Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/c46303a86d077913a663e829d9ce0ed37115fdd8.roa
File:                     c46303a86d077913a663e829d9ce0ed37115fdd8.roa (raw, json)
Hash identifier:          gxkmwWyBS6gYuwHWvrfEQNMaL84+EWJi7r7s5aXELrY=
Subject key identifier:   81:24:29:6E:99:6A:7F:F9:9D:0C:02:87:03:BA:01:9D:F6:CE:F2:6E
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1C06F2
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/c46303a86d077913a663e829d9ce0ed37115fdd8.roa
Signing time:             Tue 27 Sep 2022 14:12:33 +0000
ROA not before:           Tue 27 Sep 2022 14:11:28 +0000
ROA not after:            Fri 27 Sep 2024 14:11:28 +0000
asID:                     3816
IP address blocks:        186.170.0.0/22 maxlen: 22
                          186.170.4.0/22 maxlen: 22
                          186.170.8.0/22 maxlen: 22
                          186.170.12.0/22 maxlen: 22
                          186.170.16.0/22 maxlen: 22
                          186.170.20.0/22 maxlen: 22
                          186.170.24.0/22 maxlen: 22
                          186.170.28.0/24 maxlen: 24
                          186.170.29.0/24 maxlen: 24
                          186.170.30.0/24 maxlen: 24
                          186.170.31.0/24 maxlen: 24
                          186.170.32.0/19 maxlen: 19
                          186.170.64.0/21 maxlen: 21
                          186.170.72.0/21 maxlen: 21
                          186.170.80.0/22 maxlen: 22
                          186.170.84.0/22 maxlen: 22
                          186.170.88.0/24 maxlen: 24
                          186.170.89.0/24 maxlen: 24
                          186.170.90.0/24 maxlen: 24
                          186.170.91.0/24 maxlen: 24
                          186.170.92.0/24 maxlen: 24
                          186.170.96.0/19 maxlen: 19
                          186.170.128.0/19 maxlen: 19
                          186.170.160.0/19 maxlen: 19
                          186.170.192.0/20 maxlen: 20
                          186.170.208.0/20 maxlen: 20
                          186.170.224.0/19 maxlen: 19
                          186.171.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1836786 (0x1c06f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Sep 27 14:11:28 2022 GMT
            Not After : Sep 27 14:11:28 2024 GMT
        Subject: CN=c46303a86d077913a663e829d9ce0ed37115fdd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:97:4b:c6:a4:dd:96:7e:ff:4c:d9:29:b1:fe:
                    3d:3d:95:cb:6f:dd:5b:e2:7a:76:24:2a:bd:28:58:
                    7b:0d:c2:da:e1:7a:2b:fc:ba:8d:6c:60:40:c8:c5:
                    f2:3b:0f:3c:f9:4b:bf:58:dc:64:b6:b4:b6:13:7d:
                    37:7c:cd:eb:f4:a2:8a:f6:cc:0a:34:a1:08:e1:8b:
                    c3:70:32:33:78:07:0f:84:1f:4b:71:a4:51:41:fe:
                    6d:ef:ba:a5:75:e7:8f:f7:26:34:85:ae:e4:80:f7:
                    db:03:9a:49:c5:d2:ae:1b:88:23:84:c7:8f:bf:02:
                    80:fb:ce:4b:2e:d3:cf:01:1b:78:5c:d4:c4:92:51:
                    94:8f:46:f9:c6:f8:cf:59:2c:3e:2f:71:d9:b8:66:
                    c5:5d:03:bc:ef:9a:07:f0:b4:8b:55:44:1e:c6:b9:
                    94:7c:7f:6e:16:9a:ec:d5:8d:ca:6e:ca:5e:1b:78:
                    bd:ae:c9:f6:54:28:7c:e6:c3:b0:3b:0e:a3:46:47:
                    12:75:67:89:ea:c8:6c:9f:bf:09:02:ce:1e:f7:55:
                    75:4f:c6:9a:20:60:43:28:15:2e:c3:c1:42:6f:0d:
                    1a:ec:44:d1:c1:c8:2b:c0:00:6d:68:f9:e4:d1:35:
                    90:2b:01:e2:5d:35:0b:b5:39:ed:f3:f4:bc:fd:7d:
                    35:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:24:29:6E:99:6A:7F:F9:9D:0C:02:87:03:BA:01:9D:F6:CE:F2:6E
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/c46303a86d077913a663e829d9ce0ed37115fdd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.170.0.0-186.170.92.255
                  186.170.96.0-186.171.127.255

    Signature Algorithm: sha256WithRSAEncryption
         12:5e:63:76:ac:57:98:8f:01:f4:fb:24:6f:f5:c8:74:4c:91:
         f9:01:eb:05:45:73:02:9d:b1:36:3e:5e:ac:ae:0e:31:93:65:
         e1:8b:62:9d:af:0a:a2:22:23:3c:27:4d:1e:bc:73:04:0e:ee:
         12:02:81:f1:60:8f:86:eb:8c:2d:fa:6e:a2:37:1a:e6:07:14:
         73:86:44:fb:47:e2:89:e9:27:f6:a7:7a:54:9e:da:fb:a2:81:
         12:cc:be:2c:4a:3e:25:a3:6e:1a:bc:57:50:76:a2:40:f4:fe:
         d6:ae:69:4c:bf:bd:81:b2:e6:30:0e:97:65:3d:da:9b:80:33:
         b4:5e:65:c6:95:ae:35:b3:f6:ae:02:d7:6e:9c:6c:eb:7a:77:
         fc:7a:53:99:69:2c:dd:a2:8c:f8:df:39:11:fc:3e:71:46:cc:
         e2:68:ca:f3:ee:a9:9f:fa:4d:60:a4:50:fb:95:9a:f0:32:ca:
         bc:06:b9:7f:48:d0:80:5d:f1:44:da:19:b6:1d:d1:c2:7f:01:
         30:df:8d:57:9d:37:b7:4f:da:ba:34:2a:a9:37:5e:16:e0:02:
         06:96:36:52:08:74:00:da:96:9a:f5:94:63:7d:fb:5d:29:12:
         0b:51:18:0c:89:05:ef:19:7c:09:8c:16:93:93:ba:a6:29:cb:
         08:01:df:b5
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDHAbyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIz
NTgwMDc4ZjRmODk3ZmNmZGJhYTBkOTBjMmVjNmY0NjBlMzMyMjIwHhcNMjIwOTI3
MTQxMTI4WhcNMjQwOTI3MTQxMTI4WjAzMTEwLwYDVQQDEyhjNDYzMDNhODZkMDc3
OTEzYTY2M2U4MjlkOWNlMGVkMzcxMTVmZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlpdLxqTdln7/TNkpsf49PZXLb91b4np2JCq9KFh7DcLa4Xor
/LqNbGBAyMXyOw88+Uu/WNxktrS2E303fM3r9KKK9swKNKEI4YvDcDIzeAcPhB9L
caRRQf5t77qldeeP9yY0ha7kgPfbA5pJxdKuG4gjhMePvwKA+85LLtPPARt4XNTE
klGUj0b5xvjPWSw+L3HZuGbFXQO875oH8LSLVUQexrmUfH9uFprs1Y3KbspeG3i9
rsn2VCh85sOwOw6jRkcSdWeJ6shsn78JAs4e91V1T8aaIGBDKBUuw8FCbw0a7ETR
wcgrwABtaPnk0TWQKwHiXTULtTnt8/S8/X01lQIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFIEkKW6Zan/5nQwChwO6AZ32zvJuMB8GA1UdIwQYMBaAFN/Gyo1ROTKXljh0
TDeMs6BDDpW1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjM1ODAw
NzhmNGY4OTdmY2ZkYmFhMGQ5MGMyZWM2ZjQ2MGUzMzIyMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzIwYjU1OGEtODllMC00YzllLWI2YzgtZDdjNjk0
NjMyMTIwL2M0NjMwM2E4NmQwNzc5MTNhNjYzZTgyOWQ5Y2UwZWQzNzExNWZkZDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMjBiNTU4YS04OWUwLTRjOWUtYjZjOC1kN2M2
OTQ2MzIxMjAvYjM1ODAwNzhmNGY4OTdmY2ZkYmFhMGQ5MGMyZWM2ZjQ2MGUzMzIy
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwIQQCAAEwGzALAwMBuqoDBAC6qlwwDAMEBbqqYAMEB7qrADANBgkqhkiG9w0B
AQsFAAOCAQEAEl5jdqxXmI8B9Pskb/XIdEyR+QHrBUVzAp2xNj5erK4OMZNl4Yti
na8KoiIjPCdNHrxzBA7uEgKB8WCPhuuMLfpuojca5gcUc4ZE+0fiiekn9qd6VJ7a
+6KBEsy+LEo+JaNuGrxXUHaiQPT+1q5pTL+9gbLmMA6XZT3am4AztF5lxpWuNbP2
rgLXbpxs63p3/HpTmWks3aKM+N85Efw+cUbM4mjK8+6pn/pNYKRQ+5Wa8DLKvAa5
f0jQgF3xRNoZth3Rwn8BMN+NV503t0/aujQqqTdeFuACBpY2Ugh0ANqWmvWUY337
XSkSC1EYDIkF7xl8CYwWk5O6pinLCAHftQ==
-----END CERTIFICATE-----