Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/4c837fb69626cc592756eae36fc1ed13653cb0ce.roa
File:                     4c837fb69626cc592756eae36fc1ed13653cb0ce.roa (raw, json)
Hash identifier:          d9unCVzDgmW4mOwWkvkudCRBQwR6YMXzV/A/4KnowUo=
Subject key identifier:   D8:00:16:EB:72:58:3F:C5:7E:E2:51:65:0B:6F:3D:08:D1:90:5F:26
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       0DFA7F
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/4c837fb69626cc592756eae36fc1ed13653cb0ce.roa
Signing time:             Wed 24 Mar 2021 14:29:00 +0000
ROA not before:           Wed 24 Mar 2021 14:28:59 +0000
ROA not after:            Tue 24 Mar 2026 14:28:59 +0000
asID:                     28075
IP address blocks:        168.90.9.0/24 maxlen: 24
                          190.113.186.0/23 maxlen: 23
                          190.113.188.0/24 maxlen: 24
                          190.113.189.0/24 maxlen: 24
                          190.113.190.0/24 maxlen: 24
                          201.190.230.0/24 maxlen: 24
                          201.190.231.0/24 maxlen: 24
                          201.190.232.0/23 maxlen: 23
                          201.190.234.0/23 maxlen: 23
                          201.190.240.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916095 (0xdfa7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: Mar 24 14:28:59 2021 GMT
            Not After : Mar 24 14:28:59 2026 GMT
        Subject: CN=4c837fb69626cc592756eae36fc1ed13653cb0ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e6:f8:81:f2:1f:48:be:b4:00:c6:40:ac:38:
                    e3:c4:ae:39:24:81:9e:78:49:1b:f9:f4:11:01:b3:
                    37:60:2f:64:3e:26:2d:67:b1:22:dd:f5:dd:79:20:
                    4c:c1:11:7a:84:aa:e5:ae:67:c3:5b:e5:99:8b:e0:
                    ed:d1:a9:b7:4d:34:34:a4:54:7b:f3:e4:40:3a:13:
                    86:3d:f6:54:f0:68:f8:7e:ef:b6:14:9e:fc:01:38:
                    1c:b4:be:4f:dd:7c:a8:52:34:94:b0:2c:68:3d:43:
                    ab:29:2b:35:d9:38:88:30:68:04:aa:cf:ff:a2:56:
                    70:68:33:1e:12:b7:ee:c0:1e:31:3b:73:33:c0:d2:
                    01:6a:24:5b:f7:1a:c8:dd:a2:14:d8:47:54:e2:8b:
                    83:42:60:51:b4:1c:94:2a:d6:23:90:cd:f8:50:0f:
                    59:74:82:91:f3:07:92:12:65:f0:7b:88:7a:7b:bc:
                    4d:25:d4:b1:22:8b:a5:95:b6:6f:39:28:c6:4a:9d:
                    ba:61:dd:41:11:13:d2:08:da:16:24:35:ef:78:56:
                    8c:84:c7:77:fb:af:37:1e:7f:36:73:9a:78:db:a3:
                    a9:30:68:0f:87:ee:94:7e:f4:d3:87:4a:6d:a7:ce:
                    66:79:7b:7b:e3:ff:d4:e2:41:a3:4b:bb:30:df:00:
                    36:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:00:16:EB:72:58:3F:C5:7E:E2:51:65:0B:6F:3D:08:D1:90:5F:26
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/4c837fb69626cc592756eae36fc1ed13653cb0ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.9.0/24
                  190.113.186.0-190.113.190.255
                  201.190.230.0-201.190.235.255
                  201.190.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:4e:5f:2f:79:5b:59:23:49:82:5b:98:ba:6b:8b:4f:d3:04:
         f1:5a:a8:3a:87:78:31:9a:72:65:3b:60:6d:7a:5e:32:c4:7a:
         2b:e8:01:6b:5d:5b:4d:a4:91:91:95:07:b5:86:1c:01:85:0b:
         84:0d:41:fd:7e:2d:15:73:66:44:72:34:15:f6:aa:3a:46:a5:
         28:42:e1:b3:14:83:93:66:bf:ac:d2:77:24:40:ca:bf:9d:43:
         76:15:f2:d8:cc:7d:61:b6:d6:70:e3:d9:b5:32:84:cc:12:98:
         7c:ca:93:38:cd:c6:fe:4f:81:eb:a2:d8:a2:60:ae:26:3a:f8:
         f5:1d:5e:3f:4b:e9:75:a8:ac:9f:3b:17:46:d4:88:13:ca:49:
         fa:b4:81:c3:49:d5:ee:8c:98:de:41:56:0c:33:6b:af:23:81:
         14:bd:6a:27:58:2d:a7:e9:5f:84:88:9f:3e:34:ca:05:67:cc:
         6e:99:df:57:3d:b0:a5:3d:76:be:51:66:4c:3f:e9:dc:b5:5b:
         4d:21:48:c1:14:cb:7c:2f:4f:20:e5:72:5c:ba:91:c6:3f:4d:
         0d:8f:93:03:44:ea:f5:1d:e7:97:35:a8:44:00:a6:5c:a0:13:
         cf:9c:88:bb:82:40:34:0a:99:e1:a9:7f:ad:94:a3:42:ab:b0:
         0b:22:eb:68
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgIDDfp/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg4
ZDNiMzhmYjliZmNlZDU3YzZhZDVlYjE2MGMxMzBhY2YzMjY0MWMwHhcNMjEwMzI0
MTQyODU5WhcNMjYwMzI0MTQyODU5WjAzMTEwLwYDVQQDEyg0YzgzN2ZiNjk2MjZj
YzU5Mjc1NmVhZTM2ZmMxZWQxMzY1M2NiMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAneb4gfIfSL60AMZArDjjxK45JIGeeEkb+fQRAbM3YC9kPiYt
Z7Ei3fXdeSBMwRF6hKrlrmfDW+WZi+Dt0am3TTQ0pFR78+RAOhOGPfZU8Gj4fu+2
FJ78ATgctL5P3XyoUjSUsCxoPUOrKSs12TiIMGgEqs//olZwaDMeErfuwB4xO3Mz
wNIBaiRb9xrI3aIU2EdU4ouDQmBRtByUKtYjkM34UA9ZdIKR8weSEmXwe4h6e7xN
JdSxIoullbZvOSjGSp26Yd1BERPSCNoWJDXveFaMhMd3+683Hn82c5p426OpMGgP
h+6UfvTTh0ptp85meXt74//U4kGjS7sw3wA27wIDAQABo4ICfTCCAnkwHQYDVR0O
BBYEFNgAFutyWD/FfuJRZQtvPQjRkF8mMB8GA1UdIwQYMBaAFPsbKsFJ3WU0RJWG
NPmzt6e3aen4MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODhkM2Iz
OGZiOWJmY2VkNTdjNmFkNWViMTYwYzEzMGFjZjMyNjQxYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjAxNWM0NmItMTU0MC00OWViLWI5NjktMGYzYzQw
ZTAwMTQwLzRjODM3ZmI2OTYyNmNjNTkyNzU2ZWFlMzZmYzFlZDEzNjUzY2IwY2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMDE1YzQ2Yi0xNTQwLTQ5ZWItYjk2OS0wZjNj
NDBlMDAxNDAvODhkM2IzOGZiOWJmY2VkNTdjNmFkNWViMTYwYzEzMGFjZjMyNjQx
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBBBggrBgEFBQcBBwEB/wQy
MDAwLgQCAAEwKAMEAKhaCTAMAwQBvnG6AwQAvnG+MAwDBAHJvuYDBALJvugDBAHJ
vvAwDQYJKoZIhvcNAQELBQADggEBAGJOXy95W1kjSYJbmLpri0/TBPFaqDqHeDGa
cmU7YG16XjLEeivoAWtdW02kkZGVB7WGHAGFC4QNQf1+LRVzZkRyNBX2qjpGpShC
4bMUg5Nmv6zSdyRAyr+dQ3YV8tjMfWG21nDj2bUyhMwSmHzKkzjNxv5Pgeui2KJg
riY6+PUdXj9L6XWorJ87F0bUiBPKSfq0gcNJ1e6MmN5BVgwza68jgRS9aidYLafp
X4SInz40ygVnzG6Z31c9sKU9dr5RZkw/6dy1W00hSMEUy3wvTyDlcly6kcY/TQ2P
kwNE6vUd55c1qEQAplygE8+ciLuCQDQKmeGpf62Uo0KrsAsi62g=
-----END CERTIFICATE-----