Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/9b6bcf740a89282313f71e58e3de384d5b856e9a.roa
File:                     9b6bcf740a89282313f71e58e3de384d5b856e9a.roa (raw, json)
Hash identifier:          gl3uLdiTS61eyCCJ7qA98jNBPejv/AB+tJBCT0TH7hI=
Subject key identifier:   DE:77:FD:6B:6C:3B:1F:51:2F:35:BE:D6:9B:24:1D:EF:7F:0F:9B:4B
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       0DFE98
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/9b6bcf740a89282313f71e58e3de384d5b856e9a.roa
Signing time:             Wed 24 Mar 2021 14:41:09 +0000
ROA not before:           Wed 24 Mar 2021 14:41:08 +0000
ROA not after:            Tue 24 Mar 2026 14:41:08 +0000
asID:                     19169
IP address blocks:        168.197.188.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917144 (0xdfe98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Mar 24 14:41:08 2021 GMT
            Not After : Mar 24 14:41:08 2026 GMT
        Subject: CN=9b6bcf740a89282313f71e58e3de384d5b856e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9f:b7:95:a1:89:6c:4a:58:d9:ac:e6:0b:54:
                    4a:13:eb:19:d6:58:f2:a4:f8:5a:cb:cd:bc:4d:5d:
                    91:db:5f:e6:30:4f:2c:43:92:cc:fe:2e:8b:ca:aa:
                    f1:19:c9:58:19:8d:94:e3:61:7a:27:35:8c:62:79:
                    5b:45:dd:ce:c6:0f:2e:24:07:82:75:af:6a:5f:a2:
                    ce:91:5c:38:8d:da:f4:68:0e:ea:0d:c0:76:94:22:
                    1d:bf:6a:a7:e7:35:d1:be:fb:67:11:9f:fb:7c:3c:
                    51:2e:89:94:fa:ab:c6:88:35:ef:34:ba:e6:fa:8d:
                    ad:a2:0d:00:16:3f:56:ce:c0:72:5a:98:4d:5b:a8:
                    bf:4b:54:00:b3:62:6c:5e:0a:c7:0d:39:0d:c0:6e:
                    0f:a1:90:fd:7e:e6:a0:7e:1d:51:d4:74:bf:b1:8e:
                    e7:7c:86:a9:24:f7:d7:4c:d6:6a:05:04:6d:ef:a2:
                    68:03:7e:42:02:f7:2d:aa:1a:0f:f1:f3:24:06:5f:
                    9d:b2:60:a8:d3:15:c5:31:fc:12:a5:db:3c:c9:27:
                    aa:d0:ca:aa:5d:40:4f:1c:68:df:3b:9c:cc:a6:47:
                    fa:7c:80:dd:bb:e1:ba:0f:f7:99:4b:df:65:20:f2:
                    f6:a4:52:d2:ee:de:86:a6:1b:aa:e4:52:3d:df:99:
                    e5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:77:FD:6B:6C:3B:1F:51:2F:35:BE:D6:9B:24:1D:EF:7F:0F:9B:4B
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/9b6bcf740a89282313f71e58e3de384d5b856e9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:4c:1d:d9:10:8e:34:4b:1c:44:5b:a9:53:bb:c2:22:85:2f:
         61:02:60:25:00:62:33:cd:3b:7d:0c:e6:a6:31:a1:1d:4f:dc:
         1d:1b:fb:89:e4:17:9f:f7:3d:28:c2:03:51:66:dc:cd:2a:bb:
         c3:8e:e0:49:35:f0:31:6c:8c:34:83:fd:ef:87:25:c5:94:fb:
         23:5d:74:48:a2:fe:e5:27:04:36:49:10:be:01:49:e2:dd:fa:
         03:0d:68:be:a5:4c:03:3a:ef:d1:6f:8c:91:70:4d:84:24:30:
         63:48:6f:04:e5:45:71:77:b2:43:92:a0:78:a2:36:19:29:99:
         bb:75:bc:f8:81:af:6e:19:07:c4:8e:46:2a:1e:2a:18:c5:8f:
         3f:4c:e4:31:bb:be:a8:af:61:c8:30:9f:4f:9b:1b:31:d2:ce:
         5c:dd:e9:57:9e:4b:47:88:4f:96:d2:d6:2c:b7:cb:dd:7a:f6:
         52:ad:72:41:46:0b:55:14:c6:77:e5:ad:8b:b6:39:14:66:d9:
         ea:52:c5:f4:f9:97:4b:22:58:23:6c:bc:1a:8f:5d:e2:fe:a1:
         fb:48:db:52:e4:2b:ce:90:65:8f:86:99:ae:8d:4e:03:11:0c:
         ef:c3:ab:77:4f:97:e5:16:ca:a6:3a:96:56:f2:6a:53:d2:f8:
         30:d1:a2:4e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDf6YMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx
M2Q0ZjI0MzUxZDIzYjBkMTI4NmZmOTQ2YjI0YmZkMDhhZmRjMTIwHhcNMjEwMzI0
MTQ0MTA4WhcNMjYwMzI0MTQ0MTA4WjAzMTEwLwYDVQQDEyg5YjZiY2Y3NDBhODky
ODIzMTNmNzFlNThlM2RlMzg0ZDViODU2ZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl5+3laGJbEpY2azmC1RKE+sZ1ljypPhay828TV2R21/mME8s
Q5LM/i6LyqrxGclYGY2U42F6JzWMYnlbRd3Oxg8uJAeCda9qX6LOkVw4jdr0aA7q
DcB2lCIdv2qn5zXRvvtnEZ/7fDxRLomU+qvGiDXvNLrm+o2tog0AFj9WzsByWphN
W6i/S1QAs2JsXgrHDTkNwG4PoZD9fuagfh1R1HS/sY7nfIapJPfXTNZqBQRt76Jo
A35CAvctqhoP8fMkBl+dsmCo0xXFMfwSpds8ySeq0MqqXUBPHGjfO5zMpkf6fIDd
u+G6D/eZS99lIPL2pFLS7t6Gphuq5FI935nl5QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFN53/WtsOx9RLzW+1pskHe9/D5tLMB8GA1UdIwQYMBaAFLJf7uBYmpSHrs4r
EQFpmF+iG1vyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzZDRm
MjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMxMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWY5NmM2OWQtZDQ1NS00MGEwLWE5ZTMtMTRkZDY5
YzE0NTY0LzliNmJjZjc0MGE4OTI4MjMxM2Y3MWU1OGUzZGUzODRkNWI4NTZlOWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZjk2YzY5ZC1kNDU1LTQwYTAtYTllMy0xNGRk
NjljMTQ1NjQvNTEzZDRmMjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMx
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqjFvDANBgkqhkiG9w0BAQsFAAOCAQEAAkwd2RCONEscRFup
U7vCIoUvYQJgJQBiM807fQzmpjGhHU/cHRv7ieQXn/c9KMIDUWbczSq7w47gSTXw
MWyMNIP974clxZT7I110SKL+5ScENkkQvgFJ4t36Aw1ovqVMAzrv0W+MkXBNhCQw
Y0hvBOVFcXeyQ5KgeKI2GSmZu3W8+IGvbhkHxI5GKh4qGMWPP0zkMbu+qK9hyDCf
T5sbMdLOXN3pV55LR4hPltLWLLfL3Xr2Uq1yQUYLVRTGd+Wti7Y5FGbZ6lLF9PmX
SyJYI2y8Go9d4v6h+0jbUuQrzpBlj4aZro1OAxEM78Ord0+X5RbKpjqWVvJqU9L4
MNGiTg==
-----END CERTIFICATE-----