Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/91384853a7f592b12d885f8b04944deb30e51b05.roa
File:                     91384853a7f592b12d885f8b04944deb30e51b05.roa (raw, json)
Hash identifier:          xkeJ1fm2GplyR0/tBCdlhDuVRpGZ1fm0jxogPmOWr1Q=
Subject key identifier:   96:C2:4B:5E:01:75:F3:6C:19:BF:D3:DD:3B:CF:73:3F:F8:1B:99:8F
Certificate issuer:       /CN=62a782cb41463cc649a6c52c762bea430cdc06b2
Certificate serial:       0F0D20
Authority key identifier: B3:D6:6D:41:49:17:7C:B4:B8:98:0F:78:57:06:BB:E1:04:FD:B6:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a782cb41463cc649a6c52c762bea430cdc06b2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/91384853a7f592b12d885f8b04944deb30e51b05.roa
Signing time:             Thu 18 Nov 2021 17:49:10 +0000
ROA not before:           Thu 18 Nov 2021 03:00:00 +0000
ROA not after:            Sat 18 Nov 2023 03:00:00 +0000
asID:                     28036
IP address blocks:        190.143.240.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 986400 (0xf0d20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a782cb41463cc649a6c52c762bea430cdc06b2
        Validity
            Not Before: Nov 18 03:00:00 2021 GMT
            Not After : Nov 18 03:00:00 2023 GMT
        Subject: CN=91384853a7f592b12d885f8b04944deb30e51b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c5:6e:32:92:cb:22:50:61:c0:9a:56:53:44:
                    ab:9d:2c:4a:25:b6:41:69:4d:74:c6:69:57:76:4d:
                    43:1e:b9:99:db:fb:0d:88:d2:d1:4a:41:a9:8b:f6:
                    2d:5f:36:2f:5a:bd:bc:94:4f:b8:8c:cd:8e:9b:bd:
                    0d:6e:70:39:bf:03:f9:6f:5b:02:53:78:e9:57:fa:
                    7b:99:d1:bf:ff:7e:fe:e1:19:5e:f4:6b:15:bf:05:
                    96:a4:2e:86:00:0e:a7:c3:77:12:8c:87:9f:84:a0:
                    4c:b4:ca:86:5f:c1:af:d3:fb:44:9a:d0:a6:1d:cd:
                    5f:8f:86:5c:3a:f5:c6:04:47:87:18:58:08:25:53:
                    42:b7:08:3b:a5:28:c3:5b:6a:5c:25:d9:71:41:06:
                    9b:62:e1:05:f2:12:4d:e9:9a:25:12:5a:39:63:90:
                    43:6d:9f:09:21:61:66:30:ba:0d:62:b4:55:9a:a7:
                    b0:00:ea:e8:34:81:2b:6a:86:ec:d7:bf:98:85:46:
                    2b:60:9d:49:1c:a1:30:24:bf:2d:f5:37:4a:18:7a:
                    3e:c2:81:72:46:0b:40:bb:e1:15:7c:c8:0c:e2:55:
                    74:a2:b2:88:f5:21:c1:5e:3f:9a:fb:5d:84:c7:e3:
                    aa:3b:30:06:f7:0b:b6:fa:c0:bf:61:62:b8:e6:ea:
                    12:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C2:4B:5E:01:75:F3:6C:19:BF:D3:DD:3B:CF:73:3F:F8:1B:99:8F
            X509v3 Authority Key Identifier:
                keyid:B3:D6:6D:41:49:17:7C:B4:B8:98:0F:78:57:06:BB:E1:04:FD:B6:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a782cb41463cc649a6c52c762bea430cdc06b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/91384853a7f592b12d885f8b04944deb30e51b05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/62a782cb41463cc649a6c52c762bea430cdc06b2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:b6:2e:db:fc:b9:8a:7e:0d:c2:36:c4:4c:27:69:ef:43:03:
         9f:fe:28:34:34:c4:8b:c3:ca:dd:7f:18:00:56:e8:21:c5:b0:
         56:fb:ee:b2:30:d4:0f:c5:3e:76:e9:11:91:2b:12:6d:b2:92:
         dc:b2:70:c6:66:dd:0d:58:3a:07:f8:a9:15:76:f6:8d:be:45:
         e9:65:d3:22:30:3c:d0:71:ca:6f:90:7f:86:94:0c:72:e6:aa:
         a7:db:eb:5c:a6:b2:82:47:c3:04:b2:7a:68:96:fa:65:d3:9d:
         87:d7:a5:a0:ec:12:11:26:22:e5:ee:40:b5:5b:af:bf:3d:79:
         08:c5:b9:a4:3c:44:b0:b0:36:76:32:1a:8a:fc:0d:7f:e5:18:
         e4:73:2e:fe:71:eb:5f:e5:94:b7:5a:a4:dc:23:49:fb:e5:83:
         47:84:fd:35:a1:3b:fd:57:ea:6a:a5:7e:9d:e9:7f:9c:8f:d4:
         5f:5f:b6:54:48:c2:31:90:bd:ee:de:bf:88:c1:10:cd:0f:14:
         41:bc:53:3d:d7:17:ec:e4:f9:1d:ab:29:a3:0a:b2:ae:9f:d6:
         61:4f:2b:78:f6:ec:0e:dc:5a:59:85:ce:f0:87:b6:4c:f0:b9:
         6d:9f:32:fc:41:82:7b:d2:15:b9:ef:2a:26:e1:42:6f:9e:ff:
         e0:45:88:ec
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDw0gMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYy
YTc4MmNiNDE0NjNjYzY0OWE2YzUyYzc2MmJlYTQzMGNkYzA2YjIwHhcNMjExMTE4
MDMwMDAwWhcNMjMxMTE4MDMwMDAwWjAzMTEwLwYDVQQDEyg5MTM4NDg1M2E3ZjU5
MmIxMmQ4ODVmOGIwNDk0NGRlYjMwZTUxYjA1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl8VuMpLLIlBhwJpWU0SrnSxKJbZBaU10xmlXdk1DHrmZ2/sN
iNLRSkGpi/YtXzYvWr28lE+4jM2Om70NbnA5vwP5b1sCU3jpV/p7mdG//37+4Rle
9GsVvwWWpC6GAA6nw3cSjIefhKBMtMqGX8Gv0/tEmtCmHc1fj4ZcOvXGBEeHGFgI
JVNCtwg7pSjDW2pcJdlxQQabYuEF8hJN6ZolElo5Y5BDbZ8JIWFmMLoNYrRVmqew
AOroNIEraobs17+YhUYrYJ1JHKEwJL8t9TdKGHo+woFyRgtAu+EVfMgM4lV0orKI
9SHBXj+a+12Ex+OqOzAG9wu2+sC/YWK45uoS2wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJbCS14BdfNsGb/T3TvPcz/4G5mPMB8GA1UdIwQYMBaAFLPWbUFJF3y0uJgP
eFcGu+EE/bbhMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjJhNzgy
Y2I0MTQ2M2NjNjQ5YTZjNTJjNzYyYmVhNDMwY2RjMDZiMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjE2YjZiNjgtY2M4Mi00OTFjLWJiN2UtZDE0Nzkz
ZWFjM2NiLzkxMzg0ODUzYTdmNTkyYjEyZDg4NWY4YjA0OTQ0ZGViMzBlNTFiMDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iMTZiNmI2OC1jYzgyLTQ5MWMtYmI3ZS1kMTQ3
OTNlYWMzY2IvNjJhNzgyY2I0MTQ2M2NjNjQ5YTZjNTJjNzYyYmVhNDMwY2RjMDZi
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBL6P8DANBgkqhkiG9w0BAQsFAAOCAQEAK7Yu2/y5in4NwjbE
TCdp70MDn/4oNDTEi8PK3X8YAFboIcWwVvvusjDUD8U+dukRkSsSbbKS3LJwxmbd
DVg6B/ipFXb2jb5F6WXTIjA80HHKb5B/hpQMcuaqp9vrXKaygkfDBLJ6aJb6ZdOd
h9eloOwSESYi5e5AtVuvvz15CMW5pDxEsLA2djIaivwNf+UY5HMu/nHrX+WUt1qk
3CNJ++WDR4T9NaE7/VfqaqV+nel/nI/UX1+2VEjCMZC97t6/iMEQzQ8UQbxTPdcX
7OT5Haspowqyrp/WYU8rePbsDtxaWYXO8Ie2TPC5bZ8y/EGCe9IVue8qJuFCb57/
4EWI7A==
-----END CERTIFICATE-----