Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/18aeb4a38e5989cdb508a63bbef0d7a57b7691f4.roa
File:                     18aeb4a38e5989cdb508a63bbef0d7a57b7691f4.roa (raw, json)
Hash identifier:          8iOp8+4bRryb9FTFnKq90JeFGXZ+r3InRtSQW7mszks=
Subject key identifier:   56:CB:E2:CB:14:B4:82:2E:F8:BC:23:05:02:E5:E6:27:F2:E6:E2:14
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1C4390
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/18aeb4a38e5989cdb508a63bbef0d7a57b7691f4.roa
Signing time:             Wed 28 Sep 2022 14:12:32 +0000
ROA not before:           Wed 28 Sep 2022 14:09:53 +0000
ROA not after:            Sat 28 Sep 2024 14:09:53 +0000
asID:                     3816
IP address blocks:        201.228.128.0/20 maxlen: 20
                          201.228.139.0/24 maxlen: 24
                          201.228.140.0/24 maxlen: 24
                          201.228.141.0/24 maxlen: 24
                          201.228.144.0/20 maxlen: 20
                          201.228.155.0/24 maxlen: 24
                          201.228.160.0/19 maxlen: 19
                          201.228.184.0/22 maxlen: 22
                          201.228.208.0/21 maxlen: 21
                          201.228.216.0/21 maxlen: 21
                          201.228.216.0/22 maxlen: 22
                          201.228.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1852304 (0x1c4390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Sep 28 14:09:53 2022 GMT
            Not After : Sep 28 14:09:53 2024 GMT
        Subject: CN=18aeb4a38e5989cdb508a63bbef0d7a57b7691f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ad:2b:d1:41:f7:f5:74:e5:72:27:21:37:4b:
                    9d:3f:6e:92:b4:6d:4f:06:13:ac:cd:4d:08:6d:f5:
                    cd:be:61:d2:59:52:06:f3:2d:53:bd:c5:e3:42:a5:
                    16:3e:c0:99:1e:b5:22:7f:85:d8:fb:b3:19:3e:74:
                    25:bc:47:8f:af:2e:ee:1e:66:34:fc:5f:a7:c8:11:
                    28:cc:e1:ef:21:5f:02:69:98:8d:86:d0:33:50:60:
                    5a:cc:28:32:40:79:12:01:0e:a1:c1:de:6f:ef:e8:
                    10:03:62:23:34:60:f2:56:94:92:92:85:5a:de:b5:
                    ee:d7:6a:ef:8d:92:2b:7a:0d:da:aa:17:40:71:bf:
                    f8:4d:37:1c:80:fa:65:0a:28:2f:70:64:47:ac:ff:
                    29:81:c3:99:19:70:c3:80:13:21:f6:e5:83:f6:db:
                    03:54:1c:c8:b0:dc:88:b1:7e:a4:6a:f6:fe:9e:2b:
                    d9:28:8b:e7:1e:f9:3e:5e:96:64:f6:7a:80:8a:73:
                    b3:de:52:2a:b3:90:c1:ee:6d:c2:e7:45:99:32:42:
                    d1:c0:38:35:c7:98:61:de:05:7c:21:cd:f5:5d:08:
                    c6:f2:11:47:ff:3b:2b:34:18:79:03:8c:67:79:b7:
                    a4:dc:19:61:2a:7b:10:dd:89:fc:7c:63:d6:bb:3b:
                    4c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CB:E2:CB:14:B4:82:2E:F8:BC:23:05:02:E5:E6:27:F2:E6:E2:14
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/18aeb4a38e5989cdb508a63bbef0d7a57b7691f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.228.128.0/18
                  201.228.208.0-201.228.255.255

    Signature Algorithm: sha256WithRSAEncryption
         2d:7e:09:6a:a8:0d:92:49:1f:aa:b7:ee:af:6a:e3:4a:67:eb:
         70:fd:9a:a5:fb:87:c7:6b:0b:85:fa:8a:fe:81:4a:43:af:98:
         ba:74:69:6a:7f:6e:e5:73:a1:8a:24:89:d8:fb:6c:2f:a6:69:
         43:91:eb:33:94:4c:56:69:90:93:7d:fb:55:27:6a:6c:7c:c2:
         8d:fa:b8:47:e5:dd:0b:6b:fb:af:8c:f7:8f:e6:3b:af:92:5b:
         34:14:30:4c:50:6a:83:8b:8b:98:e5:2d:c2:39:4d:74:9f:30:
         17:c9:c1:dc:a2:a1:82:40:96:67:98:2e:fe:18:b9:0f:82:3b:
         a8:6f:f8:1f:81:b4:13:f8:59:58:b1:94:48:12:dc:32:76:41:
         60:e3:13:3f:d3:2b:16:f4:df:21:f7:df:48:d0:09:e6:66:2f:
         8e:58:d5:5d:02:12:4f:01:58:84:ea:3c:ea:80:8c:de:de:4a:
         b0:b7:8c:89:76:e6:a9:5d:40:45:34:98:d8:9d:b5:0a:e7:12:
         ce:be:a5:e1:8c:e9:43:75:c8:c4:4d:b8:03:36:b6:23:c4:12:
         9b:dd:27:f5:42:c2:6c:af:c3:cc:9f:a7:69:b8:90:e0:ca:52:
         7c:38:a1:b0:b9:75:99:5b:e6:2e:e5:e9:23:42:c1:ab:21:a1:
         0c:fe:ba:4f
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIDHEOQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIz
NTgwMDc4ZjRmODk3ZmNmZGJhYTBkOTBjMmVjNmY0NjBlMzMyMjIwHhcNMjIwOTI4
MTQwOTUzWhcNMjQwOTI4MTQwOTUzWjAzMTEwLwYDVQQDEygxOGFlYjRhMzhlNTk4
OWNkYjUwOGE2M2JiZWYwZDdhNTdiNzY5MWY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4q0r0UH39XTlcichN0udP26StG1PBhOszU0IbfXNvmHSWVIG
8y1TvcXjQqUWPsCZHrUif4XY+7MZPnQlvEePry7uHmY0/F+nyBEozOHvIV8CaZiN
htAzUGBazCgyQHkSAQ6hwd5v7+gQA2IjNGDyVpSSkoVa3rXu12rvjZIreg3aqhdA
cb/4TTccgPplCigvcGRHrP8pgcOZGXDDgBMh9uWD9tsDVBzIsNyIsX6kavb+nivZ
KIvnHvk+XpZk9nqAinOz3lIqs5DB7m3C50WZMkLRwDg1x5hh3gV8Ic31XQjG8hFH
/zsrNBh5A4xnebek3BlhKnsQ3Yn8fGPWuztMRQIDAQABo4ICaDCCAmQwHQYDVR0O
BBYEFFbL4ssUtIIu+LwjBQLl5ify5uIUMB8GA1UdIwQYMBaAFN/Gyo1ROTKXljh0
TDeMs6BDDpW1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjM1ODAw
NzhmNGY4OTdmY2ZkYmFhMGQ5MGMyZWM2ZjQ2MGUzMzIyMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzIwYjU1OGEtODllMC00YzllLWI2YzgtZDdjNjk0
NjMyMTIwLzE4YWViNGEzOGU1OTg5Y2RiNTA4YTYzYmJlZjBkN2E1N2I3NjkxZjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMjBiNTU4YS04OWUwLTRjOWUtYjZjOC1kN2M2
OTQ2MzIxMjAvYjM1ODAwNzhmNGY4OTdmY2ZkYmFhMGQ5MGMyZWM2ZjQ2MGUzMzIy
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAsBggrBgEFBQcBBwEB/wQd
MBswGQQCAAEwEwMEBsnkgDALAwQEyeTQAwMAyeQwDQYJKoZIhvcNAQELBQADggEB
AC1+CWqoDZJJH6q37q9q40pn63D9mqX7h8drC4X6iv6BSkOvmLp0aWp/buVzoYok
idj7bC+maUOR6zOUTFZpkJN9+1Unamx8wo36uEfl3Qtr+6+M94/mO6+SWzQUMExQ
aoOLi5jlLcI5TXSfMBfJwdyioYJAlmeYLv4YuQ+CO6hv+B+BtBP4WVixlEgS3DJ2
QWDjEz/TKxb03yH330jQCeZmL45Y1V0CEk8BWITqPOqAjN7eSrC3jIl25qldQEU0
mNidtQrnEs6+peGM6UN1yMRNuAM2tiPEEpvdJ/VCwmyvw8yfp2m4kODKUnw4obC5
dZlb5i7l6SNCwashoQz+uk8=
-----END CERTIFICATE-----