Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/5a74be04511811cf1918b8114046fdfd86d8ed0a.roa
File:                     5a74be04511811cf1918b8114046fdfd86d8ed0a.roa (raw, json)
Hash identifier:          IKVLCpM0tXJCyrnpAz43rnXNoZaNBeQ+tNRxmZdvDTk=
Subject key identifier:   05:9A:CA:A3:3A:25:C4:F5:B6:CE:94:84:9C:CA:EC:4A:68:5C:3B:01
Certificate issuer:       /CN=4da24f95f9e14009eadf64141dc9a803fece4656
Certificate serial:       0CF3
Authority key identifier: 03:1E:4E:7D:08:6D:12:2E:55:02:C5:99:53:92:85:D1:D1:14:CC:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4da24f95f9e14009eadf64141dc9a803fece4656.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/5a74be04511811cf1918b8114046fdfd86d8ed0a.roa
Signing time:             Fri 21 May 2021 20:52:15 +0000
ROA not before:           Fri 21 May 2021 03:00:00 +0000
ROA not after:            Sun 21 May 2023 03:00:00 +0000
asID:                     264758
IP address blocks:        45.173.212.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3315 (0xcf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da24f95f9e14009eadf64141dc9a803fece4656
        Validity
            Not Before: May 21 03:00:00 2021 GMT
            Not After : May 21 03:00:00 2023 GMT
        Subject: CN=5a74be04511811cf1918b8114046fdfd86d8ed0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3a:1a:38:64:60:3a:74:9a:77:70:cb:b0:9c:
                    cf:f3:a9:3a:51:92:0e:c5:68:d5:bb:69:0d:c4:ac:
                    64:12:a0:59:5f:9d:82:1c:71:bd:0f:b9:1c:a8:f1:
                    88:44:a0:66:8e:03:9c:f5:09:d8:01:62:6c:f7:b9:
                    d1:14:f7:1e:2f:71:43:a8:a4:38:c6:fc:af:1a:78:
                    ee:e7:f1:d0:99:32:ac:8b:e8:9c:a5:d6:11:03:8f:
                    86:a8:42:0a:5a:6d:2a:0e:e9:39:12:78:0d:36:68:
                    c0:b6:85:0c:a7:ee:f4:4d:87:b6:0a:f7:ed:96:1d:
                    d3:94:e9:77:22:44:44:15:e1:50:40:d5:5c:db:51:
                    ea:4d:31:20:a0:f2:50:13:96:fe:34:f3:3e:3d:b9:
                    f7:84:7d:4f:22:99:7d:ee:ac:23:7a:b3:c4:78:49:
                    48:26:18:1e:f3:39:a3:7b:b8:3b:c7:5b:82:be:70:
                    62:68:5c:3f:52:07:4e:4a:e2:a9:63:6c:a9:4a:ca:
                    7d:0d:1b:89:f0:f0:41:ae:00:fa:32:1b:4e:1b:45:
                    63:e2:51:90:52:d8:1a:71:29:b5:c6:79:fb:6d:bb:
                    51:b6:23:fd:40:8b:83:1a:2a:97:13:c5:32:9e:b1:
                    8d:81:5e:6f:06:94:97:a1:8d:3b:33:4c:88:ab:ed:
                    27:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9A:CA:A3:3A:25:C4:F5:B6:CE:94:84:9C:CA:EC:4A:68:5C:3B:01
            X509v3 Authority Key Identifier:
                keyid:03:1E:4E:7D:08:6D:12:2E:55:02:C5:99:53:92:85:D1:D1:14:CC:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4da24f95f9e14009eadf64141dc9a803fece4656.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/5a74be04511811cf1918b8114046fdfd86d8ed0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/4da24f95f9e14009eadf64141dc9a803fece4656.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:8e:f7:f0:b4:93:07:b8:4d:98:dc:bd:ca:23:c6:a8:1c:88:
         1f:dd:f5:b2:37:7b:a9:f1:53:0b:57:6a:3c:6e:02:ea:58:74:
         4a:61:51:66:0e:77:22:25:3b:e5:2d:e7:62:42:66:d7:f3:7a:
         d4:5a:d9:4e:d0:1f:db:ae:bc:d8:93:b6:0b:f0:90:9b:ca:d4:
         8b:d0:8d:1b:33:af:f7:a5:5b:71:57:51:32:ec:aa:5c:6a:e5:
         6f:9a:e4:a5:e4:6b:35:43:cf:c9:44:f5:d1:4c:d5:0e:b7:9d:
         e6:ec:f6:25:89:38:11:54:e6:7c:3a:28:7e:4b:94:0a:90:2a:
         a3:d0:22:69:63:22:91:3b:0b:49:00:d1:82:90:80:d1:d5:f5:
         e8:78:4c:fa:8b:d8:c7:29:9d:80:84:ad:47:06:5f:a5:04:d0:
         8d:d3:d7:9a:f3:40:e6:d4:3b:36:5a:c9:5b:3a:31:8a:ce:24:
         51:e0:8c:fb:93:83:d1:ce:1c:aa:17:6e:b3:df:2c:ea:59:99:
         3a:c3:e1:36:86:d5:ea:c4:ad:89:5d:b9:56:ae:12:36:e5:a3:
         42:1f:4a:32:4b:5b:fd:da:31:bf:40:de:ae:43:91:a9:b9:89:
         bf:de:ea:ab:c0:01:3c:ff:7f:ca:ad:42:98:74:e0:21:3a:93:
         55:31:4e:de
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICDPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNGRh
MjRmOTVmOWUxNDAwOWVhZGY2NDE0MWRjOWE4MDNmZWNlNDY1NjAeFw0yMTA1MjEw
MzAwMDBaFw0yMzA1MjEwMzAwMDBaMDMxMTAvBgNVBAMTKDVhNzRiZTA0NTExODEx
Y2YxOTE4YjgxMTQwNDZmZGZkODZkOGVkMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCLOho4ZGA6dJp3cMuwnM/zqTpRkg7FaNW7aQ3ErGQSoFlfnYIc
cb0PuRyo8YhEoGaOA5z1CdgBYmz3udEU9x4vcUOopDjG/K8aeO7n8dCZMqyL6Jyl
1hEDj4aoQgpabSoO6TkSeA02aMC2hQyn7vRNh7YK9+2WHdOU6XciREQV4VBA1Vzb
UepNMSCg8lATlv408z49ufeEfU8imX3urCN6s8R4SUgmGB7zOaN7uDvHW4K+cGJo
XD9SB05K4qljbKlKyn0NG4nw8EGuAPoyG04bRWPiUZBS2BpxKbXGefttu1G2I/1A
i4MaKpcTxTKesY2BXm8GlJehjTszTIir7SctAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUBZrKozolxPW2zpSEnMrsSmhcOwEwHwYDVR0jBBgwFoAUAx5OfQhtEi5VAsWZ
U5KF0dEUzGAwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS80ZGEyNGY5
NWY5ZTE0MDA5ZWFkZjY0MTQxZGM5YTgwM2ZlY2U0NjU2LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9lZDMyMzlhMy1jNmExLTRkZmItYmQzYS1jYzJmNWI2
MzdiY2MvNWE3NGJlMDQ1MTE4MTFjZjE5MThiODExNDA0NmZkZmQ4NmQ4ZWQwYS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2VkMzIzOWEzLWM2YTEtNGRmYi1iZDNhLWNjMmY1
YjYzN2JjYy80ZGEyNGY5NWY5ZTE0MDA5ZWFkZjY0MTQxZGM5YTgwM2ZlY2U0NjU2
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCLa3UMA0GCSqGSIb3DQEBCwUAA4IBAQBWjvfwtJMHuE2Y3L3K
I8aoHIgf3fWyN3up8VMLV2o8bgLqWHRKYVFmDnciJTvlLediQmbX83rUWtlO0B/b
rrzYk7YL8JCbytSL0I0bM6/3pVtxV1Ey7KpcauVvmuSl5Gs1Q8/JRPXRTNUOt53m
7PYliTgRVOZ8Oih+S5QKkCqj0CJpYyKROwtJANGCkIDR1fXoeEz6i9jHKZ2AhK1H
Bl+lBNCN09ea80Dm1Ds2WslbOjGKziRR4Iz7k4PRzhyqF26z3yzqWZk6w+E2htXq
xK2JXblWrhI25aNCH0oyS1v92jG/QN6uQ5GpuYm/3uqrwAE8/3/KrUKYdOAhOpNV
MU7e
-----END CERTIFICATE-----