Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/bc830a98a8c43da2f2dbc492d9b276f6525b6962.roa
File:                     bc830a98a8c43da2f2dbc492d9b276f6525b6962.roa (raw, json)
Hash identifier:          nyCFfj3ludQq3dCfnzy91xteJp5QQdC/rwOCCUsGL80=
Subject key identifier:   64:7E:8C:1B:CC:53:9C:BF:FB:09:FB:5D:5D:DC:EA:C1:BF:30:77:7D
Certificate issuer:       /CN=a0ece5cb3349a401474499eb301920b68090f2ce
Certificate serial:       121880
Authority key identifier: 94:52:6C:1C:EE:97:CC:0E:93:E7:50:7E:90:7F:EB:BE:B5:E2:99:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ece5cb3349a401474499eb301920b68090f2ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/bc830a98a8c43da2f2dbc492d9b276f6525b6962.roa
Signing time:             Fri 17 Sep 2021 16:12:12 +0000
ROA not before:           Fri 17 Sep 2021 03:00:00 +0000
ROA not after:            Sun 17 Sep 2023 03:00:00 +0000
asID:                     3549
IP address blocks:        2803:efc0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1185920 (0x121880)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0ece5cb3349a401474499eb301920b68090f2ce
        Validity
            Not Before: Sep 17 03:00:00 2021 GMT
            Not After : Sep 17 03:00:00 2023 GMT
        Subject: CN=bc830a98a8c43da2f2dbc492d9b276f6525b6962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ec:b0:39:7a:85:ee:28:10:5a:76:32:8c:1e:
                    a9:83:27:02:5d:a7:4f:d2:9c:1f:a1:90:73:95:64:
                    58:2b:e0:56:f7:0c:f8:d1:de:b5:0a:e1:1f:98:47:
                    9c:55:f9:9b:db:d0:e7:14:43:42:1b:ba:8c:bb:2f:
                    35:77:d1:27:67:a5:40:3b:1f:e8:54:da:6a:61:2e:
                    1b:a1:8e:c8:5e:5f:65:78:6c:1e:0b:4b:47:5e:4b:
                    00:d5:ae:9c:7b:08:12:17:2e:a8:3a:80:36:72:16:
                    3d:0f:e2:88:9b:85:9c:93:c2:0f:42:64:99:7e:b7:
                    21:57:93:25:05:17:d5:4b:14:db:32:08:fa:43:f3:
                    5f:bc:56:ee:f6:f6:39:6b:70:03:2a:5e:9f:27:90:
                    82:ce:47:74:b3:18:d7:6d:86:f3:a3:8d:e5:8b:d7:
                    6d:8d:01:f3:1d:27:64:bb:e1:b7:c4:5b:a1:20:0f:
                    0b:98:f0:ab:ff:e4:3b:01:b3:92:d9:93:5a:d6:55:
                    46:6c:e7:fb:b8:ea:4a:c0:b4:e7:ec:5a:ec:b7:51:
                    22:29:a9:66:36:cc:a4:2e:c3:14:58:af:a3:d0:e4:
                    3c:18:2f:e5:06:37:5e:69:2b:5d:7e:d5:16:a9:0f:
                    8a:b4:f8:26:58:12:4d:10:69:6b:35:63:bc:50:6a:
                    30:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7E:8C:1B:CC:53:9C:BF:FB:09:FB:5D:5D:DC:EA:C1:BF:30:77:7D
            X509v3 Authority Key Identifier:
                keyid:94:52:6C:1C:EE:97:CC:0E:93:E7:50:7E:90:7F:EB:BE:B5:E2:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ece5cb3349a401474499eb301920b68090f2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/bc830a98a8c43da2f2dbc492d9b276f6525b6962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/a0ece5cb3349a401474499eb301920b68090f2ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:efc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:87:d0:62:b1:c9:2e:20:36:77:93:f8:30:1f:87:8d:91:10:
         dd:87:4b:ab:ba:22:38:e0:e6:ce:b3:6a:53:09:b0:8e:ff:24:
         05:cb:75:5e:9e:22:57:36:ec:c2:51:31:70:e6:cd:7e:28:b4:
         09:5d:50:03:70:e7:4a:8f:17:5e:89:1a:ab:37:3a:1b:a3:f7:
         52:b3:e6:88:49:e2:33:7c:90:56:52:f8:cd:ea:c9:a5:ba:e8:
         eb:76:dd:41:27:af:07:e0:80:f2:6d:74:bf:ff:ad:7f:ae:40:
         7c:54:4f:20:cb:ff:24:52:b3:ac:89:75:65:90:3b:3e:5a:ae:
         4a:0e:42:2e:ec:85:4d:50:74:0b:ef:fa:f9:7b:c7:80:0d:4c:
         80:b6:fd:7e:be:04:e8:06:fc:53:6a:93:bb:63:b8:72:12:bb:
         df:5b:04:8b:f8:88:34:f1:41:93:23:98:61:e1:04:c1:25:8f:
         ce:f4:cb:1d:02:c5:73:12:ec:96:28:f4:b7:7d:29:23:52:a4:
         25:f9:7b:26:71:70:0f:a9:e6:6a:51:93:72:95:99:07:cf:d2:
         19:1f:f3:e1:d5:72:f4:44:49:76:39:bb:ac:dd:89:1c:c1:37:
         74:98:f0:6d:fb:0b:31:e6:70:15:27:35:d8:8e:a9:b8:c4:cc:
         69:a6:3f:6f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDEhiAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEw
ZWNlNWNiMzM0OWE0MDE0NzQ0OTllYjMwMTkyMGI2ODA5MGYyY2UwHhcNMjEwOTE3
MDMwMDAwWhcNMjMwOTE3MDMwMDAwWjAzMTEwLwYDVQQDEyhiYzgzMGE5OGE4YzQz
ZGEyZjJkYmM0OTJkOWIyNzZmNjUyNWI2OTYyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgeywOXqF7igQWnYyjB6pgycCXadP0pwfoZBzlWRYK+BW9wz4
0d61CuEfmEecVfmb29DnFENCG7qMuy81d9EnZ6VAOx/oVNpqYS4boY7IXl9leGwe
C0tHXksA1a6cewgSFy6oOoA2chY9D+KIm4Wck8IPQmSZfrchV5MlBRfVSxTbMgj6
Q/NfvFbu9vY5a3ADKl6fJ5CCzkd0sxjXbYbzo43li9dtjQHzHSdku+G3xFuhIA8L
mPCr/+Q7AbOS2ZNa1lVGbOf7uOpKwLTn7Frst1EiKalmNsykLsMUWK+j0OQ8GC/l
BjdeaStdftUWqQ+KtPgmWBJNEGlrNWO8UGow1QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFGR+jBvMU5y/+wn7XV3c6sG/MHd9MB8GA1UdIwQYMBaAFJRSbBzul8wOk+dQ
fpB/67614pkdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTBlY2U1
Y2IzMzQ5YTQwMTQ3NDQ5OWViMzAxOTIwYjY4MDkwZjJjZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmQ5MzdmNjYtYWNlNi00MmEyLWJhYWUtZTE1MGI2
NmQwZTVlL2JjODMwYTk4YThjNDNkYTJmMmRiYzQ5MmQ5YjI3NmY2NTI1YjY5NjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yZDkzN2Y2Ni1hY2U2LTQyYTItYmFhZS1lMTUw
YjY2ZDBlNWUvYTBlY2U1Y2IzMzQ5YTQwMTQ3NDQ5OWViMzAxOTIwYjY4MDkwZjJj
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgD78AAADANBgkqhkiG9w0BAQsFAAOCAQEAhIfQYrHJLiA2
d5P4MB+HjZEQ3YdLq7oiOODmzrNqUwmwjv8kBct1Xp4iVzbswlExcObNfii0CV1Q
A3DnSo8XXokaqzc6G6P3UrPmiEniM3yQVlL4zerJpbro63bdQSevB+CA8m10v/+t
f65AfFRPIMv/JFKzrIl1ZZA7PlquSg5CLuyFTVB0C+/6+XvHgA1MgLb9fr4E6Ab8
U2qTu2O4chK731sEi/iINPFBkyOYYeEEwSWPzvTLHQLFcxLslij0t30pI1KkJfl7
JnFwD6nmalGTcpWZB8/SGR/z4dVy9ERJdjm7rN2JHME3dJjwbfsLMeZwFSc12I6p
uMTMaaY/bw==
-----END CERTIFICATE-----