Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50a38f3b-e2b7-4d2f-b600-d2b291ae493b/7e30705d5d89c83c47cd293ed023da9990ffbc44.roa
File:                     7e30705d5d89c83c47cd293ed023da9990ffbc44.roa (raw, json)
Hash identifier:          6Qfv954DOXB11OfZNfQTWprLzRUWO48VHp57UStzpzQ=
Subject key identifier:   C9:37:FF:42:2A:87:0D:70:F1:E2:3B:5D:6E:0C:DD:A7:4D:D6:15:B5
Certificate issuer:       /CN=595b6f21d80ffe65425eaf4b36e8f5af2f3312b8
Certificate serial:       6EEB
Authority key identifier: 23:B9:89:AB:67:D1:02:B2:2C:3D:8E:C6:E1:C3:78:13:43:E4:99:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/595b6f21d80ffe65425eaf4b36e8f5af2f3312b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50a38f3b-e2b7-4d2f-b600-d2b291ae493b/7e30705d5d89c83c47cd293ed023da9990ffbc44.roa
Signing time:             Thu 26 Aug 2021 03:29:32 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     266774
IP address blocks:        2803:ef20::/117 maxlen: 117

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28395 (0x6eeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595b6f21d80ffe65425eaf4b36e8f5af2f3312b8
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=7e30705d5d89c83c47cd293ed023da9990ffbc44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:da:37:d5:b4:7a:fe:4f:6f:2b:a9:ad:fc:39:
                    91:14:a0:dd:a6:90:61:24:6e:72:47:ea:54:35:97:
                    c6:b5:79:2b:e7:1a:d4:20:82:d8:3f:b1:34:63:37:
                    60:78:8c:c5:4e:fd:b0:4d:00:32:85:8f:77:f9:f4:
                    b6:f5:a4:98:9d:19:fe:d9:23:e9:c7:ba:e8:46:94:
                    af:3c:10:9c:da:97:09:74:2c:3e:c8:cd:72:df:6a:
                    e5:bb:94:84:8a:f5:ac:19:ad:97:42:c7:e5:fc:63:
                    62:f8:eb:eb:6d:16:a7:65:8c:e7:9d:a8:6a:53:5b:
                    cc:bb:f5:64:72:b8:18:4b:a4:1e:10:46:de:74:cc:
                    94:74:6e:14:ab:7a:c1:dc:6b:59:55:1a:5f:ae:e3:
                    3f:1c:9d:1c:fd:2d:e4:da:bb:47:ce:23:72:3a:26:
                    04:ac:ae:8a:a1:75:ce:c2:6c:d0:61:d4:27:b1:fa:
                    74:27:b9:df:15:a4:20:98:7c:8d:b2:8a:b9:df:78:
                    77:5c:c7:bc:f8:fb:45:64:71:44:e7:1a:c1:03:7c:
                    df:73:34:40:cd:f3:93:c8:5b:49:a7:7a:e2:42:e8:
                    7b:d7:ff:ed:1b:1a:1f:a7:d4:f0:cd:fb:a6:a2:18:
                    d1:a0:d1:17:82:15:cf:5e:df:c4:cc:bb:60:97:f0:
                    6d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:37:FF:42:2A:87:0D:70:F1:E2:3B:5D:6E:0C:DD:A7:4D:D6:15:B5
            X509v3 Authority Key Identifier:
                keyid:23:B9:89:AB:67:D1:02:B2:2C:3D:8E:C6:E1:C3:78:13:43:E4:99:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/595b6f21d80ffe65425eaf4b36e8f5af2f3312b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50a38f3b-e2b7-4d2f-b600-d2b291ae493b/7e30705d5d89c83c47cd293ed023da9990ffbc44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50a38f3b-e2b7-4d2f-b600-d2b291ae493b/595b6f21d80ffe65425eaf4b36e8f5af2f3312b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ef20::/117

    Signature Algorithm: sha256WithRSAEncryption
         2f:b3:75:e2:b6:ca:f1:3a:9f:40:8d:e9:65:ca:87:38:4a:32:
         1f:58:a5:3e:54:68:0c:8e:f6:f2:4e:68:9f:36:11:f8:9c:82:
         a3:aa:01:25:ac:e2:22:66:26:f7:0c:20:ce:d0:f2:08:31:e9:
         68:a9:e7:da:6f:9f:4d:0a:d5:de:79:e0:bc:b0:ae:24:c9:36:
         ff:61:6f:05:4e:43:ff:82:73:db:c7:b2:46:2a:d6:a7:6e:03:
         a9:da:21:80:ce:9d:cf:9b:23:96:bc:74:dc:84:87:24:cb:82:
         23:5d:f4:38:4f:46:61:1e:c1:38:91:79:bb:6c:40:84:18:ff:
         ba:6e:f9:51:49:b8:21:b5:e9:bf:bd:8d:b0:89:2e:73:dd:1a:
         98:fa:be:38:8e:e8:7d:75:33:76:f1:bd:71:4b:db:a5:47:9b:
         fe:81:46:b5:5e:f5:fd:d7:61:63:0c:0c:a4:cc:53:49:d9:4b:
         7d:30:aa:63:3d:3d:14:7d:b3:e4:2b:09:f2:3e:1a:27:3c:d4:
         9c:d9:8b:73:33:46:ba:a6:52:21:c0:e2:8a:67:f2:33:b8:dc:
         06:57:a9:b0:59:9d:b9:2b:8e:18:6f:1f:5d:49:3c:bd:89:e9:
         28:bb:ec:c4:38:43:e4:2b:0c:e7:44:11:7d:e2:f2:d4:eb:e6:
         ae:e0:74:3e
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICbuswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTk1
YjZmMjFkODBmZmU2NTQyNWVhZjRiMzZlOGY1YWYyZjMzMTJiODAeFw0yMTA4MTgw
MzAwMDBaFw0yMzA4MTgwMzAwMDBaMDMxMTAvBgNVBAMTKDdlMzA3MDVkNWQ4OWM4
M2M0N2NkMjkzZWQwMjNkYTk5OTBmZmJjNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCW2jfVtHr+T28rqa38OZEUoN2mkGEkbnJH6lQ1l8a1eSvnGtQg
gtg/sTRjN2B4jMVO/bBNADKFj3f59Lb1pJidGf7ZI+nHuuhGlK88EJzalwl0LD7I
zXLfauW7lISK9awZrZdCx+X8Y2L46+ttFqdljOedqGpTW8y79WRyuBhLpB4QRt50
zJR0bhSresHca1lVGl+u4z8cnRz9LeTau0fOI3I6JgSsroqhdc7CbNBh1Cex+nQn
ud8VpCCYfI2yirnfeHdcx7z4+0VkcUTnGsEDfN9zNEDN85PIW0mneuJC6HvX/+0b
Gh+n1PDN+6aiGNGg0ReCFc9e38TMu2CX8G31AgMBAAGjggJnMIICYzAdBgNVHQ4E
FgQUyTf/QiqHDXDx4jtdbgzdp03WFbUwHwYDVR0jBBgwFoAUI7mJq2fRArIsPY7G
4cN4E0PkmWMwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS81OTViNmYy
MWQ4MGZmZTY1NDI1ZWFmNGIzNmU4ZjVhZjJmMzMxMmI4LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy81MGEzOGYzYi1lMmI3LTRkMmYtYjYwMC1kMmIyOTFh
ZTQ5M2IvN2UzMDcwNWQ1ZDg5YzgzYzQ3Y2QyOTNlZDAyM2RhOTk5MGZmYmM0NC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzUwYTM4ZjNiLWUyYjctNGQyZi1iNjAwLWQyYjI5
MWFlNDkzYi81OTViNmYyMWQ4MGZmZTY1NDI1ZWFmNGIzNmU4ZjVhZjJmMzMxMmI4
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBww
GjAYBAIAAjASAxADKAPvIAAAAAAAAAAAAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQAv
s3XitsrxOp9Ajellyoc4SjIfWKU+VGgMjvbyTmifNhH4nIKjqgElrOIiZib3DCDO
0PIIMeloqefab59NCtXeeeC8sK4kyTb/YW8FTkP/gnPbx7JGKtanbgOp2iGAzp3P
myOWvHTchIcky4IjXfQ4T0ZhHsE4kXm7bECEGP+6bvlRSbghtem/vY2wiS5z3RqY
+r44juh9dTN28b1xS9ulR5v+gUa1XvX912FjDAykzFNJ2Ut9MKpjPT0UfbPkKwny
PhonPNSc2YtzM0a6plIhwOKKZ/IzuNwGV6mwWZ25K44Ybx9dSTy9iekou+zEOEPk
KwznRBF94vLU6+au4HQ+
-----END CERTIFICATE-----