Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1bc68bb9-d21f-40f9-bad6-5de7ddcfa93b/52991e4bf2daedb4e119ca74ebc4060ba78b5a5c.roa
File:                     52991e4bf2daedb4e119ca74ebc4060ba78b5a5c.roa (raw, json)
Hash identifier:          EWV0FLHOMFPu7QPybCIAb0yGM8jcEoAK5BYNcFlrnhM=
Subject key identifier:   B4:87:B1:04:99:62:CE:1A:15:46:77:43:9D:4E:FA:41:03:05:17:F9
Certificate issuer:       /CN=6d083294d684852ceb012f4a73acee2ef7f7b85a
Certificate serial:       086235
Authority key identifier: ED:78:49:6E:9D:D6:8E:DE:4B:73:87:2E:90:DD:2F:66:8D:25:64:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6d083294d684852ceb012f4a73acee2ef7f7b85a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1bc68bb9-d21f-40f9-bad6-5de7ddcfa93b/52991e4bf2daedb4e119ca74ebc4060ba78b5a5c.roa
Signing time:             Tue 19 Oct 2021 12:55:55 +0000
ROA not before:           Tue 19 Oct 2021 03:00:00 +0000
ROA not after:            Thu 19 Oct 2023 03:00:00 +0000
asID:                     267913
IP address blocks:        2803:e60::/32 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549429 (0x86235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d083294d684852ceb012f4a73acee2ef7f7b85a
        Validity
            Not Before: Oct 19 03:00:00 2021 GMT
            Not After : Oct 19 03:00:00 2023 GMT
        Subject: CN=52991e4bf2daedb4e119ca74ebc4060ba78b5a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:80:89:e9:44:29:1c:9b:f0:60:3f:ed:79:
                    6b:1d:77:cf:fc:ca:d7:f4:27:66:7d:cd:3a:97:44:
                    c6:3d:55:c7:b5:a2:5e:ae:3e:49:4b:27:a5:a0:f5:
                    f6:fc:5d:32:95:ab:9d:fc:53:fd:4b:aa:3e:d4:bd:
                    81:85:e9:a9:17:b9:bf:c9:26:ce:9b:39:3d:84:c5:
                    2e:44:00:01:25:38:fc:eb:a0:74:f8:c8:47:19:5b:
                    1d:da:fc:0a:f9:5f:81:04:e3:00:66:d0:df:61:37:
                    32:c8:5d:2a:e0:46:63:f8:81:fe:1b:a0:3d:f5:0b:
                    fe:2f:90:80:6a:86:d4:7a:16:7f:04:0a:c1:ba:ec:
                    7e:c8:e0:e2:9e:ae:33:cc:75:df:83:c0:c1:7c:75:
                    3b:eb:94:98:01:7b:bb:63:7e:0d:a7:42:cb:27:7b:
                    38:7d:1c:d7:19:71:a1:3d:9b:e0:de:69:a6:46:a4:
                    b9:f6:47:17:41:6b:8e:12:02:b7:6c:2d:52:34:7c:
                    03:fd:b5:47:f2:8c:8e:fb:9b:dd:a6:a4:af:ed:4e:
                    f1:5f:db:74:c2:c3:16:ee:d0:0c:9f:15:e6:9c:38:
                    e6:36:63:37:45:70:aa:13:fe:b5:9f:d6:27:8d:67:
                    30:b7:86:41:9f:6e:33:03:42:86:29:97:a8:37:9d:
                    0d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:87:B1:04:99:62:CE:1A:15:46:77:43:9D:4E:FA:41:03:05:17:F9
            X509v3 Authority Key Identifier:
                keyid:ED:78:49:6E:9D:D6:8E:DE:4B:73:87:2E:90:DD:2F:66:8D:25:64:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6d083294d684852ceb012f4a73acee2ef7f7b85a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1bc68bb9-d21f-40f9-bad6-5de7ddcfa93b/52991e4bf2daedb4e119ca74ebc4060ba78b5a5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1bc68bb9-d21f-40f9-bad6-5de7ddcfa93b/6d083294d684852ceb012f4a73acee2ef7f7b85a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:d7:6c:32:96:45:45:b3:13:a4:48:19:3d:e1:6f:77:8f:9d:
         65:a6:57:d9:23:b9:77:bf:53:e1:58:e0:1e:f8:17:04:9c:5a:
         26:68:fb:5a:e0:91:27:30:19:0a:84:e1:9f:8d:50:5b:3b:c7:
         63:26:7b:08:6b:7a:e6:64:1b:5e:0f:b2:1d:02:37:46:df:b3:
         6f:8c:3a:99:cf:44:0d:56:fb:34:c4:de:aa:84:6a:7d:e9:46:
         dd:4f:24:66:97:b6:3c:c4:fb:6c:aa:4b:eb:84:6f:b4:bd:2e:
         db:12:46:c6:38:37:a4:28:0a:4c:85:9c:a2:42:2d:b4:11:14:
         3b:a4:ef:09:e1:51:ff:c4:8c:73:8a:09:cb:53:4f:41:48:e0:
         b4:d8:62:65:32:78:c2:a7:3b:4a:4b:ad:bd:f9:50:fc:55:1a:
         69:39:87:75:c9:8e:fe:0a:bd:11:97:95:16:c3:ea:fb:b5:24:
         01:d1:56:6f:25:e9:d4:7c:5b:af:55:2e:29:7c:6e:c0:07:61:
         5d:9f:6a:57:14:81:ad:c8:25:42:7d:97:d2:e4:ac:76:4d:75:
         17:c6:15:d7:fa:22:a9:db:82:62:04:25:d6:a9:db:ee:5f:af:
         32:4b:5d:d2:b6:ae:37:1f:85:1e:f7:49:0d:2f:60:45:02:c5:
         f8:df:be:6f
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDCGI1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZk
MDgzMjk0ZDY4NDg1MmNlYjAxMmY0YTczYWNlZTJlZjdmN2I4NWEwHhcNMjExMDE5
MDMwMDAwWhcNMjMxMDE5MDMwMDAwWjAzMTEwLwYDVQQDEyg1Mjk5MWU0YmYyZGFl
ZGI0ZTExOWNhNzRlYmM0MDYwYmE3OGI1YTVjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoe6AielEKRyb8GA/7XlrHXfP/MrX9Cdmfc06l0TGPVXHtaJe
rj5JSyeloPX2/F0ylaud/FP9S6o+1L2BhempF7m/ySbOmzk9hMUuRAABJTj866B0
+MhHGVsd2vwK+V+BBOMAZtDfYTcyyF0q4EZj+IH+G6A99Qv+L5CAaobUehZ/BArB
uux+yODinq4zzHXfg8DBfHU765SYAXu7Y34Np0LLJ3s4fRzXGXGhPZvg3mmmRqS5
9kcXQWuOEgK3bC1SNHwD/bVH8oyO+5vdpqSv7U7xX9t0wsMW7tAMnxXmnDjmNmM3
RXCqE/61n9YnjWcwt4ZBn24zA0KGKZeoN50NUQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFLSHsQSZYs4aFUZ3Q51O+kEDBRf5MB8GA1UdIwQYMBaAFO14SW6d1o7eS3OH
LpDdL2aNJWQsMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmQwODMy
OTRkNjg0ODUyY2ViMDEyZjRhNzNhY2VlMmVmN2Y3Yjg1YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWJjNjhiYjktZDIxZi00MGY5LWJhZDYtNWRlN2Rk
Y2ZhOTNiLzUyOTkxZTRiZjJkYWVkYjRlMTE5Y2E3NGViYzQwNjBiYTc4YjVhNWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xYmM2OGJiOS1kMjFmLTQwZjktYmFkNi01ZGU3
ZGRjZmE5M2IvNmQwODMyOTRkNjg0ODUyY2ViMDEyZjRhNzNhY2VlMmVmN2Y3Yjg1
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDDmAwDQYJKoZIhvcNAQELBQADggEBAHvXbDKWRUWzE6RI
GT3hb3ePnWWmV9kjuXe/U+FY4B74FwScWiZo+1rgkScwGQqE4Z+NUFs7x2Mmewhr
euZkG14Psh0CN0bfs2+MOpnPRA1W+zTE3qqEan3pRt1PJGaXtjzE+2yqS+uEb7S9
LtsSRsY4N6QoCkyFnKJCLbQRFDuk7wnhUf/EjHOKCctTT0FI4LTYYmUyeMKnO0pL
rb35UPxVGmk5h3XJjv4KvRGXlRbD6vu1JAHRVm8l6dR8W69VLil8bsAHYV2falcU
ga3IJUJ9l9LkrHZNdRfGFdf6IqnbgmIEJdap2+5frzJLXdK2rjcfhR73SQ0vYEUC
xfjfvm8=
-----END CERTIFICATE-----