Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f80cb3d1-8335-49f8-b600-49f350103b02/a77b364f61c69ca1f9543973df8340669794c4c3.roa
File:                     a77b364f61c69ca1f9543973df8340669794c4c3.roa (raw, json)
Hash identifier:          Itvn4EW85epJ2fnF1fOj6e4bDkIrJiEBI3eirBPVd34=
Subject key identifier:   27:05:BC:00:AF:1A:86:BF:2D:C3:C1:62:03:BB:BE:F4:19:11:A4:44
Certificate issuer:       /CN=bc60fae2b8b5d118366d0ffb0d7ecacf0167aed0
Certificate serial:       0DD1FC
Authority key identifier: 0A:26:3B:CE:B9:F7:4D:A9:83:42:09:5A:07:6F:E6:16:8D:F5:83:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc60fae2b8b5d118366d0ffb0d7ecacf0167aed0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f80cb3d1-8335-49f8-b600-49f350103b02/a77b364f61c69ca1f9543973df8340669794c4c3.roa
Signing time:             Wed 24 Mar 2021 14:46:05 +0000
ROA not before:           Wed 24 Mar 2021 14:46:05 +0000
ROA not after:            Tue 24 Mar 2026 14:46:05 +0000
asID:                     27843
IP address blocks:        181.177.224.0/19 maxlen: 24
                          190.102.128.0/19 maxlen: 25
                          190.12.64.0/20 maxlen: 25
                          190.12.80.0/20 maxlen: 24
                          191.98.128.0/18 maxlen: 24
                          2800:120::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905724 (0xdd1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc60fae2b8b5d118366d0ffb0d7ecacf0167aed0
        Validity
            Not Before: Mar 24 14:46:05 2021 GMT
            Not After : Mar 24 14:46:05 2026 GMT
        Subject: CN=a77b364f61c69ca1f9543973df8340669794c4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:57:7a:d1:e1:3a:72:5c:61:71:dc:63:67:d2:
                    8e:14:b4:f0:79:c1:68:31:c9:26:d3:72:ea:c8:d4:
                    59:8a:8b:2a:fe:19:57:33:94:c4:22:ab:1c:86:ee:
                    e1:19:96:18:42:91:ea:af:dc:e7:f7:ea:6c:44:0c:
                    0e:66:35:35:bd:ad:48:a1:68:60:c4:db:cf:f3:80:
                    de:aa:06:ac:82:49:53:a3:b9:ce:b4:96:43:7b:36:
                    b6:9a:93:08:dd:4a:45:8a:13:f4:68:03:59:88:4c:
                    b4:33:da:7f:ee:7f:ac:46:be:e9:2b:24:c9:fc:ff:
                    78:54:38:46:a1:5a:99:1d:47:2d:1f:f3:fb:49:47:
                    db:91:10:bd:92:a9:3b:4c:e2:89:74:e2:40:31:eb:
                    11:a3:df:4f:35:85:1e:6d:a6:ca:76:e7:60:d6:46:
                    68:59:de:7a:b0:77:93:52:ea:74:db:90:45:31:89:
                    45:4d:85:33:16:7e:a5:f8:11:0b:08:e0:c1:b5:77:
                    73:fd:84:89:01:5e:3c:e8:78:21:f8:14:5b:6f:9d:
                    56:cd:85:9e:1c:48:42:46:f1:e0:7c:8b:cd:8a:0e:
                    4d:3f:83:bb:f6:16:58:35:24:83:49:ed:05:b5:44:
                    4f:1d:04:7a:30:7c:ea:a6:12:2d:4d:2c:65:0c:55:
                    9b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:05:BC:00:AF:1A:86:BF:2D:C3:C1:62:03:BB:BE:F4:19:11:A4:44
            X509v3 Authority Key Identifier:
                keyid:0A:26:3B:CE:B9:F7:4D:A9:83:42:09:5A:07:6F:E6:16:8D:F5:83:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc60fae2b8b5d118366d0ffb0d7ecacf0167aed0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f80cb3d1-8335-49f8-b600-49f350103b02/a77b364f61c69ca1f9543973df8340669794c4c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f80cb3d1-8335-49f8-b600-49f350103b02/bc60fae2b8b5d118366d0ffb0d7ecacf0167aed0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.224.0/19
                  190.12.64.0/19
                  190.102.128.0/19
                  191.98.128.0/18
                IPv6:
                  2800:120::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:26:cc:8b:96:3d:1e:90:4c:49:9f:29:09:eb:7c:b0:86:08:
         c2:b4:d6:2b:76:37:3b:e2:28:52:fc:73:2b:a7:a7:67:f8:e7:
         f1:bb:e3:9f:1e:e3:62:cf:90:0b:ba:fe:07:b7:c7:52:e5:61:
         71:59:01:0d:92:e7:1b:03:c6:ea:4d:c8:cc:05:bd:ba:27:be:
         cd:25:d2:3b:4a:d2:02:ac:8a:61:58:71:6d:55:ca:4e:aa:04:
         73:fd:b9:1d:24:f4:06:eb:f4:75:05:77:25:05:d2:23:89:d1:
         db:ea:be:ea:aa:3d:58:2f:06:59:a9:4f:7b:19:da:34:80:c9:
         3c:77:e8:59:26:52:89:38:98:b5:90:85:27:ac:7d:96:8f:1a:
         db:95:ce:46:72:26:8b:aa:31:39:5a:47:be:c5:3e:16:07:00:
         60:21:a4:de:f8:1a:08:d3:4b:37:29:ad:88:1c:95:19:19:09:
         da:7d:40:e5:e2:bb:01:f3:81:b0:b4:18:b3:1e:a2:57:7d:e7:
         77:09:67:bd:b8:26:a6:92:a5:23:63:7d:a9:98:28:73:e7:e0:
         bc:81:f9:a8:17:6b:dc:e5:57:3d:c7:8c:55:89:96:c2:e7:5e:
         56:4c:eb:d5:2b:8d:42:c9:4c:0c:9c:03:be:28:c3:71:08:b0:
         1d:f4:48:bb
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIDDdH8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJj
NjBmYWUyYjhiNWQxMTgzNjZkMGZmYjBkN2VjYWNmMDE2N2FlZDAwHhcNMjEwMzI0
MTQ0NjA1WhcNMjYwMzI0MTQ0NjA1WjAzMTEwLwYDVQQDEyhhNzdiMzY0ZjYxYzY5
Y2ExZjk1NDM5NzNkZjgzNDA2Njk3OTRjNGMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo1d60eE6clxhcdxjZ9KOFLTwecFoMckm03LqyNRZiosq/hlX
M5TEIqschu7hGZYYQpHqr9zn9+psRAwOZjU1va1IoWhgxNvP84DeqgasgklTo7nO
tJZDeza2mpMI3UpFihP0aANZiEy0M9p/7n+sRr7pKyTJ/P94VDhGoVqZHUctH/P7
SUfbkRC9kqk7TOKJdOJAMesRo99PNYUebabKdudg1kZoWd56sHeTUup025BFMYlF
TYUzFn6l+BELCODBtXdz/YSJAV486Hgh+BRbb51WzYWeHEhCRvHgfIvNig5NP4O7
9hZYNSSDSe0FtURPHQR6MHzqphItTSxlDFWbVwIDAQABo4ICfDCCAngwHQYDVR0O
BBYEFCcFvACvGoa/LcPBYgO7vvQZEaREMB8GA1UdIwQYMBaAFAomO865902pg0IJ
Wgdv5haN9YPjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmM2MGZh
ZTJiOGI1ZDExODM2NmQwZmZiMGQ3ZWNhY2YwMTY3YWVkMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjgwY2IzZDEtODMzNS00OWY4LWI2MDAtNDlmMzUw
MTAzYjAyL2E3N2IzNjRmNjFjNjljYTFmOTU0Mzk3M2RmODM0MDY2OTc5NGM0YzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mODBjYjNkMS04MzM1LTQ5ZjgtYjYwMC00OWYz
NTAxMDNiMDIvYmM2MGZhZTJiOGI1ZDExODM2NmQwZmZiMGQ3ZWNhY2YwMTY3YWVk
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBABggrBgEFBQcBBwEB/wQx
MC8wHgQCAAEwGAMEBbWx4AMEBb4MQAMEBb5mgAMEBr9igDANBAIAAjAHAwUAKAAB
IDANBgkqhkiG9w0BAQsFAAOCAQEALSbMi5Y9HpBMSZ8pCet8sIYIwrTWK3Y3O+Io
UvxzK6enZ/jn8bvjnx7jYs+QC7r+B7fHUuVhcVkBDZLnGwPG6k3IzAW9uie+zSXS
O0rSAqyKYVhxbVXKTqoEc/25HST0Buv0dQV3JQXSI4nR2+q+6qo9WC8GWalPexna
NIDJPHfoWSZSiTiYtZCFJ6x9lo8a25XORnImi6oxOVpHvsU+FgcAYCGk3vgaCNNL
NymtiByVGRkJ2n1A5eK7AfOBsLQYsx6iV33ndwlnvbgmppKlI2N9qZgoc+fgvIH5
qBdr3OVXPceMVYmWwudeVkzr1SuNQslMDJwDvijDcQiwHfRIuw==
-----END CERTIFICATE-----