Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/ebc5c7acc70c2cb7ce18f23d3e2c3ddf2e0b2f7a.roa
File:                     ebc5c7acc70c2cb7ce18f23d3e2c3ddf2e0b2f7a.roa (raw, json)
Hash identifier:          LXHRGskh/AzE6geuCTj79IqBnCXA6Mc2FcLxJZPZKjo=
Subject key identifier:   D2:06:D5:C3:1B:E2:33:45:6F:31:95:F2:D2:11:DF:CE:0D:43:50:A4
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       0D7912
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/ebc5c7acc70c2cb7ce18f23d3e2c3ddf2e0b2f7a.roa
Signing time:             Wed 24 Mar 2021 14:35:12 +0000
ROA not before:           Wed 24 Mar 2021 14:35:11 +0000
ROA not after:            Tue 24 Mar 2026 14:35:11 +0000
asID:                     19429
IP address blocks:        201.244.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882962 (0xd7912)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Mar 24 14:35:11 2021 GMT
            Not After : Mar 24 14:35:11 2026 GMT
        Subject: CN=ebc5c7acc70c2cb7ce18f23d3e2c3ddf2e0b2f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:92:db:91:1a:4a:88:24:1d:6f:fb:b5:1c:57:
                    cd:c3:e7:28:e2:e7:a3:22:34:64:41:e4:a1:13:17:
                    a9:1b:58:d9:be:34:a9:93:65:77:d3:07:ad:7e:b9:
                    b7:13:31:3f:e7:89:f1:58:c3:11:0c:3e:92:21:94:
                    e5:38:90:67:35:b8:3d:29:c0:05:db:b6:d4:db:9e:
                    c7:f8:87:ab:6c:6d:83:e0:3f:97:2f:a0:13:b6:1f:
                    87:6f:b7:dd:94:8e:62:4f:e6:92:f0:ec:28:9b:37:
                    c5:17:57:ac:43:12:fe:ae:d7:fa:88:b8:f1:d6:da:
                    d2:06:47:55:27:24:41:13:d5:39:00:ec:83:ea:fa:
                    10:ed:68:54:17:8f:0f:03:33:4a:f3:12:50:e5:34:
                    ec:c1:7d:1f:6f:60:1c:d8:71:77:fb:b8:87:e6:2e:
                    3d:0d:1c:c3:02:c1:8e:5a:0a:ba:d1:c4:50:44:50:
                    08:d4:3a:17:1a:03:2a:a1:04:ac:f6:52:51:89:05:
                    30:36:5b:22:e9:e5:0c:85:55:e1:12:7c:92:23:03:
                    20:00:c4:9c:77:73:d3:6d:2a:ec:45:c1:bc:75:76:
                    2b:f0:54:09:7c:c0:e5:ff:16:f8:72:a6:17:2a:02:
                    c4:72:37:00:36:0a:28:d0:0d:e9:b4:8c:25:35:6a:
                    c1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:06:D5:C3:1B:E2:33:45:6F:31:95:F2:D2:11:DF:CE:0D:43:50:A4
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/ebc5c7acc70c2cb7ce18f23d3e2c3ddf2e0b2f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.244.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:44:09:3b:30:72:9f:e7:d2:bd:29:9b:7c:db:d8:a1:83:f6:
         be:1e:ef:84:34:d8:88:a5:aa:86:f3:1d:ca:25:72:4a:ae:e2:
         b0:63:c3:71:6a:80:e7:03:eb:c1:9c:5e:74:a2:87:c2:e0:32:
         d2:d4:fb:14:d1:84:fe:ee:73:a7:34:11:0a:11:18:ef:28:1a:
         1d:15:8a:1d:f5:dd:5d:cd:45:e3:36:0c:e5:37:ce:4f:b1:49:
         2b:12:ee:78:06:9a:96:d0:88:d8:4f:7c:4f:a7:fe:fa:3c:04:
         e6:80:08:10:b3:7c:b0:c2:dd:e9:e2:18:6d:c0:1c:b1:a8:af:
         6d:e6:ba:36:71:60:e5:7a:8c:20:a2:1d:2f:84:7a:2d:2a:10:
         3c:67:83:b5:ea:7c:fd:6d:68:2b:ca:db:e1:f3:e5:f7:44:c5:
         7c:34:c5:ea:c6:61:c1:0b:88:31:59:b7:8f:47:3f:08:35:5d:
         e3:90:64:7c:e0:ed:64:31:05:05:42:2f:be:af:81:29:e0:6e:
         8c:3e:8d:6d:2b:f4:88:96:5e:e1:b3:72:f0:08:b7:10:57:42:
         a2:8f:9d:8c:b8:12:cb:d4:63:37:9c:17:53:78:a3:b8:3b:a8:
         02:3d:3c:d8:2d:7b:1e:ee:e3:cc:cb:65:7d:6e:bc:9e:82:c9:
         24:78:d7:3a
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDDXkSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc4
NTUxOTdmNTkwZmYyOThiNTJhYjM1OGRhMDhhMGZkYmZlNmE4ODMwHhcNMjEwMzI0
MTQzNTExWhcNMjYwMzI0MTQzNTExWjAzMTEwLwYDVQQDEyhlYmM1YzdhY2M3MGMy
Y2I3Y2UxOGYyM2QzZTJjM2RkZjJlMGIyZjdhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmpLbkRpKiCQdb/u1HFfNw+co4uejIjRkQeShExepG1jZvjSp
k2V30wetfrm3EzE/54nxWMMRDD6SIZTlOJBnNbg9KcAF27bU257H+IerbG2D4D+X
L6ATth+Hb7fdlI5iT+aS8OwomzfFF1esQxL+rtf6iLjx1trSBkdVJyRBE9U5AOyD
6voQ7WhUF48PAzNK8xJQ5TTswX0fb2Ac2HF3+7iH5i49DRzDAsGOWgq60cRQRFAI
1DoXGgMqoQSs9lJRiQUwNlsi6eUMhVXhEnySIwMgAMScd3PTbSrsRcG8dXYr8FQJ
fMDl/xb4cqYXKgLEcjcANgoo0A3ptIwlNWrBXQIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFNIG1cMb4jNFbzGV8tIR384NQ1CkMB8GA1UdIwQYMBaAFDzc0eVbXZoW/XX/
IxD889OGilrKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzg1NTE5
N2Y1OTBmZjI5OGI1MmFiMzU4ZGEwOGEwZmRiZmU2YTg4My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTMyYzQyNDAtY2VlYS00NzBlLTk2NGMtNzRkOWJj
MWUzODBhL2ViYzVjN2FjYzcwYzJjYjdjZTE4ZjIzZDNlMmMzZGRmMmUwYjJmN2Eu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMzJjNDI0MC1jZWVhLTQ3MGUtOTY0Yy03NGQ5
YmMxZTM4MGEvNzg1NTE5N2Y1OTBmZjI5OGI1MmFiMzU4ZGEwOGEwZmRiZmU2YTg4
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDAMn0MA0GCSqGSIb3DQEBCwUAA4IBAQAgRAk7MHKf59K9KZt8
29ihg/a+Hu+ENNiIpaqG8x3KJXJKruKwY8NxaoDnA+vBnF50oofC4DLS1PsU0YT+
7nOnNBEKERjvKBodFYod9d1dzUXjNgzlN85PsUkrEu54BpqW0IjYT3xPp/76PATm
gAgQs3ywwt3p4hhtwByxqK9t5ro2cWDleowgoh0vhHotKhA8Z4O16nz9bWgrytvh
8+X3RMV8NMXqxmHBC4gxWbePRz8INV3jkGR84O1kMQUFQi++r4Ep4G6MPo1tK/SI
ll7hs3LwCLcQV0Kij52MuBLL1GM3nBdTeKO4O6gCPTzYLXse7uPMy2V9bryegskk
eNc6
-----END CERTIFICATE-----