Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d1924e84-a65e-4c83-8d93-111b3bd4f606/5aa45fb93c36ffe6f7f1761dc8428d6fd733a8af.roa
File:                     5aa45fb93c36ffe6f7f1761dc8428d6fd733a8af.roa (raw, json)
Hash identifier:          vukpmjOhpsbGsd8axfzO5+rOod1Gsrba9Yh4dqREU5Q=
Subject key identifier:   F4:0C:79:81:28:2A:15:87:34:16:CF:1B:E5:80:DA:A0:7E:23:16:41
Certificate issuer:       /CN=da8b9d0a8b3007b4981a95a764326193703dd137
Certificate serial:       093DB1
Authority key identifier: 57:2B:27:8A:BE:28:DA:2D:48:76:71:F0:24:E5:95:9D:96:97:9D:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da8b9d0a8b3007b4981a95a764326193703dd137.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d1924e84-a65e-4c83-8d93-111b3bd4f606/5aa45fb93c36ffe6f7f1761dc8428d6fd733a8af.roa
Signing time:             Wed 24 Mar 2021 14:42:38 +0000
ROA not before:           Wed 24 Mar 2021 14:42:38 +0000
ROA not after:            Tue 24 Mar 2026 14:42:38 +0000
asID:                     52468
IP address blocks:        45.190.184.0/22 maxlen: 24
                          2803:48e0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605617 (0x93db1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da8b9d0a8b3007b4981a95a764326193703dd137
        Validity
            Not Before: Mar 24 14:42:38 2021 GMT
            Not After : Mar 24 14:42:38 2026 GMT
        Subject: CN=5aa45fb93c36ffe6f7f1761dc8428d6fd733a8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1d:17:24:71:a7:52:df:0d:d1:d2:fc:b9:63:
                    aa:01:de:08:f8:51:9f:54:cd:95:32:5a:36:98:2a:
                    cc:8b:80:5f:80:29:48:d4:09:fa:96:c4:e3:93:89:
                    ba:48:90:e9:06:dd:1a:72:50:2a:65:4f:8d:f7:bb:
                    36:92:b0:bd:e8:2b:04:63:af:c1:0a:0a:7a:3e:33:
                    a7:c7:82:83:28:b3:10:08:c7:2e:82:d6:c0:67:92:
                    88:84:f6:bc:25:04:c9:fa:4a:64:b2:92:cc:3b:39:
                    77:5e:2d:c6:61:7c:65:a7:cc:d6:9e:ed:7e:59:54:
                    98:40:4f:6a:82:f3:35:2b:93:43:b4:4b:8e:b1:9a:
                    c0:f9:a9:ec:38:19:6f:2a:b1:cf:42:ec:0c:35:82:
                    85:ba:a2:68:b0:78:b3:51:ae:e9:56:83:b8:c1:b7:
                    62:32:71:b9:36:3d:28:da:30:04:01:3b:ee:3a:14:
                    6d:7e:4c:d2:a6:0e:e6:4d:56:d6:e2:ca:45:65:6e:
                    83:4a:98:d9:4a:42:51:37:75:e8:3d:e2:e0:70:72:
                    0a:4d:53:7f:0a:57:f4:b4:8d:bf:68:6c:f5:19:fe:
                    f0:4b:2f:00:e9:80:ba:82:23:09:3f:9c:41:77:96:
                    f8:66:36:e6:97:b2:16:ae:a9:67:fd:e2:a2:1f:1b:
                    45:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0C:79:81:28:2A:15:87:34:16:CF:1B:E5:80:DA:A0:7E:23:16:41
            X509v3 Authority Key Identifier:
                keyid:57:2B:27:8A:BE:28:DA:2D:48:76:71:F0:24:E5:95:9D:96:97:9D:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da8b9d0a8b3007b4981a95a764326193703dd137.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d1924e84-a65e-4c83-8d93-111b3bd4f606/5aa45fb93c36ffe6f7f1761dc8428d6fd733a8af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d1924e84-a65e-4c83-8d93-111b3bd4f606/da8b9d0a8b3007b4981a95a764326193703dd137.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.184.0/22
                IPv6:
                  2803:48e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:f5:03:e4:9b:45:8d:d7:b1:0c:90:47:89:8d:af:b3:72:96:
         b1:83:22:ef:88:d8:0f:a7:29:07:46:7c:22:02:cc:68:a6:61:
         94:f0:11:8c:27:17:c1:fe:98:66:d1:d1:76:78:50:0f:15:02:
         24:b4:e9:e7:b4:b3:1d:d2:7a:71:30:07:c0:63:41:08:cf:58:
         e3:ed:01:ca:d4:d4:8b:b8:28:3f:49:ef:b3:bd:aa:60:30:b8:
         29:e4:7c:41:c0:bf:e6:2a:e5:34:95:5f:8a:da:7e:06:22:6c:
         40:21:d0:33:2f:23:07:fa:f6:dc:91:2d:ea:dc:33:11:98:93:
         42:02:69:0b:ad:6f:2c:a5:0d:62:eb:4d:59:c6:7d:be:e1:f3:
         1e:6b:6c:6e:e0:50:43:36:1a:5f:6a:25:39:2e:33:5c:db:07:
         b1:71:d0:cb:f9:6f:d8:98:1c:b9:c3:ce:1e:54:3d:5c:2f:8f:
         5a:51:e3:ae:26:8e:45:90:50:c9:a2:65:9e:0f:24:2a:cd:84:
         14:e2:60:15:01:ff:2b:cd:47:fa:3e:35:0e:36:fb:f9:b1:e9:
         f9:c6:11:53:a3:94:af:f7:5f:14:e2:56:6d:a1:14:61:ef:25:
         1a:5f:68:1c:41:65:d8:b2:d8:aa:27:78:1c:ae:6b:68:2f:91:
         e2:7b:db:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDCT2xMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRh
OGI5ZDBhOGIzMDA3YjQ5ODFhOTVhNzY0MzI2MTkzNzAzZGQxMzcwHhcNMjEwMzI0
MTQ0MjM4WhcNMjYwMzI0MTQ0MjM4WjAzMTEwLwYDVQQDEyg1YWE0NWZiOTNjMzZm
ZmU2ZjdmMTc2MWRjODQyOGQ2ZmQ3MzNhOGFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuh0XJHGnUt8N0dL8uWOqAd4I+FGfVM2VMlo2mCrMi4BfgClI
1An6lsTjk4m6SJDpBt0aclAqZU+N97s2krC96CsEY6/BCgp6PjOnx4KDKLMQCMcu
gtbAZ5KIhPa8JQTJ+kpkspLMOzl3Xi3GYXxlp8zWnu1+WVSYQE9qgvM1K5NDtEuO
sZrA+ansOBlvKrHPQuwMNYKFuqJosHizUa7pVoO4wbdiMnG5Nj0o2jAEATvuOhRt
fkzSpg7mTVbW4spFZW6DSpjZSkJRN3XoPeLgcHIKTVN/Clf0tI2/aGz1Gf7wSy8A
6YC6giMJP5xBd5b4Zjbml7IWrqln/eKiHxtF9QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFPQMeYEoKhWHNBbPG+WA2qB+IxZBMB8GA1UdIwQYMBaAFFcrJ4q+KNotSHZx
8CTllZ2Wl52EMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGE4Yjlk
MGE4YjMwMDdiNDk4MWE5NWE3NjQzMjYxOTM3MDNkZDEzNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDE5MjRlODQtYTY1ZS00YzgzLThkOTMtMTExYjNi
ZDRmNjA2LzVhYTQ1ZmI5M2MzNmZmZTZmN2YxNzYxZGM4NDI4ZDZmZDczM2E4YWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kMTkyNGU4NC1hNjVlLTRjODMtOGQ5My0xMTFi
M2JkNGY2MDYvZGE4YjlkMGE4YjMwMDdiNDk4MWE5NWE3NjQzMjYxOTM3MDNkZDEz
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2+uDANBAIAAjAHAwUAKANI4DANBgkqhkiG9w0BAQsFAAOC
AQEAdPUD5JtFjdexDJBHiY2vs3KWsYMi74jYD6cpB0Z8IgLMaKZhlPARjCcXwf6Y
ZtHRdnhQDxUCJLTp57SzHdJ6cTAHwGNBCM9Y4+0BytTUi7goP0nvs72qYDC4KeR8
QcC/5irlNJVfitp+BiJsQCHQMy8jB/r23JEt6twzEZiTQgJpC61vLKUNYutNWcZ9
vuHzHmtsbuBQQzYaX2olOS4zXNsHsXHQy/lv2JgcucPOHlQ9XC+PWlHjriaORZBQ
yaJlng8kKs2EFOJgFQH/K81H+j41Djb7+bHp+cYRU6OUr/dfFOJWbaEUYe8lGl9o
HEFl2LLYqid4HK5raC+R4nvbsQ==
-----END CERTIFICATE-----