Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/7b7c0aa25bacb707ad800d0d9f2d1c872e7ab358.roa
File:                     7b7c0aa25bacb707ad800d0d9f2d1c872e7ab358.roa (raw, json)
Hash identifier:          hYlKIvZSqbRhyt+LxwXqQkm9GwjW+i//nbQtF5R7HR8=
Subject key identifier:   B9:27:CC:18:29:C8:25:4D:15:41:14:F1:56:C1:3D:FD:02:14:AB:F3
Certificate issuer:       /CN=f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e
Certificate serial:       162A1C
Authority key identifier: 87:F8:D4:35:76:20:56:6B:10:27:8C:92:DC:36:C0:19:51:36:F4:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/7b7c0aa25bacb707ad800d0d9f2d1c872e7ab358.roa
Signing time:             Thu 17 Mar 2022 17:45:40 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     14187
IP address blocks:        200.47.172.0/22 maxlen: 24
                          200.47.216.0/22 maxlen: 24
                          200.85.224.0/20 maxlen: 24
                          200.85.240.0/20 maxlen: 24
                          201.220.32.0/20 maxlen: 24
                          201.220.48.0/20 maxlen: 24
                          2800:1d0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1452572 (0x162a1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=7b7c0aa25bacb707ad800d0d9f2d1c872e7ab358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:47:19:4c:b1:eb:0d:3a:ac:d2:b9:e8:97:
                    46:6f:e2:ad:7a:ee:05:0d:67:1f:e2:50:a0:68:da:
                    c0:5d:83:e9:dd:0b:4a:3c:58:9a:dc:ab:e7:dd:30:
                    51:12:20:19:8c:7c:64:5a:2e:91:1d:64:fa:ef:6b:
                    c5:ee:b9:e0:33:4d:b1:97:7a:b1:da:bd:bb:a8:e6:
                    41:47:8b:47:5f:36:bc:04:dd:9d:e1:8f:b9:57:18:
                    3a:4a:b5:83:fc:74:51:4b:16:cf:5f:7f:aa:41:a3:
                    dc:7c:a7:45:b0:6b:1f:0f:b6:28:dc:5b:8c:04:aa:
                    82:db:13:18:09:8a:46:58:fb:9b:2d:8f:d3:ea:ad:
                    dc:91:a0:87:94:dd:d8:31:18:b9:74:44:80:4b:9c:
                    35:52:5a:6c:9c:85:65:78:70:96:29:58:45:6d:d6:
                    b8:fc:76:e4:1d:24:a7:c3:52:2c:64:f3:af:51:f2:
                    c2:90:cb:fe:18:9a:a6:47:ac:02:94:2e:52:4b:c0:
                    ee:d6:9e:e7:22:32:7d:02:9f:7c:79:5f:2a:b5:44:
                    21:48:64:e5:af:5f:3d:94:87:14:b0:55:39:4e:e6:
                    f7:b8:6c:1a:35:c6:7a:13:4b:96:b8:51:90:8a:be:
                    f5:00:01:1a:bc:44:2d:5d:b6:12:9a:44:44:61:5a:
                    f8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:27:CC:18:29:C8:25:4D:15:41:14:F1:56:C1:3D:FD:02:14:AB:F3
            X509v3 Authority Key Identifier:
                keyid:87:F8:D4:35:76:20:56:6B:10:27:8C:92:DC:36:C0:19:51:36:F4:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/7b7c0aa25bacb707ad800d0d9f2d1c872e7ab358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.172.0/22
                  200.47.216.0/22
                  200.85.224.0/19
                  201.220.32.0/19
                IPv6:
                  2800:1d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:71:13:d9:c8:13:be:a4:b1:28:6e:23:1e:48:5b:17:ba:d1:
         60:87:63:30:29:ab:90:eb:43:da:41:8d:2f:bd:76:ce:00:4b:
         93:9d:aa:e5:c6:1c:85:2b:1a:e8:6a:31:36:5c:48:f3:97:ef:
         c4:5d:18:e6:9d:9b:da:67:b2:aa:49:60:6e:93:4f:25:0f:60:
         18:61:f3:d7:94:49:ca:72:00:25:e0:b2:bb:0f:36:58:93:28:
         eb:ef:7a:e8:ca:a7:05:18:11:78:5d:95:8c:79:ac:25:2b:40:
         11:6b:35:05:99:4c:6b:4e:e3:70:e5:96:50:c8:a5:ed:a3:9d:
         7d:a7:7d:0f:41:df:37:a1:5c:31:15:15:e0:0b:a5:62:1e:ec:
         e9:7c:14:87:eb:27:c7:27:f2:a7:61:5a:91:cf:30:cd:b2:99:
         b6:6a:10:d8:0a:ad:55:9d:3f:35:cb:d4:72:95:b2:36:40:bd:
         cf:38:20:d5:c5:65:01:72:3c:c2:a1:f5:04:9b:a4:43:7d:aa:
         7d:27:72:3f:47:79:f3:44:f7:dc:bf:5e:a5:dc:b3:a1:54:c1:
         11:31:48:48:ce:5e:c7:9d:7a:b6:e5:fe:b3:dd:8c:81:4d:26:
         06:8c:b0:57:85:5b:ae:38:b2:09:25:3a:f8:82:83:ca:07:12:
         8a:8c:c5:14
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIDFiocMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYw
YjBmY2MxODBiYmE4NGJmNTMxOWYxMjIzYTVlMWNmZTFiMWE0N2UwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg3YjdjMGFhMjViYWNi
NzA3YWQ4MDBkMGQ5ZjJkMWM4NzJlN2FiMzU4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAudFHGUyx6w06rNK56JdGb+Kteu4FDWcf4lCgaNrAXYPp3QtK
PFia3Kvn3TBREiAZjHxkWi6RHWT672vF7rngM02xl3qx2r27qOZBR4tHXza8BN2d
4Y+5Vxg6SrWD/HRRSxbPX3+qQaPcfKdFsGsfD7Yo3FuMBKqC2xMYCYpGWPubLY/T
6q3ckaCHlN3YMRi5dESAS5w1UlpsnIVleHCWKVhFbda4/HbkHSSnw1IsZPOvUfLC
kMv+GJqmR6wClC5SS8Du1p7nIjJ9Ap98eV8qtUQhSGTlr189lIcUsFU5Tub3uGwa
NcZ6E0uWuFGQir71AAEavEQtXbYSmkREYVr4ewIDAQABo4ICfDCCAngwHQYDVR0O
BBYEFLknzBgpyCVNFUEU8VbBPf0CFKvzMB8GA1UdIwQYMBaAFIf41DV2IFZrECeM
ktw2wBlRNvQcMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjBiMGZj
YzE4MGJiYTg0YmY1MzE5ZjEyMjNhNWUxY2ZlMWIxYTQ3ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTdjYWE0YjEtMWM2ZC00OGFiLTk0MDUtOTZiNWMx
ODI4NGM1LzdiN2MwYWEyNWJhY2I3MDdhZDgwMGQwZDlmMmQxYzg3MmU3YWIzNTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hN2NhYTRiMS0xYzZkLTQ4YWItOTQwNS05NmI1
YzE4Mjg0YzUvZjBiMGZjYzE4MGJiYTg0YmY1MzE5ZjEyMjNhNWUxY2ZlMWIxYTQ3
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBABggrBgEFBQcBBwEB/wQx
MC8wHgQCAAEwGAMEAsgvrAMEAsgv2AMEBchV4AMEBcncIDANBAIAAjAHAwUAKAAB
0DANBgkqhkiG9w0BAQsFAAOCAQEAkXET2cgTvqSxKG4jHkhbF7rRYIdjMCmrkOtD
2kGNL712zgBLk52q5cYchSsa6GoxNlxI85fvxF0Y5p2b2meyqklgbpNPJQ9gGGHz
15RJynIAJeCyuw82WJMo6+966MqnBRgReF2VjHmsJStAEWs1BZlMa07jcOWWUMil
7aOdfad9D0HfN6FcMRUV4AulYh7s6XwUh+snxyfyp2Fakc8wzbKZtmoQ2AqtVZ0/
NcvUcpWyNkC9zzgg1cVlAXI8wqH1BJukQ32qfSdyP0d580T33L9epdyzoVTBETFI
SM5ex516tuX+s92MgU0mBoywV4VbrjiyCSU6+IKDygcSiozFFA==
-----END CERTIFICATE-----