Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eeda44c1-df69-4990-8c7b-d26bf92563b3/0f931b9a20be55082f9be09c43ea82946af827d5.roa
File:                     0f931b9a20be55082f9be09c43ea82946af827d5.roa (raw, json)
Hash identifier:          Tdriu9vifOV/t5xqg+Mx5TB2RKXdpvkKI9T6gRR0lSw=
Subject key identifier:   D6:BD:25:29:0E:44:B8:E1:E2:CB:E3:F5:C8:E2:6D:1D:15:42:E2:A2
Certificate issuer:       /CN=bfb4f095f1383d247a230f1e6137a24c0e460f5b
Certificate serial:       02F7
Authority key identifier: B2:C8:05:5D:C8:02:42:9F:CB:96:0C:80:E1:7E:E1:8F:14:5C:78:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfb4f095f1383d247a230f1e6137a24c0e460f5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eeda44c1-df69-4990-8c7b-d26bf92563b3/0f931b9a20be55082f9be09c43ea82946af827d5.roa
Signing time:             Fri 24 Sep 2021 04:13:23 +0000
ROA not before:           Fri 24 Sep 2021 03:00:00 +0000
ROA not after:            Sun 24 Sep 2023 03:00:00 +0000
asID:                     262188
IP address blocks:        190.97.112.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 759 (0x2f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb4f095f1383d247a230f1e6137a24c0e460f5b
        Validity
            Not Before: Sep 24 03:00:00 2021 GMT
            Not After : Sep 24 03:00:00 2023 GMT
        Subject: CN=0f931b9a20be55082f9be09c43ea82946af827d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:09:6b:42:c8:3f:c8:a4:ee:96:36:0d:3f:34:
                    54:25:3a:d0:c8:51:e5:c7:50:5d:a0:cb:2c:30:a2:
                    39:3d:d1:58:30:ce:98:2b:8a:56:42:1f:b2:c9:0b:
                    a3:7d:a6:1d:17:36:10:fb:2c:ae:cd:d1:28:57:71:
                    ff:b4:0e:cc:ad:1b:8d:f9:dd:87:3a:e4:a7:c6:5d:
                    6f:02:c4:86:3b:c9:ba:d2:83:3b:34:fa:9e:3f:c1:
                    a9:ed:77:85:b6:85:8c:cd:27:ee:2d:49:97:10:60:
                    0e:33:77:e5:0b:96:8e:53:91:a0:15:41:25:ba:f5:
                    d8:d8:99:6f:67:82:83:87:0e:ad:59:c4:b6:91:62:
                    02:01:1e:b9:a5:f5:83:c4:eb:02:33:45:02:53:36:
                    31:62:38:9c:65:7a:ff:5c:0f:e8:24:d1:65:c0:5d:
                    11:09:c8:59:fb:86:f9:01:c6:c3:0a:9e:3a:79:2a:
                    33:33:5c:ef:0e:40:eb:7c:97:e0:c1:e7:f3:df:44:
                    a0:1f:31:e4:a9:d4:93:29:db:6b:36:f9:7f:48:ea:
                    ed:8b:94:36:d6:58:a2:82:56:3c:1c:8d:c1:2e:ea:
                    ee:2b:08:97:10:98:77:1f:ee:8c:00:a7:ac:91:ea:
                    4c:19:71:40:d0:57:36:d3:71:0e:17:81:90:cb:75:
                    39:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BD:25:29:0E:44:B8:E1:E2:CB:E3:F5:C8:E2:6D:1D:15:42:E2:A2
            X509v3 Authority Key Identifier:
                keyid:B2:C8:05:5D:C8:02:42:9F:CB:96:0C:80:E1:7E:E1:8F:14:5C:78:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfb4f095f1383d247a230f1e6137a24c0e460f5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eeda44c1-df69-4990-8c7b-d26bf92563b3/0f931b9a20be55082f9be09c43ea82946af827d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eeda44c1-df69-4990-8c7b-d26bf92563b3/bfb4f095f1383d247a230f1e6137a24c0e460f5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0a:44:cf:c9:b8:5f:bc:d5:e8:ab:23:15:0f:6c:00:39:ca:88:
         2b:bf:59:7d:6e:d2:5e:db:ec:c2:97:98:f2:3b:33:17:7d:98:
         48:d9:f9:62:49:7a:41:f3:d8:ca:0f:44:96:f6:27:4e:af:6a:
         a0:d8:4c:5e:8d:4b:2f:fb:b9:68:a5:a7:81:2d:fc:22:44:e3:
         41:e9:9c:c3:eb:f6:02:82:6b:7a:4e:a2:a5:2a:ad:41:c1:c9:
         7d:9f:d6:2c:7b:a5:03:df:ce:ec:32:0d:33:e0:cc:c2:0e:97:
         64:18:94:bb:cd:0a:e5:4e:53:1f:43:f8:ce:6e:a7:68:0e:95:
         8e:07:ad:86:bc:df:8a:2a:5b:c0:f9:29:85:eb:1b:44:b9:de:
         66:cf:a4:47:e3:e8:ca:f3:1f:2a:5b:c4:45:ff:36:8e:6d:d5:
         4d:f9:76:80:44:6a:f6:c0:93:cd:76:85:28:a2:94:44:3c:4b:
         9c:b8:38:e7:3e:a3:9c:75:c2:aa:78:3b:4d:94:3a:01:14:1a:
         b6:d1:a3:91:8e:a2:93:37:17:78:0b:3c:07:ac:35:d1:10:51:
         62:1b:f3:87:ed:28:3a:1b:3c:4a:f3:33:d2:9c:47:3a:04:38:
         d3:c2:b0:18:48:f6:a7:e7:3e:13:7f:a9:c7:43:6f:5a:94:dc:
         3b:f0:86:57
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAvcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYmZi
NGYwOTVmMTM4M2QyNDdhMjMwZjFlNjEzN2EyNGMwZTQ2MGY1YjAeFw0yMTA5MjQw
MzAwMDBaFw0yMzA5MjQwMzAwMDBaMDMxMTAvBgNVBAMTKDBmOTMxYjlhMjBiZTU1
MDgyZjliZTA5YzQzZWE4Mjk0NmFmODI3ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCVCWtCyD/IpO6WNg0/NFQlOtDIUeXHUF2gyywwojk90Vgwzpgr
ilZCH7LJC6N9ph0XNhD7LK7N0ShXcf+0DsytG4353Yc65KfGXW8CxIY7ybrSgzs0
+p4/wantd4W2hYzNJ+4tSZcQYA4zd+ULlo5TkaAVQSW69djYmW9ngoOHDq1ZxLaR
YgIBHrml9YPE6wIzRQJTNjFiOJxlev9cD+gk0WXAXREJyFn7hvkBxsMKnjp5KjMz
XO8OQOt8l+DB5/PfRKAfMeSp1JMp22s2+X9I6u2LlDbWWKKCVjwcjcEu6u4rCJcQ
mHcf7owAp6yR6kwZcUDQVzbTcQ4XgZDLdTkZAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQU1r0lKQ5EuOHiy+P1yOJtHRVC4qIwHwYDVR0jBBgwFoAUssgFXcgCQp/LlgyA
4X7hjxRceFwwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9iZmI0ZjA5
NWYxMzgzZDI0N2EyMzBmMWU2MTM3YTI0YzBlNDYwZjViLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9lZWRhNDRjMS1kZjY5LTQ5OTAtOGM3Yi1kMjZiZjky
NTYzYjMvMGY5MzFiOWEyMGJlNTUwODJmOWJlMDljNDNlYTgyOTQ2YWY4MjdkNS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2VlZGE0NGMxLWRmNjktNDk5MC04YzdiLWQyNmJm
OTI1NjNiMy9iZmI0ZjA5NWYxMzgzZDI0N2EyMzBmMWU2MTM3YTI0YzBlNDYwZjVi
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQDvmFwMA0GCSqGSIb3DQEBCwUAA4IBAQAKRM/JuF+81eirIxUP
bAA5yogrv1l9btJe2+zCl5jyOzMXfZhI2fliSXpB89jKD0SW9idOr2qg2ExejUsv
+7lopaeBLfwiRONB6ZzD6/YCgmt6TqKlKq1Bwcl9n9Yse6UD387sMg0z4MzCDpdk
GJS7zQrlTlMfQ/jObqdoDpWOB62GvN+KKlvA+SmF6xtEud5mz6RH4+jK8x8qW8RF
/zaObdVN+XaARGr2wJPNdoUoopREPEucuDjnPqOcdcKqeDtNlDoBFBq20aORjqKT
Nxd4CzwHrDXREFFiG/OH7Sg6GzxK8zPSnEc6BDjTwrAYSPan5z4Tf6nHQ29alNw7
8IZX
-----END CERTIFICATE-----