Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/588324da8b1e550ac6177ccdcc39989ad3fa3f4f.roa
File:                     588324da8b1e550ac6177ccdcc39989ad3fa3f4f.roa (raw, json)
Hash identifier:          8Z8uKaF4hRB8p1/9ScmQgBxA9zDe/pi5dE2lbkRSxng=
Subject key identifier:   F3:EE:64:CC:33:0D:01:81:13:D2:4C:48:7A:CA:25:25:19:10:1E:F0
Certificate issuer:       /CN=16b44d2a0bda515371a4ded869185f017218c9f2
Certificate serial:       1319FF
Authority key identifier: 8B:D4:A3:27:C7:20:6E:AB:E2:43:83:6B:43:71:C4:D1:F1:5F:A1:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16b44d2a0bda515371a4ded869185f017218c9f2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/588324da8b1e550ac6177ccdcc39989ad3fa3f4f.roa
Signing time:             Tue 09 Nov 2021 14:05:37 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     271970
IP address blocks:        190.103.84.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1251839 (0x1319ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b44d2a0bda515371a4ded869185f017218c9f2
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=588324da8b1e550ac6177ccdcc39989ad3fa3f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:05:f5:0f:2c:39:b1:13:af:ac:94:97:72:d8:
                    47:ab:40:91:b1:cb:b7:43:d2:6a:45:d0:03:a9:8a:
                    32:68:a2:d2:58:50:0e:a3:2f:60:7d:d4:55:f1:6b:
                    98:7a:ca:12:1e:19:33:8b:77:df:61:8e:e4:95:41:
                    18:5c:db:e2:1e:2b:84:d9:cf:8b:c8:46:d8:ae:ef:
                    ec:16:7b:c1:ac:46:5e:e9:3e:a4:dc:7f:f2:a2:2f:
                    95:0f:2c:10:ce:de:93:08:c0:fc:c2:3f:f7:02:93:
                    32:b8:3f:df:c6:cd:56:9d:de:fc:04:6f:98:a5:67:
                    48:b8:e3:99:9a:10:57:40:05:a2:3b:ec:ef:0b:4f:
                    62:31:39:8a:93:3e:1d:02:e8:7c:3b:6c:48:93:e2:
                    50:fc:d9:64:56:79:52:9d:6d:df:b1:12:73:16:72:
                    d3:88:ca:1f:80:46:47:65:15:5f:59:a7:a6:0e:6d:
                    7d:3e:eb:a1:f3:dd:8f:78:79:54:d5:89:fc:dd:1f:
                    03:36:8b:89:3f:ec:0c:c9:a9:87:c3:99:38:68:f5:
                    71:e2:c7:02:86:48:c9:62:2a:9a:96:74:3b:9f:5a:
                    2d:8f:66:26:15:8c:01:40:7f:b3:08:ce:20:ad:c6:
                    56:ac:36:1b:50:ad:66:f0:b2:f4:13:94:9c:a6:a6:
                    94:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EE:64:CC:33:0D:01:81:13:D2:4C:48:7A:CA:25:25:19:10:1E:F0
            X509v3 Authority Key Identifier:
                keyid:8B:D4:A3:27:C7:20:6E:AB:E2:43:83:6B:43:71:C4:D1:F1:5F:A1:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16b44d2a0bda515371a4ded869185f017218c9f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/588324da8b1e550ac6177ccdcc39989ad3fa3f4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/16b44d2a0bda515371a4ded869185f017218c9f2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:59:08:2b:84:ef:26:95:1d:3f:34:96:3c:e1:4c:92:64:0d:
         79:12:e8:37:58:97:48:9f:c7:40:f4:23:5a:9a:a6:22:10:f6:
         d2:6c:ac:78:c0:70:9f:f7:e3:02:1c:d0:65:3b:e6:bb:cc:64:
         aa:89:7e:ae:63:62:56:ff:71:5c:9c:3c:b3:d3:a1:62:f2:e5:
         64:ee:25:4f:5e:10:61:d4:16:da:96:49:20:d1:75:f0:6d:7e:
         a1:1a:c1:46:9d:b2:13:71:69:0b:85:80:ba:0f:5f:f4:67:5e:
         79:9e:11:41:4c:97:ba:e5:fa:3d:24:d8:31:7e:68:09:1f:f5:
         a2:20:7b:63:d9:d9:07:10:96:67:83:31:f8:ec:c3:d6:db:7f:
         c9:3a:3f:24:87:c0:e8:e5:1e:81:08:81:1e:9f:23:d0:63:2a:
         08:ee:56:44:4a:a7:9e:f1:40:10:01:7a:20:58:f2:32:8c:bc:
         37:bf:61:39:33:c4:fb:33:9f:b7:8a:81:88:e8:12:26:8e:b4:
         55:a1:72:d4:72:79:f1:f3:83:10:6a:73:70:e4:fe:3e:e4:68:
         30:b4:12:73:85:e5:fb:d3:97:2e:40:a0:b4:84:cb:6c:32:ab:
         87:fe:7b:23:59:48:1e:9d:22:28:ce:32:18:d1:69:4b:62:66:
         6f:35:8e:44
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDExn/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE2
YjQ0ZDJhMGJkYTUxNTM3MWE0ZGVkODY5MTg1ZjAxNzIxOGM5ZjIwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg1ODgzMjRkYThiMWU1
NTBhYzYxNzdjY2RjYzM5OTg5YWQzZmEzZjRmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuwX1Dyw5sROvrJSXcthHq0CRscu3Q9JqRdADqYoyaKLSWFAO
oy9gfdRV8WuYesoSHhkzi3ffYY7klUEYXNviHiuE2c+LyEbYru/sFnvBrEZe6T6k
3H/yoi+VDywQzt6TCMD8wj/3ApMyuD/fxs1Wnd78BG+YpWdIuOOZmhBXQAWiO+zv
C09iMTmKkz4dAuh8O2xIk+JQ/NlkVnlSnW3fsRJzFnLTiMofgEZHZRVfWaemDm19
Puuh892PeHlU1Yn83R8DNouJP+wMyamHw5k4aPVx4scChkjJYiqalnQ7n1otj2Ym
FYwBQH+zCM4grcZWrDYbUK1m8LL0E5ScpqaUMwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPPuZMwzDQGBE9JMSHrKJSUZEB7wMB8GA1UdIwQYMBaAFIvUoyfHIG6r4kOD
a0NxxNHxX6EkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTZiNDRk
MmEwYmRhNTE1MzcxYTRkZWQ4NjkxODVmMDE3MjE4YzlmMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmFhOGE1MWQtZjllYy00ZDEwLWFmNmEtOTM0YmU0
NTU2ZTVlLzU4ODMyNGRhOGIxZTU1MGFjNjE3N2NjZGNjMzk5ODlhZDNmYTNmNGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mYWE4YTUxZC1mOWVjLTRkMTAtYWY2YS05MzRi
ZTQ1NTZlNWUvMTZiNDRkMmEwYmRhNTE1MzcxYTRkZWQ4NjkxODVmMDE3MjE4Yzlm
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr5nVDANBgkqhkiG9w0BAQsFAAOCAQEAGFkIK4TvJpUdPzSW
POFMkmQNeRLoN1iXSJ/HQPQjWpqmIhD20myseMBwn/fjAhzQZTvmu8xkqol+rmNi
Vv9xXJw8s9OhYvLlZO4lT14QYdQW2pZJINF18G1+oRrBRp2yE3FpC4WAug9f9Gde
eZ4RQUyXuuX6PSTYMX5oCR/1oiB7Y9nZBxCWZ4Mx+OzD1tt/yTo/JIfA6OUegQiB
Hp8j0GMqCO5WREqnnvFAEAF6IFjyMoy8N79hOTPE+zOft4qBiOgSJo60VaFy1HJ5
8fODEGpzcOT+PuRoMLQSc4Xl+9OXLkCgtITLbDKrh/57I1lIHp0iKM4yGNFpS2Jm
bzWORA==
-----END CERTIFICATE-----