Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f7b04195-7898-45d3-9726-d2e38fa7231f/93427bc4ee725938b93345bba8b4073285854e62.roa
File:                     93427bc4ee725938b93345bba8b4073285854e62.roa (raw, json)
Hash identifier:          i1DxVqMvYZfz82I/j5qWbUb6t73EAX2qc/EYxZC/JQM=
Subject key identifier:   F4:45:DB:BA:AA:E2:E6:CB:3A:8D:1D:DE:CE:C4:CB:A6:91:1A:EF:F6
Certificate issuer:       /CN=a33e7721b1bb581251023eb9a8a7a5ab5cbedbb4
Certificate serial:       0E0B7F
Authority key identifier: AD:14:68:D0:D2:7F:67:BE:31:0F:F2:48:87:9B:19:E2:DC:DB:00:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a33e7721b1bb581251023eb9a8a7a5ab5cbedbb4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f7b04195-7898-45d3-9726-d2e38fa7231f/93427bc4ee725938b93345bba8b4073285854e62.roa
Signing time:             Wed 24 Mar 2021 22:51:27 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     265632
IP address blocks:        131.196.8.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 920447 (0xe0b7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a33e7721b1bb581251023eb9a8a7a5ab5cbedbb4
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=93427bc4ee725938b93345bba8b4073285854e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5f:55:70:72:12:cb:eb:78:e7:2f:29:b4:ce:
                    b5:d9:d9:50:2e:43:77:35:d5:73:1f:4b:6b:ad:71:
                    48:65:5e:61:e6:03:c3:4b:2a:95:60:df:93:de:4e:
                    95:60:c7:6e:60:6b:0f:cf:fa:f9:b4:b7:93:7e:65:
                    da:a5:4b:b9:a9:3e:09:55:74:a6:5b:d4:1d:4c:32:
                    71:90:19:e5:cc:4f:86:20:57:ea:7f:cf:83:40:72:
                    05:e8:63:76:4c:b0:46:cc:65:cc:79:f0:d3:fe:95:
                    d2:1a:1e:bb:72:fa:dd:39:35:b1:46:41:1f:da:fb:
                    e1:92:78:22:d2:82:27:0e:07:16:3c:15:f2:db:95:
                    9a:9c:f0:c3:5a:0a:6d:a9:ba:bb:54:ee:47:09:a5:
                    0b:de:b0:80:64:25:35:44:61:e4:c6:d4:cd:28:a6:
                    46:aa:e0:23:c9:d8:37:38:02:65:ee:9d:dd:96:97:
                    29:d5:0b:d5:8c:23:97:2d:36:b2:76:5c:08:e5:3b:
                    a1:cb:32:2b:a0:3c:7f:23:fa:29:c3:4f:fb:ab:59:
                    22:08:e6:94:0d:92:c6:dc:b4:a6:70:2e:8d:dd:da:
                    58:d8:39:05:23:9c:9a:0d:dd:3f:b7:4f:65:8d:23:
                    46:f7:ee:92:ae:a6:a3:c8:f1:ef:17:fa:17:bf:ea:
                    d0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:45:DB:BA:AA:E2:E6:CB:3A:8D:1D:DE:CE:C4:CB:A6:91:1A:EF:F6
            X509v3 Authority Key Identifier:
                keyid:AD:14:68:D0:D2:7F:67:BE:31:0F:F2:48:87:9B:19:E2:DC:DB:00:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a33e7721b1bb581251023eb9a8a7a5ab5cbedbb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f7b04195-7898-45d3-9726-d2e38fa7231f/93427bc4ee725938b93345bba8b4073285854e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f7b04195-7898-45d3-9726-d2e38fa7231f/a33e7721b1bb581251023eb9a8a7a5ab5cbedbb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:59:cb:f9:4a:f3:93:2c:20:7a:b2:ab:11:c4:d0:0c:98:d3:
         ef:be:73:86:3b:e8:d4:07:89:29:63:fe:00:49:e0:e7:70:33:
         df:f6:f2:d1:22:0e:96:b3:71:96:d6:66:29:11:a5:54:2a:d9:
         54:cd:8b:db:3a:a2:30:1c:b9:d6:f4:99:d0:1b:36:4c:c4:9d:
         3e:ad:94:55:d5:c1:5d:ee:29:27:64:a1:d4:1a:f0:5d:59:cd:
         37:d1:d2:99:9e:0d:d4:16:c1:11:75:61:c2:55:22:5f:40:3e:
         c0:1a:47:8f:2a:94:7e:f7:ec:d9:bf:1e:73:aa:1b:25:e1:54:
         de:90:a7:3b:6a:31:b8:9e:fe:5e:67:8d:07:46:31:10:e0:5d:
         39:b3:34:87:9f:a6:92:bb:a3:26:f7:9e:2e:05:25:8c:7c:dc:
         b1:4b:53:71:f2:59:b5:03:63:f5:9d:4e:77:a5:de:39:5d:eb:
         3d:a4:51:11:01:a3:40:dc:84:5a:5c:94:2d:50:88:80:39:0f:
         90:c0:55:2f:d7:c7:5c:aa:53:95:01:9f:f7:6a:c3:6c:66:a6:
         38:e7:02:74:93:ea:b1:88:3e:0b:27:60:24:40:e8:1f:ba:47:
         be:b2:f9:2f:aa:77:5f:40:b5:87:5b:62:e0:7f:5e:de:b5:14:
         9c:14:2f:98
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDgt/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEz
M2U3NzIxYjFiYjU4MTI1MTAyM2ViOWE4YTdhNWFiNWNiZWRiYjQwHhcNMjEwMzI0
MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEyg5MzQyN2JjNGVlNzI1
OTM4YjkzMzQ1YmJhOGI0MDczMjg1ODU0ZTYyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkV9VcHISy+t45y8ptM612dlQLkN3NdVzH0trrXFIZV5h5gPD
SyqVYN+T3k6VYMduYGsPz/r5tLeTfmXapUu5qT4JVXSmW9QdTDJxkBnlzE+GIFfq
f8+DQHIF6GN2TLBGzGXMefDT/pXSGh67cvrdOTWxRkEf2vvhkngi0oInDgcWPBXy
25WanPDDWgptqbq7VO5HCaUL3rCAZCU1RGHkxtTNKKZGquAjydg3OAJl7p3dlpcp
1QvVjCOXLTaydlwI5TuhyzIroDx/I/opw0/7q1kiCOaUDZLG3LSmcC6N3dpY2DkF
I5yaDd0/t09ljSNG9+6SrqajyPHvF/oXv+rQZQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPRF27qq4ubLOo0d3s7Ey6aRGu/2MB8GA1UdIwQYMBaAFK0UaNDSf2e+MQ/y
SIebGeLc2wA9MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTMzZTc3
MjFiMWJiNTgxMjUxMDIzZWI5YThhN2E1YWI1Y2JlZGJiNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjdiMDQxOTUtNzg5OC00NWQzLTk3MjYtZDJlMzhm
YTcyMzFmLzkzNDI3YmM0ZWU3MjU5MzhiOTMzNDViYmE4YjQwNzMyODU4NTRlNjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mN2IwNDE5NS03ODk4LTQ1ZDMtOTcyNi1kMmUz
OGZhNzIzMWYvYTMzZTc3MjFiMWJiNTgxMjUxMDIzZWI5YThhN2E1YWI1Y2JlZGJi
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAoPECDANBgkqhkiG9w0BAQsFAAOCAQEANFnL+UrzkywgerKr
EcTQDJjT775zhjvo1AeJKWP+AEng53Az3/by0SIOlrNxltZmKRGlVCrZVM2L2zqi
MBy51vSZ0Bs2TMSdPq2UVdXBXe4pJ2Sh1BrwXVnNN9HSmZ4N1BbBEXVhwlUiX0A+
wBpHjyqUfvfs2b8ec6obJeFU3pCnO2oxuJ7+XmeNB0YxEOBdObM0h5+mkrujJvee
LgUljHzcsUtTcfJZtQNj9Z1Od6XeOV3rPaRREQGjQNyEWlyULVCIgDkPkMBVL9fH
XKpTlQGf92rDbGamOOcCdJPqsYg+CydgJEDoH7pHvrL5L6p3X0C1h1ti4H9e3rUU
nBQvmA==
-----END CERTIFICATE-----