Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/965c451a3f6fc1af7ce2da1e1f4d6c7827852c44.roa
File:                     965c451a3f6fc1af7ce2da1e1f4d6c7827852c44.roa (raw, json)
Hash identifier:          TZbQoGI+Mawzj7YqYzQ2qMA2XEn9SrUXOCc3qf0FsCw=
Subject key identifier:   8B:F6:7D:CA:49:A2:BD:C7:2F:37:B6:5E:FC:E7:62:8A:32:46:9E:18
Certificate issuer:       /CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
Certificate serial:       16B49D
Authority key identifier: 54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/965c451a3f6fc1af7ce2da1e1f4d6c7827852c44.roa
Signing time:             Thu 16 Mar 2023 12:44:04 +0000
ROA not before:           Fri 24 Feb 2023 13:12:28 +0000
ROA not after:            Fri 28 Feb 2025 13:12:28 +0000
asID:                     52468
IP address blocks:        2803:ee60:30::/44 maxlen: 44
                          2803:ee60:40::/44 maxlen: 44
                          2803:ee60:50::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1488029 (0x16b49d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
        Validity
            Not Before: Feb 24 13:12:28 2023 GMT
            Not After : Feb 28 13:12:28 2025 GMT
        Subject: CN=965c451a3f6fc1af7ce2da1e1f4d6c7827852c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f0:86:94:a9:55:2c:ad:7b:eb:0a:f0:c3:c3:
                    53:6f:27:11:49:6d:ee:f9:c2:15:61:9a:14:65:df:
                    9e:7d:d9:eb:a8:af:39:9a:47:54:c4:63:e7:e9:f2:
                    01:ff:6d:bd:91:30:51:e3:74:90:73:34:15:52:cd:
                    1c:6b:64:cc:da:21:4a:e7:a5:f0:06:f3:2b:43:45:
                    8d:a6:ee:45:6e:8d:75:ee:f0:c9:f1:f5:d9:ca:58:
                    a6:67:60:9e:ef:98:9c:2f:82:a0:d8:bc:5a:41:e5:
                    e2:13:ed:31:01:62:d1:be:8f:16:4a:37:19:5d:4a:
                    19:57:ba:e7:04:d5:9f:6a:f0:44:fc:cb:fc:1f:45:
                    f0:ae:65:71:b2:31:02:bb:d8:58:82:f4:6b:bb:6f:
                    5a:45:27:0a:07:ed:f5:9b:7f:88:6c:a0:43:0b:5e:
                    79:9c:35:16:09:8f:ae:fa:cd:3a:58:3a:f6:6d:18:
                    5f:42:9c:bc:84:c4:9d:73:ab:38:69:e1:8d:dc:5f:
                    02:7c:6a:40:66:d7:f7:b5:f1:59:31:16:8f:10:38:
                    31:5d:53:96:64:5d:2c:4f:6c:db:2f:18:f5:07:07:
                    52:81:77:b8:af:ab:2a:03:c2:75:44:ae:86:81:0a:
                    0e:cc:95:04:34:bf:d5:43:b2:04:63:a4:90:49:6a:
                    57:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F6:7D:CA:49:A2:BD:C7:2F:37:B6:5E:FC:E7:62:8A:32:46:9E:18
            X509v3 Authority Key Identifier:
                keyid:54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/965c451a3f6fc1af7ce2da1e1f4d6c7827852c44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/27a5488123c2689d948f7eb4b73b6005b88be1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee60:30::-2803:ee60:5f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         19:79:19:4f:6a:7f:9b:cd:38:f0:5f:91:6a:c9:f0:e1:ff:8e:
         35:33:e3:d4:b1:7a:45:23:b2:a9:c8:f1:2d:cd:0e:86:35:19:
         51:05:ec:c0:b5:f2:fa:a9:14:f7:0e:5f:a4:e5:d3:01:62:9f:
         81:4e:77:4d:0d:5d:7f:90:8d:c2:39:1b:34:c7:2e:32:3d:4b:
         ec:62:d3:9e:0a:0e:56:f6:79:31:eb:aa:d9:7d:af:a8:3d:45:
         c3:7c:95:58:c2:e2:c7:ec:5c:e7:92:c2:ce:84:48:8e:08:7c:
         0c:e6:b2:13:ac:d0:1f:8e:9d:f9:03:45:63:5b:b2:b3:c7:bf:
         fa:80:02:e2:a6:58:b4:1d:cf:3a:e8:d1:0d:02:98:cf:8e:3a:
         5b:2a:97:41:09:bf:a6:22:0c:52:4d:ab:cf:6b:4c:ea:13:66:
         b7:8c:6a:f4:fc:4a:82:66:a6:89:dc:f6:cb:28:20:90:14:e1:
         5f:e9:ee:e4:49:0d:84:e1:28:69:57:a2:d4:d3:26:79:5f:fa:
         ce:0a:eb:2d:5f:db:52:a6:14:6c:2d:e7:9e:a8:8f:9c:f8:2f:
         04:f8:21:4f:b5:59:a1:6c:ed:eb:f5:41:c4:96:4c:4d:87:d8:
         65:b8:97:08:1b:2e:ab:43:38:40:95:49:c3:51:04:72:c3:51:
         eb:7c:20:3f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDFrSdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI3
YTU0ODgxMjNjMjY4OWQ5NDhmN2ViNGI3M2I2MDA1Yjg4YmUxY2EwHhcNMjMwMjI0
MTMxMjI4WhcNMjUwMjI4MTMxMjI4WjAzMTEwLwYDVQQDEyg5NjVjNDUxYTNmNmZj
MWFmN2NlMmRhMWUxZjRkNmM3ODI3ODUyYzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjfCGlKlVLK176wrww8NTbycRSW3u+cIVYZoUZd+efdnrqK85
mkdUxGPn6fIB/229kTBR43SQczQVUs0ca2TM2iFK56XwBvMrQ0WNpu5Fbo117vDJ
8fXZylimZ2Ce75icL4Kg2LxaQeXiE+0xAWLRvo8WSjcZXUoZV7rnBNWfavBE/Mv8
H0XwrmVxsjECu9hYgvRru29aRScKB+31m3+IbKBDC155nDUWCY+u+s06WDr2bRhf
Qpy8hMSdc6s4aeGN3F8CfGpAZtf3tfFZMRaPEDgxXVOWZF0sT2zbLxj1BwdSgXe4
r6sqA8J1RK6GgQoOzJUENL/VQ7IEY6SQSWpX7wIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFIv2fcpJor3HLze2XvznYooyRp4YMB8GA1UdIwQYMBaAFFTxb7oiz70Ohlqv
bWdDhSTEYsJIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjdhNTQ4
ODEyM2MyNjg5ZDk0OGY3ZWI0YjczYjYwMDViODhiZTFjYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDlkODI3NTQtOTgwNi00MGU3LWI0NmItYzYxMDc0
NTk0NzMyLzk2NWM0NTFhM2Y2ZmMxYWY3Y2UyZGExZTFmNGQ2Yzc4Mjc4NTJjNDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wOWQ4Mjc1NC05ODA2LTQwZTctYjQ2Yi1jNjEw
NzQ1OTQ3MzIvMjdhNTQ4ODEyM2MyNjg5ZDk0OGY3ZWI0YjczYjYwMDViODhiZTFj
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwGgQCAAIwFDASAwcEKAPuYAAwAwcFKAPuYABAMA0GCSqGSIb3DQEBCwUAA4IB
AQAZeRlPan+bzTjwX5FqyfDh/441M+PUsXpFI7KpyPEtzQ6GNRlRBezAtfL6qRT3
Dl+k5dMBYp+BTndNDV1/kI3CORs0xy4yPUvsYtOeCg5W9nkx66rZfa+oPUXDfJVY
wuLH7FznksLOhEiOCHwM5rITrNAfjp35A0VjW7Kzx7/6gALipli0Hc866NENApjP
jjpbKpdBCb+mIgxSTavPa0zqE2a3jGr0/EqCZqaJ3PbLKCCQFOFf6e7kSQ2E4Shp
V6LU0yZ5X/rOCustX9tSphRsLeeeqI+c+C8E+CFPtVmhbO3r9UHElkxNh9hluJcI
Gy6rQzhAlUnDUQRyw1HrfCA/
-----END CERTIFICATE-----