cb:34:5b:15:b7:c9:9d:d6:
                    aa:3b:41:02:51:10:e5:24:71:eb:9a:fa:11:d7:0f:
                    0c:f1:59:76:01:7b:d7:4e:f9:b0:ea:a4:27:6a:1d:
                    37:96:e9:51:a7:20:20:08:18:4c:71:94:b8:c9:ce:
                    3d:88:73:36:e1:93:0e:59:71:92:a3:69:0e:9f:f3:
                    b1:95:76:5f:24:30:9b:3c:fa:de:af:76:07:4a:1e:
                    24:91:82:1d:97:f3:da:b5:f9:6c:5f:df:cb:61:ae:
                    0a:9c:3d:c4:72:f7:61:01:c9:14:b5:97:08:4f:5a:
                    d3:0c:41:73:83:d8:4c:ee:51:ac:2e:fd:73:82:bb:
                    93:97:11:ee:6f:3e:38:fb:3f:38:5f:36:96:da:97:
                    7a:ff:ff:e4:e2:90:37:a5:87:d2:02:47:53:d8:34:
                    65:85:f0:89:0c:c7:31:41:66:de:cf:a0:e4:40:64:
                    f0:ba:12:af:ab:06:8d:b1:59:d2:22:46:40:34:fc:
                    1a:f4:67:ca:6d:30:b8:29:97:11:25:16:69:9a:e7:
                    50:ca:19:42:5c:fc:32:d6:3e:e3:55:d4:39:ef:18:
                    ca:1d:8d:57:89:0c:c1:96:8b:09:da:05:b6:9f:12:
                    4f:85:41:0f:8a:06:c8:a8:61:da:e9:eb:0d:18:04:
                    db:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:76:D8:7A:16:0A:01:BE:CA:EC:A1:11:0C:F0:B1:BF:01:5B:34:E9
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/8e95303e73a4c5328e5694c5dc07cb8615e7bdea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.154.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         35:cc:9c:3e:40:21:8b:e7:09:5b:be:c2:81:7d:fc:db:ac:b5:
         43:cb:31:c9:33:d0:2d:61:8a:c1:ba:9e:95:10:39:c5:3d:77:
         d7:0d:51:fe:59:aa:ba:b5:7f:f2:e2:c5:0f:1d:dd:4b:b5:8b:
         c2:47:20:7d:72:02:49:0d:67:ce:d3:54:e8:d1:a4:62:70:9e:
         2d:a5:f6:f4:0f:c6:dc:3d:15:fb:59:1d:47:98:a2:52:1b:0a:
         f4:2f:28:3e:84:cc:17:63:26:8a:92:ab:b4:3d:d1:a8:1a:ac:
         0a:b4:eb:fc:e9:9a:46:76:14:f5:b7:9d:3e:b7:99:1b:06:04:
         d6:22:ba:b7:85:52:b0:18:b1:18:cd:9d:76:06:00:1c:1e:70:
         0d:6b:c4:90:6b:8d:69:4d:09:c6:fb:14:69:03:e6:00:f0:d5:
         62:59:3e:66:21:25:7c:c0:53:33:73:8a:a0:21:90:f9:b7:d4:
         00:5f:96:ee:c4:ad:85:70:04:ae:9c:38:86:77:87:f1:cb:ab:
         b8:5c:09:96:86:37:cf:45:85:b8:a5:44:8b:48:57:23:a8:66:
         57:9b:00:23:be:e0:ed:c1:57:42:b8:b8:1d:81:f7:f1:c9:c5:
         a6:c1:42:4d:da:06:cd:38:67:1e:40:1e:78:4b:af:58:02:c9:
         7a:5d:fb:88
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDDZM0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc4
NTUxOTdmNTkwZmYyOThiNTJhYjM1OGRhMDhhMGZkYmZlNmE4ODMwHhcNMjEwMzI0
MTQzNTExWhcNMjYwMzI0MTQzNTExWjAzMTEwLwYDVQQDEyg4ZTk1MzAzZTczYTRj
NTMyOGU1Njk0YzVkYzA3Y2I4NjE1ZTdiZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqHEQ/KyryzRbFbfJndaqO0ECURDlJHHrmvoR1w8M8Vl2AXvX
Tvmw6qQnah03lulRpyAgCBhMcZS4yc49iHM24ZMOWXGSo2kOn/OxlXZfJDCbPPre
r3YHSh4kkYIdl/PatflsX9/LYa4KnD3EcvdhAckUtZcIT1rTDEFzg9hM7lGsLv1z
gruTlxHubz44+z84XzaW2pd6///k4pA3pYfSAkdT2DRlhfCJDMcxQWbez6DkQGTw
uhKvqwaNsVnSIkZANPwa9GfKbTC4KZcRJRZpmudQyhlCXPwy1j7jVdQ57xjKHY1X
iQzBlosJ2gW2nxJPhUEPigbIqGHa6esNGATbJwIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFFZ22HoWCgG+yuyhEQzwsb8BWzTpMB8GA1UdIwQYMBaAFDzc0eVbXZoW/XX/
IxD889OGilrKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzg1NTE5
N2Y1OTBmZjI5OGI1MmFiMzU4ZGEwOGEwZmRiZmU2YTg4My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTMyYzQyNDAtY2VlYS00NzBlLTk2NGMtNzRkOWJj
MWUzODBhLzhlOTUzMDNlNzNhNGM1MzI4ZTU2OTRjNWRjMDdjYjg2MTVlN2JkZWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMzJjNDI0MC1jZWVhLTQ3MGUtOTY0Yy03NGQ5
YmMxZTM4MGEvNzg1NTE5N2Y1OTBmZjI5OGI1MmFiMzU4ZGEwOGEwZmRiZmU2YTg4
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDALqaMA0GCSqGSIb3DQEBCwUAA4IBAQA1zJw+QCGL5wlbvsKB
ffzbrLVDyzHJM9AtYYrBup6VEDnFPXfXDVH+Waq6tX/y4sUPHd1LtYvCRyB9cgJJ
DWfO01To0aRicJ4tpfb0D8bcPRX7WR1HmKJSGwr0Lyg+hMwXYyaKkqu0PdGoGqwK
tOv86ZpGdhT1t50+t5kbBgTWIrq3hVKwGLEYzZ12BgAcHnANa8SQa41pTQnG+xRp
A+YA8NViWT5mISV8wFMzc4qgIZD5t9QAX5buxK2FcASunDiGd4fxy6u4XAmWhjfP
RYW4pUSLSFcjqGZXmwAjvuDtwVdCuLgdgffxycWmwUJN2gbNOGceQB54S69YAsl6
XfuI
-----END CERTIFICATE-----