Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/63a595f69fd80cc60eeac630eff2d50746c6170e.roa
File:                     63a595f69fd80cc60eeac630eff2d50746c6170e.roa (raw, json)
Hash identifier:          Sn75RHS1+YDAU0QDMr6xMSC4itDitfVA0hV4fC8We44=
Subject key identifier:   67:49:1C:DE:A4:DE:EE:F4:BF:B8:56:32:2E:DD:E2:07:53:D7:21:56
Certificate issuer:       /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial:       1F56A3
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/63a595f69fd80cc60eeac630eff2d50746c6170e.roa
Signing time:             Mon 17 Apr 2023 18:28:05 +0000
ROA not before:           Sun 16 Apr 2023 18:28:05 +0000
ROA not after:            Thu 17 Apr 2025 18:28:05 +0000
asID:                     262166
IP address blocks:        168.234.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2053795 (0x1f56a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
        Validity
            Not Before: Apr 16 18:28:05 2023 GMT
            Not After : Apr 17 18:28:05 2025 GMT
        Subject: CN=63a595f69fd80cc60eeac630eff2d50746c6170e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f0:b2:d0:ed:31:cb:e4:02:5f:c4:b8:98:ec:
                    dd:e7:8d:97:30:0a:6c:4b:ed:4f:3f:3b:f7:e4:96:
                    e5:1f:1e:90:9c:80:3d:be:37:2b:10:11:e2:54:a3:
                    b3:bd:39:1a:e4:af:a4:9f:3a:32:1d:73:5d:ee:49:
                    69:b9:f9:53:56:7a:f1:db:a3:69:07:b8:ed:13:62:
                    4e:c5:ca:e1:71:2a:49:c9:dd:80:a3:06:94:7c:cc:
                    08:0f:2d:cf:f7:b9:6c:d7:c6:42:94:ff:88:76:8e:
                    2f:df:56:58:49:3c:46:80:ac:a2:9c:46:04:b9:bc:
                    2b:a3:9e:a0:16:df:98:13:c2:31:74:94:31:a9:e7:
                    aa:62:8a:0a:f0:1c:a8:a7:06:64:61:36:86:8b:0f:
                    e6:10:ba:3b:66:08:fc:8e:f3:19:37:99:d6:16:4d:
                    85:ad:19:3e:b2:c3:ef:b6:eb:b1:f0:a2:67:69:72:
                    30:fa:d2:10:82:07:92:1f:91:5f:38:a0:97:6d:e6:
                    ff:ad:6c:7f:8e:ab:f3:a4:88:33:7e:e1:ae:bb:81:
                    69:b1:42:2f:5f:52:ed:21:f1:89:c5:01:7c:b7:a8:
                    7d:6b:02:0d:1b:4f:82:2a:62:0c:02:bf:eb:91:c4:
                    e2:fa:ca:44:1c:3c:96:f9:b9:2c:e2:f0:65:f2:53:
                    64:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:49:1C:DE:A4:DE:EE:F4:BF:B8:56:32:2E:DD:E2:07:53:D7:21:56
            X509v3 Authority Key Identifier:
                keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/63a595f69fd80cc60eeac630eff2d50746c6170e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         39:49:ba:11:85:10:b2:c1:e2:12:7a:f4:f6:e2:1b:1f:c9:23:
         b7:8f:f1:12:f7:b9:4b:3f:a8:1f:9b:e4:88:b6:28:d6:fc:30:
         49:b5:a5:3e:90:15:aa:e1:ef:5c:e5:65:93:90:cb:de:83:e9:
         96:91:a4:e4:29:fe:d5:72:4c:13:65:c3:12:18:d1:32:0c:bf:
         62:74:19:e6:92:ab:68:d9:b6:14:51:cc:7b:69:b7:a4:12:82:
         9c:09:2b:31:02:5f:31:9d:1a:b0:5c:17:de:ac:fd:4f:15:ad:
         27:8f:bf:6c:5d:1d:e8:1e:1e:68:16:29:0f:fc:3e:d5:36:f5:
         d1:6d:e0:da:e6:28:6a:d4:59:f7:ff:6b:14:ca:e0:67:b0:6f:
         31:22:76:ce:f1:e4:21:8b:fc:9b:24:ad:34:68:b6:a8:4a:4f:
         0b:e6:93:55:e1:bc:27:66:95:d6:65:c3:09:00:5d:b7:0e:d2:
         df:aa:16:ca:20:b5:6c:21:ba:5c:fe:10:15:0f:15:08:dc:10:
         16:25:3c:bd:c6:46:f0:8c:1e:cd:3e:d6:6c:fd:76:7d:64:43:
         a3:c5:24:de:d4:ba:f9:92:51:39:1f:a1:7d:70:36:66:f2:f6:
         02:3b:a4:b8:b9:c2:86:a8:8e:e7:b4:c3:c8:b5:06:d8:1c:7d:
         31:31:b5:d9
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDH1ajMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM3
YTA3NDBlMGI0NjJiMzZmZDIyN2IyMjBhZmYzMzUzOGI5MzJhNzIwHhcNMjMwNDE2
MTgyODA1WhcNMjUwNDE3MTgyODA1WjAzMTEwLwYDVQQDEyg2M2E1OTVmNjlmZDgw
Y2M2MGVlYWM2MzBlZmYyZDUwNzQ2YzYxNzBlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3vCy0O0xy+QCX8S4mOzd542XMApsS+1PPzv35JblHx6QnIA9
vjcrEBHiVKOzvTka5K+knzoyHXNd7klpuflTVnrx26NpB7jtE2JOxcrhcSpJyd2A
owaUfMwIDy3P97ls18ZClP+Ido4v31ZYSTxGgKyinEYEubwro56gFt+YE8IxdJQx
qeeqYooK8ByopwZkYTaGiw/mELo7Zgj8jvMZN5nWFk2FrRk+ssPvtuux8KJnaXIw
+tIQggeSH5FfOKCXbeb/rWx/jqvzpIgzfuGuu4FpsUIvX1LtIfGJxQF8t6h9awIN
G0+CKmIMAr/rkcTi+spEHDyW+bks4vBl8lNk8QIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFGdJHN6k3u70v7hWMi7d4gdT1yFWMB8GA1UdIwQYMBaAFM7h2MxrM3HBmchw
TET0Qk7gI9K+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzdhMDc0
MGUwYjQ2MmIzNmZkMjI3YjIyMGFmZjMzNTM4YjkzMmE3Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjViODQ1ZGYtYjQ0NS00ZTlhLTliN2UtMzQxZWM0
ZjY5NDUzLzYzYTU5NWY2OWZkODBjYzYwZWVhYzYzMGVmZjJkNTA3NDZjNjE3MGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mNWI4NDVkZi1iNDQ1LTRlOWEtOWI3ZS0zNDFl
YzRmNjk0NTMvMzdhMDc0MGUwYjQ2MmIzNmZkMjI3YjIyMGFmZjMzNTM4YjkzMmE3
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDAKjqMA0GCSqGSIb3DQEBCwUAA4IBAQA5SboRhRCyweISevT2
4hsfySO3j/ES97lLP6gfm+SItijW/DBJtaU+kBWq4e9c5WWTkMveg+mWkaTkKf7V
ckwTZcMSGNEyDL9idBnmkqto2bYUUcx7abekEoKcCSsxAl8xnRqwXBferP1PFa0n
j79sXR3oHh5oFikP/D7VNvXRbeDa5ihq1Fn3/2sUyuBnsG8xInbO8eQhi/ybJK00
aLaoSk8L5pNV4bwnZpXWZcMJAF23DtLfqhbKILVsIbpc/hAVDxUI3BAWJTy9xkbw
jB7NPtZs/XZ9ZEOjxSTe1Lr5klE5H6F9cDZm8vYCO6S4ucKGqI7ntMPItQbYHH0x
MbXZ
-----END CERTIFICATE-----