Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/cb17039923c83c0d2cb16d3f6f2198df18414b7d.roa
File:                     cb17039923c83c0d2cb16d3f6f2198df18414b7d.roa (raw, json)
Hash identifier:          4unGsT/Tg4wur8omqwdE4mA/zG34PYXaeTQT4Kdhyf8=
Subject key identifier:   30:C8:8C:59:3E:5A:74:C2:DA:6B:7E:24:41:AE:16:BD:1F:DD:6D:5C
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       01FB2B
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/cb17039923c83c0d2cb16d3f6f2198df18414b7d.roa
Signing time:             Mon 29 Nov 2021 18:56:33 +0000
ROA not before:           Mon 29 Nov 2021 03:00:00 +0000
ROA not after:            Wed 29 Nov 2023 03:00:00 +0000
asID:                     27768
IP address blocks:        201.217.49.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129835 (0x1fb2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Nov 29 03:00:00 2021 GMT
            Not After : Nov 29 03:00:00 2023 GMT
        Subject: CN=cb17039923c83c0d2cb16d3f6f2198df18414b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:93:85:ae:db:a1:84:a4:eb:ec:ff:1e:8d:7c:
                    9c:ea:18:9d:f6:0e:b1:94:2a:f5:13:25:19:e9:53:
                    bc:39:8d:ac:27:eb:1c:3c:7a:8a:95:f2:d3:38:79:
                    85:21:fc:d5:da:9b:da:96:67:ec:e9:fe:5a:1a:c1:
                    ea:6b:10:fd:39:44:55:f6:a5:b3:cc:f3:22:72:1c:
                    30:b0:cf:5c:ab:3b:15:75:21:a9:f6:c5:70:5d:1a:
                    94:5d:fc:0f:32:e2:52:32:13:c0:84:d4:75:05:82:
                    d7:31:81:cd:1f:a3:ce:82:80:32:bd:8f:51:9f:59:
                    ae:75:88:73:b1:c0:be:6f:9b:8f:f3:36:93:d9:ad:
                    2e:ea:29:18:c2:10:34:ef:49:ed:0a:53:ca:82:1a:
                    c9:05:6b:59:7e:d3:94:79:66:1c:94:cd:9e:c9:a3:
                    1f:6c:81:09:14:0f:46:d6:af:75:62:7a:b8:5a:c5:
                    3b:a2:d5:7f:ae:40:00:21:f2:e4:62:2f:86:25:e5:
                    15:90:63:f2:b6:41:3f:3b:e7:87:34:0a:f9:33:da:
                    96:53:64:36:e6:1a:a3:96:68:f3:38:a9:cf:56:6f:
                    49:8c:38:e2:81:0a:fb:8b:7f:38:13:e6:45:26:89:
                    df:f1:e7:1a:d6:35:13:1a:70:c2:e7:f3:0f:c5:b4:
                    d6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C8:8C:59:3E:5A:74:C2:DA:6B:7E:24:41:AE:16:BD:1F:DD:6D:5C
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/cb17039923c83c0d2cb16d3f6f2198df18414b7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:a1:62:be:5b:58:7e:1d:d1:3c:88:ec:4d:04:2d:06:51:3d:
         24:f9:49:d4:2f:f4:b9:d6:e3:a5:fe:67:a5:bf:2c:b6:d3:fd:
         80:bc:96:a0:73:48:31:a0:82:92:53:3c:d9:c1:e7:97:33:ea:
         66:d5:39:ab:62:b7:d9:cd:c0:bd:ef:83:c9:ec:1f:bf:27:d4:
         53:d8:44:93:ef:62:8e:bd:cf:d9:a3:94:aa:56:1b:32:1a:92:
         8d:19:d0:12:14:9f:88:d9:22:e5:1d:2f:20:6e:68:4b:d4:a9:
         2c:77:10:d3:82:95:10:e2:2e:67:7c:22:3e:d4:c6:6d:c9:8d:
         4b:1c:5e:d9:ae:76:78:2d:40:10:f4:3f:03:e8:db:ce:70:2d:
         ba:ce:25:6a:88:78:24:c4:aa:3d:58:6f:1c:97:de:53:8c:ad:
         1a:84:7b:94:1d:b9:d8:21:a8:db:ac:29:57:0a:eb:d9:92:80:
         5e:08:f8:36:5e:4f:95:52:93:f6:ad:85:d1:35:f0:4d:dc:9d:
         6c:d3:64:31:be:bd:a8:aa:eb:14:8c:49:d9:b6:d8:c1:01:af:
         1a:76:5e:db:00:81:3a:6e:03:ce:a8:80:15:fa:1e:5d:96:93:
         ab:44:62:19:d3:09:38:22:00:24:e2:b7:2c:5a:aa:a4:86:cd:
         72:4b:4c:22
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAfsrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk0
NjlmYjM4N2JlZmM5NmYwMTlkMDE0YzZlNTIzNGQwOTU1NTUzYTkwHhcNMjExMTI5
MDMwMDAwWhcNMjMxMTI5MDMwMDAwWjAzMTEwLwYDVQQDEyhjYjE3MDM5OTIzYzgz
YzBkMmNiMTZkM2Y2ZjIxOThkZjE4NDE0YjdkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp5OFrtuhhKTr7P8ejXyc6hid9g6xlCr1EyUZ6VO8OY2sJ+sc
PHqKlfLTOHmFIfzV2pvalmfs6f5aGsHqaxD9OURV9qWzzPMichwwsM9cqzsVdSGp
9sVwXRqUXfwPMuJSMhPAhNR1BYLXMYHNH6POgoAyvY9Rn1mudYhzscC+b5uP8zaT
2a0u6ikYwhA070ntClPKghrJBWtZftOUeWYclM2eyaMfbIEJFA9G1q91Ynq4WsU7
otV/rkAAIfLkYi+GJeUVkGPytkE/O+eHNAr5M9qWU2Q25hqjlmjzOKnPVm9JjDji
gQr7i384E+ZFJonf8eca1jUTGnDC5/MPxbTWXQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDDIjFk+WnTC2mt+JEGuFr0f3W1cMB8GA1UdIwQYMBaAFAyFBRRHaAvbICkP
JHQ1FbXmEmp/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTQ2OWZi
Mzg3YmVmYzk2ZjAxOWQwMTRjNmU1MjM0ZDA5NTU1NTNhOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTRhZDY4ZTMtYTdmMC00ZDUxLTg2NTgtY2NmOWMy
NmQzZWE3L2NiMTcwMzk5MjNjODNjMGQyY2IxNmQzZjZmMjE5OGRmMTg0MTRiN2Qu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNGFkNjhlMy1hN2YwLTRkNTEtODY1OC1jY2Y5
YzI2ZDNlYTcvOTQ2OWZiMzg3YmVmYzk2ZjAxOWQwMTRjNmU1MjM0ZDA5NTU1NTNh
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnZMTANBgkqhkiG9w0BAQsFAAOCAQEAeaFivltYfh3RPIjs
TQQtBlE9JPlJ1C/0udbjpf5npb8sttP9gLyWoHNIMaCCklM82cHnlzPqZtU5q2K3
2c3Ave+DyewfvyfUU9hEk+9ijr3P2aOUqlYbMhqSjRnQEhSfiNki5R0vIG5oS9Sp
LHcQ04KVEOIuZ3wiPtTGbcmNSxxe2a52eC1AEPQ/A+jbznAtus4laoh4JMSqPVhv
HJfeU4ytGoR7lB252CGo26wpVwrr2ZKAXgj4Nl5PlVKT9q2F0TXwTdydbNNkMb69
qKrrFIxJ2bbYwQGvGnZe2wCBOm4DzqiAFfoeXZaTq0RiGdMJOCIAJOK3LFqqpIbN
cktMIg==
-----END CERTIFICATE-----