Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/14b2b2de5d1e0225461989730c2bed82827b81df.roa
File:                     14b2b2de5d1e0225461989730c2bed82827b81df.roa (raw, json)
Hash identifier:          qPI3ZHVgCzfBPYqvTgtXz3yuQNjYKbXUYXPmOAwZEVY=
Subject key identifier:   78:29:69:1D:C4:39:25:D1:52:ED:EC:84:DA:C8:89:8A:7C:DD:16:61
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       0DFDB5
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/14b2b2de5d1e0225461989730c2bed82827b81df.roa
Signing time:             Wed 24 Mar 2021 14:32:25 +0000
ROA not before:           Wed 24 Mar 2021 14:32:25 +0000
ROA not after:            Tue 24 Mar 2026 14:32:25 +0000
asID:                     28036
IP address blocks:        190.98.136.0/24 maxlen: 24
                          190.98.137.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916917 (0xdfdb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Mar 24 14:32:25 2021 GMT
            Not After : Mar 24 14:32:25 2026 GMT
        Subject: CN=14b2b2de5d1e0225461989730c2bed82827b81df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:53:59:d5:40:ea:cb:95:a2:d6:40:ef:66:86:
                    03:e8:d7:79:7b:44:5e:40:18:b1:cd:5e:09:b9:4d:
                    9a:18:01:ec:23:15:78:94:21:7b:b6:e1:de:f8:8b:
                    1d:7d:10:57:16:bd:f9:55:79:c4:c4:14:da:de:23:
                    18:76:74:25:02:d6:8b:b9:4c:ad:cf:62:0f:e4:41:
                    94:94:84:9d:13:6f:cf:12:28:a2:02:3d:99:e1:05:
                    7e:14:0d:f3:b5:b8:5a:9f:5c:0c:af:39:21:63:a7:
                    cd:f2:85:1e:69:2e:71:ec:20:0c:df:b4:0f:43:e2:
                    e1:2a:aa:6c:92:08:86:ca:0e:73:6f:f0:c7:43:b4:
                    6a:88:88:11:df:20:8f:11:7b:57:ac:2f:0c:26:1d:
                    a2:b6:4b:b9:79:62:f6:0d:ce:e3:a8:06:ef:c3:0b:
                    88:c6:7a:dd:f2:32:20:20:3b:5c:44:02:fc:59:46:
                    5b:2e:02:7e:86:ab:5e:fe:28:a0:d7:8d:9f:ba:49:
                    4b:69:a3:e5:89:80:9d:07:f8:01:69:49:4b:c9:f5:
                    38:b3:06:01:0c:24:55:2a:39:1f:49:41:5a:8d:90:
                    23:55:5f:ae:a7:0d:62:26:9c:8e:93:d1:b1:ba:b6:
                    f6:8f:70:07:56:f4:58:6a:34:f1:ec:b0:eb:d6:26:
                    13:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:29:69:1D:C4:39:25:D1:52:ED:EC:84:DA:C8:89:8A:7C:DD:16:61
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/14b2b2de5d1e0225461989730c2bed82827b81df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:b7:91:a6:7b:dc:1a:1e:b9:b1:16:1b:71:aa:07:36:3d:03:
         71:22:99:52:27:34:15:81:2c:31:b4:ac:0d:ca:f1:36:d6:c3:
         85:63:10:1f:db:69:bd:7f:eb:6c:0c:1d:24:bd:ba:d0:61:1b:
         12:d6:4e:cb:87:81:28:dd:fa:5e:55:b6:05:6f:48:b4:ed:70:
         3b:9a:74:f7:1a:40:ea:53:79:39:2e:05:40:96:0c:12:e3:b2:
         2b:0d:0e:d4:7b:05:7c:f9:1e:61:a9:3e:b4:25:eb:0c:82:63:
         c4:7f:5f:77:75:b7:c3:d9:56:36:33:e7:5e:8b:c9:9a:15:03:
         86:1d:48:76:09:41:2b:e0:87:62:84:fb:fd:93:56:e1:aa:31:
         36:27:5c:e6:68:6d:df:08:82:0c:8b:8f:bf:6e:13:9d:89:79:
         22:51:a1:f2:5f:70:16:f3:f7:dd:03:dd:58:7b:04:99:15:47:
         8b:f9:6b:b3:e1:bf:c2:2a:da:81:0d:c5:98:b6:bb:66:9c:a1:
         bc:5c:e4:83:b0:58:71:d7:b8:c9:41:3b:f5:b6:5b:e8:be:9d:
         51:59:95:99:3c:58:71:b6:18:16:67:55:25:95:f0:9b:af:6d:
         28:86:8c:1c:df:90:c5:b5:63:e6:7a:3c:2c:cc:aa:38:2a:87:
         34:e8:3d:3e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDf21MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
Mjg1M2NjODVjMWU1NWM2NWU3NjMyOTliYTA4ODk0ZjhjZThkNTEwHhcNMjEwMzI0
MTQzMjI1WhcNMjYwMzI0MTQzMjI1WjAzMTEwLwYDVQQDEygxNGIyYjJkZTVkMWUw
MjI1NDYxOTg5NzMwYzJiZWQ4MjgyN2I4MWRmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1VNZ1UDqy5Wi1kDvZoYD6Nd5e0ReQBixzV4JuU2aGAHsIxV4
lCF7tuHe+IsdfRBXFr35VXnExBTa3iMYdnQlAtaLuUytz2IP5EGUlISdE2/PEiii
Aj2Z4QV+FA3ztbhan1wMrzkhY6fN8oUeaS5x7CAM37QPQ+LhKqpskgiGyg5zb/DH
Q7RqiIgR3yCPEXtXrC8MJh2itku5eWL2Dc7jqAbvwwuIxnrd8jIgIDtcRAL8WUZb
LgJ+hqte/iig142fuklLaaPliYCdB/gBaUlLyfU4swYBDCRVKjkfSUFajZAjVV+u
pw1iJpyOk9Gxurb2j3AHVvRYajTx7LDr1iYTowIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHgpaR3EOSXRUu3shNrIiYp83RZhMB8GA1UdIwQYMBaAFI1zxHehMa1tUWdm
3vRyzC5gSH+tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2YyODUz
Y2M4NWMxZTU1YzY1ZTc2MzI5OWJhMDg4OTRmOGNlOGQ1MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDZmMjFhOGMtM2E3MS00N2E3LTlmNmUtYzliNDQx
NDI3ZmNkLzE0YjJiMmRlNWQxZTAyMjU0NjE5ODk3MzBjMmJlZDgyODI3YjgxZGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNmYyMWE4Yy0zYTcxLTQ3YTctOWY2ZS1jOWI0
NDE0MjdmY2QvY2YyODUzY2M4NWMxZTU1YzY1ZTc2MzI5OWJhMDg4OTRmOGNlOGQ1
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAb5iiDANBgkqhkiG9w0BAQsFAAOCAQEAZreRpnvcGh65sRYb
caoHNj0DcSKZUic0FYEsMbSsDcrxNtbDhWMQH9tpvX/rbAwdJL260GEbEtZOy4eB
KN36XlW2BW9ItO1wO5p09xpA6lN5OS4FQJYMEuOyKw0O1HsFfPkeYak+tCXrDIJj
xH9fd3W3w9lWNjPnXovJmhUDhh1IdglBK+CHYoT7/ZNW4aoxNidc5mht3wiCDIuP
v24TnYl5IlGh8l9wFvP33QPdWHsEmRVHi/lrs+G/wiragQ3FmLa7ZpyhvFzkg7BY
cde4yUE79bZb6L6dUVmVmTxYcbYYFmdVJZXwm69tKIaMHN+QxbVj5no8LMyqOCqH
NOg9Pg==
-----END CERTIFICATE-----