Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/489c89bcc2508b4e6c11197f4f8800ef58ae9740.roa
File:                     489c89bcc2508b4e6c11197f4f8800ef58ae9740.roa (raw, json)
Hash identifier:          1ff/Nouv5w6EsKNOLkW4NvBMpttGYpc+au8BgwI5g5g=
Subject key identifier:   95:99:72:C7:2A:D3:02:09:11:37:14:B9:E3:72:CF:AA:F9:55:01:87
Certificate issuer:       /CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Certificate serial:       1C60B2
Authority key identifier: 61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/489c89bcc2508b4e6c11197f4f8800ef58ae9740.roa
Signing time:             Thu 22 Sep 2022 21:13:53 +0000
ROA not before:           Thu 22 Sep 2022 21:12:33 +0000
ROA not after:            Sun 22 Sep 2024 21:12:33 +0000
asID:                     22368
IP address blocks:        190.96.208.0/20 maxlen: 20
                          190.96.208.0/23 maxlen: 23
                          190.96.211.0/24 maxlen: 24
                          190.96.212.0/24 maxlen: 24
                          190.96.214.0/24 maxlen: 24
                          190.96.215.0/24 maxlen: 24
                          190.96.216.0/21 maxlen: 21
                          190.96.217.0/24 maxlen: 24
                          190.96.218.0/23 maxlen: 23
                          190.96.220.0/23 maxlen: 23
                          190.96.222.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1859762 (0x1c60b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
        Validity
            Not Before: Sep 22 21:12:33 2022 GMT
            Not After : Sep 22 21:12:33 2024 GMT
        Subject: CN=489c89bcc2508b4e6c11197f4f8800ef58ae9740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6c:f9:a5:28:74:3f:a3:3c:0e:13:fa:49:fc:
                    b2:f0:0e:69:9d:02:32:d2:80:8a:30:03:c3:0f:f4:
                    6a:3a:2c:87:f5:2f:77:13:7f:77:4e:86:fc:46:e6:
                    19:77:84:b5:16:13:07:ea:a2:7e:ba:69:83:16:6b:
                    6b:57:1d:67:52:37:a9:61:e7:85:10:af:32:17:3e:
                    95:10:a9:a1:3a:62:b1:93:66:cd:10:14:3a:80:3d:
                    e4:0a:a1:f6:0e:61:7a:2b:97:3a:0b:e8:9e:13:bd:
                    ba:0a:9f:64:be:cb:29:bf:39:bd:43:42:0a:df:b1:
                    34:73:81:8f:1d:8a:02:cd:b1:7e:fe:28:33:66:3a:
                    5a:ff:72:ea:3d:55:06:a2:8d:12:92:08:9e:1c:ed:
                    da:1e:cb:0e:36:58:b6:c8:52:7f:03:18:90:ac:2e:
                    85:c7:6b:e6:26:ee:8a:da:30:ef:68:4c:22:e3:c6:
                    86:22:8f:9a:54:5d:5c:20:90:7e:41:07:b2:b1:ec:
                    73:68:b2:77:87:89:ff:87:70:d6:f9:b9:a9:01:23:
                    90:a9:c7:44:d5:c4:c8:ca:98:77:b7:cd:52:12:c0:
                    f0:fb:5e:00:3e:5c:be:f5:cd:89:c2:b0:7e:8f:60:
                    42:e8:21:b7:5d:9b:44:c0:71:47:b7:67:00:11:99:
                    8b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:99:72:C7:2A:D3:02:09:11:37:14:B9:E3:72:CF:AA:F9:55:01:87
            X509v3 Authority Key Identifier:
                keyid:61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/489c89bcc2508b4e6c11197f4f8800ef58ae9740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:f1:0a:96:19:51:11:c9:c3:83:92:10:a6:e6:e1:ba:a1:49:
         8e:46:d1:25:b0:54:cc:4b:af:d5:2c:89:9d:be:95:9e:9f:12:
         32:2b:a0:ad:0b:e7:f3:25:fc:01:2d:5b:44:ee:52:b0:6e:bc:
         9e:bd:68:7c:74:7d:38:d8:4e:b9:49:85:9b:65:71:eb:86:d7:
         c2:ed:a2:2e:1f:cc:8c:a0:5f:5a:d0:a0:53:18:70:76:0d:70:
         65:9f:79:29:2e:79:81:a7:e2:6c:b0:84:d2:86:34:55:1a:46:
         58:d2:63:39:36:db:3b:10:c8:44:0a:d5:53:8b:78:96:f1:f4:
         ca:d8:9c:f6:c7:64:9b:98:06:7b:a6:01:ba:d8:f4:83:66:83:
         8c:bc:a0:5e:0e:95:ee:41:e6:3a:9a:bc:43:06:0c:29:19:3b:
         b0:0c:29:9b:08:4e:cb:37:61:c9:fe:ec:75:07:d6:11:80:be:
         d9:46:a2:64:08:ba:92:83:16:4b:47:c8:39:40:ef:ac:80:48:
         22:0a:35:8d:5d:27:ad:04:5b:5a:97:c3:3a:dd:82:6b:5e:94:
         29:4c:1a:2c:d2:35:2e:2c:f5:bf:dc:8e:f4:50:53:cd:f9:47:
         d8:5f:6e:a5:d6:59:54:65:0d:4f:f3:a8:b4:5c:7b:15:ab:c9:
         8c:64:46:70
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHGCyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
N2QzMzA5NDdkMjY0YzgxYjQ1MDNkZjNiMWVmNjdkNDVjYzJkYzQwHhcNMjIwOTIy
MjExMjMzWhcNMjQwOTIyMjExMjMzWjAzMTEwLwYDVQQDEyg0ODljODliY2MyNTA4
YjRlNmMxMTE5N2Y0Zjg4MDBlZjU4YWU5NzQwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApmz5pSh0P6M8DhP6Sfyy8A5pnQIy0oCKMAPDD/RqOiyH9S93
E393Tob8RuYZd4S1FhMH6qJ+ummDFmtrVx1nUjepYeeFEK8yFz6VEKmhOmKxk2bN
EBQ6gD3kCqH2DmF6K5c6C+ieE726Cp9kvsspvzm9Q0IK37E0c4GPHYoCzbF+/igz
Zjpa/3LqPVUGoo0SkgieHO3aHssONli2yFJ/AxiQrC6Fx2vmJu6K2jDvaEwi48aG
Io+aVF1cIJB+QQeysexzaLJ3h4n/h3DW+bmpASOQqcdE1cTIyph3t81SEsDw+14A
Ply+9c2JwrB+j2BC6CG3XZtEwHFHt2cAEZmLxwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJWZcscq0wIJETcUueNyz6r5VQGHMB8GA1UdIwQYMBaAFGG2jf2H687Wyisk
4qqP9wfaY14ZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzM3ZDMz
MDk0N2QyNjRjODFiNDUwM2RmM2IxZWY2N2Q0NWNjMmRjNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjNlNWRkOWUtYmJjYS00YzQ5LTkyZjUtOGM2NzUx
MTY1ZTkyLzQ4OWM4OWJjYzI1MDhiNGU2YzExMTk3ZjRmODgwMGVmNThhZTk3NDAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iM2U1ZGQ5ZS1iYmNhLTRjNDktOTJmNS04YzY3
NTExNjVlOTIvMzM3ZDMzMDk0N2QyNjRjODFiNDUwM2RmM2IxZWY2N2Q0NWNjMmRj
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBL5g0DANBgkqhkiG9w0BAQsFAAOCAQEAMPEKlhlREcnDg5IQ
pubhuqFJjkbRJbBUzEuv1SyJnb6Vnp8SMiugrQvn8yX8AS1bRO5SsG68nr1ofHR9
ONhOuUmFm2Vx64bXwu2iLh/MjKBfWtCgUxhwdg1wZZ95KS55gafibLCE0oY0VRpG
WNJjOTbbOxDIRArVU4t4lvH0ytic9sdkm5gGe6YButj0g2aDjLygXg6V7kHmOpq8
QwYMKRk7sAwpmwhOyzdhyf7sdQfWEYC+2UaiZAi6koMWS0fIOUDvrIBIIgo1jV0n
rQRbWpfDOt2Ca16UKUwaLNI1Liz1v9yO9FBTzflH2F9updZZVGUNT/OotFx7FavJ
jGRGcA==
-----END CERTIFICATE-----