Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/ce05bcf92b47a0732a7635144c82fe2e4617e5a5.roa
File:                     ce05bcf92b47a0732a7635144c82fe2e4617e5a5.roa (raw, json)
Hash identifier:          njMBHGFbxx/M8lDvxhdWUtquq+cSj5gC23dnEw+6ukg=
Subject key identifier:   AC:02:B2:E6:42:CF:C0:1B:82:92:07:C6:8A:48:0E:10:EA:34:0A:29
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       017951
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/ce05bcf92b47a0732a7635144c82fe2e4617e5a5.roa
Signing time:             Sun 14 Nov 2021 15:13:49 +0000
ROA not before:           Sun 14 Nov 2021 03:00:00 +0000
ROA not after:            Tue 14 Nov 2023 03:00:00 +0000
asID:                     27866
IP address blocks:        201.217.56.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96593 (0x17951)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Nov 14 03:00:00 2021 GMT
            Not After : Nov 14 03:00:00 2023 GMT
        Subject: CN=ce05bcf92b47a0732a7635144c82fe2e4617e5a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:9b:59:77:4b:3d:ea:1b:21:2b:f4:e5:53:
                    7e:22:e5:2b:00:f4:ac:0a:b6:d5:fc:8d:3a:40:8d:
                    09:7a:14:1d:3f:8b:3a:85:b9:05:be:50:b9:71:ce:
                    26:6d:65:52:f5:3c:5d:cd:46:4a:03:5a:09:fd:ad:
                    b9:60:61:a4:0a:1e:2f:ca:b4:11:da:ea:f0:e2:bd:
                    fa:44:58:b8:28:f1:24:15:88:6e:51:d2:1e:88:de:
                    50:b6:74:c7:c4:43:44:47:9f:6c:47:e2:15:57:c0:
                    ab:9f:b5:b7:73:ec:89:35:89:e2:de:5a:6c:e3:cd:
                    59:29:80:c5:49:38:66:28:92:3c:bb:e6:28:59:4e:
                    39:6e:27:e3:01:4c:1c:da:23:64:c8:af:bb:bf:f5:
                    cb:16:0b:f2:71:01:f3:0b:4e:2e:bd:63:b4:c1:55:
                    aa:61:13:e7:49:3b:13:9c:29:59:94:78:d6:11:75:
                    e0:33:53:5d:fc:7e:d4:ac:c3:f3:e2:ed:7e:cd:54:
                    ce:67:c0:28:08:fd:72:86:ac:cd:28:73:b2:ea:4f:
                    27:a6:13:6f:49:e1:81:85:b3:95:54:f5:aa:60:6d:
                    9d:56:de:39:e1:58:c2:f0:24:f7:8e:de:be:3e:ef:
                    32:d5:39:9e:87:3f:5b:d4:4f:f4:09:1a:a0:d8:4e:
                    9a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:02:B2:E6:42:CF:C0:1B:82:92:07:C6:8A:48:0E:10:EA:34:0A:29
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/ce05bcf92b47a0732a7635144c82fe2e4617e5a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:20:05:49:dd:92:fa:18:2e:2c:27:54:42:01:c2:ff:7e:89:
         ff:5b:e3:3f:fd:d9:65:af:f9:a7:7b:4b:dd:f3:a4:6c:f4:0a:
         a5:2d:2b:46:4a:90:08:42:f1:44:be:5f:b9:c1:c5:4e:dd:4a:
         64:11:e4:b2:9c:5b:78:3e:c1:58:4f:fb:9a:cb:fb:89:39:d8:
         ff:23:05:27:b3:c3:5c:98:ea:39:af:0d:58:e2:d6:00:aa:e7:
         88:50:28:d6:99:df:e1:1e:80:04:69:37:13:ef:9d:2c:e4:93:
         72:72:b6:d1:aa:24:e4:85:51:30:5c:0e:49:b1:78:0a:2f:ca:
         97:21:3a:10:0c:35:00:33:d7:84:23:1e:c8:ca:6e:e5:80:43:
         d8:c4:eb:fa:91:49:ad:e9:d7:9d:5d:19:55:de:fa:87:bb:db:
         79:af:0e:bc:bb:e1:14:ad:2c:2e:a9:02:1c:a3:b6:1b:0d:9e:
         5b:32:7b:90:d4:4a:3c:00:d7:a1:c2:f9:1a:f3:cd:bf:d0:c0:
         ba:5a:52:bf:69:08:e8:2a:cb:17:ee:ce:d0:e4:70:24:5a:0e:
         69:6f:28:b0:2b:e1:eb:01:03:d4:29:68:d6:50:29:1b:5a:cf:
         3d:1c:28:a0:7b:ef:f0:54:9e:7f:f0:4f:b3:35:db:c2:fd:c3:
         fd:73:6c:ca
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAXlRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk0
NjlmYjM4N2JlZmM5NmYwMTlkMDE0YzZlNTIzNGQwOTU1NTUzYTkwHhcNMjExMTE0
MDMwMDAwWhcNMjMxMTE0MDMwMDAwWjAzMTEwLwYDVQQDEyhjZTA1YmNmOTJiNDdh
MDczMmE3NjM1MTQ0YzgyZmUyZTQ2MTdlNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApQWbWXdLPeobISv05VN+IuUrAPSsCrbV/I06QI0JehQdP4s6
hbkFvlC5cc4mbWVS9TxdzUZKA1oJ/a25YGGkCh4vyrQR2urw4r36RFi4KPEkFYhu
UdIeiN5QtnTHxENER59sR+IVV8Crn7W3c+yJNYni3lps481ZKYDFSThmKJI8u+Yo
WU45bifjAUwc2iNkyK+7v/XLFgvycQHzC04uvWO0wVWqYRPnSTsTnClZlHjWEXXg
M1Nd/H7UrMPz4u1+zVTOZ8AoCP1yhqzNKHOy6k8nphNvSeGBhbOVVPWqYG2dVt45
4VjC8CT3jt6+Pu8y1Tmehz9b1E/0CRqg2E6abwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKwCsuZCz8AbgpIHxopIDhDqNAopMB8GA1UdIwQYMBaAFAyFBRRHaAvbICkP
JHQ1FbXmEmp/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTQ2OWZi
Mzg3YmVmYzk2ZjAxOWQwMTRjNmU1MjM0ZDA5NTU1NTNhOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTRhZDY4ZTMtYTdmMC00ZDUxLTg2NTgtY2NmOWMy
NmQzZWE3L2NlMDViY2Y5MmI0N2EwNzMyYTc2MzUxNDRjODJmZTJlNDYxN2U1YTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNGFkNjhlMy1hN2YwLTRkNTEtODY1OC1jY2Y5
YzI2ZDNlYTcvOTQ2OWZiMzg3YmVmYzk2ZjAxOWQwMTRjNmU1MjM0ZDA5NTU1NTNh
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAcnZODANBgkqhkiG9w0BAQsFAAOCAQEAKSAFSd2S+hguLCdU
QgHC/36J/1vjP/3ZZa/5p3tL3fOkbPQKpS0rRkqQCELxRL5fucHFTt1KZBHkspxb
eD7BWE/7msv7iTnY/yMFJ7PDXJjqOa8NWOLWAKrniFAo1pnf4R6ABGk3E++dLOST
cnK20aok5IVRMFwOSbF4Ci/KlyE6EAw1ADPXhCMeyMpu5YBD2MTr+pFJrenXnV0Z
Vd76h7vbea8OvLvhFK0sLqkCHKO2Gw2eWzJ7kNRKPADXocL5GvPNv9DAulpSv2kI
6CrLF+7O0ORwJFoOaW8osCvh6wED1Clo1lApG1rPPRwooHvv8FSef/BPszXbwv3D
/XNsyg==
-----END CERTIFICATE-----