Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/54a68b95a29eae1db9509e587c575846c91b9f74.roa
File:                     54a68b95a29eae1db9509e587c575846c91b9f74.roa (raw, json)
Hash identifier:          8iJyEjwoJm0csR4ZzHfyd3QHVTnSp/PTWXAnxmSAxuk=
Subject key identifier:   B5:13:75:CF:3E:D7:70:3A:49:45:08:60:BD:89:C5:51:D0:C5:C2:15
Certificate issuer:       /CN=717bd4c365c04f4dd5d39ac6532c267af688e267
Certificate serial:       15F533
Authority key identifier: 37:12:84:2F:ED:19:32:5C:55:6E:AE:4D:0E:7C:19:89:6D:FC:1F:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/717bd4c365c04f4dd5d39ac6532c267af688e267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/54a68b95a29eae1db9509e587c575846c91b9f74.roa
Signing time:             Sat 19 Feb 2022 00:55:21 +0000
ROA not before:           Fri 18 Feb 2022 03:00:00 +0000
ROA not after:            Wed 28 Oct 2026 03:00:00 +0000
asID:                     265819
IP address blocks:        45.6.8.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1439027 (0x15f533)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717bd4c365c04f4dd5d39ac6532c267af688e267
        Validity
            Not Before: Feb 18 03:00:00 2022 GMT
            Not After : Oct 28 03:00:00 2026 GMT
        Subject: CN=54a68b95a29eae1db9509e587c575846c91b9f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e6:e0:12:24:a4:99:2a:c9:97:83:2a:67:4e:
                    33:a4:7f:ad:f9:07:a7:1a:6f:41:c6:7b:bd:24:f2:
                    57:b5:d3:26:1d:87:7a:bf:86:27:ba:d6:87:dc:c0:
                    d8:cf:a6:dd:a5:e9:e3:da:41:8e:2d:27:db:30:ee:
                    23:09:b1:45:01:5d:c4:b7:fa:f3:62:69:3d:59:77:
                    7e:6e:20:1d:49:8a:dc:9e:4d:09:4d:b4:47:ae:18:
                    fc:7f:42:ec:e8:6c:66:24:ba:70:f3:31:c7:d4:57:
                    e9:1a:66:5e:e7:59:d2:b2:4b:c0:88:a2:48:60:19:
                    94:81:13:11:1a:ff:aa:f3:b2:5f:69:4f:9f:17:16:
                    26:80:fd:51:24:b2:ef:48:ff:01:8d:f2:f9:ce:92:
                    c4:27:2b:45:e4:c0:a2:5d:c4:b1:09:d1:59:05:37:
                    59:dc:00:f3:89:ec:84:ed:19:2c:21:16:63:5a:0a:
                    d7:01:97:52:9f:f7:f8:cf:93:e1:6e:f9:23:1e:99:
                    79:d9:43:9b:df:c5:61:cd:4c:d8:a9:00:db:39:1c:
                    2a:00:8d:1d:04:1c:28:cb:07:e2:ef:13:be:5b:cd:
                    3b:d1:de:4b:15:a0:e7:38:99:65:6d:79:ff:2b:85:
                    90:5a:40:17:0b:c7:99:10:8a:1b:79:0f:c9:33:ff:
                    b4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:13:75:CF:3E:D7:70:3A:49:45:08:60:BD:89:C5:51:D0:C5:C2:15
            X509v3 Authority Key Identifier:
                keyid:37:12:84:2F:ED:19:32:5C:55:6E:AE:4D:0E:7C:19:89:6D:FC:1F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/717bd4c365c04f4dd5d39ac6532c267af688e267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/54a68b95a29eae1db9509e587c575846c91b9f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/717bd4c365c04f4dd5d39ac6532c267af688e267.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:df:f1:ff:19:80:06:7e:9c:46:3c:a2:1d:7b:10:ed:d5:47:
         02:c9:7d:c3:0f:16:6c:d5:39:db:56:c5:e4:7a:6d:5c:d4:55:
         5c:8a:81:27:78:2c:c8:66:94:49:59:b7:70:ea:21:86:22:85:
         1e:8d:11:6f:8e:bb:ae:41:7e:99:f8:93:43:89:86:a7:46:32:
         09:36:25:b4:b5:93:62:41:76:74:23:61:03:c6:82:30:3b:e1:
         2f:52:42:6c:03:f8:ed:86:9e:96:38:dc:47:34:2b:67:90:0c:
         51:95:55:34:3c:ef:36:95:be:4c:e2:fe:20:f6:62:1d:99:12:
         01:b3:ae:b4:c3:f6:79:21:a8:00:3a:b0:b0:68:00:84:e3:ba:
         a3:fd:e6:35:19:18:f0:aa:e3:38:ed:e1:37:2f:b1:4c:4a:68:
         fe:c6:3e:bc:e0:43:d9:93:95:4d:76:3c:af:af:7f:a5:aa:a8:
         5b:77:4c:1b:04:ca:23:52:be:77:a2:26:cd:a1:a2:c1:e9:dd:
         40:83:f5:5d:a4:8c:16:13:08:49:3b:cc:30:04:02:45:32:3f:
         95:fa:5f:1d:75:1a:93:90:b1:59:fc:29:73:bb:2a:a5:d6:f0:
         04:67:c7:16:9d:3c:ba:e9:7a:6a:19:c0:a2:e6:34:7b:42:a2:
         f0:c2:f8:2f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFfUzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcx
N2JkNGMzNjVjMDRmNGRkNWQzOWFjNjUzMmMyNjdhZjY4OGUyNjcwHhcNMjIwMjE4
MDMwMDAwWhcNMjYxMDI4MDMwMDAwWjAzMTEwLwYDVQQDEyg1NGE2OGI5NWEyOWVh
ZTFkYjk1MDllNTg3YzU3NTg0NmM5MWI5Zjc0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApObgEiSkmSrJl4MqZ04zpH+t+QenGm9Bxnu9JPJXtdMmHYd6
v4YnutaH3MDYz6bdpenj2kGOLSfbMO4jCbFFAV3Et/rzYmk9WXd+biAdSYrcnk0J
TbRHrhj8f0Ls6GxmJLpw8zHH1FfpGmZe51nSskvAiKJIYBmUgRMRGv+q87JfaU+f
FxYmgP1RJLLvSP8BjfL5zpLEJytF5MCiXcSxCdFZBTdZ3ADzieyE7RksIRZjWgrX
AZdSn/f4z5PhbvkjHpl52UOb38VhzUzYqQDbORwqAI0dBBwoywfi7xO+W8070d5L
FaDnOJllbXn/K4WQWkAXC8eZEIobeQ/JM/+0ZQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLUTdc8+13A6SUUIYL2JxVHQxcIVMB8GA1UdIwQYMBaAFDcShC/tGTJcVW6u
TQ58GYlt/B91MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzE3YmQ0
YzM2NWMwNGY0ZGQ1ZDM5YWM2NTMyYzI2N2FmNjg4ZTI2Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmM0NGM3YTItZmEyYi00YWU5LTk0MmQtODZhM2Fl
Y2M1N2ZkLzU0YTY4Yjk1YTI5ZWFlMWRiOTUwOWU1ODdjNTc1ODQ2YzkxYjlmNzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYzQ0YzdhMi1mYTJiLTRhZTktOTQyZC04NmEz
YWVjYzU3ZmQvNzE3YmQ0YzM2NWMwNGY0ZGQ1ZDM5YWM2NTMyYzI2N2FmNjg4ZTI2
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi0GCDANBgkqhkiG9w0BAQsFAAOCAQEAON/x/xmABn6cRjyi
HXsQ7dVHAsl9ww8WbNU521bF5HptXNRVXIqBJ3gsyGaUSVm3cOohhiKFHo0Rb467
rkF+mfiTQ4mGp0YyCTYltLWTYkF2dCNhA8aCMDvhL1JCbAP47YaeljjcRzQrZ5AM
UZVVNDzvNpW+TOL+IPZiHZkSAbOutMP2eSGoADqwsGgAhOO6o/3mNRkY8KrjOO3h
Ny+xTEpo/sY+vOBD2ZOVTXY8r69/paqoW3dMGwTKI1K+d6ImzaGiwendQIP1XaSM
FhMISTvMMAQCRTI/lfpfHXUak5CxWfwpc7sqpdbwBGfHFp08uul6ahnAouY0e0Ki
8ML4Lw==
-----END CERTIFICATE-----