Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3141cedd-f816-435d-bc09-161f3961401c/0edfc5d6e53b63412839b06d00133689d556bdbe.roa
File:                     0edfc5d6e53b63412839b06d00133689d556bdbe.roa (raw, json)
Hash identifier:          A/4a3PF+nyT0XSf0YRGmbCPGRi3l8Jk6L3P+O+bINNM=
Subject key identifier:   B5:A9:F6:A0:A7:27:33:1B:D6:49:CC:95:73:2D:91:89:C9:67:6D:87
Certificate issuer:       /CN=3d2bb3c8581116125c6e09f758e3d59db1bcc4e4
Certificate serial:       22B60D
Authority key identifier: 54:F7:3B:80:35:06:A2:C8:9A:B6:74:58:BA:A3:18:35:37:CE:1F:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d2bb3c8581116125c6e09f758e3d59db1bcc4e4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3141cedd-f816-435d-bc09-161f3961401c/0edfc5d6e53b63412839b06d00133689d556bdbe.roa
Signing time:             Wed 06 Sep 2023 16:17:16 +0000
ROA not before:           Tue 05 Sep 2023 16:17:16 +0000
ROA not after:            Sat 06 Sep 2025 16:17:16 +0000
asID:                     273027
IP address blocks:        2801:1ba:e::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2274829 (0x22b60d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2bb3c8581116125c6e09f758e3d59db1bcc4e4
        Validity
            Not Before: Sep  5 16:17:16 2023 GMT
            Not After : Sep  6 16:17:16 2025 GMT
        Subject: CN=0edfc5d6e53b63412839b06d00133689d556bdbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:59:bb:2c:35:c4:44:09:d0:43:b9:23:a9:33:
                    cc:6b:51:3d:0d:99:a0:c5:15:5b:f9:ac:26:b2:c0:
                    3a:8e:59:a1:4d:fb:fa:d0:72:55:fe:4e:d3:c3:19:
                    43:62:d6:7b:30:4b:74:48:3b:c2:03:d0:1f:30:52:
                    25:ca:1f:05:9f:eb:6c:4b:96:4b:80:ae:bf:46:a8:
                    4b:64:a0:43:df:7a:49:cb:4a:55:3d:7b:21:a6:a8:
                    96:c9:51:00:d9:b4:9f:46:f4:04:5f:58:39:d5:cf:
                    5a:95:40:fa:18:4b:5e:8a:ce:d7:0e:b1:00:43:ab:
                    9c:8d:dd:24:d8:04:81:ed:53:09:2a:8a:90:54:f2:
                    35:b3:02:59:48:3c:29:7e:f4:6a:a0:e3:a0:47:7a:
                    5f:01:95:fa:e9:50:e1:bd:af:db:61:bd:27:d3:ae:
                    5b:9f:ea:dc:1f:12:30:ca:2d:08:00:b2:76:51:80:
                    f0:e1:8d:6d:d2:24:5a:9f:5a:a0:0b:5f:17:2d:a4:
                    d8:05:da:c3:45:78:fd:2c:e8:0c:64:55:87:0a:8e:
                    d2:b1:1a:0a:fc:6b:fc:c0:3e:14:63:ea:c3:99:36:
                    5c:cd:dc:90:9f:81:9f:9d:f9:b2:cc:fd:84:4f:fd:
                    fc:20:21:a9:10:9f:b0:1d:61:ef:4e:3c:e6:34:d6:
                    e4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A9:F6:A0:A7:27:33:1B:D6:49:CC:95:73:2D:91:89:C9:67:6D:87
            X509v3 Authority Key Identifier:
                keyid:54:F7:3B:80:35:06:A2:C8:9A:B6:74:58:BA:A3:18:35:37:CE:1F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d2bb3c8581116125c6e09f758e3d59db1bcc4e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3141cedd-f816-435d-bc09-161f3961401c/0edfc5d6e53b63412839b06d00133689d556bdbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3141cedd-f816-435d-bc09-161f3961401c/3d2bb3c8581116125c6e09f758e3d59db1bcc4e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ba:e::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:ce:c9:fa:6a:73:f3:12:d5:56:1c:d6:30:7a:c2:19:10:a5:
         1b:d6:e1:30:20:38:50:50:e5:74:8f:c2:f9:b5:6f:00:ec:90:
         b1:67:7d:93:c5:ff:89:38:31:97:b5:6e:08:d8:00:26:64:6a:
         17:aa:10:44:6f:42:2d:c7:a9:c6:e5:49:23:0e:db:aa:69:1e:
         70:8a:f0:3a:dc:ff:56:6b:6a:42:0f:a8:7d:19:4b:30:89:13:
         72:0c:e4:59:77:57:07:3f:bc:93:94:f4:e4:f4:c9:13:2c:d9:
         b0:a0:5f:3d:36:be:64:78:96:d1:7f:83:84:56:59:b0:99:39:
         26:ff:84:33:8f:15:e7:6b:5a:42:90:57:ad:2b:ea:5b:d3:86:
         f9:c8:43:09:74:bc:7a:74:29:6c:af:a4:66:67:2b:7c:a1:cb:
         5e:cf:f0:0d:27:b6:cf:76:00:73:b2:2b:d5:e4:ed:d0:27:24:
         2e:a7:62:8e:aa:28:f5:0c:c6:c3:51:03:50:8f:b5:82:9b:c3:
         5d:da:8d:82:cf:e7:ae:72:6c:38:7a:a1:3d:65:41:e8:90:f5:
         0c:fd:31:f8:56:84:3d:66:bf:68:c3:84:40:bb:52:0c:98:ea:
         64:e5:43:ae:60:cc:74:0d:c2:b0:33:51:74:c0:e6:8e:71:79:
         2c:e8:09:c4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDIrYNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNk
MmJiM2M4NTgxMTE2MTI1YzZlMDlmNzU4ZTNkNTlkYjFiY2M0ZTQwHhcNMjMwOTA1
MTYxNzE2WhcNMjUwOTA2MTYxNzE2WjAzMTEwLwYDVQQDEygwZWRmYzVkNmU1M2I2
MzQxMjgzOWIwNmQwMDEzMzY4OWQ1NTZiZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm1m7LDXERAnQQ7kjqTPMa1E9DZmgxRVb+awmssA6jlmhTfv6
0HJV/k7TwxlDYtZ7MEt0SDvCA9AfMFIlyh8Fn+tsS5ZLgK6/RqhLZKBD33pJy0pV
PXshpqiWyVEA2bSfRvQEX1g51c9alUD6GEteis7XDrEAQ6ucjd0k2ASB7VMJKoqQ
VPI1swJZSDwpfvRqoOOgR3pfAZX66VDhva/bYb0n065bn+rcHxIwyi0IALJ2UYDw
4Y1t0iRan1qgC18XLaTYBdrDRXj9LOgMZFWHCo7SsRoK/Gv8wD4UY+rDmTZczdyQ
n4GfnfmyzP2ET/38ICGpEJ+wHWHvTjzmNNbkCwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFLWp9qCnJzMb1knMlXMtkYnJZ22HMB8GA1UdIwQYMBaAFFT3O4A1BqLImrZ0
WLqjGDU3zh9+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2QyYmIz
Yzg1ODExMTYxMjVjNmUwOWY3NThlM2Q1OWRiMWJjYzRlNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzE0MWNlZGQtZjgxNi00MzVkLWJjMDktMTYxZjM5
NjE0MDFjLzBlZGZjNWQ2ZTUzYjYzNDEyODM5YjA2ZDAwMTMzNjg5ZDU1NmJkYmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zMTQxY2VkZC1mODE2LTQzNWQtYmMwOS0xNjFm
Mzk2MTQwMWMvM2QyYmIzYzg1ODExMTYxMjVjNmUwOWY3NThlM2Q1OWRiMWJjYzRl
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAboADjANBgkqhkiG9w0BAQsFAAOCAQEAVc7J+mpz8xLV
VhzWMHrCGRClG9bhMCA4UFDldI/C+bVvAOyQsWd9k8X/iTgxl7VuCNgAJmRqF6oQ
RG9CLcepxuVJIw7bqmkecIrwOtz/VmtqQg+ofRlLMIkTcgzkWXdXBz+8k5T05PTJ
EyzZsKBfPTa+ZHiW0X+DhFZZsJk5Jv+EM48V52taQpBXrSvqW9OG+chDCXS8enQp
bK+kZmcrfKHLXs/wDSe2z3YAc7Ir1eTt0CckLqdijqoo9QzGw1EDUI+1gpvDXdqN
gs/nrnJsOHqhPWVB6JD1DP0x+FaEPWa/aMOEQLtSDJjqZOVDrmDMdA3CsDNRdMDm
jnF5LOgJxA==
-----END CERTIFICATE-----