Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/5e0abe8364c6e2f0985e5d6f31d400ce50e43d00.roa
File:                     5e0abe8364c6e2f0985e5d6f31d400ce50e43d00.roa (raw, json)
Hash identifier:          3s8gxqWWNoaWyMNZJJUqO/0LsxsMbRoLKuoYdBO3+mg=
Subject key identifier:   54:7F:31:F8:0C:05:CB:DC:B9:DB:01:5D:28:7C:CB:F4:AD:31:A5:2A
Certificate issuer:       /CN=fdfd425584dd260c812e3b649911e7753efa8f09
Certificate serial:       16B3D8
Authority key identifier: BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/5e0abe8364c6e2f0985e5d6f31d400ce50e43d00.roa
Signing time:             Mon 25 Apr 2022 22:35:01 +0000
ROA not before:           Mon 25 Apr 2022 03:00:00 +0000
ROA not after:            Tue 10 Feb 2026 03:00:00 +0000
asID:                     1299
IP address blocks:        170.80.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1487832 (0x16b3d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdfd425584dd260c812e3b649911e7753efa8f09
        Validity
            Not Before: Apr 25 03:00:00 2022 GMT
            Not After : Feb 10 03:00:00 2026 GMT
        Subject: CN=5e0abe8364c6e2f0985e5d6f31d400ce50e43d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:72:87:65:d1:64:fe:c6:e4:2d:87:be:59:58:
                    c9:eb:d8:1e:55:00:15:3e:87:0f:14:1d:72:bd:01:
                    ab:be:ce:70:96:36:47:36:17:7b:46:ce:21:4c:65:
                    4d:84:e1:c5:6d:1d:f2:43:3c:ac:fc:5f:dc:cb:42:
                    0f:00:4e:17:63:e9:27:4b:2e:d4:20:73:34:d0:7e:
                    bc:0d:44:e5:fa:35:e2:8e:0d:60:45:72:a6:f5:fb:
                    34:d3:06:d4:a1:1f:55:eb:db:31:88:8f:0b:6c:bd:
                    ca:ad:67:52:86:6d:8e:a8:a7:ba:49:1d:8c:e3:b5:
                    94:a6:66:20:f2:1d:ce:7f:38:19:d5:cf:e8:84:02:
                    61:71:2e:d9:eb:31:e7:73:2d:fb:f1:9c:83:17:ab:
                    28:b1:33:84:0e:2e:ea:83:5e:6c:3b:0b:2b:d8:76:
                    58:4a:be:7f:91:67:fd:3d:d2:3f:f6:6e:c4:7c:74:
                    43:a0:5d:7d:0d:5d:d2:8f:29:75:9d:06:cd:d5:f7:
                    c0:c3:58:47:e4:3e:1f:8e:38:bc:39:c7:2c:08:18:
                    fd:76:50:c3:da:82:ad:d1:b0:74:9d:e7:1a:e8:ce:
                    dd:f7:54:2f:db:63:bf:1e:1f:00:d9:cd:af:11:03:
                    90:28:cd:42:1b:17:e2:15:e3:3d:ad:8c:55:39:62:
                    5d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7F:31:F8:0C:05:CB:DC:B9:DB:01:5D:28:7C:CB:F4:AD:31:A5:2A
            X509v3 Authority Key Identifier:
                keyid:BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/5e0abe8364c6e2f0985e5d6f31d400ce50e43d00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/fdfd425584dd260c812e3b649911e7753efa8f09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:a8:c0:79:73:a5:b1:40:18:cd:83:80:f6:74:11:ca:d7:c7:
         96:6e:a8:43:f7:21:e2:e0:13:76:bd:99:f2:80:f4:57:94:c0:
         02:d2:36:87:dd:95:a9:21:36:fc:ee:fe:a0:29:31:e9:24:e4:
         e0:1a:c8:68:82:76:ae:7f:55:87:0d:e0:5c:6f:ca:6d:a9:d3:
         00:35:94:58:2d:3e:5e:1c:86:03:99:f5:e9:3d:fa:88:95:00:
         8d:fc:fb:a5:5e:11:cb:03:3c:4f:89:1b:66:b6:ed:48:90:72:
         56:3f:7f:dc:bc:4f:8c:dd:cb:0c:bb:cf:58:8b:e1:be:8e:9d:
         b8:05:2b:52:d6:40:a0:ae:46:3e:d1:34:86:9e:8d:c5:90:c3:
         a2:12:ac:28:38:7b:80:42:b6:69:97:64:85:c5:fe:79:cc:da:
         c4:9c:af:20:7d:58:3d:3b:bf:99:e0:7a:18:e9:95:98:14:90:
         4c:b4:68:07:a7:7e:42:f3:55:63:12:69:21:4e:f6:b5:07:89:
         85:b2:93:3e:11:3f:ce:01:a1:ac:c7:7e:80:70:56:29:93:e6:
         ab:b1:0a:98:81:d2:09:88:0c:25:01:89:0e:1b:e3:02:8e:00:
         11:1d:19:00:52:03:b7:5f:38:54:1c:95:f5:4c:63:48:ef:19:
         95:b9:b9:b9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFrPYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZk
ZmQ0MjU1ODRkZDI2MGM4MTJlM2I2NDk5MTFlNzc1M2VmYThmMDkwHhcNMjIwNDI1
MDMwMDAwWhcNMjYwMjEwMDMwMDAwWjAzMTEwLwYDVQQDEyg1ZTBhYmU4MzY0YzZl
MmYwOTg1ZTVkNmYzMWQ0MDBjZTUwZTQzZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoHKHZdFk/sbkLYe+WVjJ69geVQAVPocPFB1yvQGrvs5wljZH
Nhd7Rs4hTGVNhOHFbR3yQzys/F/cy0IPAE4XY+knSy7UIHM00H68DUTl+jXijg1g
RXKm9fs00wbUoR9V69sxiI8LbL3KrWdShm2OqKe6SR2M47WUpmYg8h3OfzgZ1c/o
hAJhcS7Z6zHncy378ZyDF6sosTOEDi7qg15sOwsr2HZYSr5/kWf9PdI/9m7EfHRD
oF19DV3Sjyl1nQbN1ffAw1hH5D4fjji8OccsCBj9dlDD2oKt0bB0neca6M7d91Qv
22O/Hh8A2c2vEQOQKM1CGxfiFeM9rYxVOWJdHQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFR/MfgMBcvcudsBXSh8y/StMaUqMB8GA1UdIwQYMBaAFLz1gZ4oFe74vuhC
GWu1kH2z62AdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmRmZDQy
NTU4NGRkMjYwYzgxMmUzYjY0OTkxMWU3NzUzZWZhOGYwOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmU2NzI4NzItNzcwYS00ZDY1LWJjYmItMDU1ODc4
YWJkMWRlLzVlMGFiZTgzNjRjNmUyZjA5ODVlNWQ2ZjMxZDQwMGNlNTBlNDNkMDAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iZTY3Mjg3Mi03NzBhLTRkNjUtYmNiYi0wNTU4
NzhhYmQxZGUvZmRmZDQyNTU4NGRkMjYwYzgxMmUzYjY0OTkxMWU3NzUzZWZhOGYw
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKpQjzANBgkqhkiG9w0BAQsFAAOCAQEAR6jAeXOlsUAYzYOA
9nQRytfHlm6oQ/ch4uATdr2Z8oD0V5TAAtI2h92VqSE2/O7+oCkx6STk4BrIaIJ2
rn9Vhw3gXG/KbanTADWUWC0+XhyGA5n16T36iJUAjfz7pV4RywM8T4kbZrbtSJBy
Vj9/3LxPjN3LDLvPWIvhvo6duAUrUtZAoK5GPtE0hp6NxZDDohKsKDh7gEK2aZdk
hcX+eczaxJyvIH1YPTu/meB6GOmVmBSQTLRoB6d+QvNVYxJpIU72tQeJhbKTPhE/
zgGhrMd+gHBWKZPmq7EKmIHSCYgMJQGJDhvjAo4AER0ZAFIDt184VByV9UxjSO8Z
lbm5uQ==
-----END CERTIFICATE-----