Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/90db3879dc22698e80d654b47ab0fd90a08d15e7.roa
File:                     90db3879dc22698e80d654b47ab0fd90a08d15e7.roa (raw, json)
Hash identifier:          TT/eWIFiB9IhI8FP5te1ZCC6HIK+e5ZSB0WBzxHVlgY=
Subject key identifier:   EE:90:D3:7F:00:90:CE:B3:BD:1E:37:A0:6D:F8:96:EE:7E:FE:9C:F1
Certificate issuer:       /CN=3443505eddac7b5aa6eddaedee91340561a130ec
Certificate serial:       0286D6
Authority key identifier: D5:D4:C7:13:9B:11:47:DC:25:7C:2F:DF:A7:B0:B2:78:CA:FE:A8:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3443505eddac7b5aa6eddaedee91340561a130ec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/90db3879dc22698e80d654b47ab0fd90a08d15e7.roa
Signing time:             Wed 06 Oct 2021 14:45:06 +0000
ROA not before:           Wed 30 Jun 2021 03:00:00 +0000
ROA not after:            Fri 30 Jun 2023 03:00:00 +0000
asID:                     263744
IP address blocks:        168.196.240.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165590 (0x286d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3443505eddac7b5aa6eddaedee91340561a130ec
        Validity
            Not Before: Jun 30 03:00:00 2021 GMT
            Not After : Jun 30 03:00:00 2023 GMT
        Subject: CN=90db3879dc22698e80d654b47ab0fd90a08d15e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:a7:40:58:bf:97:75:56:96:e5:57:a5:fa:
                    c0:fb:ad:2d:a5:f4:0b:99:b4:de:f4:88:ce:fc:39:
                    f5:29:d3:ef:6f:52:33:34:ca:32:07:e6:0a:e0:fe:
                    8f:11:aa:8e:3c:20:60:01:07:28:2d:f3:3a:e8:11:
                    67:12:01:7c:62:ba:35:fa:0b:4d:ed:6a:d9:a9:28:
                    82:78:41:63:f8:ed:cb:b0:e1:5c:31:a2:9f:e4:e8:
                    6c:6f:85:ce:48:86:89:f5:33:ce:a3:24:94:ef:36:
                    1e:1a:18:b9:22:7e:ae:b8:f1:97:e6:71:de:10:a8:
                    91:37:41:88:40:fe:f1:1d:d6:d6:85:74:bd:01:6f:
                    7a:4d:62:59:aa:a2:fd:a9:14:7c:d4:a8:7c:b5:e5:
                    c2:ee:2d:ab:39:44:18:fb:68:49:39:81:3f:63:ea:
                    24:d1:a4:d7:8d:d0:58:a7:84:e0:1c:45:a7:e4:a2:
                    45:c5:55:0f:a1:cd:5c:14:41:8f:1c:28:f6:44:70:
                    f8:4e:08:e7:0e:11:90:05:0f:83:cf:ec:82:64:9e:
                    15:99:bd:ec:ae:5e:1f:95:29:8f:bc:13:ad:35:06:
                    b9:20:50:6f:10:e9:fd:50:02:1a:e0:12:33:6b:f0:
                    c8:25:b2:e8:da:6b:2f:11:e2:23:2b:70:1f:4d:13:
                    3b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:90:D3:7F:00:90:CE:B3:BD:1E:37:A0:6D:F8:96:EE:7E:FE:9C:F1
            X509v3 Authority Key Identifier:
                keyid:D5:D4:C7:13:9B:11:47:DC:25:7C:2F:DF:A7:B0:B2:78:CA:FE:A8:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3443505eddac7b5aa6eddaedee91340561a130ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/90db3879dc22698e80d654b47ab0fd90a08d15e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/3443505eddac7b5aa6eddaedee91340561a130ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:98:9c:f4:46:c2:36:a8:af:10:55:38:30:55:2a:48:54:4b:
         17:6f:f4:ad:bd:b9:a6:be:c6:94:6d:86:0d:2d:82:f0:0c:57:
         04:78:0b:06:83:8c:f1:f3:14:20:da:f3:95:df:c6:43:70:33:
         96:5a:ce:35:6a:40:4f:f1:99:f3:eb:43:3f:0b:54:44:ff:20:
         a3:70:72:8f:bc:52:e9:5f:04:d6:46:b7:d1:62:59:7b:28:7b:
         da:4c:81:d6:46:c8:52:32:eb:39:dd:39:53:04:52:e6:9d:c0:
         c9:43:22:8b:dd:50:44:46:2b:d2:1c:f9:03:8c:b8:22:cf:16:
         af:4d:c2:91:4c:47:c7:20:de:ca:ab:4a:38:be:de:9f:f1:1b:
         3a:42:5d:75:2f:1f:10:c3:79:bc:63:ec:b2:de:cf:d2:d4:15:
         ba:ad:25:39:ab:db:16:62:0c:19:8c:6f:b1:a6:17:10:96:f6:
         63:c8:12:3d:d8:32:58:78:ad:6f:b8:e0:2d:73:e2:8b:7d:dd:
         07:94:8b:c3:47:cc:a9:ec:9d:6b:38:41:ae:94:ea:17:ff:70:
         5f:15:c2:9c:56:7c:94:e0:ef:4c:11:cb:4f:93:a9:73:d5:1f:
         01:b8:83:1c:06:51:a3:69:8d:00:e7:66:c6:c8:8f:cb:d8:44:
         ed:4e:6c:b5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAobWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM0
NDM1MDVlZGRhYzdiNWFhNmVkZGFlZGVlOTEzNDA1NjFhMTMwZWMwHhcNMjEwNjMw
MDMwMDAwWhcNMjMwNjMwMDMwMDAwWjAzMTEwLwYDVQQDEyg5MGRiMzg3OWRjMjI2
OThlODBkNjU0YjQ3YWIwZmQ5MGEwOGQxNWU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsB6nQFi/l3VWluVXpfrA+60tpfQLmbTe9IjO/Dn1KdPvb1Iz
NMoyB+YK4P6PEaqOPCBgAQcoLfM66BFnEgF8Yro1+gtN7WrZqSiCeEFj+O3LsOFc
MaKf5Ohsb4XOSIaJ9TPOoySU7zYeGhi5In6uuPGX5nHeEKiRN0GIQP7xHdbWhXS9
AW96TWJZqqL9qRR81Kh8teXC7i2rOUQY+2hJOYE/Y+ok0aTXjdBYp4TgHEWn5KJF
xVUPoc1cFEGPHCj2RHD4TgjnDhGQBQ+Dz+yCZJ4Vmb3srl4flSmPvBOtNQa5IFBv
EOn9UAIa4BIza/DIJbLo2msvEeIjK3AfTRM7WwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFO6Q038AkM6zvR43oG34lu5+/pzxMB8GA1UdIwQYMBaAFNXUxxObEUfcJXwv
36ewsnjK/qhtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzQ0MzUw
NWVkZGFjN2I1YWE2ZWRkYWVkZWU5MTM0MDU2MWExMzBlYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjI4MmZmZmEtNWVhYS00NjRjLTkwNDAtNzk1MDMy
MzU0NTMzLzkwZGIzODc5ZGMyMjY5OGU4MGQ2NTRiNDdhYjBmZDkwYTA4ZDE1ZTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMjgyZmZmYS01ZWFhLTQ2NGMtOTA0MC03OTUw
MzIzNTQ1MzMvMzQ0MzUwNWVkZGFjN2I1YWE2ZWRkYWVkZWU5MTM0MDU2MWExMzBl
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqjE8DANBgkqhkiG9w0BAQsFAAOCAQEAAZic9EbCNqivEFU4
MFUqSFRLF2/0rb25pr7GlG2GDS2C8AxXBHgLBoOM8fMUINrzld/GQ3AzllrONWpA
T/GZ8+tDPwtURP8go3Byj7xS6V8E1ka30WJZeyh72kyB1kbIUjLrOd05UwRS5p3A
yUMii91QREYr0hz5A4y4Is8Wr03CkUxHxyDeyqtKOL7en/EbOkJddS8fEMN5vGPs
st7P0tQVuq0lOavbFmIMGYxvsaYXEJb2Y8gSPdgyWHitb7jgLXPii33dB5SLw0fM
qeydazhBrpTqF/9wXxXCnFZ8lODvTBHLT5Opc9UfAbiDHAZRo2mNAOdmxsiPy9hE
7U5stQ==
-----END CERTIFICATE-----