Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/880a96698b6cb4bf2b05e3171694a989f238df3f.roa
File:                     880a96698b6cb4bf2b05e3171694a989f238df3f.roa (raw, json)
Hash identifier:          /gq+wUbsXod2PY6SQyaqQpj/ssD0HaLCW+X2OL7n6r8=
Subject key identifier:   46:C8:25:48:57:0F:03:DE:38:60:2A:9A:AD:D1:04:A5:9D:C2:F5:19
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       01EEA7
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/880a96698b6cb4bf2b05e3171694a989f238df3f.roa
Signing time:             Mon 29 Nov 2021 18:33:27 +0000
ROA not before:           Mon 29 Nov 2021 03:00:00 +0000
ROA not after:            Wed 29 Nov 2023 03:00:00 +0000
asID:                     27768
IP address blocks:        201.217.30.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126631 (0x1eea7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Nov 29 03:00:00 2021 GMT
            Not After : Nov 29 03:00:00 2023 GMT
        Subject: CN=880a96698b6cb4bf2b05e3171694a989f238df3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:a3:b7:92:ff:ae:20:3d:53:7c:c2:e9:8a:
                    1e:d1:9f:1d:35:f2:c0:37:cd:cf:77:dc:cc:d1:9d:
                    2b:ea:1e:8a:e2:94:3b:29:f7:fe:76:1e:16:54:60:
                    a5:c0:49:1f:d0:89:68:a7:02:77:e4:1f:95:56:3e:
                    72:62:85:94:6e:1f:72:62:ac:c2:40:86:30:94:40:
                    32:51:87:2e:51:79:9a:d3:f9:2c:3f:03:9b:8f:c0:
                    b6:0b:47:90:b3:ec:a8:39:e3:12:95:21:ac:d1:34:
                    f1:5f:8c:7a:1d:d5:58:94:22:56:62:6c:79:d3:51:
                    ec:15:a9:54:e3:c8:aa:3d:95:bb:34:e6:99:57:68:
                    cc:ad:3d:5a:a6:bd:4e:74:a5:7c:11:75:74:b2:f7:
                    c1:40:52:b6:b8:c8:74:5e:64:61:cf:27:56:6e:06:
                    1c:01:7e:f1:c0:7c:2a:07:7a:21:82:66:2d:b6:17:
                    fa:ae:35:05:03:2b:0e:fb:f6:e4:3e:98:60:93:5e:
                    1b:78:10:39:8a:45:60:2a:38:64:ae:12:22:4a:b1:
                    5b:19:56:35:c5:cd:40:d5:97:25:df:d1:35:55:ad:
                    fc:a5:c4:bd:3e:c2:fa:ee:58:34:93:35:c4:de:f7:
                    14:1e:50:32:7c:3d:41:e4:45:63:c1:d1:96:6f:fe:
                    15:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C8:25:48:57:0F:03:DE:38:60:2A:9A:AD:D1:04:A5:9D:C2:F5:19
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/880a96698b6cb4bf2b05e3171694a989f238df3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:c4:59:92:97:a3:53:90:67:8d:17:fd:20:0a:ad:40:ad:1a:
         01:b2:4c:e0:2b:33:5d:08:17:4d:b2:6d:f0:54:50:7a:5b:94:
         29:08:2e:b0:c3:7b:61:e0:4f:c0:66:e0:6e:53:55:54:08:16:
         3b:b0:ea:85:72:36:06:98:d0:82:7c:17:f6:d1:c9:82:59:f4:
         0a:af:dc:03:62:8c:16:30:9c:be:6a:fe:66:be:8c:03:6d:53:
         9b:4b:cf:6c:78:ae:41:eb:02:53:9b:48:83:7e:14:a0:75:64:
         92:e9:ea:b9:e4:7b:ea:0a:71:82:ac:3e:06:be:bd:1d:21:14:
         91:6e:06:28:71:8a:eb:71:e6:83:4b:f8:34:ba:d1:69:40:32:
         53:cf:09:dd:88:ec:8f:42:99:07:36:b5:49:46:14:7c:5f:78:
         57:14:88:09:20:cd:3d:22:5d:7e:e8:41:52:86:be:dc:4a:ea:
         2a:e3:c9:5c:f2:bb:af:db:07:a3:69:99:53:27:b6:28:b7:de:
         fd:f2:98:b7:15:1b:3e:0e:93:8e:e9:a4:9e:d7:2d:78:17:ae:
         24:18:35:1b:d7:00:df:9e:25:19:29:03:92:cb:ce:04:11:bd:
         78:aa:ed:0b:1d:73:a3:65:c3:42:a0:99:d5:fd:33:eb:c1:55:
         99:4c:9c:d9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAe6nMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk0
NjlmYjM4N2JlZmM5NmYwMTlkMDE0YzZlNTIzNGQwOTU1NTUzYTkwHhcNMjExMTI5
MDMwMDAwWhcNMjMxMTI5MDMwMDAwWjAzMTEwLwYDVQQDEyg4ODBhOTY2OThiNmNi
NGJmMmIwNWUzMTcxNjk0YTk4OWYyMzhkZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoIWjt5L/riA9U3zC6Yoe0Z8dNfLAN83Pd9zM0Z0r6h6K4pQ7
Kff+dh4WVGClwEkf0IlopwJ35B+VVj5yYoWUbh9yYqzCQIYwlEAyUYcuUXma0/ks
PwObj8C2C0eQs+yoOeMSlSGs0TTxX4x6HdVYlCJWYmx501HsFalU48iqPZW7NOaZ
V2jMrT1apr1OdKV8EXV0svfBQFK2uMh0XmRhzydWbgYcAX7xwHwqB3ohgmYtthf6
rjUFAysO+/bkPphgk14beBA5ikVgKjhkrhIiSrFbGVY1xc1A1Zcl39E1Va38pcS9
PsL67lg0kzXE3vcUHlAyfD1B5EVjwdGWb/4VzQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEbIJUhXDwPeOGAqmq3RBKWdwvUZMB8GA1UdIwQYMBaAFAyFBRRHaAvbICkP
JHQ1FbXmEmp/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTQ2OWZi
Mzg3YmVmYzk2ZjAxOWQwMTRjNmU1MjM0ZDA5NTU1NTNhOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTRhZDY4ZTMtYTdmMC00ZDUxLTg2NTgtY2NmOWMy
NmQzZWE3Lzg4MGE5NjY5OGI2Y2I0YmYyYjA1ZTMxNzE2OTRhOTg5ZjIzOGRmM2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNGFkNjhlMy1hN2YwLTRkNTEtODY1OC1jY2Y5
YzI2ZDNlYTcvOTQ2OWZiMzg3YmVmYzk2ZjAxOWQwMTRjNmU1MjM0ZDA5NTU1NTNh
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAcnZHjANBgkqhkiG9w0BAQsFAAOCAQEAQcRZkpejU5BnjRf9
IAqtQK0aAbJM4CszXQgXTbJt8FRQeluUKQgusMN7YeBPwGbgblNVVAgWO7DqhXI2
BpjQgnwX9tHJgln0Cq/cA2KMFjCcvmr+Zr6MA21Tm0vPbHiuQesCU5tIg34UoHVk
kunqueR76gpxgqw+Br69HSEUkW4GKHGK63Hmg0v4NLrRaUAyU88J3Yjsj0KZBza1
SUYUfF94VxSICSDNPSJdfuhBUoa+3ErqKuPJXPK7r9sHo2mZUye2KLfe/fKYtxUb
Pg6TjumkntcteBeuJBg1G9cA354lGSkDksvOBBG9eKrtCx1zo2XDQqCZ1f0z68FV
mUyc2Q==
-----END CERTIFICATE-----