Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cc7439fc-bb57-4ec2-99e3-b9d21c615697/6cefb088f0a0a2efe788002ccf49933310135743.roa
File:                     6cefb088f0a0a2efe788002ccf49933310135743.roa (raw, json)
Hash identifier:          Zu1EyTdxTQcRvajhnwkmyThunlXIH6aQeGNnrn6nmB4=
Subject key identifier:   28:CB:A2:22:5A:DF:3E:59:3C:72:64:38:4C:0C:49:BF:77:2B:A2:3A
Certificate issuer:       /CN=0f93bb3c007d18be5c8a08f924130cad8044105f
Certificate serial:       0D1914
Authority key identifier: 48:82:6B:AE:3A:84:9C:A3:B1:F6:DC:6A:A0:A1:C0:63:8F:08:ED:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f93bb3c007d18be5c8a08f924130cad8044105f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cc7439fc-bb57-4ec2-99e3-b9d21c615697/6cefb088f0a0a2efe788002ccf49933310135743.roa
Signing time:             Wed 24 Mar 2021 14:40:07 +0000
ROA not before:           Wed 24 Mar 2021 14:40:07 +0000
ROA not after:            Tue 24 Mar 2026 14:40:07 +0000
asID:                     264836
IP address blocks:        45.228.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858388 (0xd1914)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f93bb3c007d18be5c8a08f924130cad8044105f
        Validity
            Not Before: Mar 24 14:40:07 2021 GMT
            Not After : Mar 24 14:40:07 2026 GMT
        Subject: CN=6cefb088f0a0a2efe788002ccf49933310135743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f9:46:98:3e:f9:b0:f4:8d:cc:f1:f7:9c:0a:
                    dc:cf:11:e1:a7:3f:c4:79:af:03:aa:ed:27:b9:1e:
                    ee:1c:c4:54:d8:27:0d:cf:ca:65:98:62:4f:65:74:
                    26:97:ee:55:46:b3:b2:6b:af:37:1e:e8:9b:ec:3e:
                    2c:64:0e:a3:25:9d:9b:8a:9f:8b:36:2c:0b:a8:a6:
                    78:bf:5c:d7:fc:1f:2a:50:07:d8:55:69:44:bb:23:
                    13:d6:29:95:ed:ae:26:12:54:4e:75:67:64:42:30:
                    f3:8a:5f:04:a7:66:90:3d:88:fe:e2:64:b1:19:fc:
                    aa:ee:4a:54:77:4e:50:85:c5:c8:00:2f:a3:88:8a:
                    6a:20:b2:42:19:92:2f:5e:92:22:53:40:7f:5a:38:
                    62:8e:fa:2b:98:c2:79:00:f6:04:d7:c9:35:a2:fd:
                    89:4e:ec:85:4c:2f:da:f4:9c:38:65:74:d4:ba:2b:
                    2f:28:02:a2:a7:cc:b0:e4:03:73:25:d5:38:80:ce:
                    41:d7:e8:6c:99:b5:6a:f4:50:62:23:77:83:74:21:
                    19:c1:50:34:f8:f7:8b:a4:eb:07:a4:a9:d9:0f:61:
                    4f:54:d9:2f:17:9e:69:0b:07:3a:7f:ef:1f:b1:e7:
                    68:e8:46:38:ab:00:ec:27:13:51:9a:d4:7a:21:a1:
                    65:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CB:A2:22:5A:DF:3E:59:3C:72:64:38:4C:0C:49:BF:77:2B:A2:3A
            X509v3 Authority Key Identifier:
                keyid:48:82:6B:AE:3A:84:9C:A3:B1:F6:DC:6A:A0:A1:C0:63:8F:08:ED:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f93bb3c007d18be5c8a08f924130cad8044105f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cc7439fc-bb57-4ec2-99e3-b9d21c615697/6cefb088f0a0a2efe788002ccf49933310135743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cc7439fc-bb57-4ec2-99e3-b9d21c615697/0f93bb3c007d18be5c8a08f924130cad8044105f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:bd:59:7a:e6:be:46:f3:3a:48:28:0e:82:98:0b:c8:f3:c8:
         2a:b1:92:db:36:8f:89:c6:6c:50:07:67:75:c0:ef:ea:b0:f9:
         1a:98:90:47:c1:e5:9b:c2:44:f3:28:fc:fe:bc:f0:40:86:96:
         c8:7a:8f:9b:95:d6:81:c0:f4:18:1c:2c:dd:5d:02:c3:3c:02:
         94:56:e5:c2:6e:80:f5:a8:31:3c:78:2f:d0:3f:ca:a4:6a:2a:
         2a:26:82:57:0a:76:cb:71:2e:98:70:5a:c0:01:e5:0b:7f:e2:
         ca:98:26:cc:c7:63:5a:51:c7:94:92:85:50:30:49:da:e5:ba:
         42:e0:c3:6d:2a:57:9a:df:3a:10:24:2c:db:49:6b:3a:7e:0a:
         08:0b:42:e0:a3:83:2f:0c:fb:3a:82:e2:3c:8e:db:eb:15:54:
         4d:27:87:ad:b9:e8:c7:c7:73:1e:ce:e9:b1:0e:d2:b4:ed:b0:
         6a:67:70:a8:ff:df:52:d3:7c:64:68:90:c2:c2:3d:41:2c:bb:
         65:41:40:4e:c1:47:10:11:f8:7d:82:8d:c0:b9:cd:25:cb:1f:
         25:4f:b3:80:c6:40:00:c0:28:fa:60:e7:fb:06:b4:92:46:6e:
         f0:ae:7d:3c:08:44:b5:bf:19:36:5a:dd:0b:ac:89:6c:c8:d2:
         5e:23:eb:c7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDRkUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBm
OTNiYjNjMDA3ZDE4YmU1YzhhMDhmOTI0MTMwY2FkODA0NDEwNWYwHhcNMjEwMzI0
MTQ0MDA3WhcNMjYwMzI0MTQ0MDA3WjAzMTEwLwYDVQQDEyg2Y2VmYjA4OGYwYTBh
MmVmZTc4ODAwMmNjZjQ5OTMzMzEwMTM1NzQzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoflGmD75sPSNzPH3nArczxHhpz/Eea8Dqu0nuR7uHMRU2CcN
z8plmGJPZXQml+5VRrOya683Huib7D4sZA6jJZ2bip+LNiwLqKZ4v1zX/B8qUAfY
VWlEuyMT1imV7a4mElROdWdkQjDzil8Ep2aQPYj+4mSxGfyq7kpUd05QhcXIAC+j
iIpqILJCGZIvXpIiU0B/WjhijvormMJ5APYE18k1ov2JTuyFTC/a9Jw4ZXTUuisv
KAKip8yw5ANzJdU4gM5B1+hsmbVq9FBiI3eDdCEZwVA0+PeLpOsHpKnZD2FPVNkv
F55pCwc6f+8fsedo6EY4qwDsJxNRmtR6IaFlgQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCjLoiJa3z5ZPHJkOEwMSb93K6I6MB8GA1UdIwQYMBaAFEiCa646hJyjsfbc
aqChwGOPCO3iMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGY5M2Ji
M2MwMDdkMThiZTVjOGEwOGY5MjQxMzBjYWQ4MDQ0MTA1Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2M3NDM5ZmMtYmI1Ny00ZWMyLTk5ZTMtYjlkMjFj
NjE1Njk3LzZjZWZiMDg4ZjBhMGEyZWZlNzg4MDAyY2NmNDk5MzMzMTAxMzU3NDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jYzc0MzlmYy1iYjU3LTRlYzItOTllMy1iOWQy
MWM2MTU2OTcvMGY5M2JiM2MwMDdkMThiZTVjOGEwOGY5MjQxMzBjYWQ4MDQ0MTA1
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3ktDANBgkqhkiG9w0BAQsFAAOCAQEAaL1Zeua+RvM6SCgO
gpgLyPPIKrGS2zaPicZsUAdndcDv6rD5GpiQR8Hlm8JE8yj8/rzwQIaWyHqPm5XW
gcD0GBws3V0CwzwClFblwm6A9agxPHgv0D/KpGoqKiaCVwp2y3EumHBawAHlC3/i
ypgmzMdjWlHHlJKFUDBJ2uW6QuDDbSpXmt86ECQs20lrOn4KCAtC4KODLwz7OoLi
PI7b6xVUTSeHrbnox8dzHs7psQ7StO2wamdwqP/fUtN8ZGiQwsI9QSy7ZUFATsFH
EBH4fYKNwLnNJcsfJU+zgMZAAMAo+mDn+wa0kkZu8K59PAhEtb8ZNlrdC6yJbMjS
XiPrxw==
-----END CERTIFICATE-----