Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/1e5361ac22c767cbb37b638b5d198a57ee252180.roa
File:                     1e5361ac22c767cbb37b638b5d198a57ee252180.roa (raw, json)
Hash identifier:          o7KaqsMc+gqozBLp+7ML6p4w88MmI3fo7EPpzqtYhjk=
Subject key identifier:   BF:BA:74:0C:BC:BF:F8:AE:2A:EC:B7:99:51:18:DA:AD:42:FC:A3:22
Certificate issuer:       /CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Certificate serial:       15C14F
Authority key identifier: 61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/1e5361ac22c767cbb37b638b5d198a57ee252180.roa
Signing time:             Tue 04 Jan 2022 18:21:39 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     22368
IP address blocks:        181.174.0.0/18 maxlen: 24
                          190.13.0.0/20 maxlen: 23
                          190.13.24.0/21 maxlen: 23
                          190.13.32.0/21 maxlen: 22
                          190.13.40.0/21 maxlen: 22
                          190.96.128.0/21 maxlen: 22
                          190.96.160.0/20 maxlen: 24
                          190.96.176.0/21 maxlen: 23
                          190.96.192.0/21 maxlen: 24
                          190.96.208.0/20 maxlen: 24
                          190.124.96.0/19 maxlen: 24
                          190.184.128.0/18 maxlen: 24
                          201.221.128.0/20 maxlen: 24
                          201.221.144.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1425743 (0x15c14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=1e5361ac22c767cbb37b638b5d198a57ee252180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cd:7a:68:99:7b:69:11:21:4f:93:f4:18:6e:
                    5c:da:10:b0:63:b8:d1:bb:a5:aa:7f:16:41:0c:54:
                    4e:89:fb:40:aa:94:4f:0f:4e:d1:25:f5:55:de:d1:
                    c4:04:ab:70:1f:1e:49:cc:f0:27:10:b9:c3:82:4f:
                    5e:5c:ee:d5:44:4f:3c:48:63:e0:81:89:0d:05:fc:
                    46:9d:8a:82:c6:1f:7b:66:2b:74:33:47:eb:4b:78:
                    bd:54:65:e3:7b:2e:1a:02:95:98:44:c5:53:09:c9:
                    f3:6c:72:ed:a3:4c:57:5c:29:d9:3e:13:45:ed:c2:
                    8b:52:13:17:87:61:b9:69:d1:3c:a7:9c:3f:17:75:
                    f5:4f:05:0f:f8:57:ab:11:fa:72:d0:cb:d6:ec:70:
                    1f:c9:c1:c4:36:e0:41:7b:6a:94:28:84:4d:5c:da:
                    60:5d:27:50:1b:77:be:8c:5e:76:eb:a5:70:e9:4a:
                    bf:bd:62:1e:80:1d:38:01:76:ab:5f:11:f8:15:15:
                    fd:ce:1e:db:a8:89:1b:f0:b6:bf:d3:1c:b7:13:bc:
                    8a:70:0e:a9:a9:e0:ec:37:9c:26:af:5b:f5:52:e5:
                    0a:8c:bd:67:84:08:90:74:5a:48:4b:b6:6d:3f:c4:
                    06:11:f1:39:3d:e3:7e:91:fe:1b:72:e2:44:30:00:
                    23:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BA:74:0C:BC:BF:F8:AE:2A:EC:B7:99:51:18:DA:AD:42:FC:A3:22
            X509v3 Authority Key Identifier:
                keyid:61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/1e5361ac22c767cbb37b638b5d198a57ee252180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.0.0/18
                  190.13.0.0/20
                  190.13.24.0-190.13.47.255
                  190.96.128.0/21
                  190.96.160.0-190.96.183.255
                  190.96.192.0/21
                  190.96.208.0/20
                  190.124.96.0/19
                  190.184.128.0/18
                  201.221.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         88:c4:2e:b8:4a:7a:16:6f:dc:ee:2b:36:b9:76:29:6a:3e:4b:
         08:e4:79:59:2d:a2:7d:a9:54:63:37:57:b8:be:fd:42:0b:9f:
         9c:03:a1:b0:b0:33:e1:ce:ea:b9:e0:4f:c6:b9:7f:bd:4b:7d:
         35:6b:88:84:bf:0b:0a:70:51:db:dc:45:37:65:df:89:c2:e7:
         ac:b0:a1:9c:94:63:f3:d8:07:71:c6:e3:8e:f5:3e:84:51:d7:
         ed:30:fe:58:da:a1:2b:c5:93:78:5e:73:0e:a1:8b:f9:07:bb:
         ac:f8:a3:6f:5e:83:03:87:6c:d5:50:32:53:f3:dc:3d:e7:dc:
         43:b6:a1:60:9d:0c:c4:3f:7a:aa:97:21:b8:16:24:d3:c3:6f:
         d8:34:99:e8:19:d8:e1:32:a7:54:cb:d0:e6:d7:81:4c:2d:b9:
         6f:d1:23:4c:35:c9:38:b9:21:cc:43:20:4c:99:56:8d:eb:59:
         99:9c:42:79:10:f6:61:d7:ec:51:86:d8:96:5d:74:40:0b:90:
         4b:2f:ef:1a:ed:bd:66:3d:e6:da:f5:98:13:af:84:a9:e9:2e:
         84:a4:bd:2b:f1:6e:2e:06:17:25:5f:72:4b:f4:e5:16:7f:ea:
         d7:f5:ed:fb:48:4c:8e:72:00:4b:46:8d:c1:72:7d:98:4c:84:
         f1:0d:0f:5b
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgIDFcFPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
N2QzMzA5NDdkMjY0YzgxYjQ1MDNkZjNiMWVmNjdkNDVjYzJkYzQwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygxZTUzNjFhYzIyYzc2
N2NiYjM3YjYzOGI1ZDE5OGE1N2VlMjUyMTgwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAt816aJl7aREhT5P0GG5c2hCwY7jRu6WqfxZBDFROiftAqpRP
D07RJfVV3tHEBKtwHx5JzPAnELnDgk9eXO7VRE88SGPggYkNBfxGnYqCxh97Zit0
M0frS3i9VGXjey4aApWYRMVTCcnzbHLto0xXXCnZPhNF7cKLUhMXh2G5adE8p5w/
F3X1TwUP+FerEfpy0MvW7HAfycHENuBBe2qUKIRNXNpgXSdQG3e+jF5266Vw6Uq/
vWIegB04AXarXxH4FRX9zh7bqIkb8La/0xy3E7yKcA6pqeDsN5wmr1v1UuUKjL1n
hAiQdFpIS7ZtP8QGEfE5PeN+kf4bcuJEMAAjoQIDAQABo4ICoTCCAp0wHQYDVR0O
BBYEFL+6dAy8v/iuKuy3mVEY2q1C/KMiMB8GA1UdIwQYMBaAFGG2jf2H687Wyisk
4qqP9wfaY14ZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzM3ZDMz
MDk0N2QyNjRjODFiNDUwM2RmM2IxZWY2N2Q0NWNjMmRjNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjNlNWRkOWUtYmJjYS00YzQ5LTkyZjUtOGM2NzUx
MTY1ZTkyLzFlNTM2MWFjMjJjNzY3Y2JiMzdiNjM4YjVkMTk4YTU3ZWUyNTIxODAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iM2U1ZGQ5ZS1iYmNhLTRjNDktOTJmNS04YzY3
NTExNjVlOTIvMzM3ZDMzMDk0N2QyNjRjODFiNDUwM2RmM2IxZWY2N2Q0NWNjMmRj
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBggrBgEFBQcBBwEB/wRW
MFQwUgQCAAEwTAMEBrWuAAMEBL4NADAMAwQDvg0YAwQEvg0gAwQDvmCAMAwDBAW+
YKADBAO+YLADBAO+YMADBAS+YNADBAW+fGADBAa+uIADBAXJ3YAwDQYJKoZIhvcN
AQELBQADggEBAIjELrhKehZv3O4rNrl2KWo+SwjkeVkton2pVGM3V7i+/UILn5wD
obCwM+HO6rngT8a5f71LfTVriIS/CwpwUdvcRTdl34nC56ywoZyUY/PYB3HG4471
PoRR1+0w/ljaoSvFk3hecw6hi/kHu6z4o29egwOHbNVQMlPz3D3n3EO2oWCdDMQ/
eqqXIbgWJNPDb9g0megZ2OEyp1TL0ObXgUwtuW/RI0w1yTi5IcxDIEyZVo3rWZmc
QnkQ9mHX7FGG2JZddEALkEsv7xrtvWY95tr1mBOvhKnpLoSkvSvxbi4GFyVfckv0
5RZ/6tf17ftITI5yAEtGjcFyfZhMhPEND1s=
-----END CERTIFICATE-----