Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/991e80e3aac697f24c06c10b40b4a1009557aa63.roa
File:                     991e80e3aac697f24c06c10b40b4a1009557aa63.roa (raw, json)
Hash identifier:          w1cxTPZlXOSw/B5ts4Ncp2kOQxgINXXABvqhlYzsGwY=
Subject key identifier:   DA:36:D7:46:47:BC:07:3D:C7:13:44:93:34:D8:AB:4B:5E:79:76:E1
Certificate issuer:       /CN=8634873a21a0af40a01354647ad4978d3847d365
Certificate serial:       0D8C87
Authority key identifier: 0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/991e80e3aac697f24c06c10b40b4a1009557aa63.roa
Signing time:             Wed 24 Mar 2021 14:41:00 +0000
ROA not before:           Wed 24 Mar 2021 14:40:58 +0000
ROA not after:            Tue 24 Mar 2026 14:40:58 +0000
asID:                     28058
IP address blocks:        179.60.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887943 (0xd8c87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8634873a21a0af40a01354647ad4978d3847d365
        Validity
            Not Before: Mar 24 14:40:58 2021 GMT
            Not After : Mar 24 14:40:58 2026 GMT
        Subject: CN=991e80e3aac697f24c06c10b40b4a1009557aa63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:69:24:ac:45:12:5a:ca:fe:23:bb:88:30:f4:
                    a1:6b:89:3d:af:df:43:ca:aa:e7:7f:78:bf:8a:49:
                    e7:16:95:13:00:f6:45:0b:53:82:c0:0b:0d:33:69:
                    be:4b:47:ad:2b:54:70:4b:c4:35:95:83:22:89:81:
                    79:6d:08:d7:9b:25:6f:28:00:a5:4d:a0:1d:81:75:
                    f0:0f:26:8a:9e:69:ea:36:1f:ca:5c:50:8f:69:37:
                    59:c7:7c:36:ef:7a:9e:14:b0:83:8f:eb:a6:96:d7:
                    98:71:8f:ea:66:40:37:59:7e:8d:b5:ac:61:20:cf:
                    d1:75:e2:19:03:37:42:0e:43:d8:20:8e:73:9b:2f:
                    23:af:e5:fd:ac:c3:31:1d:65:12:69:15:40:05:27:
                    d9:bf:33:68:20:69:8d:01:9e:40:18:5f:89:af:04:
                    d0:50:2e:94:2f:a9:e0:fc:39:72:4b:c9:94:43:2e:
                    2b:06:4e:07:a4:b9:0d:6c:ac:f9:b2:8b:83:54:3c:
                    c5:54:62:b9:27:2d:83:95:7e:44:73:fa:89:65:4f:
                    18:9d:0f:dc:ac:24:72:ac:09:aa:d2:34:cd:9d:bc:
                    16:17:6d:7f:40:d7:39:19:d0:9d:a3:73:d9:3c:f5:
                    8e:8f:45:da:b3:ba:4f:cd:81:9e:63:f7:b3:78:98:
                    ff:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:36:D7:46:47:BC:07:3D:C7:13:44:93:34:D8:AB:4B:5E:79:76:E1
            X509v3 Authority Key Identifier:
                keyid:0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/991e80e3aac697f24c06c10b40b4a1009557aa63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/8634873a21a0af40a01354647ad4978d3847d365.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:e1:da:31:20:ee:60:fa:6c:0d:95:42:18:c1:ee:e1:ad:c8:
         4a:44:db:53:cd:51:03:fb:c5:87:a3:ce:23:dc:e2:50:dd:d1:
         d3:74:96:19:78:3e:f0:46:ae:c2:75:db:53:fc:75:b0:c9:a1:
         7d:65:a5:b3:96:94:44:2b:c6:7c:1a:02:f3:18:4d:e6:c9:d3:
         a9:69:83:a5:cc:07:f9:65:ad:23:0a:89:14:e6:19:a6:56:d6:
         33:86:14:9e:14:0f:04:f2:69:3c:6b:7f:86:d6:79:88:7d:79:
         26:71:02:f3:ff:57:bd:1d:9e:96:a7:94:db:d8:9c:51:a1:09:
         93:02:37:53:e5:89:1c:f7:06:c7:cd:9d:1a:44:4e:b5:6a:8c:
         9b:3b:7d:39:e8:a3:06:8c:98:b0:ea:8f:0f:77:43:35:ab:91:
         4e:9f:f6:4e:24:f9:a8:5b:95:42:ee:80:9f:5a:e7:ef:b1:fb:
         27:53:a1:b8:6d:82:7a:a3:e5:62:61:96:4b:81:87:2f:a7:3a:
         62:d8:eb:83:7a:b4:86:7d:31:37:3a:a2:c5:08:2d:45:fc:d3:
         99:48:37:73:8a:ae:b3:7f:89:84:3e:b5:6d:e5:d9:b8:0c:20:
         44:ff:b8:fe:a6:90:b3:65:6e:7b:3e:15:c7:98:81:50:27:88:
         f7:3a:03:77
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDYyHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg2
MzQ4NzNhMjFhMGFmNDBhMDEzNTQ2NDdhZDQ5NzhkMzg0N2QzNjUwHhcNMjEwMzI0
MTQ0MDU4WhcNMjYwMzI0MTQ0MDU4WjAzMTEwLwYDVQQDEyg5OTFlODBlM2FhYzY5
N2YyNGMwNmMxMGI0MGI0YTEwMDk1NTdhYTYzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtGkkrEUSWsr+I7uIMPSha4k9r99Dyqrnf3i/iknnFpUTAPZF
C1OCwAsNM2m+S0etK1RwS8Q1lYMiiYF5bQjXmyVvKAClTaAdgXXwDyaKnmnqNh/K
XFCPaTdZx3w273qeFLCDj+umlteYcY/qZkA3WX6NtaxhIM/RdeIZAzdCDkPYII5z
my8jr+X9rMMxHWUSaRVABSfZvzNoIGmNAZ5AGF+JrwTQUC6UL6ng/DlyS8mUQy4r
Bk4HpLkNbKz5souDVDzFVGK5Jy2DlX5Ec/qJZU8YnQ/crCRyrAmq0jTNnbwWF21/
QNc5GdCdo3PZPPWOj0Xas7pPzYGeY/ezeJj/6QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNo210ZHvAc9xxNEkzTYq0teeXbhMB8GA1UdIwQYMBaAFA71kgJl0auTUq5P
vH+jJzRsaL9AMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODYzNDg3
M2EyMWEwYWY0MGEwMTM1NDY0N2FkNDk3OGQzODQ3ZDM2NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDI0NTg1YTQtYzc2Ni00NTA5LWEzNWEtMDI2ZjM4
MzY0YWVkLzk5MWU4MGUzYWFjNjk3ZjI0YzA2YzEwYjQwYjRhMTAwOTU1N2FhNjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kMjQ1ODVhNC1jNzY2LTQ1MDktYTM1YS0wMjZm
MzgzNjRhZWQvODYzNDg3M2EyMWEwYWY0MGEwMTM1NDY0N2FkNDk3OGQzODQ3ZDM2
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALM8MjANBgkqhkiG9w0BAQsFAAOCAQEAM+HaMSDuYPpsDZVC
GMHu4a3ISkTbU81RA/vFh6POI9ziUN3R03SWGXg+8EauwnXbU/x1sMmhfWWls5aU
RCvGfBoC8xhN5snTqWmDpcwH+WWtIwqJFOYZplbWM4YUnhQPBPJpPGt/htZ5iH15
JnEC8/9XvR2elqeU29icUaEJkwI3U+WJHPcGx82dGkROtWqMmzt9OeijBoyYsOqP
D3dDNauRTp/2TiT5qFuVQu6An1rn77H7J1OhuG2CeqPlYmGWS4GHL6c6Ytjrg3q0
hn0xNzqixQgtRfzTmUg3c4qus3+JhD61beXZuAwgRP+4/qaQs2Vuez4Vx5iBUCeI
9zoDdw==
-----END CERTIFICATE-----