Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29e7e0bf-dd9d-46fc-a2ba-0c061ea2f4f3/29da2480b9d9433152063acd1ff3af69c76a4ce5.roa
File:                     29da2480b9d9433152063acd1ff3af69c76a4ce5.roa (raw, json)
Hash identifier:          kvgkPvFZul3hWw3HQ6WnIrsZv+aE6EyUY+t03wyZVc4=
Subject key identifier:   EC:E3:C2:F5:93:97:CC:44:3E:1F:61:A4:0D:D2:48:87:CB:E9:88:43
Certificate issuer:       /CN=5b2b6ea2fa40816d3366c89cb30d85a4a17be5b8
Certificate serial:       03E9
Authority key identifier: D8:DD:25:F7:EF:D2:53:8D:E0:CF:A6:E3:9A:85:2B:12:6B:9E:30:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b2b6ea2fa40816d3366c89cb30d85a4a17be5b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29e7e0bf-dd9d-46fc-a2ba-0c061ea2f4f3/29da2480b9d9433152063acd1ff3af69c76a4ce5.roa
Signing time:             Thu 11 Nov 2021 16:12:15 +0000
ROA not before:           Thu 11 Nov 2021 03:00:00 +0000
ROA not after:            Sat 11 Nov 2023 03:00:00 +0000
asID:                     28007
IP address blocks:        45.229.32.0/22 maxlen: 24
                          2803:8d20::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1001 (0x3e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2b6ea2fa40816d3366c89cb30d85a4a17be5b8
        Validity
            Not Before: Nov 11 03:00:00 2021 GMT
            Not After : Nov 11 03:00:00 2023 GMT
        Subject: CN=29da2480b9d9433152063acd1ff3af69c76a4ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ea:62:ed:3b:7c:7c:f7:12:0a:e8:ec:f8:0c:
                    c3:c7:68:73:b0:68:66:a9:79:60:62:7d:0d:47:c9:
                    82:46:d1:96:a8:77:01:7f:35:a8:c4:f8:7f:3c:54:
                    34:4e:3a:19:49:33:f6:f6:b2:5e:2c:ce:bb:cb:86:
                    17:27:c3:ac:24:bf:89:f8:65:78:b5:53:93:26:b9:
                    58:b0:fe:fe:64:30:6b:b0:2e:a3:89:13:ad:de:62:
                    fd:b9:6c:c2:1c:c6:38:a1:ef:f4:77:ca:33:95:73:
                    f3:3e:0c:47:3a:18:71:5d:b7:7f:de:e1:d9:ef:97:
                    a7:b8:a2:83:fb:45:3d:89:2f:71:3c:ba:4b:7e:fd:
                    9d:fd:62:dc:4b:23:9f:ec:7a:ca:05:f6:b5:0f:90:
                    6d:0a:50:03:84:5d:a0:84:60:6e:18:3f:1f:db:6c:
                    ea:da:a8:f5:63:dc:93:92:5e:98:3f:57:f0:64:7a:
                    11:02:b6:ca:ae:eb:74:36:74:54:9c:02:f8:c4:ea:
                    b7:30:50:4f:cd:bf:24:55:42:77:2c:95:12:ad:24:
                    c0:8e:0c:3a:81:34:fd:4b:f1:0d:1f:38:c9:25:1c:
                    e5:39:42:8b:26:df:07:53:c8:0f:4b:3a:f9:98:11:
                    8f:22:1c:c0:3d:ad:3b:a2:d1:97:33:2d:a0:b1:e8:
                    9a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E3:C2:F5:93:97:CC:44:3E:1F:61:A4:0D:D2:48:87:CB:E9:88:43
            X509v3 Authority Key Identifier:
                keyid:D8:DD:25:F7:EF:D2:53:8D:E0:CF:A6:E3:9A:85:2B:12:6B:9E:30:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b2b6ea2fa40816d3366c89cb30d85a4a17be5b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29e7e0bf-dd9d-46fc-a2ba-0c061ea2f4f3/29da2480b9d9433152063acd1ff3af69c76a4ce5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29e7e0bf-dd9d-46fc-a2ba-0c061ea2f4f3/5b2b6ea2fa40816d3366c89cb30d85a4a17be5b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.32.0/22
                IPv6:
                  2803:8d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:3c:89:d4:d1:20:12:63:c2:f2:2d:bb:f0:2e:a7:d6:c6:ba:
         d9:b2:56:1c:53:d9:be:8b:20:f7:e5:57:67:30:05:7d:dc:32:
         12:74:fe:3d:a6:04:20:2a:59:d4:a4:a0:fe:aa:5f:87:c2:e2:
         ca:a5:0d:30:5e:83:13:95:14:e4:6a:f6:ac:7b:6f:1c:f2:84:
         85:01:b7:63:e7:30:8e:d3:3b:f6:88:52:e2:88:fa:06:b8:ba:
         de:64:9b:64:74:07:1d:a5:87:5c:df:4e:6f:ef:ed:b5:8a:3b:
         a6:75:b7:fc:00:bd:71:3d:04:3f:f0:f2:19:6b:57:ea:8c:ab:
         f8:32:60:7b:14:b8:ed:b7:1d:94:7f:f1:0c:85:d5:34:f9:22:
         29:24:f3:2f:94:0e:c9:d9:f9:6f:18:3f:15:2e:d5:ca:ca:02:
         39:e2:21:91:ea:b8:06:85:b3:a8:f1:86:85:e4:5f:22:78:c5:
         10:80:1d:dd:ab:ba:0b:04:89:c3:44:4a:27:83:57:51:e6:d1:
         f0:a5:9a:9f:19:b7:31:ab:e9:44:13:33:a3:2d:f7:e1:51:9d:
         54:89:7c:21:54:ab:cd:33:63:6a:be:90:75:03:0b:cd:67:52:
         32:53:ba:1e:2f:69:8b:40:fe:29:a4:a4:36:d5:2c:10:27:a6:
         de:72:3a:f2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICA+kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNWIy
YjZlYTJmYTQwODE2ZDMzNjZjODljYjMwZDg1YTRhMTdiZTViODAeFw0yMTExMTEw
MzAwMDBaFw0yMzExMTEwMzAwMDBaMDMxMTAvBgNVBAMTKDI5ZGEyNDgwYjlkOTQz
MzE1MjA2M2FjZDFmZjNhZjY5Yzc2YTRjZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCA6mLtO3x89xIK6Oz4DMPHaHOwaGapeWBifQ1HyYJG0ZaodwF/
NajE+H88VDROOhlJM/b2sl4szrvLhhcnw6wkv4n4ZXi1U5MmuViw/v5kMGuwLqOJ
E63eYv25bMIcxjih7/R3yjOVc/M+DEc6GHFdt3/e4dnvl6e4ooP7RT2JL3E8ukt+
/Z39YtxLI5/sesoF9rUPkG0KUAOEXaCEYG4YPx/bbOraqPVj3JOSXpg/V/BkehEC
tsqu63Q2dFScAvjE6rcwUE/NvyRVQncslRKtJMCODDqBNP1L8Q0fOMklHOU5Qosm
3wdTyA9LOvmYEY8iHMA9rTui0ZczLaCx6JojAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQU7OPC9ZOXzEQ+H2GkDdJIh8vpiEMwHwYDVR0jBBgwFoAU2N0l9+/SU43gz6bj
moUrEmueMN0wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS81YjJiNmVh
MmZhNDA4MTZkMzM2NmM4OWNiMzBkODVhNGExN2JlNWI4LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8yOWU3ZTBiZi1kZDlkLTQ2ZmMtYTJiYS0wYzA2MWVh
MmY0ZjMvMjlkYTI0ODBiOWQ5NDMzMTUyMDYzYWNkMWZmM2FmNjljNzZhNGNlNS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzI5ZTdlMGJmLWRkOWQtNDZmYy1hMmJhLTBjMDYx
ZWEyZjRmMy81YjJiNmVhMmZhNDA4MTZkMzM2NmM4OWNiMzBkODVhNGExN2JlNWI4
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCLeUgMA0EAgACMAcDBQAoA40gMA0GCSqGSIb3DQEBCwUAA4IB
AQCEPInU0SASY8LyLbvwLqfWxrrZslYcU9m+iyD35VdnMAV93DISdP49pgQgKlnU
pKD+ql+HwuLKpQ0wXoMTlRTkavase28c8oSFAbdj5zCO0zv2iFLiiPoGuLreZJtk
dAcdpYdc305v7+21ijumdbf8AL1xPQQ/8PIZa1fqjKv4MmB7FLjttx2Uf/EMhdU0
+SIpJPMvlA7J2flvGD8VLtXKygI54iGR6rgGhbOo8YaF5F8ieMUQgB3dq7oLBInD
REong1dR5tHwpZqfGbcxq+lEEzOjLffhUZ1UiXwhVKvNM2NqvpB1AwvNZ1IyU7oe
L2mLQP4ppKQ21SwQJ6becjry
-----END CERTIFICATE-----