Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f6f7cff-d142-4c55-a1da-30c88e2d7de7/9df9e11a6eac7ac38b75c742427daa97473e3c17.roa
File:                     9df9e11a6eac7ac38b75c742427daa97473e3c17.roa (raw, json)
Hash identifier:          Rei4FwoS8L/ZJGA0rC7ESfPEDyTC+mAvd0MyZItiSp4=
Subject key identifier:   6F:3E:88:BF:06:BE:6E:EE:B7:C2:12:B7:51:C1:A8:09:4B:75:78:A8
Certificate issuer:       /CN=4ef467a028415587646ee8e311e81adea47f6ec7
Certificate serial:       0532C6
Authority key identifier: 90:67:73:FC:82:AA:43:9F:49:7B:17:0E:E1:26:0B:6B:57:5B:C1:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ef467a028415587646ee8e311e81adea47f6ec7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f6f7cff-d142-4c55-a1da-30c88e2d7de7/9df9e11a6eac7ac38b75c742427daa97473e3c17.roa
Signing time:             Wed 18 Jan 2023 18:55:18 +0000
ROA not before:           Thu 15 Sep 2022 01:33:00 +0000
ROA not after:            Tue 17 Sep 2024 01:33:00 +0000
asID:                     270160
IP address blocks:        2806:3e7:2000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340678 (0x532c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef467a028415587646ee8e311e81adea47f6ec7
        Validity
            Not Before: Sep 15 01:33:00 2022 GMT
            Not After : Sep 17 01:33:00 2024 GMT
        Subject: CN=9df9e11a6eac7ac38b75c742427daa97473e3c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2c:9d:80:37:ca:8f:da:36:d8:d7:d4:8b:56:
                    56:d6:b2:4c:9f:95:92:01:7d:84:23:d3:39:cc:0c:
                    4f:97:3f:80:26:d7:4f:2c:5f:0c:fc:11:7e:11:67:
                    d5:73:7a:35:d9:6b:ac:32:15:97:24:1b:72:f4:b5:
                    2f:91:f8:47:97:4b:a3:84:16:a9:1f:a1:b5:09:20:
                    fc:f6:21:3f:d9:f0:2f:f2:d7:a8:92:7b:0c:13:98:
                    0e:65:77:3a:2f:63:ff:c9:fe:a6:30:5b:35:f8:8b:
                    5c:03:b7:bf:68:f9:8c:92:6a:9f:58:5c:37:8f:8b:
                    d5:62:6c:e2:f6:ef:77:51:43:2f:ee:12:66:37:37:
                    ee:b7:6a:7d:0c:d5:11:d1:a6:e8:3b:7a:56:73:54:
                    8f:fc:bc:85:ac:eb:92:c7:3c:8e:ac:a3:fc:3f:df:
                    d5:9b:bd:52:65:78:e9:ee:3e:e9:7b:33:26:eb:8e:
                    e0:33:41:f4:84:56:9f:02:1e:c2:0b:15:27:6c:ce:
                    69:b5:2b:fb:03:12:16:be:d8:1f:d4:47:93:3d:d0:
                    e1:19:7a:27:0d:1e:5a:86:23:71:fd:66:d0:34:fb:
                    cd:94:33:62:bc:d7:28:05:64:00:fb:e7:08:a6:61:
                    38:be:b8:83:f3:42:dc:d9:d3:0d:be:8a:b6:ce:25:
                    6d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3E:88:BF:06:BE:6E:EE:B7:C2:12:B7:51:C1:A8:09:4B:75:78:A8
            X509v3 Authority Key Identifier:
                keyid:90:67:73:FC:82:AA:43:9F:49:7B:17:0E:E1:26:0B:6B:57:5B:C1:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ef467a028415587646ee8e311e81adea47f6ec7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f6f7cff-d142-4c55-a1da-30c88e2d7de7/9df9e11a6eac7ac38b75c742427daa97473e3c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f6f7cff-d142-4c55-a1da-30c88e2d7de7/4ef467a028415587646ee8e311e81adea47f6ec7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e7:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         75:51:89:78:8f:82:cb:63:57:cf:79:38:2d:07:88:ed:db:a0:
         66:66:43:25:23:5c:62:1f:5a:c7:ae:f6:b8:8b:cc:ca:55:d5:
         64:b4:2d:ea:bb:b9:ba:52:94:00:ed:e1:15:b6:c4:76:9e:75:
         94:0a:09:6b:81:84:bf:38:c5:e3:cd:e9:ae:07:3f:3e:53:a5:
         09:b6:cc:0f:d3:13:f7:16:53:f2:9e:82:04:ce:c9:ab:b2:ad:
         8a:48:1d:c3:16:83:00:01:32:95:f2:81:7d:7b:c7:6b:ac:ce:
         a2:fb:21:5e:98:5c:e7:3d:e1:7c:08:0f:cb:27:ab:79:97:d8:
         11:dc:52:d6:28:28:d2:35:fb:e3:5c:18:00:55:46:d8:61:f2:
         45:04:60:ec:57:e5:af:1a:30:ab:a5:56:aa:3a:3d:3f:43:0e:
         35:45:da:dd:d6:13:46:9a:3b:cc:f6:1f:ce:cf:29:2c:36:6b:
         da:54:08:6c:f9:64:d9:f5:45:62:8f:43:fa:34:88:ac:85:ed:
         9e:bb:1e:2a:45:58:e7:09:e3:5e:59:82:cb:b3:a1:a3:32:34:
         2b:00:8b:3e:85:b5:ef:41:01:d5:f1:3e:1d:eb:4d:5e:bd:f2:
         4e:2c:3d:85:10:72:67:02:b0:73:5e:5d:12:89:92:12:1b:d3:
         81:df:aa:c5
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDBTLGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRl
ZjQ2N2EwMjg0MTU1ODc2NDZlZThlMzExZTgxYWRlYTQ3ZjZlYzcwHhcNMjIwOTE1
MDEzMzAwWhcNMjQwOTE3MDEzMzAwWjAzMTEwLwYDVQQDEyg5ZGY5ZTExYTZlYWM3
YWMzOGI3NWM3NDI0MjdkYWE5NzQ3M2UzYzE3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkiydgDfKj9o22NfUi1ZW1rJMn5WSAX2EI9M5zAxPlz+AJtdP
LF8M/BF+EWfVc3o12WusMhWXJBty9LUvkfhHl0ujhBapH6G1CSD89iE/2fAv8teo
knsME5gOZXc6L2P/yf6mMFs1+ItcA7e/aPmMkmqfWFw3j4vVYmzi9u93UUMv7hJm
Nzfut2p9DNUR0aboO3pWc1SP/LyFrOuSxzyOrKP8P9/Vm71SZXjp7j7pezMm647g
M0H0hFafAh7CCxUnbM5ptSv7AxIWvtgf1EeTPdDhGXonDR5ahiNx/WbQNPvNlDNi
vNcoBWQA++cIpmE4vriD80Lc2dMNvoq2ziVtSQIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFG8+iL8Gvm7ut8ISt1HBqAlLdXioMB8GA1UdIwQYMBaAFJBnc/yCqkOfSXsX
DuEmC2tXW8F9MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGVmNDY3
YTAyODQxNTU4NzY0NmVlOGUzMTFlODFhZGVhNDdmNmVjNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWY2ZjdjZmYtZDE0Mi00YzU1LWExZGEtMzBjODhl
MmQ3ZGU3LzlkZjllMTFhNmVhYzdhYzM4Yjc1Yzc0MjQyN2RhYTk3NDczZTNjMTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZjZmN2NmZi1kMTQyLTRjNTUtYTFkYS0zMGM4
OGUyZDdkZTcvNGVmNDY3YTAyODQxNTU4NzY0NmVlOGUzMTFlODFhZGVhNDdmNmVj
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGBCgGA+cgMA0GCSqGSIb3DQEBCwUAA4IBAQB1UYl4j4LLY1fP
eTgtB4jt26BmZkMlI1xiH1rHrva4i8zKVdVktC3qu7m6UpQA7eEVtsR2nnWUCglr
gYS/OMXjzemuBz8+U6UJtswP0xP3FlPynoIEzsmrsq2KSB3DFoMAATKV8oF9e8dr
rM6i+yFemFznPeF8CA/LJ6t5l9gR3FLWKCjSNfvjXBgAVUbYYfJFBGDsV+WvGjCr
pVaqOj0/Qw41Rdrd1hNGmjvM9h/OzyksNmvaVAhs+WTZ9UVij0P6NIishe2eux4q
RVjnCeNeWYLLs6GjMjQrAIs+hbXvQQHV8T4d601evfJOLD2FEHJnArBzXl0SiZIS
G9OB36rF
-----END CERTIFICATE-----