Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/9c019e57a2b472e6af48e048cfc87c26fc19bc09.roa
File:                     9c019e57a2b472e6af48e048cfc87c26fc19bc09.roa (raw, json)
Hash identifier:          VJaaxFqnOGrnHTdYtd5IEleeqyvHJw+PJlLEGsPg2SY=
Subject key identifier:   93:53:05:23:4C:0D:1C:D8:96:ED:46:6D:D4:89:FE:FB:15:67:52:B5
Certificate issuer:       /CN=71ccf671605b5e725ec595356fba462b15442130
Certificate serial:       088BAF
Authority key identifier: 2D:E9:45:5E:83:A4:22:32:AA:48:E7:4D:83:18:15:F8:A7:8B:5F:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ccf671605b5e725ec595356fba462b15442130.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/9c019e57a2b472e6af48e048cfc87c26fc19bc09.roa
Signing time:             Thu 04 Nov 2021 10:47:42 +0000
ROA not before:           Thu 04 Nov 2021 03:00:00 +0000
ROA not after:            Sat 04 Nov 2023 03:00:00 +0000
asID:                     271813
IP address blocks:        190.123.66.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560047 (0x88baf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ccf671605b5e725ec595356fba462b15442130
        Validity
            Not Before: Nov  4 03:00:00 2021 GMT
            Not After : Nov  4 03:00:00 2023 GMT
        Subject: CN=9c019e57a2b472e6af48e048cfc87c26fc19bc09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:61:ba:19:34:61:b7:c8:14:3f:d4:d9:77:
                    69:42:bd:81:f5:6d:d9:e4:7e:29:ec:cb:92:bf:24:
                    74:76:10:af:72:ee:b0:1e:d7:18:f9:1f:6f:82:d0:
                    32:81:a6:41:f7:69:e3:e6:7b:f7:eb:ba:5a:2c:2b:
                    e5:0c:64:1d:26:71:11:20:cd:2b:bf:78:d6:51:d2:
                    30:5c:41:b2:9c:27:81:22:ee:61:5a:b7:66:36:ac:
                    f5:ce:a0:07:43:13:bf:a5:c9:cc:48:79:c7:d1:30:
                    6f:3b:3b:f1:80:6c:36:76:ee:f1:c6:7c:74:99:cf:
                    9a:68:9c:f8:16:51:cf:cd:bb:b6:21:46:48:49:9e:
                    40:3c:2f:88:fe:87:d1:15:43:1b:a7:fb:ea:25:83:
                    b2:2e:84:61:c5:3e:48:7a:d4:90:7b:78:46:06:63:
                    75:6a:1b:38:b5:76:9d:64:c6:00:bc:1d:35:94:26:
                    a5:b2:94:57:3d:23:cb:c3:15:95:80:00:9a:11:44:
                    4d:b7:cb:4d:2f:d3:b5:cc:7f:e4:68:57:73:61:4d:
                    f7:8f:db:3e:29:08:32:4d:cd:15:93:e7:2a:35:49:
                    97:2c:8d:cc:d7:09:d4:56:62:41:90:c1:d2:93:77:
                    2a:95:00:b2:81:2c:72:b2:65:59:06:4e:74:bb:22:
                    d6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:53:05:23:4C:0D:1C:D8:96:ED:46:6D:D4:89:FE:FB:15:67:52:B5
            X509v3 Authority Key Identifier:
                keyid:2D:E9:45:5E:83:A4:22:32:AA:48:E7:4D:83:18:15:F8:A7:8B:5F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ccf671605b5e725ec595356fba462b15442130.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/9c019e57a2b472e6af48e048cfc87c26fc19bc09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/71ccf671605b5e725ec595356fba462b15442130.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:1f:9a:c9:0c:aa:76:53:ff:6d:b4:bf:87:0f:09:5e:40:ef:
         42:2e:ff:b3:2b:54:a6:50:90:ad:5f:08:fb:71:5e:d0:99:90:
         c6:7b:a9:16:d9:7a:6b:de:d6:5e:9e:0c:6e:1d:e5:41:11:3d:
         81:ed:20:fa:e4:0e:d7:8c:b9:71:a5:2c:92:6f:26:4d:f2:d5:
         79:53:4f:2d:72:86:34:bc:b0:8d:66:8f:12:f2:a2:15:63:78:
         bc:fa:01:c5:6c:46:aa:f6:8b:07:f0:79:b8:bd:e6:c2:f1:90:
         b9:0c:af:6a:5c:92:ba:84:3b:c6:0a:9a:84:9e:15:c6:73:b1:
         ca:8e:c8:fc:5e:ca:01:af:25:e9:13:30:c3:f3:c8:1a:ad:03:
         40:49:66:7f:7a:f1:33:63:a4:ec:d4:f3:5a:2d:e0:f0:a3:c8:
         a5:ed:bd:59:9b:e3:9b:d3:2b:7f:43:ca:00:07:17:f3:94:35:
         cf:99:1c:a8:36:ab:bb:d9:61:94:c9:ed:2e:f2:93:30:4a:07:
         db:f9:85:25:34:72:eb:3d:6a:dc:09:b9:9a:d5:9f:1f:e1:c5:
         f0:b9:1b:5d:6e:b3:4a:6f:21:17:4a:da:71:dc:eb:fb:81:8f:
         04:a6:5b:6d:32:4c:ca:a4:0b:5e:d1:13:ed:5e:b0:5d:7a:78:
         15:c1:43:45
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCIuvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcx
Y2NmNjcxNjA1YjVlNzI1ZWM1OTUzNTZmYmE0NjJiMTU0NDIxMzAwHhcNMjExMTA0
MDMwMDAwWhcNMjMxMTA0MDMwMDAwWjAzMTEwLwYDVQQDEyg5YzAxOWU1N2EyYjQ3
MmU2YWY0OGUwNDhjZmM4N2MyNmZjMTliYzA5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq3Bhuhk0YbfIFD/U2XdpQr2B9W3Z5H4p7MuSvyR0dhCvcu6w
HtcY+R9vgtAygaZB92nj5nv367paLCvlDGQdJnERIM0rv3jWUdIwXEGynCeBIu5h
WrdmNqz1zqAHQxO/pcnMSHnH0TBvOzvxgGw2du7xxnx0mc+aaJz4FlHPzbu2IUZI
SZ5APC+I/ofRFUMbp/vqJYOyLoRhxT5IetSQe3hGBmN1ahs4tXadZMYAvB01lCal
spRXPSPLwxWVgACaEURNt8tNL9O1zH/kaFdzYU33j9s+KQgyTc0Vk+cqNUmXLI3M
1wnUVmJBkMHSk3cqlQCygSxysmVZBk50uyLW8wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJNTBSNMDRzYlu1GbdSJ/vsVZ1K1MB8GA1UdIwQYMBaAFC3pRV6DpCIyqkjn
TYMYFfini1/BMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzFjY2Y2
NzE2MDViNWU3MjVlYzU5NTM1NmZiYTQ2MmIxNTQ0MjEzMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTYyNzQxYzctOTcwNy00OGQ0LTljOTctYjkxMWE4
YjFkZmQyLzljMDE5ZTU3YTJiNDcyZTZhZjQ4ZTA0OGNmYzg3YzI2ZmMxOWJjMDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNjI3NDFjNy05NzA3LTQ4ZDQtOWM5Ny1iOTEx
YThiMWRmZDIvNzFjY2Y2NzE2MDViNWU3MjVlYzU5NTM1NmZiYTQ2MmIxNTQ0MjEz
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAb57QjANBgkqhkiG9w0BAQsFAAOCAQEAPx+ayQyqdlP/bbS/
hw8JXkDvQi7/sytUplCQrV8I+3Fe0JmQxnupFtl6a97WXp4Mbh3lQRE9ge0g+uQO
14y5caUskm8mTfLVeVNPLXKGNLywjWaPEvKiFWN4vPoBxWxGqvaLB/B5uL3mwvGQ
uQyvalySuoQ7xgqahJ4VxnOxyo7I/F7KAa8l6RMww/PIGq0DQElmf3rxM2Ok7NTz
Wi3g8KPIpe29WZvjm9Mrf0PKAAcX85Q1z5kcqDaru9lhlMntLvKTMEoH2/mFJTRy
6z1q3Am5mtWfH+HF8LkbXW6zSm8hF0racdzr+4GPBKZbbTJMyqQLXtET7V6wXXp4
FcFDRQ==
-----END CERTIFICATE-----