Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e55f40b0-8130-421a-ad91-1e91c950fd62/72b33f69e76faa5f3b1650cf8fbcf72bd711958b.roa
File:                     72b33f69e76faa5f3b1650cf8fbcf72bd711958b.roa (raw, json)
Hash identifier:          W7TwG9BzdPLTMlXq99svncO5whJLshO9At0D6ZV9DYY=
Subject key identifier:   F5:70:9D:3E:8C:F1:55:62:05:F6:3F:97:0E:24:51:50:DE:A8:87:F3
Certificate issuer:       /CN=bb5a270d24e9a7e70b31e2a8022272af60ae7030
Certificate serial:       0E8C02
Authority key identifier: E7:65:F2:16:DD:BC:8E:9C:31:A4:C6:2E:6D:98:E2:27:7F:C0:B9:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb5a270d24e9a7e70b31e2a8022272af60ae7030.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e55f40b0-8130-421a-ad91-1e91c950fd62/72b33f69e76faa5f3b1650cf8fbcf72bd711958b.roa
Signing time:             Thu 27 May 2021 13:25:20 +0000
ROA not before:           Thu 27 May 2021 03:00:00 +0000
ROA not after:            Sat 27 May 2023 03:00:00 +0000
asID:                     27817
IP address blocks:        179.0.29.0/24 maxlen: 24
                          2801:0:480::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 953346 (0xe8c02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb5a270d24e9a7e70b31e2a8022272af60ae7030
        Validity
            Not Before: May 27 03:00:00 2021 GMT
            Not After : May 27 03:00:00 2023 GMT
        Subject: CN=72b33f69e76faa5f3b1650cf8fbcf72bd711958b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:c6:07:c2:7a:7b:d7:81:70:75:d9:8a:bb:
                    5d:2a:33:24:35:bd:59:3a:d6:02:8c:e5:16:1b:4a:
                    b9:ed:fa:91:ed:d3:13:63:d5:63:90:03:d8:3d:f7:
                    b4:05:9c:ef:ad:80:00:86:ae:2c:67:60:9e:24:6a:
                    3a:2a:ca:36:85:20:25:3c:6b:d3:11:1a:f5:4e:ab:
                    c4:37:ce:05:6b:1d:7e:51:8b:b9:93:bb:1d:f3:b5:
                    dd:df:22:f7:2e:0f:d2:91:87:5f:24:6c:f9:c7:5d:
                    2b:32:41:67:65:f1:9c:40:d5:93:40:08:b5:f4:85:
                    29:43:07:22:78:25:0e:97:75:57:29:46:95:7b:60:
                    2d:ee:4f:b1:90:39:54:b2:7a:d7:23:00:dc:37:c4:
                    e0:de:77:3b:4e:61:1e:c6:0a:9f:d4:aa:75:bb:26:
                    b2:5a:27:5b:1a:55:a0:88:c5:57:9a:d8:74:2b:c1:
                    cc:86:c6:ac:23:b2:1a:f3:99:eb:e1:84:86:70:f9:
                    5d:2c:d2:ff:be:b0:50:f6:19:82:68:05:f3:90:1e:
                    e4:fb:60:2b:2e:72:e2:47:b7:80:1d:8e:92:b6:3a:
                    f1:eb:d3:69:41:f6:33:ac:7c:c4:49:bd:cd:ba:f8:
                    5b:ea:5b:bd:f8:b8:ee:c5:00:1f:e3:b0:70:cb:d8:
                    95:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:70:9D:3E:8C:F1:55:62:05:F6:3F:97:0E:24:51:50:DE:A8:87:F3
            X509v3 Authority Key Identifier:
                keyid:E7:65:F2:16:DD:BC:8E:9C:31:A4:C6:2E:6D:98:E2:27:7F:C0:B9:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb5a270d24e9a7e70b31e2a8022272af60ae7030.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e55f40b0-8130-421a-ad91-1e91c950fd62/72b33f69e76faa5f3b1650cf8fbcf72bd711958b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e55f40b0-8130-421a-ad91-1e91c950fd62/bb5a270d24e9a7e70b31e2a8022272af60ae7030.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.29.0/24
                IPv6:
                  2801:0:480::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:07:08:b9:8d:95:24:6f:63:69:47:77:74:e6:cd:d0:8e:27:
         58:b0:c0:a2:36:b6:cf:73:5d:a7:d8:f4:3e:b4:58:81:c1:47:
         f1:ce:a7:ac:13:c6:02:71:c1:0b:03:a2:d5:89:8b:05:df:b3:
         ba:b7:d3:48:9f:51:3f:57:73:03:3c:56:35:d4:57:2d:d1:f9:
         4f:fb:30:46:ac:bd:5f:c2:97:6f:35:2c:18:87:80:de:de:34:
         bd:90:f0:d2:ac:9f:43:cb:d4:08:3c:57:aa:22:81:c8:64:2b:
         b1:d0:25:65:d2:40:6c:09:c3:05:da:ba:e6:c3:8b:be:fd:99:
         22:43:22:56:2d:54:64:cd:b1:dd:0d:fd:c2:ec:df:a8:61:80:
         f3:e5:bb:61:68:77:f8:83:03:92:b1:98:a2:49:40:fb:de:ce:
         64:3a:37:a4:74:29:fb:64:4f:e3:fc:d0:87:08:3b:f1:8f:ef:
         e1:56:56:84:c7:72:22:cd:5e:ab:95:bd:6a:d5:ff:f6:19:a9:
         17:e4:8f:32:30:38:91:38:29:94:fc:2d:46:ab:4e:50:b9:1f:
         eb:34:26:08:6f:66:ad:5e:21:56:d6:50:fa:74:89:b9:de:98:
         a7:dd:b4:6d:87:52:5e:1d:75:e8:cc:d9:78:a4:dc:a4:9e:d3:
         5f:90:65:27
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDDowCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJi
NWEyNzBkMjRlOWE3ZTcwYjMxZTJhODAyMjI3MmFmNjBhZTcwMzAwHhcNMjEwNTI3
MDMwMDAwWhcNMjMwNTI3MDMwMDAwWjAzMTEwLwYDVQQDEyg3MmIzM2Y2OWU3NmZh
YTVmM2IxNjUwY2Y4ZmJjZjcyYmQ3MTE5NThiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtsvGB8J6e9eBcHXZirtdKjMkNb1ZOtYCjOUWG0q57fqR7dMT
Y9VjkAPYPfe0BZzvrYAAhq4sZ2CeJGo6Kso2hSAlPGvTERr1TqvEN84Fax1+UYu5
k7sd87Xd3yL3Lg/SkYdfJGz5x10rMkFnZfGcQNWTQAi19IUpQwcieCUOl3VXKUaV
e2At7k+xkDlUsnrXIwDcN8Tg3nc7TmEexgqf1Kp1uyayWidbGlWgiMVXmth0K8HM
hsasI7Ia85nr4YSGcPldLNL/vrBQ9hmCaAXzkB7k+2ArLnLiR7eAHY6Stjrx69Np
QfYzrHzESb3Nuvhb6lu9+LjuxQAf47Bwy9iVcQIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFPVwnT6M8VViBfY/lw4kUVDeqIfzMB8GA1UdIwQYMBaAFOdl8hbdvI6cMaTG
Lm2Y4id/wLmuMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmI1YTI3
MGQyNGU5YTdlNzBiMzFlMmE4MDIyMjcyYWY2MGFlNzAzMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTU1ZjQwYjAtODEzMC00MjFhLWFkOTEtMWU5MWM5
NTBmZDYyLzcyYjMzZjY5ZTc2ZmFhNWYzYjE2NTBjZjhmYmNmNzJiZDcxMTk1OGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNTVmNDBiMC04MTMwLTQyMWEtYWQ5MS0xZTkx
Yzk1MGZkNjIvYmI1YTI3MGQyNGU5YTdlNzBiMzFlMmE4MDIyMjcyYWY2MGFlNzAz
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEALMAHTAPBAIAAjAJAwcAKAEAAASAMA0GCSqGSIb3DQEBCwUA
A4IBAQCeBwi5jZUkb2NpR3d05s3QjidYsMCiNrbPc12n2PQ+tFiBwUfxzqesE8YC
ccELA6LViYsF37O6t9NIn1E/V3MDPFY11Fct0flP+zBGrL1fwpdvNSwYh4De3jS9
kPDSrJ9Dy9QIPFeqIoHIZCux0CVl0kBsCcMF2rrmw4u+/ZkiQyJWLVRkzbHdDf3C
7N+oYYDz5bthaHf4gwOSsZiiSUD73s5kOjekdCn7ZE/j/NCHCDvxj+/hVlaEx3Ii
zV6rlb1q1f/2GakX5I8yMDiROCmU/C1Gq05QuR/rNCYIb2atXiFW1lD6dIm53pin
3bRth1JeHXXozNl4pNykntNfkGUn
-----END CERTIFICATE-----