Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27ad8d62-5452-47d0-b425-505bad9890c3/ab75a17e0f65a515198d42169c542efb070dc678.roa
File:                     ab75a17e0f65a515198d42169c542efb070dc678.roa (raw, json)
Hash identifier:          MpjfoVxY/adl1GfFM2uxVEV79tmRXu3df9fRh2CFCiU=
Subject key identifier:   CF:89:D7:6E:C6:2F:86:45:AD:AE:64:32:61:3E:11:E3:3C:37:DE:DB
Certificate issuer:       /CN=19fdaf7213e9c0035d7ccdc05f07ceca37cdfdeb
Certificate serial:       B566
Authority key identifier: CE:65:61:1E:20:D7:63:69:5B:1B:57:37:32:E3:CB:FA:80:EF:E7:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19fdaf7213e9c0035d7ccdc05f07ceca37cdfdeb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27ad8d62-5452-47d0-b425-505bad9890c3/ab75a17e0f65a515198d42169c542efb070dc678.roa
Signing time:             Tue 15 Mar 2022 16:27:08 +0000
ROA not before:           Fri 18 Feb 2022 03:00:00 +0000
ROA not after:            Sun 18 Feb 2024 03:00:00 +0000
asID:                     272004
IP address blocks:        2803:6910::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sat 17 Feb 2024 07:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46438 (0xb566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19fdaf7213e9c0035d7ccdc05f07ceca37cdfdeb
        Validity
            Not Before: Feb 18 03:00:00 2022 GMT
            Not After : Feb 18 03:00:00 2024 GMT
        Subject: CN=ab75a17e0f65a515198d42169c542efb070dc678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:45:99:61:8e:5f:eb:8e:2a:db:11:40:93:c1:
                    ce:f0:a2:1c:18:31:e5:e9:fb:1b:54:dc:89:ed:23:
                    a0:82:74:c8:c1:26:77:f5:cd:a4:39:24:ac:13:d8:
                    ce:ac:9c:72:b1:e0:15:2c:69:c0:2a:62:d1:1a:a3:
                    02:ed:db:64:aa:e2:75:a3:93:f8:b2:f3:5a:23:b1:
                    69:81:ba:3a:24:40:38:d0:59:6f:e1:6b:b0:7b:61:
                    9d:b3:f9:92:de:dd:4e:81:b6:c2:59:fc:d4:a6:c0:
                    63:f2:e3:c3:2e:e7:9a:cd:8f:3d:31:28:16:55:04:
                    e3:ee:98:2d:e7:3f:3f:a2:44:df:db:c3:80:95:32:
                    ae:7a:57:ac:d9:2c:ab:09:8e:ce:53:f0:b7:39:ed:
                    df:26:8f:d3:57:17:01:6a:5e:04:6e:e5:07:f0:23:
                    dd:c2:f2:70:50:cf:0a:f2:6d:63:eb:f7:95:6f:9f:
                    f6:c7:1b:b8:91:ae:23:07:7f:c4:22:b9:1e:b1:91:
                    7e:e7:7a:8a:08:7f:5f:fa:db:0a:81:de:37:fd:e1:
                    b9:c0:82:70:8a:55:ef:f6:74:c6:fd:82:26:81:f3:
                    94:9c:ed:2b:be:21:ca:81:98:7e:35:00:65:3f:e6:
                    3b:b0:69:29:9b:28:5e:ed:9c:86:f4:06:7a:b0:eb:
                    19:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:89:D7:6E:C6:2F:86:45:AD:AE:64:32:61:3E:11:E3:3C:37:DE:DB
            X509v3 Authority Key Identifier:
                keyid:CE:65:61:1E:20:D7:63:69:5B:1B:57:37:32:E3:CB:FA:80:EF:E7:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19fdaf7213e9c0035d7ccdc05f07ceca37cdfdeb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27ad8d62-5452-47d0-b425-505bad9890c3/ab75a17e0f65a515198d42169c542efb070dc678.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27ad8d62-5452-47d0-b425-505bad9890c3/19fdaf7213e9c0035d7ccdc05f07ceca37cdfdeb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6910::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:30:1c:0d:34:0c:89:df:50:da:ae:06:7e:bc:56:52:65:9d:
         bc:80:ee:8f:19:a5:5d:39:8b:5c:3c:e4:c5:4d:91:5b:c2:d1:
         50:09:3a:80:cf:86:26:4a:a8:db:29:1a:78:6d:43:48:d1:a3:
         47:cb:15:df:c1:1d:03:f8:9c:5f:4b:37:e8:32:4f:35:db:85:
         93:4a:49:5b:27:92:00:85:29:7b:47:6d:68:12:6e:81:8e:7d:
         6c:d4:7f:2f:de:c6:7f:c7:3e:e1:64:27:86:57:b0:ba:86:52:
         ec:62:1c:98:c3:f9:90:a7:14:fd:2c:8c:f4:6e:03:e4:db:59:
         17:b7:92:92:61:e7:43:18:e9:1d:13:fc:c0:3d:a5:f3:6a:15:
         06:41:bf:7f:b6:f8:25:55:7b:a4:c9:8d:37:cf:72:39:d0:30:
         7d:5c:e6:60:9a:90:b2:6b:45:99:9c:2b:7a:ff:7d:33:c5:bb:
         82:2c:87:63:9a:3a:75:15:fc:7a:31:0c:d9:7b:4d:5d:fa:cf:
         7d:53:03:f3:06:90:db:22:ba:be:fb:aa:ba:39:e7:82:97:ce:
         29:55:2a:78:c7:4a:62:19:36:89:cc:33:8c:8f:d3:f0:32:74:
         ee:58:07:b6:bb:50:d0:d6:4b:30:0a:ec:f6:33:3b:9d:2f:f7:
         05:48:44:58
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDALVmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE5
ZmRhZjcyMTNlOWMwMDM1ZDdjY2RjMDVmMDdjZWNhMzdjZGZkZWIwHhcNMjIwMjE4
MDMwMDAwWhcNMjQwMjE4MDMwMDAwWjAzMTEwLwYDVQQDEyhhYjc1YTE3ZTBmNjVh
NTE1MTk4ZDQyMTY5YzU0MmVmYjA3MGRjNjc4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvEWZYY5f644q2xFAk8HO8KIcGDHl6fsbVNyJ7SOggnTIwSZ3
9c2kOSSsE9jOrJxyseAVLGnAKmLRGqMC7dtkquJ1o5P4svNaI7Fpgbo6JEA40Flv
4Wuwe2Gds/mS3t1OgbbCWfzUpsBj8uPDLueazY89MSgWVQTj7pgt5z8/okTf28OA
lTKueles2SyrCY7OU/C3Oe3fJo/TVxcBal4EbuUH8CPdwvJwUM8K8m1j6/eVb5/2
xxu4ka4jB3/EIrkesZF+53qKCH9f+tsKgd43/eG5wIJwilXv9nTG/YImgfOUnO0r
viHKgZh+NQBlP+Y7sGkpmyhe7ZyG9AZ6sOsZgwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFM+J127GL4ZFra5kMmE+EeM8N97bMB8GA1UdIwQYMBaAFM5lYR4g12NpWxtX
NzLjy/qA7+cyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTlmZGFm
NzIxM2U5YzAwMzVkN2NjZGMwNWYwN2NlY2EzN2NkZmRlYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjdhZDhkNjItNTQ1Mi00N2QwLWI0MjUtNTA1YmFk
OTg5MGMzL2FiNzVhMTdlMGY2NWE1MTUxOThkNDIxNjljNTQyZWZiMDcwZGM2Nzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yN2FkOGQ2Mi01NDUyLTQ3ZDAtYjQyNS01MDVi
YWQ5ODkwYzMvMTlmZGFmNzIxM2U5YzAwMzVkN2NjZGMwNWYwN2NlY2EzN2NkZmRl
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDaRAwDQYJKoZIhvcNAQELBQADggEBADQwHA00DInfUNqu
Bn68VlJlnbyA7o8ZpV05i1w85MVNkVvC0VAJOoDPhiZKqNspGnhtQ0jRo0fLFd/B
HQP4nF9LN+gyTzXbhZNKSVsnkgCFKXtHbWgSboGOfWzUfy/exn/HPuFkJ4ZXsLqG
UuxiHJjD+ZCnFP0sjPRuA+TbWRe3kpJh50MY6R0T/MA9pfNqFQZBv3+2+CVVe6TJ
jTfPcjnQMH1c5mCakLJrRZmcK3r/fTPFu4Ish2OaOnUV/HoxDNl7TV36z31TA/MG
kNsiur77qro554KXzilVKnjHSmIZNonMM4yP0/AydO5YB7a7UNDWSzAK7PYzO50v
9wVIRFg=
-----END CERTIFICATE-----