Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/63457e45fee82a623508280d888e0347ff74f9dc.roa
File:                     63457e45fee82a623508280d888e0347ff74f9dc.roa (raw, json)
Hash identifier:          +CZgq2RBTL/i32amCJrAmH/vVZ/mSgjSKALkXWh9Pic=
Subject key identifier:   7D:A4:4C:18:6A:D7:A1:38:3F:5A:36:28:C5:36:E9:67:8A:53:00:0A
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       0DF579
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/63457e45fee82a623508280d888e0347ff74f9dc.roa
Signing time:             Wed 24 Mar 2021 14:41:09 +0000
ROA not before:           Wed 24 Mar 2021 14:41:08 +0000
ROA not after:            Tue 24 Mar 2026 14:41:08 +0000
asID:                     264788
IP address blocks:        168.197.188.0/22 maxlen: 24
                          2800:2a0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914809 (0xdf579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Mar 24 14:41:08 2021 GMT
            Not After : Mar 24 14:41:08 2026 GMT
        Subject: CN=63457e45fee82a623508280d888e0347ff74f9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:66:b0:b9:5a:df:bf:3e:22:aa:1d:8e:c9:a4:
                    7c:38:f2:2a:9a:73:a2:7a:89:7c:09:06:1e:3e:44:
                    31:6e:c6:da:2f:b0:41:4d:15:4d:dd:c1:c8:79:eb:
                    39:08:9c:2e:b0:3e:2e:18:45:05:f5:18:7e:62:e7:
                    f7:a1:3a:ab:5d:9c:71:98:75:ff:81:21:5c:73:6d:
                    72:0f:23:2c:ff:54:aa:f2:0d:4a:f7:26:c5:ea:f3:
                    56:c0:94:13:4d:6c:56:62:38:76:2f:0b:99:a0:19:
                    2c:ef:2e:86:e6:ca:3e:17:4a:0f:cb:63:28:1a:1d:
                    b0:64:34:d1:48:a2:32:ad:aa:eb:22:d6:c3:16:99:
                    bb:90:a9:4d:29:de:cc:c4:76:11:7d:30:4b:ba:20:
                    76:1f:7e:4d:d4:90:ad:97:3f:c1:1d:d2:fc:7c:d6:
                    3b:71:5f:8b:6a:f0:aa:38:98:d7:1f:00:28:6f:f9:
                    b3:ab:e1:58:da:6d:ba:2b:5d:89:0e:a9:26:3c:32:
                    97:2e:d4:33:be:8e:73:eb:8b:c9:6a:ff:b5:bb:1b:
                    d9:4b:3b:44:75:91:a1:c8:30:6a:04:09:23:3a:7b:
                    d6:76:93:2b:dc:70:8d:4d:d4:fd:57:b9:34:00:12:
                    82:86:04:18:95:c4:d1:8b:20:b0:e5:bc:9d:5e:17:
                    07:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A4:4C:18:6A:D7:A1:38:3F:5A:36:28:C5:36:E9:67:8A:53:00:0A
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/63457e45fee82a623508280d888e0347ff74f9dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.188.0/22
                IPv6:
                  2800:2a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:da:d0:d2:5a:43:e0:5b:c9:cc:21:3b:d0:d0:2b:80:0c:0d:
         39:da:7d:bb:49:14:7d:b2:17:e6:9b:6d:5c:05:80:33:19:80:
         0d:56:34:a7:de:52:fe:65:1f:45:2c:98:5d:a6:2c:7d:80:63:
         18:bd:18:a4:a8:41:4b:34:0d:53:61:d7:b6:f8:62:91:ce:13:
         85:7e:ff:3e:fe:16:59:3b:a9:e0:9e:8f:66:7a:cb:12:69:96:
         30:39:c2:21:de:08:df:9d:04:c9:78:e9:59:78:ea:96:9a:df:
         c1:6b:1f:56:79:18:4c:c4:48:85:bd:c9:43:c8:2b:d9:53:8a:
         c5:38:28:b3:ab:d7:7d:b8:d3:22:a5:ad:7d:3e:57:60:fb:f9:
         1f:59:80:cb:45:ba:5d:6c:03:c7:09:55:59:4a:62:0d:49:53:
         6d:a1:d8:6a:8b:82:91:68:c2:20:1d:59:32:ac:e1:37:0a:d9:
         b3:0f:99:45:00:5a:ae:d7:19:24:29:c8:bc:05:91:24:bf:01:
         44:c6:70:b6:36:78:28:5d:6e:dd:8a:97:ea:0b:61:fe:c8:7a:
         e7:76:70:c2:d5:1a:4d:36:79:82:30:69:92:85:98:ae:9d:14:
         cb:fa:4b:1a:b0:23:b4:22:d6:6b:41:59:b2:cd:0c:2a:af:61:
         fc:c1:89:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDfV5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx
M2Q0ZjI0MzUxZDIzYjBkMTI4NmZmOTQ2YjI0YmZkMDhhZmRjMTIwHhcNMjEwMzI0
MTQ0MTA4WhcNMjYwMzI0MTQ0MTA4WjAzMTEwLwYDVQQDEyg2MzQ1N2U0NWZlZTgy
YTYyMzUwODI4MGQ4ODhlMDM0N2ZmNzRmOWRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkGawuVrfvz4iqh2OyaR8OPIqmnOieol8CQYePkQxbsbaL7BB
TRVN3cHIees5CJwusD4uGEUF9Rh+Yuf3oTqrXZxxmHX/gSFcc21yDyMs/1Sq8g1K
9ybF6vNWwJQTTWxWYjh2LwuZoBks7y6G5so+F0oPy2MoGh2wZDTRSKIyrarrItbD
Fpm7kKlNKd7MxHYRfTBLuiB2H35N1JCtlz/BHdL8fNY7cV+LavCqOJjXHwAob/mz
q+FY2m26K12JDqkmPDKXLtQzvo5z64vJav+1uxvZSztEdZGhyDBqBAkjOnvWdpMr
3HCNTdT9V7k0ABKChgQYlcTRiyCw5bydXhcHtQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFH2kTBhq16E4P1o2KMU26WeKUwAKMB8GA1UdIwQYMBaAFLJf7uBYmpSHrs4r
EQFpmF+iG1vyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzZDRm
MjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMxMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWY5NmM2OWQtZDQ1NS00MGEwLWE5ZTMtMTRkZDY5
YzE0NTY0LzYzNDU3ZTQ1ZmVlODJhNjIzNTA4MjgwZDg4OGUwMzQ3ZmY3NGY5ZGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZjk2YzY5ZC1kNDU1LTQwYTAtYTllMy0xNGRk
NjljMTQ1NjQvNTEzZDRmMjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMx
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqjFvDANBAIAAjAHAwUAKAACoDANBgkqhkiG9w0BAQsFAAOC
AQEAktrQ0lpD4FvJzCE70NArgAwNOdp9u0kUfbIX5pttXAWAMxmADVY0p95S/mUf
RSyYXaYsfYBjGL0YpKhBSzQNU2HXtvhikc4ThX7/Pv4WWTup4J6PZnrLEmmWMDnC
Id4I350EyXjpWXjqlprfwWsfVnkYTMRIhb3JQ8gr2VOKxTgos6vXfbjTIqWtfT5X
YPv5H1mAy0W6XWwDxwlVWUpiDUlTbaHYaouCkWjCIB1ZMqzhNwrZsw+ZRQBartcZ
JCnIvAWRJL8BRMZwtjZ4KF1u3YqX6gth/sh653ZwwtUaTTZ5gjBpkoWYrp0Uy/pL
GrAjtCLWa0FZss0MKq9h/MGJkw==
-----END CERTIFICATE-----