Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/40af05052591d7109f6c6b68f4f42e19c4e9faa4.roa
File:                     40af05052591d7109f6c6b68f4f42e19c4e9faa4.roa (raw, json)
Hash identifier:          wh6jQ6u/BV5p3eDxHtS9RdA+pvERJnf5EJMJeO5mXs0=
Subject key identifier:   CC:99:DE:D8:91:0A:6E:F4:8E:2F:09:BC:53:2F:9A:9D:72:8B:46:99
Certificate issuer:       /CN=d8ec2e23c44f24767001626bdcf66010d00d9db8
Certificate serial:       0F0698
Authority key identifier: 64:7D:FE:07:32:9D:CD:B9:0B:5C:BA:D5:3C:0A:35:5D:A6:9C:44:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8ec2e23c44f24767001626bdcf66010d00d9db8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/40af05052591d7109f6c6b68f4f42e19c4e9faa4.roa
Signing time:             Tue 24 May 2022 23:17:14 +0000
ROA not before:           Thu 05 May 2022 03:00:00 +0000
ROA not after:            Sun 05 May 2024 03:00:00 +0000
asID:                     265580
IP address blocks:        45.174.252.0/22 maxlen: 24
                          2806:335::/36 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 984728 (0xf0698)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8ec2e23c44f24767001626bdcf66010d00d9db8
        Validity
            Not Before: May  5 03:00:00 2022 GMT
            Not After : May  5 03:00:00 2024 GMT
        Subject: CN=40af05052591d7109f6c6b68f4f42e19c4e9faa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:20:17:3c:d9:29:a4:fd:2e:3a:b7:53:fe:8c:
                    32:82:61:e4:73:2b:1e:46:59:ad:5b:78:d2:6f:8c:
                    fe:eb:63:e4:5e:b2:ea:68:b9:a0:2f:e6:47:04:cd:
                    9a:83:f1:69:c9:db:f4:4f:e7:47:60:6f:44:a7:c3:
                    6f:23:f3:97:80:a7:0f:0d:ef:41:df:20:92:12:54:
                    87:bd:70:00:6d:93:f6:3f:02:53:9f:91:32:2d:db:
                    37:1b:35:28:17:09:1d:45:04:48:bf:b3:8d:34:64:
                    bd:fb:d3:05:b5:38:dc:42:f9:af:f3:4b:89:64:58:
                    79:78:37:33:15:12:44:a0:21:7e:b4:f3:cc:8a:1b:
                    7c:78:bd:bf:0f:8b:c6:1a:9d:02:c5:5a:12:1d:e9:
                    5c:2c:b5:eb:21:3d:1c:f4:0f:47:0c:db:2b:c7:63:
                    e9:24:cf:38:61:09:5a:99:b5:f6:d2:f4:74:28:4a:
                    8c:18:c4:7e:e8:e1:26:b7:a3:de:f4:d1:3d:d9:1f:
                    2a:54:c9:31:b9:71:00:e4:02:29:28:56:01:b4:90:
                    3e:b8:b7:d9:73:84:bc:c2:b4:eb:45:78:24:b1:5e:
                    20:95:e3:a8:15:ce:04:2f:e6:20:63:dd:78:66:c1:
                    9b:06:8b:95:8b:72:31:1e:fe:34:52:96:af:e5:06:
                    3b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:99:DE:D8:91:0A:6E:F4:8E:2F:09:BC:53:2F:9A:9D:72:8B:46:99
            X509v3 Authority Key Identifier:
                keyid:64:7D:FE:07:32:9D:CD:B9:0B:5C:BA:D5:3C:0A:35:5D:A6:9C:44:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8ec2e23c44f24767001626bdcf66010d00d9db8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/40af05052591d7109f6c6b68f4f42e19c4e9faa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/d8ec2e23c44f24767001626bdcf66010d00d9db8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.252.0/22
                IPv6:
                  2806:335::/36

    Signature Algorithm: sha256WithRSAEncryption
         09:00:83:71:f1:f3:0c:ad:6d:68:8f:23:5a:57:30:7b:6a:6d:
         87:a0:29:2d:cb:c0:b7:6e:9c:5e:ab:da:ab:8b:38:8e:bf:bb:
         f4:47:b4:b0:53:64:73:f7:05:a7:9e:66:0a:5f:71:3d:3c:0d:
         93:d6:5f:96:e4:4c:80:04:06:9a:c1:58:1f:07:2d:d8:88:26:
         6b:33:e7:86:46:14:47:b2:38:5f:a1:46:0f:d5:ce:61:3f:98:
         8f:bd:8f:9d:40:6f:3e:ee:88:63:33:42:44:99:16:2e:48:cb:
         bf:44:ab:1a:ae:ce:ec:07:00:b5:b6:08:72:fb:78:03:a6:f5:
         8b:67:ae:c2:58:8d:af:49:7e:99:54:36:0f:b2:21:44:e1:e1:
         f4:4c:46:20:46:65:5d:d9:44:d6:b6:72:ec:ad:f1:cb:3f:f9:
         6f:76:a5:41:ef:14:8b:78:8f:ef:57:06:81:f6:8f:43:cf:2d:
         84:b9:0c:c3:af:74:6f:dd:62:55:9f:bc:76:b6:48:4b:6a:f9:
         4b:79:65:af:7e:cb:f8:51:a9:83:47:e6:ab:ac:19:5c:18:b4:
         f9:07:45:91:dd:cf:9c:41:b9:4d:e7:27:56:a7:be:3f:59:4c:
         d7:11:f8:de:35:ae:0a:fc:fa:be:f3:38:7d:83:ba:a1:df:6b:
         1b:78:e7:43
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIDDwaYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4
ZWMyZTIzYzQ0ZjI0NzY3MDAxNjI2YmRjZjY2MDEwZDAwZDlkYjgwHhcNMjIwNTA1
MDMwMDAwWhcNMjQwNTA1MDMwMDAwWjAzMTEwLwYDVQQDEyg0MGFmMDUwNTI1OTFk
NzEwOWY2YzZiNjhmNGY0MmUxOWM0ZTlmYWE0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAySAXPNkppP0uOrdT/owygmHkcyseRlmtW3jSb4z+62PkXrLq
aLmgL+ZHBM2ag/Fpydv0T+dHYG9Ep8NvI/OXgKcPDe9B3yCSElSHvXAAbZP2PwJT
n5EyLds3GzUoFwkdRQRIv7ONNGS9+9MFtTjcQvmv80uJZFh5eDczFRJEoCF+tPPM
iht8eL2/D4vGGp0CxVoSHelcLLXrIT0c9A9HDNsrx2PpJM84YQlambX20vR0KEqM
GMR+6OEmt6Pe9NE92R8qVMkxuXEA5AIpKFYBtJA+uLfZc4S8wrTrRXgksV4gleOo
Fc4EL+YgY914ZsGbBouVi3IxHv40Upav5QY7owIDAQABo4ICazCCAmcwHQYDVR0O
BBYEFMyZ3tiRCm70ji8JvFMvmp1yi0aZMB8GA1UdIwQYMBaAFGR9/gcync25C1y6
1TwKNV2mnEQvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDhlYzJl
MjNjNDRmMjQ3NjcwMDE2MjZiZGNmNjYwMTBkMDBkOWRiOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzIwODNlZmUtZTU2OS00MzhhLThmMGMtYmY3OTNj
ZWRjZDNlLzQwYWYwNTA1MjU5MWQ3MTA5ZjZjNmI2OGY0ZjQyZTE5YzRlOWZhYTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMjA4M2VmZS1lNTY5LTQzOGEtOGYwYy1iZjc5
M2NlZGNkM2UvZDhlYzJlMjNjNDRmMjQ3NjcwMDE2MjZiZGNmNjYwMTBkMDBkOWRi
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAvBggrBgEFBQcBBwEB/wQg
MB4wDAQCAAEwBgMEAi2u/DAOBAIAAjAIAwYEKAYDNQAwDQYJKoZIhvcNAQELBQAD
ggEBAAkAg3Hx8wytbWiPI1pXMHtqbYegKS3LwLdunF6r2quLOI6/u/RHtLBTZHP3
BaeeZgpfcT08DZPWX5bkTIAEBprBWB8HLdiIJmsz54ZGFEeyOF+hRg/VzmE/mI+9
j51Abz7uiGMzQkSZFi5Iy79EqxquzuwHALW2CHL7eAOm9YtnrsJYja9JfplUNg+y
IUTh4fRMRiBGZV3ZRNa2cuyt8cs/+W92pUHvFIt4j+9XBoH2j0PPLYS5DMOvdG/d
YlWfvHa2SEtq+Ut5Za9+y/hRqYNH5qusGVwYtPkHRZHdz5xBuU3nJ1anvj9ZTNcR
+N41rgr8+r7zOH2DuqHfaxt450M=
-----END CERTIFICATE-----