Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5abc687c-c832-4786-bcc2-e01894ad2a0a/4f6656bd323c3eb0d00da71cf773e7ebb737b564.roa
File:                     4f6656bd323c3eb0d00da71cf773e7ebb737b564.roa (raw, json)
Hash identifier:          Oh0ukeqW4s7kZr6ztsqQcxIpEKh1fvy1+bBAOEGibMU=
Subject key identifier:   4A:CC:65:47:36:DF:53:B4:6C:5E:BA:B8:73:AC:B0:19:4A:CC:E8:4A
Certificate issuer:       /CN=16e5ae4164aa29d5bd6483552f9d80c8333d29b9
Certificate serial:       102012
Authority key identifier: BC:D9:2E:68:DE:B9:79:F0:EA:74:5D:1D:C6:9B:11:09:09:C6:80:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16e5ae4164aa29d5bd6483552f9d80c8333d29b9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5abc687c-c832-4786-bcc2-e01894ad2a0a/4f6656bd323c3eb0d00da71cf773e7ebb737b564.roa
Signing time:             Mon 20 Sep 2021 11:23:13 +0000
ROA not before:           Mon 20 Sep 2021 03:00:00 +0000
ROA not after:            Wed 20 Sep 2023 03:00:00 +0000
asID:                     267845
IP address blocks:        2803:4c60::/45 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1056786 (0x102012)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e5ae4164aa29d5bd6483552f9d80c8333d29b9
        Validity
            Not Before: Sep 20 03:00:00 2021 GMT
            Not After : Sep 20 03:00:00 2023 GMT
        Subject: CN=4f6656bd323c3eb0d00da71cf773e7ebb737b564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:46:31:80:7e:27:20:fa:7d:7a:cd:ac:de:13:
                    7f:ec:45:da:d0:16:81:77:02:48:b5:d5:c1:0c:64:
                    62:73:f1:52:e2:2b:34:a6:a9:ab:96:2b:ff:36:28:
                    3d:bf:43:64:fd:4b:57:86:55:35:fc:67:f4:80:82:
                    44:ad:1a:8e:f4:1f:6c:03:20:05:48:f5:e0:32:16:
                    4d:8d:2d:54:43:9b:12:98:28:b3:63:23:61:55:be:
                    02:44:c1:39:0c:fb:ca:51:fb:6f:93:0e:60:26:b8:
                    7e:f1:12:99:db:ec:6d:10:a2:27:aa:2b:08:3a:1b:
                    2a:08:ff:e5:a0:94:4f:db:7e:a3:df:7b:14:5c:48:
                    1f:53:f8:03:4f:cc:1a:6d:c9:9d:4b:41:5d:c0:8a:
                    d6:88:14:4b:62:fe:f9:c1:d3:cf:97:c2:ae:98:e1:
                    c1:98:6b:29:ad:c5:76:89:d2:66:bb:8c:0c:c5:09:
                    4a:f8:15:26:f5:74:96:a3:a9:35:c3:f3:55:63:37:
                    bd:db:38:3b:f6:75:c9:b6:3f:2c:db:b9:94:2d:15:
                    f0:d1:ce:63:f7:93:8f:0b:c8:b0:78:39:dc:68:61:
                    8a:65:8d:13:ef:a2:24:99:d7:79:1a:35:18:de:27:
                    5b:8e:56:fb:26:95:24:f3:2d:40:77:57:91:a7:fa:
                    c8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CC:65:47:36:DF:53:B4:6C:5E:BA:B8:73:AC:B0:19:4A:CC:E8:4A
            X509v3 Authority Key Identifier:
                keyid:BC:D9:2E:68:DE:B9:79:F0:EA:74:5D:1D:C6:9B:11:09:09:C6:80:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16e5ae4164aa29d5bd6483552f9d80c8333d29b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5abc687c-c832-4786-bcc2-e01894ad2a0a/4f6656bd323c3eb0d00da71cf773e7ebb737b564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5abc687c-c832-4786-bcc2-e01894ad2a0a/16e5ae4164aa29d5bd6483552f9d80c8333d29b9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4c60::/45

    Signature Algorithm: sha256WithRSAEncryption
         6a:ff:c1:19:4e:70:fb:c1:de:5d:e8:94:c9:24:fc:4f:42:b6:
         26:60:25:b3:78:7b:55:39:7b:8a:7e:9d:d5:0f:c9:9c:02:0b:
         d9:c6:c7:9c:12:5f:50:50:38:c8:73:02:42:ab:7c:4c:2c:d1:
         68:f3:a7:86:b9:e3:69:ba:2a:32:d5:ee:24:b1:2e:8c:3d:7e:
         04:64:f4:11:31:e8:e9:9d:a2:da:f9:00:04:e7:16:e2:5d:cc:
         89:a6:23:c1:33:b2:c0:7c:c7:7e:a1:07:b2:f5:c5:74:77:9f:
         15:65:bb:1c:b5:de:f5:60:52:04:66:e4:2c:2a:67:c4:ae:75:
         d3:db:45:de:b2:91:d0:b7:1f:f6:ff:89:16:d8:2b:fc:bd:da:
         4c:80:f0:65:9e:65:15:10:46:e4:36:99:14:8b:9c:a0:a6:f0:
         a7:be:01:d2:bd:f6:63:c4:74:3c:25:d0:7f:c4:10:e0:a6:29:
         f5:e5:57:76:f9:3d:c6:cb:14:3b:a4:2b:22:95:7c:59:83:1a:
         5c:5d:b6:a0:37:37:a6:e5:c9:07:d7:df:e8:52:80:4c:b5:ad:
         0a:8e:35:a3:c9:18:7c:32:7e:1e:3c:45:6c:dd:af:b0:d9:c7:
         3c:8d:be:c0:1c:b1:6a:0e:59:de:1b:f8:8d:95:63:b4:06:58:
         66:5f:21:18
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDECASMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE2
ZTVhZTQxNjRhYTI5ZDViZDY0ODM1NTJmOWQ4MGM4MzMzZDI5YjkwHhcNMjEwOTIw
MDMwMDAwWhcNMjMwOTIwMDMwMDAwWjAzMTEwLwYDVQQDEyg0ZjY2NTZiZDMyM2Mz
ZWIwZDAwZGE3MWNmNzczZTdlYmI3MzdiNTY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlkYxgH4nIPp9es2s3hN/7EXa0BaBdwJItdXBDGRic/FS4is0
pqmrliv/Nig9v0Nk/UtXhlU1/Gf0gIJErRqO9B9sAyAFSPXgMhZNjS1UQ5sSmCiz
YyNhVb4CRME5DPvKUftvkw5gJrh+8RKZ2+xtEKInqisIOhsqCP/loJRP236j33sU
XEgfU/gDT8wabcmdS0FdwIrWiBRLYv75wdPPl8KumOHBmGsprcV2idJmu4wMxQlK
+BUm9XSWo6k1w/NVYze92zg79nXJtj8s27mULRXw0c5j95OPC8iweDncaGGKZY0T
76Ikmdd5GjUY3idbjlb7JpUk8y1Ad1eRp/rI/wIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFErMZUc231O0bF66uHOssBlKzOhKMB8GA1UdIwQYMBaAFLzZLmjeuXnw6nRd
HcabEQkJxoCSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTZlNWFl
NDE2NGFhMjlkNWJkNjQ4MzU1MmY5ZDgwYzgzMzNkMjliOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWFiYzY4N2MtYzgzMi00Nzg2LWJjYzItZTAxODk0
YWQyYTBhLzRmNjY1NmJkMzIzYzNlYjBkMDBkYTcxY2Y3NzNlN2ViYjczN2I1NjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81YWJjNjg3Yy1jODMyLTQ3ODYtYmNjMi1lMDE4
OTRhZDJhMGEvMTZlNWFlNDE2NGFhMjlkNWJkNjQ4MzU1MmY5ZDgwYzgzMzNkMjli
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHAygDTGAAADANBgkqhkiG9w0BAQsFAAOCAQEAav/BGU5w+8He
XeiUyST8T0K2JmAls3h7VTl7in6d1Q/JnAIL2cbHnBJfUFA4yHMCQqt8TCzRaPOn
hrnjaboqMtXuJLEujD1+BGT0ETHo6Z2i2vkABOcW4l3MiaYjwTOywHzHfqEHsvXF
dHefFWW7HLXe9WBSBGbkLCpnxK5109tF3rKR0Lcf9v+JFtgr/L3aTIDwZZ5lFRBG
5DaZFIucoKbwp74B0r32Y8R0PCXQf8QQ4KYp9eVXdvk9xssUO6QrIpV8WYMaXF22
oDc3puXJB9ff6FKATLWtCo41o8kYfDJ+HjxFbN2vsNnHPI2+wByxag5Z3hv4jZVj
tAZYZl8hGA==
-----END CERTIFICATE-----