Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e8647f29-b541-4070-a10d-51c969a68008/82a9f29766e1e0c3523271c234f0d7e207cd3e6a.roa
File:                     82a9f29766e1e0c3523271c234f0d7e207cd3e6a.roa (raw, json)
Hash identifier:          OFCiZFrbkUmEsdQ7atMWc9hjV8FxaTyjNgK4i3d+JyM=
Subject key identifier:   24:B3:E9:22:57:34:D8:88:C1:F5:93:72:43:03:2F:E3:56:C8:78:10
Certificate issuer:       /CN=47ff109e1e2041257e445750def18c70c17d1e60
Certificate serial:       0D6BF6
Authority key identifier: 75:8D:8E:4D:EB:36:D6:6A:C8:EA:EC:36:78:7E:18:CF:FD:B4:45:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47ff109e1e2041257e445750def18c70c17d1e60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e8647f29-b541-4070-a10d-51c969a68008/82a9f29766e1e0c3523271c234f0d7e207cd3e6a.roa
Signing time:             Wed 24 Mar 2021 14:32:30 +0000
ROA not before:           Wed 24 Mar 2021 14:32:29 +0000
ROA not after:            Tue 24 Mar 2026 14:32:29 +0000
asID:                     27865
IP address blocks:        170.239.28.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879606 (0xd6bf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ff109e1e2041257e445750def18c70c17d1e60
        Validity
            Not Before: Mar 24 14:32:29 2021 GMT
            Not After : Mar 24 14:32:29 2026 GMT
        Subject: CN=82a9f29766e1e0c3523271c234f0d7e207cd3e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:11:a4:7d:33:13:72:a7:26:a2:7b:4e:99:61:
                    65:a5:9c:0d:48:ec:7f:28:5e:6d:3c:c6:0b:a1:03:
                    83:a3:42:7b:37:05:d0:1e:02:59:21:25:0e:8b:19:
                    fa:30:bd:84:58:92:77:9e:49:1f:0f:58:0b:36:8a:
                    1e:a8:1f:e2:50:6d:ed:e3:f3:fe:5c:86:54:00:44:
                    00:7e:c2:97:01:79:71:ac:88:78:02:a2:76:f2:bc:
                    9d:a3:b1:a5:5d:8b:68:fe:5d:bc:81:82:40:69:96:
                    b6:d6:f7:89:e3:f9:fe:8c:b5:9e:c9:ea:a0:7d:f4:
                    ee:8a:4d:20:fa:d0:de:07:f5:7b:1e:f2:46:bc:86:
                    58:ea:df:5e:12:4c:c5:ad:65:30:de:b6:5c:8b:15:
                    24:23:94:99:b3:a2:27:17:0c:d6:41:94:57:c4:e3:
                    ec:1c:26:47:cd:f7:ea:37:2b:3d:b8:3b:bf:ef:41:
                    4a:0f:91:51:7e:6d:d9:e5:b6:33:87:79:ab:e5:db:
                    1f:7f:44:a2:60:44:f2:3b:c5:06:3e:4e:36:05:f9:
                    c1:da:14:c8:19:84:5f:c9:9e:61:91:4c:09:b2:28:
                    c9:b5:cb:ec:6a:ac:8c:57:a7:12:e7:6d:f2:88:65:
                    4b:4f:ad:eb:87:92:b3:6b:67:65:dc:55:80:be:ae:
                    b9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B3:E9:22:57:34:D8:88:C1:F5:93:72:43:03:2F:E3:56:C8:78:10
            X509v3 Authority Key Identifier:
                keyid:75:8D:8E:4D:EB:36:D6:6A:C8:EA:EC:36:78:7E:18:CF:FD:B4:45:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47ff109e1e2041257e445750def18c70c17d1e60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e8647f29-b541-4070-a10d-51c969a68008/82a9f29766e1e0c3523271c234f0d7e207cd3e6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e8647f29-b541-4070-a10d-51c969a68008/47ff109e1e2041257e445750def18c70c17d1e60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:23:7e:39:63:25:fb:c8:03:97:48:3c:63:f9:83:97:f0:99:
         b6:cd:4a:a8:1f:be:4c:15:44:29:1f:49:28:25:29:e3:15:0a:
         5f:00:38:c2:80:2b:cd:ed:18:be:a8:6e:a9:d0:36:03:33:df:
         e8:fb:48:22:20:86:db:1e:ca:9c:64:a7:bd:71:8f:7b:83:58:
         93:92:c1:6d:82:84:e4:06:a5:4b:23:bb:14:ae:af:dc:8a:a4:
         c5:04:10:ec:2d:47:bd:60:ad:7f:04:95:1c:54:16:99:d1:ae:
         11:69:26:48:26:29:5f:98:7a:7b:67:3e:7c:7d:a7:96:52:06:
         81:81:5f:4b:87:89:de:02:7a:4a:fa:84:4c:ca:ff:d8:52:96:
         b1:31:72:a4:67:94:a9:74:10:22:03:87:a9:2f:8c:22:ac:6a:
         85:e1:ca:23:d9:08:cb:8f:4c:73:2f:7c:7f:35:40:bc:56:64:
         d8:a7:61:b3:ef:41:e8:73:cc:1f:16:04:3d:25:49:d4:55:ab:
         db:d5:12:52:35:c2:cb:b9:e8:d7:6c:f3:0f:51:e8:61:5a:86:
         db:e5:a3:22:6d:fb:57:9d:96:85:b9:f0:e1:43:83:01:29:d4:
         b3:67:47:8a:9c:e4:e6:1a:9d:c9:c0:6e:d0:5a:69:4a:1d:fd:
         45:a9:39:2e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDWv2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ3
ZmYxMDllMWUyMDQxMjU3ZTQ0NTc1MGRlZjE4YzcwYzE3ZDFlNjAwHhcNMjEwMzI0
MTQzMjI5WhcNMjYwMzI0MTQzMjI5WjAzMTEwLwYDVQQDEyg4MmE5ZjI5NzY2ZTFl
MGMzNTIzMjcxYzIzNGYwZDdlMjA3Y2QzZTZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvRGkfTMTcqcmontOmWFlpZwNSOx/KF5tPMYLoQODo0J7NwXQ
HgJZISUOixn6ML2EWJJ3nkkfD1gLNooeqB/iUG3t4/P+XIZUAEQAfsKXAXlxrIh4
AqJ28rydo7GlXYto/l28gYJAaZa21veJ4/n+jLWeyeqgffTuik0g+tDeB/V7HvJG
vIZY6t9eEkzFrWUw3rZcixUkI5SZs6InFwzWQZRXxOPsHCZHzffqNys9uDu/70FK
D5FRfm3Z5bYzh3mr5dsff0SiYETyO8UGPk42BfnB2hTIGYRfyZ5hkUwJsijJtcvs
aqyMV6cS523yiGVLT63rh5Kza2dl3FWAvq658wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCSz6SJXNNiIwfWTckMDL+NWyHgQMB8GA1UdIwQYMBaAFHWNjk3rNtZqyOrs
Nnh+GM/9tEUnMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDdmZjEw
OWUxZTIwNDEyNTdlNDQ1NzUwZGVmMThjNzBjMTdkMWU2MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTg2NDdmMjktYjU0MS00MDcwLWExMGQtNTFjOTY5
YTY4MDA4LzgyYTlmMjk3NjZlMWUwYzM1MjMyNzFjMjM0ZjBkN2UyMDdjZDNlNmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lODY0N2YyOS1iNTQxLTQwNzAtYTEwZC01MWM5
NjlhNjgwMDgvNDdmZjEwOWUxZTIwNDEyNTdlNDQ1NzUwZGVmMThjNzBjMTdkMWU2
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqrvHDANBgkqhkiG9w0BAQsFAAOCAQEAWiN+OWMl+8gDl0g8
Y/mDl/CZts1KqB++TBVEKR9JKCUp4xUKXwA4woArze0YvqhuqdA2AzPf6PtIIiCG
2x7KnGSnvXGPe4NYk5LBbYKE5AalSyO7FK6v3IqkxQQQ7C1HvWCtfwSVHFQWmdGu
EWkmSCYpX5h6e2c+fH2nllIGgYFfS4eJ3gJ6SvqETMr/2FKWsTFypGeUqXQQIgOH
qS+MIqxqheHKI9kIy49Mcy98fzVAvFZk2Kdhs+9B6HPMHxYEPSVJ1FWr29USUjXC
y7no12zzD1HoYVqG2+WjIm37V52Whbnw4UODASnUs2dHipzk5hqdycBu0FppSh39
Rak5Lg==
-----END CERTIFICATE-----