Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/b42bd44674c3b715bd96f6fea07794c259a38524.roa
File:                     b42bd44674c3b715bd96f6fea07794c259a38524.roa (raw, json)
Hash identifier:          vDhwtptUejzsjIjXRYN7JcjvvSqkmcqDvNhklMuMKzo=
Subject key identifier:   D8:EB:7A:96:93:40:43:14:1D:A6:EC:01:93:14:E7:24:20:32:08:2A
Certificate issuer:       /CN=0cf82f2746d0f60feb6900d06d01749fb9fd33bd
Certificate serial:       1B
Authority key identifier: AC:4B:EF:3E:30:17:EC:38:0A:A7:15:00:B5:80:C3:3E:25:EF:76:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/b42bd44674c3b715bd96f6fea07794c259a38524.roa
Signing time:             Tue 08 Mar 2022 14:43:11 +0000
ROA not before:           Tue 08 Mar 2022 03:00:00 +0000
ROA not after:            Fri 08 Mar 2024 03:00:00 +0000
asID:                     265688
IP address blocks:        181.174.228.0/22 maxlen: 24
                          2803:cb10::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cf82f2746d0f60feb6900d06d01749fb9fd33bd
        Validity
            Not Before: Mar  8 03:00:00 2022 GMT
            Not After : Mar  8 03:00:00 2024 GMT
        Subject: CN=b42bd44674c3b715bd96f6fea07794c259a38524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f3:81:66:97:ba:73:23:55:64:74:f8:b2:70:
                    46:b2:48:59:61:a8:d6:a6:9f:72:f9:e1:58:99:25:
                    2c:06:98:a1:11:98:34:bb:ea:e3:b2:e0:a2:bf:14:
                    4e:2e:f1:16:ac:fd:00:de:d0:1b:a5:ac:59:94:89:
                    48:90:6a:93:d8:46:a0:ab:b7:e2:2e:1c:bf:af:e6:
                    ae:d0:9c:3c:21:ed:45:42:83:8b:5a:20:8c:80:4e:
                    dc:e5:63:69:77:af:8c:73:22:3a:9a:76:82:e4:fe:
                    79:06:4f:f5:56:b2:56:3e:7e:80:86:22:8d:aa:f5:
                    79:2e:84:20:e1:0a:60:a5:b5:7c:97:ce:ed:37:13:
                    12:db:9e:34:43:48:ce:f1:93:0e:94:1e:47:7a:8e:
                    95:9f:fc:8a:5c:7d:32:e9:f5:45:94:bd:15:eb:82:
                    da:19:ec:c7:9c:78:5c:c2:dd:bd:02:09:33:a1:53:
                    da:75:3c:f9:b7:00:ea:f5:41:5c:1a:b0:c9:58:3c:
                    38:97:65:e3:6d:06:b2:e4:64:a5:66:a2:03:f9:33:
                    eb:f6:1c:57:9e:09:71:e1:95:88:4c:4b:0a:e4:6f:
                    47:1d:c2:0d:4a:31:71:76:09:1e:43:18:a5:ad:b1:
                    e0:0f:f9:ac:57:dc:3f:72:2a:9b:42:e3:54:cd:b8:
                    db:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EB:7A:96:93:40:43:14:1D:A6:EC:01:93:14:E7:24:20:32:08:2A
            X509v3 Authority Key Identifier:
                keyid:AC:4B:EF:3E:30:17:EC:38:0A:A7:15:00:B5:80:C3:3E:25:EF:76:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/b42bd44674c3b715bd96f6fea07794c259a38524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.228.0/22
                IPv6:
                  2803:cb10::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:3f:04:e9:15:f6:df:ab:30:08:95:e4:df:e9:3b:c7:c4:bc:
         f5:76:9b:5f:d0:2d:c9:e2:41:48:7f:a0:de:68:72:dd:89:12:
         86:7c:b6:2d:e4:48:42:a4:4c:ab:24:90:a7:ed:80:2c:be:35:
         38:24:19:e3:ee:9b:a3:9b:60:3a:65:d9:67:93:77:fc:86:86:
         56:26:67:f3:82:6a:52:5c:61:d2:c5:1e:5a:e0:88:87:88:f0:
         33:6b:f8:5e:e9:33:1e:d8:9c:7f:85:ff:78:2c:ea:41:4a:d3:
         b1:39:06:79:a9:7a:44:76:37:21:97:6f:3c:c4:71:79:7f:06:
         70:01:0c:60:fa:2d:ed:d5:e3:9e:c9:0e:04:2b:7b:77:4a:9e:
         58:24:4a:84:81:02:2d:4c:64:7b:49:ed:ad:16:84:80:f2:74:
         84:ab:f6:41:fc:3c:f7:95:79:84:fa:c7:16:2b:fc:83:65:fe:
         7e:bb:0d:a5:ad:3d:2d:c6:36:b7:a7:cd:08:66:73:41:a8:b4:
         73:54:de:cb:8e:12:98:f9:88:21:b4:3b:c2:68:6f:b4:0a:9d:
         eb:f8:51:8a:b4:f1:e7:2c:bd:b6:a7:f1:1d:ec:ac:4e:68:18:
         99:ce:88:a5:91:14:25:af:23:fe:ac:e8:ff:0e:59:4d:7f:0b:
         09:51:80:fb
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwY2Y4
MmYyNzQ2ZDBmNjBmZWI2OTAwZDA2ZDAxNzQ5ZmI5ZmQzM2JkMB4XDTIyMDMwODAz
MDAwMFoXDTI0MDMwODAzMDAwMFowMzExMC8GA1UEAxMoYjQyYmQ0NDY3NGMzYjcx
NWJkOTZmNmZlYTA3Nzk0YzI1OWEzODUyNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANzzgWaXunMjVWR0+LJwRrJIWWGo1qafcvnhWJklLAaYoRGYNLvq
47Lgor8UTi7xFqz9AN7QG6WsWZSJSJBqk9hGoKu34i4cv6/mrtCcPCHtRUKDi1og
jIBO3OVjaXevjHMiOpp2guT+eQZP9VayVj5+gIYijar1eS6EIOEKYKW1fJfO7TcT
EtueNENIzvGTDpQeR3qOlZ/8ilx9Mun1RZS9FeuC2hnsx5x4XMLdvQIJM6FT2nU8
+bcA6vVBXBqwyVg8OJdl420GsuRkpWaiA/kz6/YcV54JceGViExLCuRvRx3CDUox
cXYJHkMYpa2x4A/5rFfcP3Iqm0LjVM242zUCAwEAAaOCAmowggJmMB0GA1UdDgQW
BBTY63qWk0BDFB2m7AGTFOckIDIIKjAfBgNVHSMEGDAWgBSsS+8+MBfsOAqnFQC1
gMM+Je92sTAOBgNVHQ8BAf8EBAMCB4AwgZoGCCsGAQUFBwEBBIGNMIGKMIGHBggr
BgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNu
aWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1LzBjZjgyZjI3
NDZkMGY2MGZlYjY5MDBkMDZkMDE3NDlmYjlmZDMzYmQuY2VyMIGaBggrBgEFBQcB
CwSBjTCBijCBhwYIKwYBBQUHMAuGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMu
bmV0L3Jwa2kvbGFjbmljL2Y1YWQzMTMyLTA2NWUtNDhkYS1iYjFkLWNiNDRkMWZh
Y2Y4ZC9iNDJiZDQ0Njc0YzNiNzE1YmQ5NmY2ZmVhMDc3OTRjMjU5YTM4NTI0LnJv
YTCBjwYDVR0fBIGHMIGEMIGBoH+gfYZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjVhZDMxMzItMDY1ZS00OGRhLWJiMWQtY2I0NGQx
ZmFjZjhkLzBjZjgyZjI3NDZkMGY2MGZlYjY5MDBkMDZkMDE3NDlmYjlmZDMzYmQu
Y3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAd
MAwEAgABMAYDBAK1ruQwDQQCAAIwBwMFACgDyxAwDQYJKoZIhvcNAQELBQADggEB
AFc/BOkV9t+rMAiV5N/pO8fEvPV2m1/QLcniQUh/oN5oct2JEoZ8ti3kSEKkTKsk
kKftgCy+NTgkGePum6ObYDpl2WeTd/yGhlYmZ/OCalJcYdLFHlrgiIeI8DNr+F7p
Mx7YnH+F/3gs6kFK07E5BnmpekR2NyGXbzzEcXl/BnABDGD6Le3V457JDgQre3dK
nlgkSoSBAi1MZHtJ7a0WhIDydISr9kH8PPeVeYT6xxYr/INl/n67DaWtPS3GNren
zQhmc0GotHNU3suOEpj5iCG0O8Job7QKnev4UYq08ecsvban8R3srE5oGJnOiKWR
FCWvI/6s6P8OWU1/CwlRgPs=
-----END CERTIFICATE-----