Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db5cdd6a-67a3-4b10-8d9e-5777c3d5c523/a997e212bd3747bcc2be5c237ae140e7c7a076a9.roa
File:                     a997e212bd3747bcc2be5c237ae140e7c7a076a9.roa (raw, json)
Hash identifier:          6a27+EKKpLEHzkf6ifO40jjuqtePpYBLsKxVRSlZnFE=
Subject key identifier:   2B:2B:A4:80:EF:59:C9:53:C0:07:51:C6:E0:32:AC:4F:36:FC:41:EB
Certificate issuer:       /CN=a40e227e41eada75cd2ecb37649e56571e8b69d0
Certificate serial:       0B448A
Authority key identifier: 5D:8F:F3:B4:F9:77:26:7C:21:68:67:BE:D7:80:2A:91:3F:B9:00:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a40e227e41eada75cd2ecb37649e56571e8b69d0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db5cdd6a-67a3-4b10-8d9e-5777c3d5c523/a997e212bd3747bcc2be5c237ae140e7c7a076a9.roa
Signing time:             Wed 24 Mar 2021 14:39:10 +0000
ROA not before:           Wed 24 Mar 2021 14:39:10 +0000
ROA not after:            Tue 24 Mar 2026 14:39:10 +0000
asID:                     264824
IP address blocks:        45.183.140.0/22 maxlen: 24
                          2803:e360::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 738442 (0xb448a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40e227e41eada75cd2ecb37649e56571e8b69d0
        Validity
            Not Before: Mar 24 14:39:10 2021 GMT
            Not After : Mar 24 14:39:10 2026 GMT
        Subject: CN=a997e212bd3747bcc2be5c237ae140e7c7a076a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:30:05:da:88:fa:75:d5:65:f8:41:ee:37:4b:
                    ba:d6:25:f8:2b:55:cf:26:2a:78:0e:de:35:ed:56:
                    61:b9:81:cb:a5:2d:f6:b5:c2:63:31:59:97:ee:96:
                    4a:e2:d6:bc:3c:6b:e8:e8:c0:03:34:02:38:61:02:
                    56:b7:2e:f8:8c:0f:ac:8a:22:12:a6:77:3b:20:75:
                    c6:fa:52:55:58:1e:3b:f0:73:a6:75:6a:a5:8b:95:
                    f7:f9:00:59:5f:c7:c4:fb:7e:66:af:40:d7:79:7a:
                    2b:cb:29:8b:ee:5b:c6:5c:38:2d:37:f2:58:9b:1a:
                    c2:d0:62:5f:22:da:4f:cc:80:72:0b:cd:90:0f:16:
                    a5:3c:e6:21:60:73:d6:70:5e:bd:a5:53:98:45:56:
                    ad:8e:2e:e4:f0:df:c6:83:d2:c8:b2:e3:15:68:9f:
                    e2:a2:81:5b:23:4d:0b:46:5b:11:0e:23:70:e9:9a:
                    09:b2:0c:f5:8f:62:37:b2:9e:68:80:59:61:c4:78:
                    96:0b:45:19:c8:0d:58:7b:11:d5:37:a8:1a:4f:3e:
                    b7:aa:ef:17:e6:92:62:22:5d:f1:ac:af:13:5b:6c:
                    92:aa:d8:f1:cd:72:c0:fb:09:e6:4a:b9:48:35:be:
                    e7:ee:50:3d:b7:7b:e3:7a:b5:1e:e1:c4:be:06:3e:
                    5b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2B:A4:80:EF:59:C9:53:C0:07:51:C6:E0:32:AC:4F:36:FC:41:EB
            X509v3 Authority Key Identifier:
                keyid:5D:8F:F3:B4:F9:77:26:7C:21:68:67:BE:D7:80:2A:91:3F:B9:00:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a40e227e41eada75cd2ecb37649e56571e8b69d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db5cdd6a-67a3-4b10-8d9e-5777c3d5c523/a997e212bd3747bcc2be5c237ae140e7c7a076a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db5cdd6a-67a3-4b10-8d9e-5777c3d5c523/a40e227e41eada75cd2ecb37649e56571e8b69d0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.140.0/22
                IPv6:
                  2803:e360::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:1a:72:c7:79:e8:bf:84:d0:11:e4:f1:50:2f:ea:19:47:8c:
         cf:25:3d:f1:bc:08:98:5b:1f:9a:dc:58:fa:65:2a:2f:82:78:
         9e:95:1b:e4:78:1a:ef:0d:17:ed:ac:5d:90:2a:a7:f2:24:4a:
         bc:82:12:7d:84:85:17:0e:88:80:51:e2:ca:47:44:ad:03:91:
         de:6a:20:3f:2a:68:1a:fe:06:b7:df:3f:32:0b:67:52:b6:31:
         a8:ef:47:28:88:41:8a:c2:a9:f0:8f:e3:bc:da:39:18:e4:ad:
         84:c7:d0:cc:77:f8:75:f7:26:02:93:7e:f8:3a:f1:91:97:0d:
         ef:05:fb:62:d3:c4:a7:73:0f:20:4b:1b:09:94:20:6a:7b:59:
         a5:38:5d:6e:6f:0a:82:77:53:4b:fe:90:2e:fa:b4:aa:1c:55:
         d9:35:9a:27:0a:c4:63:4c:e8:0a:da:15:fc:07:a7:b5:cc:b1:
         92:86:e0:fa:5e:2c:dc:bb:74:65:bf:70:bd:fb:91:17:86:72:
         ff:cd:c8:5f:ca:26:02:d1:6e:eb:1e:db:51:d1:f9:7b:57:c3:
         d2:19:4d:92:0e:81:c1:6d:4d:08:0d:dc:46:cb:11:d0:c7:45:
         13:0a:8a:2b:39:85:44:38:dc:0c:e0:86:85:2a:9a:35:83:23:
         5f:aa:3d:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDC0SKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE0
MGUyMjdlNDFlYWRhNzVjZDJlY2IzNzY0OWU1NjU3MWU4YjY5ZDAwHhcNMjEwMzI0
MTQzOTEwWhcNMjYwMzI0MTQzOTEwWjAzMTEwLwYDVQQDEyhhOTk3ZTIxMmJkMzc0
N2JjYzJiZTVjMjM3YWUxNDBlN2M3YTA3NmE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgDAF2oj6ddVl+EHuN0u61iX4K1XPJip4Dt417VZhuYHLpS32
tcJjMVmX7pZK4ta8PGvo6MADNAI4YQJWty74jA+siiISpnc7IHXG+lJVWB478HOm
dWqli5X3+QBZX8fE+35mr0DXeXoryymL7lvGXDgtN/JYmxrC0GJfItpPzIByC82Q
DxalPOYhYHPWcF69pVOYRVatji7k8N/Gg9LIsuMVaJ/iooFbI00LRlsRDiNw6ZoJ
sgz1j2I3sp5ogFlhxHiWC0UZyA1YexHVN6gaTz63qu8X5pJiIl3xrK8TW2ySqtjx
zXLA+wnmSrlINb7n7lA9t3vjerUe4cS+Bj5bDQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFCsrpIDvWclTwAdRxuAyrE82/EHrMB8GA1UdIwQYMBaAFF2P87T5dyZ8IWhn
vteAKpE/uQCSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTQwZTIy
N2U0MWVhZGE3NWNkMmVjYjM3NjQ5ZTU2NTcxZThiNjlkMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGI1Y2RkNmEtNjdhMy00YjEwLThkOWUtNTc3N2Mz
ZDVjNTIzL2E5OTdlMjEyYmQzNzQ3YmNjMmJlNWMyMzdhZTE0MGU3YzdhMDc2YTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYjVjZGQ2YS02N2EzLTRiMTAtOGQ5ZS01Nzc3
YzNkNWM1MjMvYTQwZTIyN2U0MWVhZGE3NWNkMmVjYjM3NjQ5ZTU2NTcxZThiNjlk
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi23jDANBAIAAjAHAwUAKAPjYDANBgkqhkiG9w0BAQsFAAOC
AQEAGhpyx3nov4TQEeTxUC/qGUeMzyU98bwImFsfmtxY+mUqL4J4npUb5Hga7w0X
7axdkCqn8iRKvIISfYSFFw6IgFHiykdErQOR3mogPypoGv4Gt98/MgtnUrYxqO9H
KIhBisKp8I/jvNo5GOSthMfQzHf4dfcmApN++DrxkZcN7wX7YtPEp3MPIEsbCZQg
antZpThdbm8KgndTS/6QLvq0qhxV2TWaJwrEY0zoCtoV/Aentcyxkobg+l4s3Lt0
Zb9wvfuRF4Zy/83IX8omAtFu6x7bUdH5e1fD0hlNkg6BwW1NCA3cRssR0MdFEwqK
KzmFRDjcDOCGhSqaNYMjX6o9Wg==
-----END CERTIFICATE-----