Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/907268b203df8c0bb78625c47aa6760c3536db85.roa
File:                     907268b203df8c0bb78625c47aa6760c3536db85.roa (raw, json)
Hash identifier:          nih0aaGKgrjBPg5f9U8Euxvp8jH8Y3n2Ug2JMa9TveA=
Subject key identifier:   3F:C4:E9:4F:B9:6D:76:6D:D4:A6:65:E5:8B:93:09:94:02:8F:05:A3
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       0E05BD
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/907268b203df8c0bb78625c47aa6760c3536db85.roa
Signing time:             Wed 24 Mar 2021 14:32:25 +0000
ROA not before:           Wed 24 Mar 2021 14:32:25 +0000
ROA not after:            Tue 24 Mar 2026 14:32:25 +0000
asID:                     264764
IP address blocks:        181.199.212.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918973 (0xe05bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Mar 24 14:32:25 2021 GMT
            Not After : Mar 24 14:32:25 2026 GMT
        Subject: CN=907268b203df8c0bb78625c47aa6760c3536db85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:15:a6:82:3f:39:71:25:56:e9:de:6b:45:e1:
                    07:2a:01:c8:2f:0a:b7:78:74:b7:d2:8c:4e:1b:c7:
                    a8:b4:ea:37:54:fa:90:66:38:19:cf:d0:d2:16:24:
                    d8:ae:43:15:54:99:18:58:b0:01:5d:99:d4:3c:7a:
                    57:a4:16:35:b8:c1:64:ec:96:bb:e4:88:b8:b7:48:
                    9f:b6:0a:d5:b9:a5:25:88:9c:f2:b1:dd:5e:de:cc:
                    06:b8:57:4a:98:ff:bb:86:63:d1:14:4d:76:b0:8b:
                    a2:ec:ce:62:4f:df:c6:96:ed:de:ab:61:81:40:43:
                    43:bc:d7:38:13:28:4f:b6:c6:38:11:9d:e7:a4:d3:
                    be:d8:b9:5f:84:98:bc:3d:60:2e:cc:0a:6b:fe:9c:
                    84:11:6e:aa:ce:57:c8:73:ae:b3:01:49:89:d3:b5:
                    23:61:fd:67:ca:a3:41:a1:43:19:68:07:32:85:93:
                    5e:7a:81:25:30:f7:b4:1d:0c:3c:4f:ca:be:77:7b:
                    0b:86:08:19:f6:d1:35:75:61:6a:37:7c:bb:ae:5f:
                    5b:ac:0b:32:ff:c1:95:a2:f3:7a:fc:4d:9f:ee:bb:
                    5d:73:be:94:fa:86:7e:f7:af:45:8c:d8:1a:c7:41:
                    b1:e8:1b:73:3e:b5:a3:44:fa:ab:7a:b9:fd:ea:6f:
                    24:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C4:E9:4F:B9:6D:76:6D:D4:A6:65:E5:8B:93:09:94:02:8F:05:A3
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/907268b203df8c0bb78625c47aa6760c3536db85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:56:a6:0e:2c:e6:8a:8e:1a:af:df:5a:07:54:e7:f9:20:ce:
         46:a4:f5:ae:8f:25:f5:85:6d:76:47:48:2b:35:0c:db:dd:45:
         fa:bc:22:f3:bd:a3:f4:bf:a1:e0:0e:1c:1e:49:b6:8f:90:6a:
         84:d0:00:8f:8c:33:ca:4b:cb:9c:09:2a:93:58:a0:76:fb:61:
         97:dc:fa:81:cc:23:86:a1:41:10:73:23:e6:fe:b0:07:1d:05:
         aa:ed:43:e2:44:34:b1:ae:02:9c:41:9a:88:f1:87:b0:16:eb:
         fc:69:97:e5:67:ed:49:68:9d:f2:6f:8e:a4:ca:90:c2:e0:39:
         ff:be:61:ed:b8:2a:d2:17:7e:00:60:da:5f:fe:06:45:4f:de:
         3a:5a:7d:f3:34:77:75:0d:7f:65:2d:56:8a:70:ee:a4:a0:f3:
         04:88:87:10:1e:38:86:f8:a6:f7:29:34:79:c9:13:38:56:a4:
         63:9e:76:22:30:1d:91:31:02:78:d5:4d:91:f0:ce:58:b7:42:
         4d:73:a2:e9:58:58:e8:0c:78:bf:e0:06:6c:06:ab:66:2b:2d:
         cd:d3:78:78:c3:cd:7e:a3:96:7e:03:ab:ec:ce:bc:22:63:e1:
         c1:21:a4:00:af:c3:ca:eb:20:2e:9b:52:c2:4c:5f:31:3c:1f:
         1d:a4:00:3a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDgW9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
Mjg1M2NjODVjMWU1NWM2NWU3NjMyOTliYTA4ODk0ZjhjZThkNTEwHhcNMjEwMzI0
MTQzMjI1WhcNMjYwMzI0MTQzMjI1WjAzMTEwLwYDVQQDEyg5MDcyNjhiMjAzZGY4
YzBiYjc4NjI1YzQ3YWE2NzYwYzM1MzZkYjg1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmBWmgj85cSVW6d5rReEHKgHILwq3eHS30oxOG8eotOo3VPqQ
ZjgZz9DSFiTYrkMVVJkYWLABXZnUPHpXpBY1uMFk7Ja75Ii4t0iftgrVuaUliJzy
sd1e3swGuFdKmP+7hmPRFE12sIui7M5iT9/Glu3eq2GBQENDvNc4EyhPtsY4EZ3n
pNO+2LlfhJi8PWAuzApr/pyEEW6qzlfIc66zAUmJ07UjYf1nyqNBoUMZaAcyhZNe
eoElMPe0HQw8T8q+d3sLhggZ9tE1dWFqN3y7rl9brAsy/8GVovN6/E2f7rtdc76U
+oZ+969FjNgax0Gx6BtzPrWjRPqrern96m8kkQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFD/E6U+5bXZt1KZl5YuTCZQCjwWjMB8GA1UdIwQYMBaAFI1zxHehMa1tUWdm
3vRyzC5gSH+tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2YyODUz
Y2M4NWMxZTU1YzY1ZTc2MzI5OWJhMDg4OTRmOGNlOGQ1MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDZmMjFhOGMtM2E3MS00N2E3LTlmNmUtYzliNDQx
NDI3ZmNkLzkwNzI2OGIyMDNkZjhjMGJiNzg2MjVjNDdhYTY3NjBjMzUzNmRiODUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNmYyMWE4Yy0zYTcxLTQ3YTctOWY2ZS1jOWI0
NDE0MjdmY2QvY2YyODUzY2M4NWMxZTU1YzY1ZTc2MzI5OWJhMDg4OTRmOGNlOGQ1
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAbXH1DANBgkqhkiG9w0BAQsFAAOCAQEAC1amDizmio4ar99a
B1Tn+SDORqT1ro8l9YVtdkdIKzUM291F+rwi872j9L+h4A4cHkm2j5BqhNAAj4wz
ykvLnAkqk1igdvthl9z6gcwjhqFBEHMj5v6wBx0Fqu1D4kQ0sa4CnEGaiPGHsBbr
/GmX5WftSWid8m+OpMqQwuA5/75h7bgq0hd+AGDaX/4GRU/eOlp98zR3dQ1/ZS1W
inDupKDzBIiHEB44hvim9yk0eckTOFakY552IjAdkTECeNVNkfDOWLdCTXOi6VhY
6Ax4v+AGbAarZistzdN4eMPNfqOWfgOr7M68ImPhwSGkAK/DyusgLptSwkxfMTwf
HaQAOg==
-----END CERTIFICATE-----