Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/31b07ca16faaa86f70544ab1ac7f631a7a5c9dae.roa
File:                     31b07ca16faaa86f70544ab1ac7f631a7a5c9dae.roa (raw, json)
Hash identifier:          baInlC/mj5NoD79EXhgmncLcXH6+DI5zhVaphXP2ldk=
Subject key identifier:   07:81:3B:B6:E8:1C:4B:0D:A5:25:DA:08:CB:8A:A1:D3:F9:C9:A9:7C
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       0763D7
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/31b07ca16faaa86f70544ab1ac7f631a7a5c9dae.roa
Signing time:             Tue 23 Aug 2022 21:12:34 +0000
ROA not before:           Wed 20 Jul 2022 03:00:00 +0000
ROA not after:            Wed 30 Apr 2025 03:00:00 +0000
asID:                     271891
IP address blocks:        2801:151:11::/48 maxlen: 48
                          2801:151:57::/48 maxlen: 48
                          2801:151:58::/48 maxlen: 48
                          2801:151:59::/48 maxlen: 48
                          2801:151:2a::/48 maxlen: 48
                          2801:151:a2::/48 maxlen: 48
                          2801:151:a3::/48 maxlen: 48
                          2801:151:a4::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484311 (0x763d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Jul 20 03:00:00 2022 GMT
            Not After : Apr 30 03:00:00 2025 GMT
        Subject: CN=31b07ca16faaa86f70544ab1ac7f631a7a5c9dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8e:8d:c4:26:16:21:bb:d9:42:1a:54:17:00:
                    b0:55:d3:c9:59:d2:c7:5a:ec:37:5b:f5:d4:58:a8:
                    42:d4:36:51:9b:54:ec:16:6e:d8:a0:1b:b0:3c:64:
                    0b:32:4e:48:17:33:66:cf:d7:0e:0e:47:3b:9b:02:
                    af:6a:79:2a:d7:07:e2:c7:cb:5c:25:72:21:9d:53:
                    ab:cb:94:74:37:e5:bc:b3:41:75:ee:6e:26:73:18:
                    89:98:e7:c9:d0:94:5e:ae:2f:fc:82:82:92:10:10:
                    98:36:e0:93:6a:ac:d4:bb:42:95:ff:53:7d:7a:55:
                    e4:99:e2:06:4e:c5:60:ae:2b:40:cf:ad:c3:31:96:
                    fe:b1:c8:f6:eb:58:c4:82:bb:31:16:1a:9f:bf:14:
                    4a:f3:fc:24:cd:bb:f2:cb:f5:a6:84:01:8a:1c:a0:
                    60:7f:fa:b9:be:4e:42:f0:1b:e6:7b:54:24:23:fb:
                    20:35:e2:42:6e:56:5f:93:0b:82:c1:93:e2:ad:6e:
                    b7:b4:3d:c6:b4:a8:79:ef:64:09:1f:c3:0a:f7:88:
                    aa:87:f4:34:64:42:08:c8:02:1a:69:b3:34:62:72:
                    ff:f7:06:92:0f:b1:4e:2a:f7:2f:bd:07:9e:f6:cd:
                    18:c0:e8:7b:7a:e8:70:f5:37:a6:63:69:1e:6e:04:
                    95:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:81:3B:B6:E8:1C:4B:0D:A5:25:DA:08:CB:8A:A1:D3:F9:C9:A9:7C
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/31b07ca16faaa86f70544ab1ac7f631a7a5c9dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:11::/48
                  2801:151:2a::/48
                  2801:151:57::-2801:151:59:ffff:ffff:ffff:ffff:ffff
                  2801:151:a2::-2801:151:a4:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         89:8b:5d:24:59:6b:68:b3:1f:2f:b8:aa:f8:fe:5e:01:36:ef:
         4c:54:ce:98:24:3a:17:a9:a5:30:a0:d2:16:aa:16:73:46:d1:
         e2:16:51:72:95:cb:83:aa:dc:aa:9d:a6:4c:e4:5d:34:f9:17:
         61:b3:a2:0b:21:07:9d:82:92:d7:73:2e:b2:47:f2:28:2f:ea:
         ba:b2:e0:10:6e:42:d9:7a:32:b9:b3:9c:bb:06:a3:8c:f0:64:
         c0:e6:bf:58:3d:46:5a:d3:b1:b8:a9:61:cd:94:06:9f:95:fb:
         69:51:00:72:12:a8:e1:c2:d8:b0:a1:65:7b:d6:d2:76:8e:a1:
         01:80:63:96:2a:ef:a3:29:27:29:83:27:82:eb:27:b8:58:d7:
         cf:32:14:94:a6:4d:24:7f:9e:35:e4:f4:22:d5:69:ff:0b:db:
         b1:40:50:1a:5c:1f:76:60:f3:b7:d3:db:17:e2:17:27:ce:90:
         49:17:d4:c0:73:47:3b:53:39:9c:53:fa:ac:22:e8:4a:f5:04:
         78:d2:fe:e2:c6:a5:36:dc:ad:e7:cc:69:e0:5a:1c:7b:9d:c6:
         1f:05:cc:35:8f:0a:5b:03:d3:49:d3:3d:df:a2:20:84:7d:a8:
         3b:8b:9a:27:e7:57:98:e8:1a:3a:d2:64:b9:6a:37:2c:31:10:
         ef:df:7d:1f
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgIDB2PXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVi
N2RiYjE0ODJiNDcwNWM0MTE1ZjQ2OThkMDE4NzUwMDcwYmNlY2IwHhcNMjIwNzIw
MDMwMDAwWhcNMjUwNDMwMDMwMDAwWjAzMTEwLwYDVQQDEygzMWIwN2NhMTZmYWFh
ODZmNzA1NDRhYjFhYzdmNjMxYTdhNWM5ZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgY6NxCYWIbvZQhpUFwCwVdPJWdLHWuw3W/XUWKhC1DZRm1Ts
Fm7YoBuwPGQLMk5IFzNmz9cODkc7mwKvankq1wfix8tcJXIhnVOry5R0N+W8s0F1
7m4mcxiJmOfJ0JReri/8goKSEBCYNuCTaqzUu0KV/1N9elXkmeIGTsVgritAz63D
MZb+scj261jEgrsxFhqfvxRK8/wkzbvyy/WmhAGKHKBgf/q5vk5C8Bvme1QkI/sg
NeJCblZfkwuCwZPirW63tD3GtKh572QJH8MK94iqh/Q0ZEIIyAIaabM0YnL/9waS
D7FOKvcvvQee9s0YwOh7euhw9TemY2kebgSV1wIDAQABo4ICjzCCAoswHQYDVR0O
BBYEFAeBO7boHEsNpSXaCMuKodP5yal8MB8GA1UdIwQYMBaAFCs7rHKdDqdCH724
kNkjvaR318opMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWI3ZGJi
MTQ4MmI0NzA1YzQxMTVmNDY5OGQwMTg3NTAwNzBiY2VjYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDQ5ZWNjMTktYzI5MS00ZmNmLTk2OTctNGE5NjY5
YjMwZTgwLzMxYjA3Y2ExNmZhYWE4NmY3MDU0NGFiMWFjN2Y2MzFhN2E1YzlkYWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NDllY2MxOS1jMjkxLTRmY2YtOTY5Ny00YTk2
NjliMzBlODAvNWI3ZGJiMTQ4MmI0NzA1YzQxMTVmNDY5OGQwMTg3NTAwNzBiY2Vj
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBTBggrBgEFBQcBBwEB/wRE
MEIwQAQCAAIwOgMHACgBAVEAEQMHACgBAVEAKjASAwcAKAEBUQBXAwcBKAEBUQBY
MBIDBwEoAQFRAKIDBwAoAQFRAKQwDQYJKoZIhvcNAQELBQADggEBAImLXSRZa2iz
Hy+4qvj+XgE270xUzpgkOheppTCg0haqFnNG0eIWUXKVy4Oq3KqdpkzkXTT5F2Gz
ogshB52CktdzLrJH8igv6rqy4BBuQtl6MrmznLsGo4zwZMDmv1g9RlrTsbipYc2U
Bp+V+2lRAHISqOHC2LChZXvW0naOoQGAY5Yq76MpJymDJ4LrJ7hY188yFJSmTSR/
njXk9CLVaf8L27FAUBpcH3Zg87fT2xfiFyfOkEkX1MBzRztTOZxT+qwi6Er1BHjS
/uLGpTbcrefMaeBaHHudxh8FzDWPClsD00nTPd+iIIR9qDuLmifnV5joGjrSZLlq
NywxEO/ffR8=
-----END CERTIFICATE-----