Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f8c3b2f-b0fc-4a20-a9a5-5236fda16ee3/8e4622060b6ee2b4ca181c589b6c823e4c29175a.roa
File:                     8e4622060b6ee2b4ca181c589b6c823e4c29175a.roa (raw, json)
Hash identifier:          tDEyQ4Ubryx5DD7OIWu71AqjZ+bM89OJ+8g5l3Xcptg=
Subject key identifier:   9F:F7:DB:16:4F:CE:E8:F6:D8:8D:39:9F:5C:74:F8:75:9C:23:CC:4B
Certificate issuer:       /CN=e9249d6078896379eaa31ec8630fd15d97793e5d
Certificate serial:       0D722C
Authority key identifier: 37:8A:05:D0:C7:20:08:96:73:1A:23:6E:D0:92:16:78:45:AC:CD:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e9249d6078896379eaa31ec8630fd15d97793e5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3f8c3b2f-b0fc-4a20-a9a5-5236fda16ee3/8e4622060b6ee2b4ca181c589b6c823e4c29175a.roa
Signing time:             Tue 25 May 2021 13:53:51 +0000
ROA not before:           Tue 25 May 2021 03:00:00 +0000
ROA not after:            Thu 25 May 2023 03:00:00 +0000
asID:                     267928
IP address blocks:        2801:1d:800::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881196 (0xd722c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9249d6078896379eaa31ec8630fd15d97793e5d
        Validity
            Not Before: May 25 03:00:00 2021 GMT
            Not After : May 25 03:00:00 2023 GMT
        Subject: CN=8e4622060b6ee2b4ca181c589b6c823e4c29175a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:96:72:62:36:3c:97:3c:b1:ea:78:ef:99:ca:
                    bb:de:8f:bb:f7:46:2a:15:17:cf:a0:af:d9:58:fc:
                    30:53:4f:33:8c:f4:af:50:3c:50:b1:7c:f8:a5:48:
                    89:4d:a4:59:15:13:eb:98:c3:8d:08:88:23:3f:de:
                    36:50:01:64:64:60:b4:25:32:55:22:79:ee:ef:bd:
                    b7:3e:02:09:42:0a:bb:fd:8f:54:3f:02:6c:3b:58:
                    e7:18:ba:7e:3a:ea:bd:ad:aa:1f:3c:7c:d5:36:de:
                    55:ae:68:52:0c:35:27:1a:4b:dd:45:b8:71:24:55:
                    50:ac:b5:65:5c:29:98:ff:fe:97:c1:07:78:07:43:
                    a6:c0:ab:f1:0f:49:29:ec:46:75:01:13:2f:3c:cc:
                    31:c3:ed:11:b9:72:75:f4:b5:76:f1:19:98:1f:45:
                    8e:2c:22:c3:58:43:5c:d9:99:ad:1f:e5:b9:12:4e:
                    43:09:2e:b3:88:72:09:94:f4:5e:21:f6:43:8b:e6:
                    f6:c3:77:4d:3e:3a:bd:4d:73:ba:45:8b:91:52:ad:
                    1f:34:3c:d1:1f:fa:03:d2:a8:c1:8c:fd:ae:9c:b9:
                    2a:22:32:57:6b:64:43:22:71:26:53:d8:d7:9b:95:
                    55:6f:6d:36:a9:8e:99:2e:7d:94:a6:bf:4a:46:48:
                    26:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F7:DB:16:4F:CE:E8:F6:D8:8D:39:9F:5C:74:F8:75:9C:23:CC:4B
            X509v3 Authority Key Identifier:
                keyid:37:8A:05:D0:C7:20:08:96:73:1A:23:6E:D0:92:16:78:45:AC:CD:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e9249d6078896379eaa31ec8630fd15d97793e5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f8c3b2f-b0fc-4a20-a9a5-5236fda16ee3/8e4622060b6ee2b4ca181c589b6c823e4c29175a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3f8c3b2f-b0fc-4a20-a9a5-5236fda16ee3/e9249d6078896379eaa31ec8630fd15d97793e5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:f3:e2:39:6b:5c:96:8a:34:32:a5:bf:25:be:50:64:51:04:
         97:d7:e3:e0:05:dc:62:d1:29:b6:7e:a4:4e:ad:80:67:0b:65:
         1d:11:b4:29:11:d9:bf:18:3e:9b:2d:da:06:fe:fc:7c:75:73:
         68:60:89:58:cc:9b:ff:e0:3d:cc:73:82:da:5a:d7:08:b3:5e:
         1a:9d:e1:b3:a6:d3:19:28:77:57:a3:45:f9:7c:1e:70:1f:c6:
         aa:b6:a7:d1:1b:6a:84:cc:7b:60:dd:f8:8f:e1:42:62:13:3a:
         6d:4d:86:fd:37:33:8f:8f:b1:97:ed:16:09:df:0a:e0:62:81:
         f4:a1:eb:7d:c7:4a:f0:9e:d3:27:b8:80:e2:ae:d0:7f:3b:e3:
         98:c4:99:00:6b:d6:54:30:33:46:d3:e9:49:3a:d5:51:a8:1b:
         47:10:c8:41:94:c4:ed:85:77:ac:8e:33:1f:c1:76:c1:09:f7:
         10:a7:61:b6:e5:f2:9b:36:00:8c:e3:34:a4:8d:4e:cb:1e:74:
         cb:53:00:32:0a:73:a3:1d:3c:2a:50:dc:de:70:72:f2:3e:a6:
         45:0f:12:6e:51:49:da:0c:84:bc:a2:10:59:7a:44:73:9b:4c:
         0a:f4:e8:97:7a:f3:fd:c7:ae:b1:6a:0b:3e:8a:fe:c9:4f:77:
         ee:b3:7e:c9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDXIsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU5
MjQ5ZDYwNzg4OTYzNzllYWEzMWVjODYzMGZkMTVkOTc3OTNlNWQwHhcNMjEwNTI1
MDMwMDAwWhcNMjMwNTI1MDMwMDAwWjAzMTEwLwYDVQQDEyg4ZTQ2MjIwNjBiNmVl
MmI0Y2ExODFjNTg5YjZjODIzZTRjMjkxNzVhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsZZyYjY8lzyx6njvmcq73o+790YqFRfPoK/ZWPwwU08zjPSv
UDxQsXz4pUiJTaRZFRPrmMONCIgjP942UAFkZGC0JTJVInnu7723PgIJQgq7/Y9U
PwJsO1jnGLp+Ouq9raofPHzVNt5VrmhSDDUnGkvdRbhxJFVQrLVlXCmY//6XwQd4
B0OmwKvxD0kp7EZ1ARMvPMwxw+0RuXJ19LV28RmYH0WOLCLDWENc2ZmtH+W5Ek5D
CS6ziHIJlPReIfZDi+b2w3dNPjq9TXO6RYuRUq0fNDzRH/oD0qjBjP2unLkqIjJX
a2RDInEmU9jXm5VVb202qY6ZLn2Upr9KRkgmkwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFJ/32xZPzuj22I05n1x0+HWcI8xLMB8GA1UdIwQYMBaAFDeKBdDHIAiWcxoj
btCSFnhFrM0PMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTkyNDlk
NjA3ODg5NjM3OWVhYTMxZWM4NjMwZmQxNWQ5Nzc5M2U1ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvM2Y4YzNiMmYtYjBmYy00YTIwLWE5YTUtNTIzNmZk
YTE2ZWUzLzhlNDYyMjA2MGI2ZWUyYjRjYTE4MWM1ODliNmM4MjNlNGMyOTE3NWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zZjhjM2IyZi1iMGZjLTRhMjAtYTlhNS01MjM2
ZmRhMTZlZTMvZTkyNDlkNjA3ODg5NjM3OWVhYTMxZWM4NjMwZmQxNWQ5Nzc5M2U1
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB0IADANBgkqhkiG9w0BAQsFAAOCAQEAVfPiOWtcloo0
MqW/Jb5QZFEEl9fj4AXcYtEptn6kTq2AZwtlHRG0KRHZvxg+my3aBv78fHVzaGCJ
WMyb/+A9zHOC2lrXCLNeGp3hs6bTGSh3V6NF+XwecB/Gqran0RtqhMx7YN34j+FC
YhM6bU2G/Tczj4+xl+0WCd8K4GKB9KHrfcdK8J7TJ7iA4q7QfzvjmMSZAGvWVDAz
RtPpSTrVUagbRxDIQZTE7YV3rI4zH8F2wQn3EKdhtuXymzYAjOM0pI1Oyx50y1MA
Mgpzox08KlDc3nBy8j6mRQ8SblFJ2gyEvKIQWXpEc5tMCvTol3rz/ceusWoLPor+
yU937rN+yQ==
-----END CERTIFICATE-----