Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41566313-05c8-4400-8fe0-f110027257f1/3ddecc627053e5c50e9683d70c3b99ade1b71898.roa
File:                     3ddecc627053e5c50e9683d70c3b99ade1b71898.roa (raw, json)
Hash identifier:          pZwYrmeYcZmaHRr06QY+4S+/ZefLRBT7aDCS4d06ErI=
Subject key identifier:   26:FE:3D:88:9E:C8:55:34:E1:E4:6C:9E:9D:20:63:12:F3:D7:BD:71
Certificate issuer:       /CN=89b43ca0a70451881fc86586450001a0c3042bd0
Certificate serial:       AE34
Authority key identifier: 62:13:75:1F:EE:7C:F4:7C:D7:2D:06:C8:43:66:CB:D5:DE:5D:09:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b43ca0a70451881fc86586450001a0c3042bd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41566313-05c8-4400-8fe0-f110027257f1/3ddecc627053e5c50e9683d70c3b99ade1b71898.roa
Signing time:             Wed 17 Nov 2021 03:17:14 +0000
ROA not before:           Wed 17 Nov 2021 03:00:00 +0000
ROA not after:            Fri 17 Nov 2023 03:00:00 +0000
asID:                     271992
IP address blocks:        2803:9110:1000::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44596 (0xae34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b43ca0a70451881fc86586450001a0c3042bd0
        Validity
            Not Before: Nov 17 03:00:00 2021 GMT
            Not After : Nov 17 03:00:00 2023 GMT
        Subject: CN=3ddecc627053e5c50e9683d70c3b99ade1b71898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a2:ad:e4:6d:56:fd:8a:a7:5e:88:ea:3d:d6:
                    fe:1b:7a:1c:93:d2:be:e8:6b:6d:e2:85:42:14:33:
                    5f:95:06:c0:1d:98:fe:57:0a:98:64:40:4d:74:b5:
                    93:db:34:f4:74:e0:f2:97:5d:64:d4:83:fc:c7:cd:
                    2e:98:97:c1:ed:79:0b:f4:39:0d:9b:c6:16:af:60:
                    d1:88:46:f0:3e:8d:f8:93:b0:0e:00:6b:a3:14:37:
                    f1:97:ae:00:07:8f:e7:13:e3:cd:28:c3:03:4d:8f:
                    89:98:e7:bd:12:24:43:5e:90:7c:14:1e:62:75:88:
                    b5:fd:23:03:36:f7:cf:f2:fd:1e:f8:e8:ff:99:0d:
                    cf:04:a9:cc:3b:61:08:9b:83:2a:df:3e:33:83:b4:
                    61:70:a9:e1:6e:c5:68:de:40:7b:fb:f3:cb:75:5d:
                    13:02:39:1a:64:c0:20:ee:00:d6:65:15:72:ee:2b:
                    61:21:22:8a:f8:fd:61:19:2f:45:c6:9e:fa:8d:56:
                    e1:31:fd:2d:ee:f3:8b:fc:01:5b:09:71:93:02:62:
                    0b:1a:1a:b0:e1:8b:d1:ff:22:db:66:eb:e9:13:66:
                    c0:f4:65:ef:40:d7:d0:16:73:bd:1e:20:a8:bd:9e:
                    4b:5f:8a:8b:ab:76:b8:14:6c:14:4c:b6:d3:48:eb:
                    8f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FE:3D:88:9E:C8:55:34:E1:E4:6C:9E:9D:20:63:12:F3:D7:BD:71
            X509v3 Authority Key Identifier:
                keyid:62:13:75:1F:EE:7C:F4:7C:D7:2D:06:C8:43:66:CB:D5:DE:5D:09:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b43ca0a70451881fc86586450001a0c3042bd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41566313-05c8-4400-8fe0-f110027257f1/3ddecc627053e5c50e9683d70c3b99ade1b71898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41566313-05c8-4400-8fe0-f110027257f1/89b43ca0a70451881fc86586450001a0c3042bd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9110:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:b9:c1:4e:92:d9:5a:b9:4c:a7:ee:73:6f:13:48:c0:08:f1:
         8c:57:7c:25:a5:16:49:43:e3:a7:49:6b:2e:8f:74:d2:88:f0:
         2f:9c:01:6e:ae:99:75:5e:97:6b:52:b8:89:da:3a:1a:d9:e1:
         8a:dc:7a:51:58:bc:83:6d:be:b8:d8:f8:10:2c:ca:98:20:bf:
         ec:e8:ae:29:06:0c:87:04:0b:b3:bd:9c:7a:22:05:80:0c:c5:
         cd:ae:36:7d:01:f2:d5:0b:83:8b:b8:cc:f5:59:71:75:07:5a:
         c6:3c:17:00:d2:de:bd:8d:c4:ab:5f:f9:1a:49:a9:f4:e5:17:
         18:a5:fb:a4:9b:5c:e4:09:52:b2:0e:59:64:9e:09:55:48:5c:
         6e:c6:c9:e9:36:6f:db:b6:4b:51:63:17:b1:2d:5d:3f:51:ea:
         8a:8b:fd:24:8e:32:3a:be:d8:45:ba:a8:af:85:14:21:b9:61:
         1e:ce:06:00:99:84:c1:b9:4c:c9:96:78:e8:fb:af:ba:7c:d2:
         14:27:1a:69:a5:6d:dd:5c:22:d9:7c:69:d7:a6:28:e9:97:f0:
         c4:4f:8e:04:39:58:11:90:b5:df:0f:1a:68:e9:19:bd:9c:ca:
         83:36:84:7f:2d:3a:82:35:95:65:ef:e7:b0:a5:92:2a:56:01:
         58:0b:6f:f3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAK40MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg5
YjQzY2EwYTcwNDUxODgxZmM4NjU4NjQ1MDAwMWEwYzMwNDJiZDAwHhcNMjExMTE3
MDMwMDAwWhcNMjMxMTE3MDMwMDAwWjAzMTEwLwYDVQQDEygzZGRlY2M2MjcwNTNl
NWM1MGU5NjgzZDcwYzNiOTlhZGUxYjcxODk4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0aKt5G1W/YqnXojqPdb+G3ock9K+6Gtt4oVCFDNflQbAHZj+
VwqYZEBNdLWT2zT0dODyl11k1IP8x80umJfB7XkL9DkNm8YWr2DRiEbwPo34k7AO
AGujFDfxl64AB4/nE+PNKMMDTY+JmOe9EiRDXpB8FB5idYi1/SMDNvfP8v0e+Oj/
mQ3PBKnMO2EIm4Mq3z4zg7RhcKnhbsVo3kB7+/PLdV0TAjkaZMAg7gDWZRVy7ith
ISKK+P1hGS9Fxp76jVbhMf0t7vOL/AFbCXGTAmILGhqw4YvR/yLbZuvpE2bA9GXv
QNfQFnO9HiCovZ5LX4qLq3a4FGwUTLbTSOuPOwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFCb+PYieyFU04eRsnp0gYxLz171xMB8GA1UdIwQYMBaAFGITdR/ufPR81y0G
yENmy9XeXQkxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODliNDNj
YTBhNzA0NTE4ODFmYzg2NTg2NDUwMDAxYTBjMzA0MmJkMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDE1NjYzMTMtMDVjOC00NDAwLThmZTAtZjExMDAy
NzI1N2YxLzNkZGVjYzYyNzA1M2U1YzUwZTk2ODNkNzBjM2I5OWFkZTFiNzE4OTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80MTU2NjMxMy0wNWM4LTQ0MDAtOGZlMC1mMTEw
MDI3MjU3ZjEvODliNDNjYTBhNzA0NTE4ODFmYzg2NTg2NDUwMDAxYTBjMzA0MmJk
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDkRAQADANBgkqhkiG9w0BAQsFAAOCAQEAV7nBTpLZWrlM
p+5zbxNIwAjxjFd8JaUWSUPjp0lrLo900ojwL5wBbq6ZdV6Xa1K4ido6Gtnhitx6
UVi8g22+uNj4ECzKmCC/7OiuKQYMhwQLs72ceiIFgAzFza42fQHy1QuDi7jM9Vlx
dQdaxjwXANLevY3Eq1/5Gkmp9OUXGKX7pJtc5AlSsg5ZZJ4JVUhcbsbJ6TZv27ZL
UWMXsS1dP1Hqiov9JI4yOr7YRbqor4UUIblhHs4GAJmEwblMyZZ46PuvunzSFCca
aaVt3Vwi2Xxp16Yo6ZfwxE+OBDlYEZC13w8aaOkZvZzKgzaEfy06gjWVZe/nsKWS
KlYBWAtv8w==
-----END CERTIFICATE-----