Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c172b38f-0d7d-44ea-bc3e-824de43d7e3b/5a836f3cf71be9eb6902a70876ce1f367c972a2d.roa
File:                     5a836f3cf71be9eb6902a70876ce1f367c972a2d.roa (raw, json)
Hash identifier:          w0SX9hESEtHiUFE+SiJGSHAkLa7gHkom1ypbXVcKLbA=
Subject key identifier:   9B:4D:B5:A0:11:FC:C2:8F:F0:A3:6A:1A:AA:6C:CA:7F:70:FB:15:2F
Certificate issuer:       /CN=1e3cca3e6f60aaad1f230a519a0f328c0869c9dc
Certificate serial:       1E0F38
Authority key identifier: B5:2B:7B:B9:D4:2C:C6:6F:DC:D1:14:7D:F6:84:B2:17:53:41:F6:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e3cca3e6f60aaad1f230a519a0f328c0869c9dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c172b38f-0d7d-44ea-bc3e-824de43d7e3b/5a836f3cf71be9eb6902a70876ce1f367c972a2d.roa
Signing time:             Sat 05 Aug 2023 16:24:59 +0000
ROA not before:           Fri 04 Aug 2023 16:24:59 +0000
ROA not after:            Tue 05 Aug 2025 16:24:59 +0000
asID:                     3549
IP address blocks:        45.175.139.0/24 maxlen: 24
                          2803:6460::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1969976 (0x1e0f38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e3cca3e6f60aaad1f230a519a0f328c0869c9dc
        Validity
            Not Before: Aug  4 16:24:59 2023 GMT
            Not After : Aug  5 16:24:59 2025 GMT
        Subject: CN=5a836f3cf71be9eb6902a70876ce1f367c972a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:66:6f:e4:3e:40:67:0d:b9:e8:17:b2:f0:8c:
                    de:a7:8f:d4:08:89:62:16:d8:3d:98:af:db:46:b8:
                    25:79:03:44:6d:a6:ff:6a:7a:14:42:40:84:0c:af:
                    c5:53:f5:04:d8:68:62:48:bd:c7:37:0b:3f:70:64:
                    7e:83:44:80:6b:c7:38:95:c9:c7:ea:6e:b6:f5:55:
                    e5:72:b5:b6:52:f4:9d:87:bd:2b:0a:a2:c3:b1:1c:
                    d2:03:2d:6a:a5:63:52:30:c0:2d:18:5c:9f:90:29:
                    4a:f3:87:74:0d:49:af:76:61:59:1f:05:f8:17:09:
                    78:f4:ec:ef:af:19:a3:73:e7:8f:8f:20:b8:bc:2a:
                    40:0a:7b:d1:cd:5a:1b:ef:a9:8c:9b:8f:fe:3a:ed:
                    c6:dd:d6:a9:e0:7a:66:dd:24:a6:11:5b:37:7d:b6:
                    ce:27:b9:eb:df:a0:c8:1b:32:bc:8b:28:df:16:03:
                    86:d4:20:ae:3c:57:96:37:52:3e:5b:ac:b4:a5:50:
                    72:75:65:1e:e4:e9:b1:30:b1:ab:58:e4:d2:8f:96:
                    1a:c1:33:2e:33:c2:75:68:e4:30:d8:be:07:55:b8:
                    c3:b6:c0:85:d8:5e:0d:d3:40:9b:d5:8e:82:75:f1:
                    7a:9a:5b:58:50:ff:84:78:fa:71:14:38:5a:ff:f1:
                    67:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4D:B5:A0:11:FC:C2:8F:F0:A3:6A:1A:AA:6C:CA:7F:70:FB:15:2F
            X509v3 Authority Key Identifier:
                keyid:B5:2B:7B:B9:D4:2C:C6:6F:DC:D1:14:7D:F6:84:B2:17:53:41:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e3cca3e6f60aaad1f230a519a0f328c0869c9dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c172b38f-0d7d-44ea-bc3e-824de43d7e3b/5a836f3cf71be9eb6902a70876ce1f367c972a2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c172b38f-0d7d-44ea-bc3e-824de43d7e3b/1e3cca3e6f60aaad1f230a519a0f328c0869c9dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.139.0/24
                IPv6:
                  2803:6460::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:b8:d9:42:9a:3d:15:75:da:2d:a4:fe:6f:c0:63:ef:1b:10:
         f6:a9:fa:d5:75:62:13:7f:e6:a6:e6:4a:e4:fa:56:b4:7a:56:
         07:f4:e7:71:67:28:9a:11:a6:88:23:ac:e3:50:46:8c:01:30:
         d5:90:bd:39:06:ee:59:40:c3:9d:aa:43:46:cc:1f:bc:0e:b0:
         32:b6:22:64:b4:3e:dd:96:96:98:0f:86:68:8b:97:c8:22:7e:
         92:b9:3b:9a:ea:1c:4e:14:08:66:f1:d7:cc:da:ac:36:f9:ee:
         02:e1:16:fb:a9:e8:50:33:8f:20:df:f3:39:7f:5c:9d:f2:f2:
         ac:dd:c3:03:67:6b:ab:c7:a3:55:f7:f2:2c:b9:2d:f3:05:03:
         8f:ac:54:9c:f2:b5:93:da:ec:be:eb:77:6b:ea:bf:14:bb:20:
         26:64:40:0b:9a:84:13:39:6e:22:51:dd:fc:ce:06:5b:77:1f:
         65:99:bb:30:ba:4a:80:03:57:ff:da:06:60:cb:c3:be:af:83:
         06:ec:eb:6d:7e:37:42:94:a4:08:80:27:10:1b:b4:ab:b1:40:
         72:82:7b:75:65:8d:41:24:db:46:a5:1d:e6:cf:4d:4c:8b:d9:
         21:b0:b5:26:66:0e:69:b3:3b:e1:e7:c7:8a:b4:be:cd:91:a1:
         aa:13:f7:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDHg84MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFl
M2NjYTNlNmY2MGFhYWQxZjIzMGE1MTlhMGYzMjhjMDg2OWM5ZGMwHhcNMjMwODA0
MTYyNDU5WhcNMjUwODA1MTYyNDU5WjAzMTEwLwYDVQQDEyg1YTgzNmYzY2Y3MWJl
OWViNjkwMmE3MDg3NmNlMWYzNjdjOTcyYTJkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh2Zv5D5AZw256Bey8Izep4/UCIliFtg9mK/bRrgleQNEbab/
anoUQkCEDK/FU/UE2GhiSL3HNws/cGR+g0SAa8c4lcnH6m629VXlcrW2UvSdh70r
CqLDsRzSAy1qpWNSMMAtGFyfkClK84d0DUmvdmFZHwX4Fwl49Ozvrxmjc+ePjyC4
vCpACnvRzVob76mMm4/+Ou3G3dap4Hpm3SSmEVs3fbbOJ7nr36DIGzK8iyjfFgOG
1CCuPFeWN1I+W6y0pVBydWUe5OmxMLGrWOTSj5YawTMuM8J1aOQw2L4HVbjDtsCF
2F4N00Cb1Y6CdfF6mltYUP+EePpxFDha//FnNwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFJtNtaAR/MKP8KNqGqpsyn9w+xUvMB8GA1UdIwQYMBaAFLUre7nULMZv3NEU
ffaEshdTQfYnMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWUzY2Nh
M2U2ZjYwYWFhZDFmMjMwYTUxOWEwZjMyOGMwODY5YzlkYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzE3MmIzOGYtMGQ3ZC00NGVhLWJjM2UtODI0ZGU0
M2Q3ZTNiLzVhODM2ZjNjZjcxYmU5ZWI2OTAyYTcwODc2Y2UxZjM2N2M5NzJhMmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMTcyYjM4Zi0wZDdkLTQ0ZWEtYmMzZS04MjRk
ZTQzZDdlM2IvMWUzY2NhM2U2ZjYwYWFhZDFmMjMwYTUxOWEwZjMyOGMwODY5Yzlk
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAC2vizANBAIAAjAHAwUAKANkYDANBgkqhkiG9w0BAQsFAAOC
AQEAdrjZQpo9FXXaLaT+b8Bj7xsQ9qn61XViE3/mpuZK5PpWtHpWB/TncWcomhGm
iCOs41BGjAEw1ZC9OQbuWUDDnapDRswfvA6wMrYiZLQ+3ZaWmA+GaIuXyCJ+krk7
muocThQIZvHXzNqsNvnuAuEW+6noUDOPIN/zOX9cnfLyrN3DA2drq8ejVffyLLkt
8wUDj6xUnPK1k9rsvut3a+q/FLsgJmRAC5qEEzluIlHd/M4GW3cfZZm7MLpKgANX
/9oGYMvDvq+DBuzrbX43QpSkCIAnEBu0q7FAcoJ7dWWNQSTbRqUd5s9NTIvZIbC1
JmYOabM74efHirS+zZGhqhP3Yg==
-----END CERTIFICATE-----