Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c49c6dda-e288-4168-868a-e03fa75ce046/93b2aa1517731fee92074a09fb6436143e2e6aeb.roa
File:                     93b2aa1517731fee92074a09fb6436143e2e6aeb.roa (raw, json)
Hash identifier:          C79xODEuMR0BPZbaJVg5plFfsM9D45y6qe+NvxA/wz0=
Subject key identifier:   7A:2E:7B:13:56:EB:8B:AC:86:EA:CF:06:BF:7F:AE:2E:56:76:11:0F
Certificate issuer:       /CN=a2d64b47b5cacdd0d5bdf71f43d98b51c97c74ab
Certificate serial:       0298
Authority key identifier: D9:9F:AA:DE:5A:B0:40:4C:86:75:7E:DC:E1:BF:48:EB:C6:0E:14:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2d64b47b5cacdd0d5bdf71f43d98b51c97c74ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c49c6dda-e288-4168-868a-e03fa75ce046/93b2aa1517731fee92074a09fb6436143e2e6aeb.roa
Signing time:             Sat 06 Nov 2021 22:37:19 +0000
ROA not before:           Sat 06 Nov 2021 02:00:00 +0000
ROA not after:            Mon 06 Nov 2023 02:00:00 +0000
asID:                     265587
IP address blocks:        45.175.236.0/22 maxlen: 22
                          2806:33c::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d64b47b5cacdd0d5bdf71f43d98b51c97c74ab
        Validity
            Not Before: Nov  6 02:00:00 2021 GMT
            Not After : Nov  6 02:00:00 2023 GMT
        Subject: CN=93b2aa1517731fee92074a09fb6436143e2e6aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3e:3b:46:94:f9:96:89:0f:40:cc:40:80:7f:
                    86:b1:c0:0d:fc:d6:37:7b:70:54:c8:4c:55:f8:38:
                    ee:9e:80:48:ac:12:7b:1a:62:fe:9e:fc:68:94:74:
                    9a:7f:df:c1:2d:51:6a:f4:81:dc:fb:22:e7:be:9b:
                    ff:f8:fd:42:6b:cd:98:88:1c:33:89:cc:f5:bf:58:
                    28:02:8a:f2:10:34:98:aa:72:46:06:b0:c5:a2:7a:
                    c6:87:36:b6:65:21:b8:1b:e4:d6:94:a5:ea:d8:8a:
                    fb:51:e2:fc:c9:2e:00:b0:82:05:ee:ba:eb:cc:c3:
                    79:34:a4:96:3e:8e:2e:34:7e:6c:bd:aa:33:af:1c:
                    27:97:86:e7:2d:3a:cf:1c:1a:a3:3c:c8:6a:db:19:
                    be:47:aa:de:20:07:6b:4e:cb:66:24:08:56:6c:13:
                    cb:80:55:84:3a:2a:ce:db:7d:8a:60:4f:26:07:ca:
                    ba:c4:8b:76:26:ab:2d:c9:75:ed:89:fa:79:6f:69:
                    69:b0:30:39:27:80:e5:ba:38:09:18:a4:b2:59:c2:
                    e8:da:69:de:db:1a:6c:55:84:1f:fb:42:0f:ef:6b:
                    2c:08:bd:e4:f9:99:5e:3a:01:19:c4:03:0f:ab:ac:
                    2d:af:19:f6:98:f3:02:07:b4:b2:66:85:bd:67:06:
                    20:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2E:7B:13:56:EB:8B:AC:86:EA:CF:06:BF:7F:AE:2E:56:76:11:0F
            X509v3 Authority Key Identifier:
                keyid:D9:9F:AA:DE:5A:B0:40:4C:86:75:7E:DC:E1:BF:48:EB:C6:0E:14:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2d64b47b5cacdd0d5bdf71f43d98b51c97c74ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c49c6dda-e288-4168-868a-e03fa75ce046/93b2aa1517731fee92074a09fb6436143e2e6aeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c49c6dda-e288-4168-868a-e03fa75ce046/a2d64b47b5cacdd0d5bdf71f43d98b51c97c74ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.236.0/22
                IPv6:
                  2806:33c::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:be:47:75:ff:07:45:2c:a6:12:dc:e5:c5:55:90:61:18:68:
         75:0a:e4:5e:f8:77:b2:77:92:d1:fa:39:b9:18:78:24:64:5a:
         1d:e9:06:26:fb:4e:c5:8d:29:e6:06:ef:e8:f8:a9:8e:23:e9:
         bd:fa:ed:fe:6d:47:70:ad:5d:d5:c7:8d:18:ec:8d:48:73:e7:
         9d:3e:07:1b:9c:68:bf:b6:77:cf:8d:b0:67:6f:31:21:cf:73:
         0b:1e:c2:60:b5:bc:79:0f:31:ba:1f:fb:aa:84:22:bb:4b:78:
         0a:4d:36:6f:b0:21:31:28:c9:d8:a6:df:70:0f:4e:a2:6a:6c:
         f9:d8:fc:df:54:df:a5:1e:03:ea:8c:18:e1:ed:f6:53:14:82:
         1f:d6:71:01:73:13:c8:45:80:0f:cc:4e:95:ce:8b:e7:a0:00:
         57:72:2a:dd:03:63:30:75:41:1a:6a:a0:34:6d:b4:ff:f5:c7:
         c6:19:ce:fd:66:43:1f:89:43:1a:7f:5a:00:52:9e:9c:40:76:
         22:57:8f:a7:0a:f0:8f:9d:5e:e9:1e:72:ea:96:d2:ca:b9:7d:
         ce:31:75:70:5d:f8:e2:17:06:78:61:bc:fa:9a:dd:40:d2:53:
         d6:dd:e5:54:de:93:4f:ca:81:12:12:dc:7a:56:a9:a9:dc:8e:
         84:8b:fa:fa
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICApgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYTJk
NjRiNDdiNWNhY2RkMGQ1YmRmNzFmNDNkOThiNTFjOTdjNzRhYjAeFw0yMTExMDYw
MjAwMDBaFw0yMzExMDYwMjAwMDBaMDMxMTAvBgNVBAMTKDkzYjJhYTE1MTc3MzFm
ZWU5MjA3NGEwOWZiNjQzNjE0M2UyZTZhZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCPPjtGlPmWiQ9AzECAf4axwA381jd7cFTITFX4OO6egEisEnsa
Yv6e/GiUdJp/38EtUWr0gdz7Iue+m//4/UJrzZiIHDOJzPW/WCgCivIQNJiqckYG
sMWiesaHNrZlIbgb5NaUperYivtR4vzJLgCwggXuuuvMw3k0pJY+ji40fmy9qjOv
HCeXhuctOs8cGqM8yGrbGb5Hqt4gB2tOy2YkCFZsE8uAVYQ6Ks7bfYpgTyYHyrrE
i3Ymqy3Jde2J+nlvaWmwMDkngOW6OAkYpLJZwujaad7bGmxVhB/7Qg/vaywIveT5
mV46ARnEAw+rrC2vGfaY8wIHtLJmhb1nBiCTAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUei57E1bri6yG6s8Gv3+uLlZ2EQ8wHwYDVR0jBBgwFoAU2Z+q3lqwQEyGdX7c
4b9I68YOFF0wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9hMmQ2NGI0
N2I1Y2FjZGQwZDViZGY3MWY0M2Q5OGI1MWM5N2M3NGFiLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9jNDljNmRkYS1lMjg4LTQxNjgtODY4YS1lMDNmYTc1
Y2UwNDYvOTNiMmFhMTUxNzczMWZlZTkyMDc0YTA5ZmI2NDM2MTQzZTJlNmFlYi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2M0OWM2ZGRhLWUyODgtNDE2OC04NjhhLWUwM2Zh
NzVjZTA0Ni9hMmQ2NGI0N2I1Y2FjZGQwZDViZGY3MWY0M2Q5OGI1MWM5N2M3NGFi
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCLa/sMA0EAgACMAcDBQAoBgM8MA0GCSqGSIb3DQEBCwUAA4IB
AQCGvkd1/wdFLKYS3OXFVZBhGGh1CuRe+Heyd5LR+jm5GHgkZFod6QYm+07FjSnm
Bu/o+KmOI+m9+u3+bUdwrV3Vx40Y7I1Ic+edPgcbnGi/tnfPjbBnbzEhz3MLHsJg
tbx5DzG6H/uqhCK7S3gKTTZvsCExKMnYpt9wD06iamz52PzfVN+lHgPqjBjh7fZT
FIIf1nEBcxPIRYAPzE6VzovnoABXcirdA2MwdUEaaqA0bbT/9cfGGc79ZkMfiUMa
f1oAUp6cQHYiV4+nCvCPnV7pHnLqltLKuX3OMXVwXfjiFwZ4Ybz6mt1A0lPW3eVU
3pNPyoESEtx6Vqmp3I6Ei/r6
-----END CERTIFICATE-----