Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/be23f9e9c0d142e18916d57977101cac9a84bcce.roa
File:                     be23f9e9c0d142e18916d57977101cac9a84bcce.roa (raw, json)
Hash identifier:          wR0AEq3YecD13kED6QuhGeXaE7NL1b+nGH+gx36b3Dw=
Subject key identifier:   AE:9D:39:00:24:2B:14:13:B8:A0:A3:9E:AD:7D:F4:F5:CE:5A:36:69
Certificate issuer:       /CN=fd73397c8b35c9d5277acc116720117fd7bd3019
Certificate serial:       113AAA
Authority key identifier: 42:D7:DB:F5:52:44:E1:80:47:26:DE:07:0F:65:8E:F6:A6:AA:D4:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd73397c8b35c9d5277acc116720117fd7bd3019.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/be23f9e9c0d142e18916d57977101cac9a84bcce.roa
Signing time:             Tue 21 Sep 2021 23:12:22 +0000
ROA not before:           Tue 21 Sep 2021 03:00:00 +0000
ROA not after:            Thu 21 Sep 2023 03:00:00 +0000
asID:                     265826
IP address blocks:        45.70.228.0/22 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129130 (0x113aaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd73397c8b35c9d5277acc116720117fd7bd3019
        Validity
            Not Before: Sep 21 03:00:00 2021 GMT
            Not After : Sep 21 03:00:00 2023 GMT
        Subject: CN=be23f9e9c0d142e18916d57977101cac9a84bcce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cb:e6:43:b0:b9:49:e0:0f:16:46:7c:0f:8e:
                    67:a1:09:2f:54:a6:dc:1e:77:ce:72:3f:c7:c9:66:
                    8b:df:ec:2b:a2:7a:66:95:03:70:eb:ea:ea:df:da:
                    65:c5:02:05:76:f1:a5:8e:da:4e:cb:2c:39:0c:d2:
                    04:5e:ac:77:7d:2f:b3:c0:da:c9:f5:81:fa:f2:4b:
                    fc:8a:90:8c:77:f2:f0:35:3d:c9:fb:a3:d5:0c:11:
                    4f:02:03:5b:58:d6:a0:16:37:b2:0a:07:f4:d6:5f:
                    26:4e:63:38:a6:71:2c:47:5c:89:39:7e:48:e7:9e:
                    56:a4:20:c4:60:64:95:1f:d8:d5:55:68:2d:77:7e:
                    52:c5:20:02:73:0f:d2:bb:2f:19:2f:4c:4a:8d:8f:
                    0c:a5:ae:57:bc:31:ad:5a:a2:c9:d4:9d:f9:1b:d4:
                    31:cc:6d:3d:aa:1b:bf:1a:31:f7:6d:00:6f:f9:c9:
                    8b:e1:75:d9:cc:1c:dd:67:fc:00:01:c9:e7:1f:e7:
                    97:af:a9:37:b3:24:89:b4:b3:fe:11:5a:df:c5:48:
                    68:62:bf:99:8a:b3:64:43:5c:96:d9:95:fd:3f:4c:
                    30:81:f8:05:6f:46:2c:60:42:fc:db:82:19:07:6d:
                    28:89:55:36:05:6f:68:31:be:70:ff:df:32:76:3f:
                    85:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9D:39:00:24:2B:14:13:B8:A0:A3:9E:AD:7D:F4:F5:CE:5A:36:69
            X509v3 Authority Key Identifier:
                keyid:42:D7:DB:F5:52:44:E1:80:47:26:DE:07:0F:65:8E:F6:A6:AA:D4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd73397c8b35c9d5277acc116720117fd7bd3019.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/be23f9e9c0d142e18916d57977101cac9a84bcce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/fd73397c8b35c9d5277acc116720117fd7bd3019.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:47:5e:7d:fd:9c:ab:58:6b:a2:0c:9b:e9:e3:3c:da:86:2e:
         ff:cb:c6:e0:ce:84:19:98:15:c8:de:96:1f:74:15:51:e0:a0:
         0f:bf:7f:22:8c:eb:0c:eb:57:70:06:86:60:ba:97:18:2f:b1:
         0b:c7:e4:5d:91:82:fa:c4:b0:76:7d:03:a4:d1:b3:54:13:95:
         9e:2f:39:aa:a3:7f:c3:98:5f:27:d2:e0:ec:c6:ca:8d:63:f4:
         4b:e4:5a:b2:33:47:80:ce:63:d4:a7:35:b9:76:a2:05:fb:fb:
         a7:b7:d6:e6:f0:4b:c3:32:24:c3:8d:d5:fd:6a:6b:2e:79:33:
         56:52:c6:4e:18:3d:8f:6a:37:eb:2f:61:b1:3c:bb:74:3a:35:
         c0:19:d9:96:b3:0a:0d:43:37:de:84:a6:f4:a9:41:05:19:a5:
         f6:46:b3:e4:70:42:0d:02:24:2c:09:4c:1c:98:c3:99:40:ac:
         83:1c:45:cc:d5:78:ce:a0:8a:1c:9c:f4:c1:f5:57:10:2a:42:
         5e:a1:e4:f0:d6:1a:fe:25:1c:f2:f5:b2:66:8b:57:6b:22:4f:
         84:0f:b0:6f:8c:88:dd:a2:55:07:e2:9f:fd:d0:43:b3:7a:eb:
         15:50:9d:ba:66:df:21:8d:5f:97:13:f4:dc:1a:db:0b:0e:3e:
         6c:f0:fb:16
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDETqqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZk
NzMzOTdjOGIzNWM5ZDUyNzdhY2MxMTY3MjAxMTdmZDdiZDMwMTkwHhcNMjEwOTIx
MDMwMDAwWhcNMjMwOTIxMDMwMDAwWjAzMTEwLwYDVQQDEyhiZTIzZjllOWMwZDE0
MmUxODkxNmQ1Nzk3NzEwMWNhYzlhODRiY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvMvmQ7C5SeAPFkZ8D45noQkvVKbcHnfOcj/HyWaL3+wronpm
lQNw6+rq39plxQIFdvGljtpOyyw5DNIEXqx3fS+zwNrJ9YH68kv8ipCMd/LwNT3J
+6PVDBFPAgNbWNagFjeyCgf01l8mTmM4pnEsR1yJOX5I555WpCDEYGSVH9jVVWgt
d35SxSACcw/Suy8ZL0xKjY8Mpa5XvDGtWqLJ1J35G9QxzG09qhu/GjH3bQBv+cmL
4XXZzBzdZ/wAAcnnH+eXr6k3sySJtLP+EVrfxUhoYr+ZirNkQ1yW2ZX9P0wwgfgF
b0YsYEL824IZB20oiVU2BW9oMb5w/98ydj+FowIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFK6dOQAkKxQTuKCjnq199PXOWjZpMB8GA1UdIwQYMBaAFELX2/VSROGARybe
Bw9ljvamqtTWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmQ3MzM5
N2M4YjM1YzlkNTI3N2FjYzExNjcyMDExN2ZkN2JkMzAxOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTIyODUxODYtMWE3ZS00NjUwLTk4OWUtNzVjOWM2
N2YwYjAxL2JlMjNmOWU5YzBkMTQyZTE4OTE2ZDU3OTc3MTAxY2FjOWE4NGJjY2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMjI4NTE4Ni0xYTdlLTQ2NTAtOTg5ZS03NWM5
YzY3ZjBiMDEvZmQ3MzM5N2M4YjM1YzlkNTI3N2FjYzExNjcyMDExN2ZkN2JkMzAx
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi1G5DANBgkqhkiG9w0BAQsFAAOCAQEAYkdeff2cq1hrogyb
6eM82oYu/8vG4M6EGZgVyN6WH3QVUeCgD79/IozrDOtXcAaGYLqXGC+xC8fkXZGC
+sSwdn0DpNGzVBOVni85qqN/w5hfJ9Lg7MbKjWP0S+RasjNHgM5j1Kc1uXaiBfv7
p7fW5vBLwzIkw43V/WprLnkzVlLGThg9j2o36y9hsTy7dDo1wBnZlrMKDUM33oSm
9KlBBRml9kaz5HBCDQIkLAlMHJjDmUCsgxxFzNV4zqCKHJz0wfVXECpCXqHk8NYa
/iUc8vWyZotXayJPhA+wb4yI3aJVB+Kf/dBDs3rrFVCdumbfIY1flxP03BrbCw4+
bPD7Fg==
-----END CERTIFICATE-----