Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/7ca5fdfa78648802a347a4cee8269288e28b2e1c.roa
File:                     7ca5fdfa78648802a347a4cee8269288e28b2e1c.roa (raw, json)
Hash identifier:          6pwFSFw/NaRt0uY1EeA4Eu/R3NtuzOsHGmJ4xjKxLJQ=
Subject key identifier:   F9:76:BF:FE:77:08:BE:6D:02:4D:38:84:17:75:0A:D3:E4:CE:91:02
Certificate issuer:       /CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
Certificate serial:       0DDC11
Authority key identifier: D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/7ca5fdfa78648802a347a4cee8269288e28b2e1c.roa
Signing time:             Wed 24 Mar 2021 14:31:56 +0000
ROA not before:           Wed 24 Mar 2021 14:31:55 +0000
ROA not after:            Tue 24 Mar 2026 14:31:55 +0000
asID:                     61480
IP address blocks:        190.103.242.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908305 (0xddc11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
        Validity
            Not Before: Mar 24 14:31:55 2021 GMT
            Not After : Mar 24 14:31:55 2026 GMT
        Subject: CN=7ca5fdfa78648802a347a4cee8269288e28b2e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9c:59:c5:a7:72:25:cb:dd:d4:1a:19:2b:54:
                    17:d8:c7:e9:9e:c1:92:34:5e:30:a2:8b:41:b1:b0:
                    5b:79:d3:0e:0d:95:7e:25:ce:15:72:ca:45:d5:97:
                    d1:cc:9c:18:4d:91:89:f4:9b:f6:4f:84:13:7e:87:
                    18:dd:a5:b6:89:93:62:dd:a9:f0:91:1c:b4:3d:b4:
                    98:f6:ba:36:f7:d2:29:72:a2:af:af:8e:1d:bd:30:
                    c3:7d:a9:93:00:3d:2c:9f:13:0b:27:9e:d3:28:e8:
                    84:c9:c7:c8:95:c7:f3:8f:8c:8c:47:94:05:91:13:
                    69:3a:5f:70:27:d6:33:6b:e2:a1:c9:b0:89:03:1d:
                    3f:fc:ea:d4:2c:77:84:db:d7:aa:65:14:a0:b5:12:
                    a4:d2:fe:50:fa:bb:4e:ae:f2:85:11:a7:01:23:7b:
                    92:86:5f:1b:1a:bd:e4:3e:aa:fa:1c:c5:92:41:02:
                    2a:54:0d:09:1c:c2:d9:0b:54:54:49:f8:f2:b5:9d:
                    67:c6:d0:74:9e:e3:ce:9c:5f:02:fb:ea:bc:11:7a:
                    57:02:d8:be:9c:81:57:28:20:75:10:9b:eb:d8:85:
                    18:ea:e5:ad:20:13:e2:64:f8:cb:61:6d:8b:e4:5c:
                    98:9a:93:a5:08:4e:50:30:46:ca:8a:23:7e:65:f2:
                    2f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:76:BF:FE:77:08:BE:6D:02:4D:38:84:17:75:0A:D3:E4:CE:91:02
            X509v3 Authority Key Identifier:
                keyid:D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/7ca5fdfa78648802a347a4cee8269288e28b2e1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/103a3ea12b7f2ac503f3b2a208930367c4230e34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:88:47:d0:53:59:33:f3:a4:67:fa:fb:13:27:2d:1d:40:b7:
         95:b4:a2:23:de:46:c5:37:8f:0b:b7:66:ee:14:11:82:52:70:
         d5:a0:af:76:b7:80:c5:54:c5:eb:ae:9b:78:3f:f9:33:52:c6:
         34:3c:e1:b5:95:bd:98:69:ef:06:39:73:bb:19:57:3e:e3:3e:
         81:5a:bb:5b:e3:3a:94:7a:6f:6d:b3:1e:60:c4:f5:0c:14:e0:
         79:2a:51:5b:d1:b1:9d:f9:d2:39:6e:b6:21:ea:42:13:7c:5d:
         df:ef:74:2b:45:1c:11:20:5b:7a:ed:ab:ad:0e:2e:e2:38:d6:
         81:b1:94:71:ce:3b:6b:74:7d:47:66:62:36:7a:2a:02:5c:94:
         c3:80:a1:a2:60:0e:b0:2f:13:18:8d:24:20:95:08:e9:7f:65:
         74:49:79:66:bc:31:80:36:03:35:9e:29:77:ed:55:14:bf:91:
         e9:51:25:c6:77:78:0f:82:e6:ba:63:ee:0e:72:73:24:c4:3f:
         3e:d9:dd:00:f8:2d:19:b6:61:13:f3:8e:15:7c:d2:c5:18:5a:
         d9:49:2d:e1:6c:c0:92:e9:d8:a8:7a:9c:44:99:98:79:f6:cf:
         1c:d4:35:58:d5:25:c8:02:c1:fb:ea:76:be:5a:d6:5d:70:64:
         25:f9:61:66
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDdwRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
M2EzZWExMmI3ZjJhYzUwM2YzYjJhMjA4OTMwMzY3YzQyMzBlMzQwHhcNMjEwMzI0
MTQzMTU1WhcNMjYwMzI0MTQzMTU1WjAzMTEwLwYDVQQDEyg3Y2E1ZmRmYTc4NjQ4
ODAyYTM0N2E0Y2VlODI2OTI4OGUyOGIyZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyZxZxadyJcvd1BoZK1QX2MfpnsGSNF4wootBsbBbedMODZV+
Jc4VcspF1ZfRzJwYTZGJ9Jv2T4QTfocY3aW2iZNi3anwkRy0PbSY9ro299IpcqKv
r44dvTDDfamTAD0snxMLJ57TKOiEycfIlcfzj4yMR5QFkRNpOl9wJ9Yza+KhybCJ
Ax0//OrULHeE29eqZRSgtRKk0v5Q+rtOrvKFEacBI3uShl8bGr3kPqr6HMWSQQIq
VA0JHMLZC1RUSfjytZ1nxtB0nuPOnF8C++q8EXpXAti+nIFXKCB1EJvr2IUY6uWt
IBPiZPjLYW2L5FyYmpOlCE5QMEbKiiN+ZfIvXwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPl2v/53CL5tAk04hBd1CtPkzpECMB8GA1UdIwQYMBaAFNU0yLFFNHXVEn72
c689VA8nvwH3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTAzYTNl
YTEyYjdmMmFjNTAzZjNiMmEyMDg5MzAzNjdjNDIzMGUzNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTk3OWFjMGEtZTMyNy00Mzg4LWI5YzgtNDRkZmUy
MzA3YWIyLzdjYTVmZGZhNzg2NDg4MDJhMzQ3YTRjZWU4MjY5Mjg4ZTI4YjJlMWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lOTc5YWMwYS1lMzI3LTQzODgtYjljOC00NGRm
ZTIzMDdhYjIvMTAzYTNlYTEyYjdmMmFjNTAzZjNiMmEyMDg5MzAzNjdjNDIzMGUz
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5n8jANBgkqhkiG9w0BAQsFAAOCAQEAaIhH0FNZM/OkZ/r7
EyctHUC3lbSiI95GxTePC7dm7hQRglJw1aCvdreAxVTF666beD/5M1LGNDzhtZW9
mGnvBjlzuxlXPuM+gVq7W+M6lHpvbbMeYMT1DBTgeSpRW9GxnfnSOW62IepCE3xd
3+90K0UcESBbeu2rrQ4u4jjWgbGUcc47a3R9R2ZiNnoqAlyUw4ChomAOsC8TGI0k
IJUI6X9ldEl5ZrwxgDYDNZ4pd+1VFL+R6VElxnd4D4LmumPuDnJzJMQ/PtndAPgt
GbZhE/OOFXzSxRha2Ukt4WzAkunYqHqcRJmYefbPHNQ1WNUlyALB++p2vlrWXXBk
JflhZg==
-----END CERTIFICATE-----