Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3230f63-4700-49a1-8ecb-c2fbfa2d5851/c5189dc8e55fee6d7e8b5f26a57ccc01641eb6f2.roa
File:                     c5189dc8e55fee6d7e8b5f26a57ccc01641eb6f2.roa (raw, json)
Hash identifier:          1MMRK1GSUjnPkGydrxsJLQKBP+O5Nv2dV4rUNBKJK+w=
Subject key identifier:   77:4B:6E:4F:4D:31:C1:AA:59:68:D5:86:62:46:EE:F5:DA:47:7B:53
Certificate issuer:       /CN=274527f767243632b3f0f11b242c3ed620970435
Certificate serial:       05B4
Authority key identifier: 58:75:28:27:E2:57:18:BB:FD:5E:05:F9:1F:48:E0:B6:BF:DE:43:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/274527f767243632b3f0f11b242c3ed620970435.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3230f63-4700-49a1-8ecb-c2fbfa2d5851/c5189dc8e55fee6d7e8b5f26a57ccc01641eb6f2.roa
Signing time:             Thu 05 Aug 2021 22:18:24 +0000
ROA not before:           Thu 05 Aug 2021 03:00:00 +0000
ROA not after:            Sat 05 Aug 2023 03:00:00 +0000
asID:                     269909
IP address blocks:        187.62.92.0/22 maxlen: 24
                          2803:6ce0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1460 (0x5b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274527f767243632b3f0f11b242c3ed620970435
        Validity
            Not Before: Aug  5 03:00:00 2021 GMT
            Not After : Aug  5 03:00:00 2023 GMT
        Subject: CN=c5189dc8e55fee6d7e8b5f26a57ccc01641eb6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:59:6d:89:ce:ce:6f:d9:1a:a8:0f:4a:fb:d3:
                    25:d3:53:21:a8:19:41:18:83:bc:88:24:61:10:38:
                    7a:a0:f7:dc:11:38:62:84:b6:fd:ed:93:80:e9:e4:
                    1c:c0:d8:f6:c4:ad:d1:bb:66:19:96:42:54:35:4b:
                    97:9b:eb:cf:70:f6:18:c2:39:f7:7a:32:ce:e0:d3:
                    81:c4:f8:5c:5c:f8:9b:a4:f5:58:ae:ff:80:52:14:
                    eb:66:c5:44:dd:82:21:3a:8b:0a:16:21:65:fe:0c:
                    be:65:7a:17:82:4b:0e:1f:a8:98:1b:32:54:1b:b9:
                    cc:bf:da:1a:ac:ab:64:18:d5:54:43:c9:bf:c7:0f:
                    dd:46:e3:e0:0e:ee:a3:08:c1:75:fc:2b:39:7a:ff:
                    7e:f6:f0:82:2a:27:d8:7f:00:c7:c3:ab:0f:4a:c0:
                    a6:ab:4e:8e:2b:50:2f:a3:8b:2a:99:30:ba:e1:5a:
                    0c:65:fd:d9:8f:2e:45:1e:e1:2a:78:be:4a:60:e0:
                    64:1f:1b:a6:1e:1e:c9:4e:98:8f:0a:29:9c:de:13:
                    fd:a1:91:fa:dd:55:18:e7:33:e8:20:4b:b7:c3:e2:
                    f9:9d:1d:0f:15:da:ec:7e:a3:97:3f:a8:1e:ed:72:
                    e6:33:33:f1:15:8c:e8:ec:78:a4:70:57:75:bf:9e:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4B:6E:4F:4D:31:C1:AA:59:68:D5:86:62:46:EE:F5:DA:47:7B:53
            X509v3 Authority Key Identifier:
                keyid:58:75:28:27:E2:57:18:BB:FD:5E:05:F9:1F:48:E0:B6:BF:DE:43:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/274527f767243632b3f0f11b242c3ed620970435.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3230f63-4700-49a1-8ecb-c2fbfa2d5851/c5189dc8e55fee6d7e8b5f26a57ccc01641eb6f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3230f63-4700-49a1-8ecb-c2fbfa2d5851/274527f767243632b3f0f11b242c3ed620970435.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.92.0/22
                IPv6:
                  2803:6ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:6c:4b:98:fb:27:cf:58:90:70:f2:31:a5:70:9f:64:de:fa:
         bb:e3:e7:24:9f:ad:42:95:91:f9:9b:45:77:26:82:8d:5e:9e:
         20:4c:29:0d:04:7e:bc:e6:5e:6e:a7:28:cc:15:66:5b:4d:d3:
         0b:2f:59:8e:52:98:74:20:67:7f:54:98:dd:25:ff:21:d9:0d:
         63:ce:3a:fb:82:0e:e5:e6:56:6d:7e:80:2b:70:9e:86:54:ec:
         98:b0:36:59:4f:ad:1f:58:4b:f7:29:5f:5f:fd:4a:72:d2:13:
         a1:ce:52:82:f2:c8:1e:07:99:92:5d:02:3b:82:20:f8:cc:5b:
         eb:82:72:51:cf:f5:bc:ba:d1:e5:a1:54:e0:50:25:0a:ab:8c:
         56:96:ff:84:12:5a:71:a1:c8:76:4a:14:3c:91:f5:c6:a9:76:
         8c:9e:c1:64:d6:56:89:6b:67:67:47:19:1a:0b:5a:8a:d3:36:
         f0:59:02:77:30:c0:20:2d:cc:0f:04:9b:44:8d:44:fa:4b:cb:
         a7:c9:94:60:cc:0a:8f:81:4b:fd:5c:75:42:a9:5f:7d:e4:00:
         e9:28:76:b0:fa:1f:d1:79:59:da:1a:5a:81:4b:86:a9:87:6e:
         9a:0b:d1:99:31:3f:c3:4d:fd:61:7d:65:ac:3e:e4:f4:cc:67:
         0b:58:0d:f6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjc0
NTI3Zjc2NzI0MzYzMmIzZjBmMTFiMjQyYzNlZDYyMDk3MDQzNTAeFw0yMTA4MDUw
MzAwMDBaFw0yMzA4MDUwMzAwMDBaMDMxMTAvBgNVBAMTKGM1MTg5ZGM4ZTU1ZmVl
NmQ3ZThiNWYyNmE1N2NjYzAxNjQxZWI2ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuWW2Jzs5v2RqoD0r70yXTUyGoGUEYg7yIJGEQOHqg99wROGKE
tv3tk4Dp5BzA2PbErdG7ZhmWQlQ1S5eb689w9hjCOfd6Ms7g04HE+Fxc+Juk9Viu
/4BSFOtmxUTdgiE6iwoWIWX+DL5leheCSw4fqJgbMlQbucy/2hqsq2QY1VRDyb/H
D91G4+AO7qMIwXX8Kzl6/3728IIqJ9h/AMfDqw9KwKarTo4rUC+jiyqZMLrhWgxl
/dmPLkUe4Sp4vkpg4GQfG6YeHslOmI8KKZzeE/2hkfrdVRjnM+ggS7fD4vmdHQ8V
2ux+o5c/qB7tcuYzM/EVjOjseKRwV3W/nrz7AgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUd0tuT00xwapZaNWGYkbu9dpHe1MwHwYDVR0jBBgwFoAUWHUoJ+JXGLv9XgX5
H0jgtr/eQ3MwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8yNzQ1Mjdm
NzY3MjQzNjMyYjNmMGYxMWIyNDJjM2VkNjIwOTcwNDM1LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9lMzIzMGY2My00NzAwLTQ5YTEtOGVjYi1jMmZiZmEy
ZDU4NTEvYzUxODlkYzhlNTVmZWU2ZDdlOGI1ZjI2YTU3Y2NjMDE2NDFlYjZmMi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2UzMjMwZjYzLTQ3MDAtNDlhMS04ZWNiLWMyZmJm
YTJkNTg1MS8yNzQ1MjdmNzY3MjQzNjMyYjNmMGYxMWIyNDJjM2VkNjIwOTcwNDM1
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCuz5cMA0EAgACMAcDBQAoA2zgMA0GCSqGSIb3DQEBCwUAA4IB
AQBNbEuY+yfPWJBw8jGlcJ9k3vq74+ckn61ClZH5m0V3JoKNXp4gTCkNBH685l5u
pyjMFWZbTdMLL1mOUph0IGd/VJjdJf8h2Q1jzjr7gg7l5lZtfoArcJ6GVOyYsDZZ
T60fWEv3KV9f/Upy0hOhzlKC8sgeB5mSXQI7giD4zFvrgnJRz/W8utHloVTgUCUK
q4xWlv+EElpxoch2ShQ8kfXGqXaMnsFk1laJa2dnRxkaC1qK0zbwWQJ3MMAgLcwP
BJtEjUT6S8unyZRgzAqPgUv9XHVCqV995ADpKHaw+h/ReVnaGlqBS4aph26aC9GZ
MT/DTf1hfWWsPuT0zGcLWA32
-----END CERTIFICATE-----