Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/de5cd291810bd2547ac0d0100f0a551d6515f6e9.roa
File:                     de5cd291810bd2547ac0d0100f0a551d6515f6e9.roa (raw, json)
Hash identifier:          AeaUcPeqbWbmcJj+5Ywtvukmh7vg+ZUrPjVwnthhRbc=
Subject key identifier:   B2:D3:FB:11:F1:E2:76:C6:CF:F1:F9:61:30:EC:A7:67:22:D3:1E:8E
Certificate issuer:       /CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Certificate serial:       168CE9
Authority key identifier: E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/de5cd291810bd2547ac0d0100f0a551d6515f6e9.roa
Signing time:             Thu 31 Mar 2022 16:01:06 +0000
ROA not before:           Thu 31 Mar 2022 03:00:00 +0000
ROA not after:            Sun 31 Mar 2024 03:00:00 +0000
asID:                     265855
IP address blocks:        45.225.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1477865 (0x168ce9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
        Validity
            Not Before: Mar 31 03:00:00 2022 GMT
            Not After : Mar 31 03:00:00 2024 GMT
        Subject: CN=de5cd291810bd2547ac0d0100f0a551d6515f6e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:91:ac:1a:8b:e2:75:1f:f6:1b:4c:85:86:b1:
                    e0:2c:35:56:2a:a2:6e:a7:09:b3:f0:b3:12:19:ff:
                    28:e5:46:14:b9:88:47:af:89:17:f1:33:73:59:ab:
                    8d:8c:3a:03:18:2f:2d:d7:b3:3f:3a:0f:a4:04:e5:
                    3f:e4:70:88:1f:dc:07:a0:eb:e5:99:bf:d3:94:04:
                    84:42:fd:ed:fe:50:4e:01:e7:fb:ff:94:7e:6f:45:
                    f2:4b:50:15:27:e2:0e:1b:56:73:c8:f0:34:29:a6:
                    66:aa:8f:48:e2:04:6f:ce:ea:da:31:fd:54:be:56:
                    f1:0c:b1:b9:e0:89:6b:09:87:fc:69:b7:b1:d3:b8:
                    5f:17:b1:ac:2c:f3:0f:98:fe:23:d1:63:ec:33:ad:
                    ea:fc:5b:92:76:ad:5c:b3:5f:d9:3d:42:6a:57:71:
                    0b:35:0a:b9:df:f1:ee:58:6a:d8:2a:b9:02:a9:5d:
                    52:d6:54:2b:cf:4f:81:7f:47:a1:1e:91:49:9f:49:
                    6a:68:c7:57:b0:64:be:c4:a6:cc:54:f7:bc:ca:94:
                    4e:5f:37:dd:5d:65:a4:a9:7e:8d:a2:45:91:92:29:
                    65:72:d5:43:f6:b5:7d:3b:af:cc:c6:f2:ae:e2:87:
                    cc:d1:bb:6a:e1:e4:ce:77:c4:38:7c:0b:26:c6:91:
                    8c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D3:FB:11:F1:E2:76:C6:CF:F1:F9:61:30:EC:A7:67:22:D3:1E:8E
            X509v3 Authority Key Identifier:
                keyid:E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/de5cd291810bd2547ac0d0100f0a551d6515f6e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:f1:7a:84:6e:9a:a1:91:01:0b:b4:2b:44:26:23:ad:1b:85:
         7c:f6:23:9d:77:1e:4c:a0:f1:3c:08:3e:ac:79:b8:e2:66:67:
         be:50:34:82:9d:8b:f8:60:d2:ed:3d:8a:b9:bf:21:c7:0f:3f:
         ce:5e:1c:fc:7d:59:62:08:b7:42:7e:87:de:e6:5c:89:1d:b5:
         cd:d1:43:ef:9c:b8:36:18:1b:df:3f:16:19:6f:54:5a:05:2e:
         b7:47:b7:7b:34:78:a6:cf:36:1d:84:16:75:5c:c8:1e:ad:2a:
         23:42:76:b5:f4:5f:f6:24:74:18:a0:36:76:e7:b5:95:7c:b8:
         1a:22:7b:ba:72:9b:9b:95:c2:a6:3f:d8:06:3c:4e:08:44:2f:
         68:f4:01:a9:c3:e3:fe:0a:2a:32:33:1a:c7:b3:8f:2f:31:01:
         d5:ed:7b:6e:e2:c6:53:63:3c:0f:f0:0d:b9:40:a6:23:d3:5e:
         76:51:b3:f9:e0:25:e8:c4:be:13:d9:b3:62:c4:c2:16:0c:62:
         a5:db:38:2d:17:2f:47:bc:ba:d0:54:76:14:92:61:e1:e0:f6:
         11:83:3a:3d:a6:a8:60:0a:9a:9f:76:75:20:90:93:ad:dd:96:
         3b:52:b9:d9:74:c5:51:54:22:cc:9d:43:7c:ba:51:49:6a:a0:
         f9:93:49:3c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFozpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
ZDc3ZWZjMWFiMWI0Yjg0OWFhM2FjNTdjZDAwMzY2ZWE3NWI2NzcwHhcNMjIwMzMx
MDMwMDAwWhcNMjQwMzMxMDMwMDAwWjAzMTEwLwYDVQQDEyhkZTVjZDI5MTgxMGJk
MjU0N2FjMGQwMTAwZjBhNTUxZDY1MTVmNmU5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgZGsGovidR/2G0yFhrHgLDVWKqJupwmz8LMSGf8o5UYUuYhH
r4kX8TNzWauNjDoDGC8t17M/Og+kBOU/5HCIH9wHoOvlmb/TlASEQv3t/lBOAef7
/5R+b0XyS1AVJ+IOG1ZzyPA0KaZmqo9I4gRvzuraMf1UvlbxDLG54IlrCYf8abex
07hfF7GsLPMPmP4j0WPsM63q/FuSdq1cs1/ZPUJqV3ELNQq53/HuWGrYKrkCqV1S
1lQrz0+Bf0ehHpFJn0lqaMdXsGS+xKbMVPe8ypROXzfdXWWkqX6NokWRkillctVD
9rV9O6/MxvKu4ofM0btq4eTOd8Q4fAsmxpGMRwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLLT+xHx4nbGz/H5YTDsp2ci0x6OMB8GA1UdIwQYMBaAFOUy2F5GWQDaZbBn
V5TRUNPp9E3lMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzNkNzdl
ZmMxYWIxYjRiODQ5YWEzYWM1N2NkMDAzNjZlYTc1YjY3Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmE0YTE0ZjktOTE4MC00Y2ExLThmN2QtOWNkODAx
YWQ2NGVmL2RlNWNkMjkxODEwYmQyNTQ3YWMwZDAxMDBmMGE1NTFkNjUxNWY2ZTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYTRhMTRmOS05MTgwLTRjYTEtOGY3ZC05Y2Q4
MDFhZDY0ZWYvMzNkNzdlZmMxYWIxYjRiODQ5YWEzYWM1N2NkMDAzNjZlYTc1YjY3
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3h4zANBgkqhkiG9w0BAQsFAAOCAQEAQfF6hG6aoZEBC7Qr
RCYjrRuFfPYjnXceTKDxPAg+rHm44mZnvlA0gp2L+GDS7T2Kub8hxw8/zl4c/H1Z
Ygi3Qn6H3uZciR21zdFD75y4Nhgb3z8WGW9UWgUut0e3ezR4ps82HYQWdVzIHq0q
I0J2tfRf9iR0GKA2due1lXy4GiJ7unKbm5XCpj/YBjxOCEQvaPQBqcPj/goqMjMa
x7OPLzEB1e17buLGU2M8D/ANuUCmI9NedlGz+eAl6MS+E9mzYsTCFgxipds4LRcv
R7y60FR2FJJh4eD2EYM6PaaoYAqan3Z1IJCTrd2WO1K52XTFUVQizJ1DfLpRSWqg
+ZNJPA==
-----END CERTIFICATE-----