Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ce17407-b77a-4401-b851-8b99296c063d/88a41eaa3c3a6c4e96826b6ace53422a47527c91.roa
File:                     88a41eaa3c3a6c4e96826b6ace53422a47527c91.roa (raw, json)
Hash identifier:          TR9mqn+MbjGlVplfDAuBwFs9SCdYte9hJbfmFmENEi4=
Subject key identifier:   A8:30:D5:0D:A1:D9:24:10:F7:D8:FC:2B:34:FC:23:77:BA:DE:74:5C
Certificate issuer:       /CN=eec3d97f2e06217cc93ff6f74a07df5b958dd56d
Certificate serial:       0584
Authority key identifier: 63:0A:F9:F9:39:BC:61:02:4C:AF:AA:9C:B7:58:EB:4D:B8:2D:D2:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec3d97f2e06217cc93ff6f74a07df5b958dd56d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ce17407-b77a-4401-b851-8b99296c063d/88a41eaa3c3a6c4e96826b6ace53422a47527c91.roa
Signing time:             Wed 18 Jan 2023 19:21:04 +0000
ROA not before:           Tue 17 Jan 2023 19:17:35 +0000
ROA not after:            Sat 18 Jan 2025 19:17:35 +0000
asID:                     270180
IP address blocks:        2806:3f2::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1412 (0x584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec3d97f2e06217cc93ff6f74a07df5b958dd56d
        Validity
            Not Before: Jan 17 19:17:35 2023 GMT
            Not After : Jan 18 19:17:35 2025 GMT
        Subject: CN=88a41eaa3c3a6c4e96826b6ace53422a47527c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:53:26:70:df:3b:a7:e1:9b:f5:ad:3d:ad:b1:
                    6c:81:77:a5:da:b3:3b:71:71:63:a3:9e:cd:ca:5b:
                    73:4d:cc:ad:fe:63:e3:74:f6:c4:92:1a:1e:d2:22:
                    8e:e5:fe:55:68:65:d2:9c:2d:02:25:98:4a:c8:64:
                    8e:26:41:90:ba:82:74:3a:17:7e:45:7b:5e:ad:56:
                    c7:0b:1a:01:8a:40:11:47:f5:89:b7:d4:29:9a:9e:
                    66:b1:cb:8d:22:ae:dd:24:cb:4e:fc:fb:57:b6:de:
                    03:89:00:53:4e:a7:a6:fa:63:a4:4d:85:26:26:cb:
                    6b:64:8f:c1:75:87:49:51:9d:27:da:5c:b5:66:c6:
                    ca:f7:75:b6:d5:4b:3a:d3:d1:c0:e9:9b:b6:d3:c6:
                    3f:ae:07:72:53:89:19:36:4b:44:88:cc:6e:30:d8:
                    f1:53:6f:6c:4a:63:24:c1:ff:3e:42:94:c2:49:d4:
                    e7:e1:7b:fa:5c:03:c9:2b:4d:d5:82:4c:de:02:c5:
                    c6:96:07:77:36:e0:08:ad:81:ed:71:74:13:a4:db:
                    21:03:16:0a:66:e4:99:de:8b:e6:0a:10:ff:90:f2:
                    a0:50:23:83:d7:c6:75:3c:a0:1d:29:a1:59:7b:f1:
                    6d:f8:0f:a5:8d:b8:18:60:dd:65:28:38:d9:7d:52:
                    b7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:30:D5:0D:A1:D9:24:10:F7:D8:FC:2B:34:FC:23:77:BA:DE:74:5C
            X509v3 Authority Key Identifier:
                keyid:63:0A:F9:F9:39:BC:61:02:4C:AF:AA:9C:B7:58:EB:4D:B8:2D:D2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec3d97f2e06217cc93ff6f74a07df5b958dd56d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ce17407-b77a-4401-b851-8b99296c063d/88a41eaa3c3a6c4e96826b6ace53422a47527c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ce17407-b77a-4401-b851-8b99296c063d/eec3d97f2e06217cc93ff6f74a07df5b958dd56d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f2::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:25:60:40:7e:96:29:8f:6e:d0:1c:bd:62:29:2c:7e:c3:5e:
         d4:26:d2:0b:22:f3:2b:3b:c7:9b:6a:45:fa:3a:d3:f7:45:56:
         e8:db:59:fb:7f:d9:51:37:19:b3:9d:c0:b3:b3:0c:c7:24:16:
         d1:f6:ce:6c:57:19:2a:a3:7e:77:07:70:ce:fa:8d:71:17:00:
         2e:d3:f0:b8:b0:1f:b1:7e:4f:71:a3:99:d9:b4:62:b7:10:51:
         bc:e0:a5:7e:fa:00:aa:f7:bc:45:d5:36:78:3d:07:d9:58:8c:
         85:9e:9d:85:25:c7:61:36:7f:68:ad:c0:d6:a2:ea:b8:55:ae:
         c0:c1:5e:19:36:9e:4a:47:c8:22:42:31:6f:79:15:0b:b8:3e:
         1e:eb:03:b9:69:2d:bf:ce:44:30:d5:e0:46:2a:c3:25:49:4f:
         bf:d0:87:18:13:8b:ae:78:7d:a4:a2:72:47:e2:ab:e3:84:4d:
         7b:b2:b6:16:e1:4f:8d:5f:b7:64:60:6e:b8:1b:33:39:41:13:
         28:fb:f6:3b:b8:dd:5d:44:c0:4a:66:a6:01:17:44:30:fc:2c:
         58:05:c1:c2:1c:88:18:fd:57:75:bd:28:de:9a:2e:c9:7f:42:
         97:41:88:4f:8f:c4:19:da:ed:14:42:d0:41:ef:b7:7a:c0:6b:
         26:08:0f:84
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICBYQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZWVj
M2Q5N2YyZTA2MjE3Y2M5M2ZmNmY3NGEwN2RmNWI5NThkZDU2ZDAeFw0yMzAxMTcx
OTE3MzVaFw0yNTAxMTgxOTE3MzVaMDMxMTAvBgNVBAMTKDg4YTQxZWFhM2MzYTZj
NGU5NjgyNmI2YWNlNTM0MjJhNDc1MjdjOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCOUyZw3zun4Zv1rT2tsWyBd6XasztxcWOjns3KW3NNzK3+Y+N0
9sSSGh7SIo7l/lVoZdKcLQIlmErIZI4mQZC6gnQ6F35Fe16tVscLGgGKQBFH9Ym3
1Cmanmaxy40irt0ky078+1e23gOJAFNOp6b6Y6RNhSYmy2tkj8F1h0lRnSfaXLVm
xsr3dbbVSzrT0cDpm7bTxj+uB3JTiRk2S0SIzG4w2PFTb2xKYyTB/z5ClMJJ1Ofh
e/pcA8krTdWCTN4CxcaWB3c24Aitge1xdBOk2yEDFgpm5Jnei+YKEP+Q8qBQI4PX
xnU8oB0poVl78W34D6WNuBhg3WUoONl9UrcDAgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUqDDVDaHZJBD32PwrNPwjd7redFwwHwYDVR0jBBgwFoAUYwr5+Tm8YQJMr6qc
t1jrTbgt0gIwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9lZWMzZDk3
ZjJlMDYyMTdjYzkzZmY2Zjc0YTA3ZGY1Yjk1OGRkNTZkLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy81Y2UxNzQwNy1iNzdhLTQ0MDEtYjg1MS04Yjk5Mjk2
YzA2M2QvODhhNDFlYWEzYzNhNmM0ZTk2ODI2YjZhY2U1MzQyMmE0NzUyN2M5MS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzVjZTE3NDA3LWI3N2EtNDQwMS1iODUxLThiOTky
OTZjMDYzZC9lZWMzZDk3ZjJlMDYyMTdjYzkzZmY2Zjc0YTA3ZGY1Yjk1OGRkNTZk
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAYD8jANBgkqhkiG9w0BAQsFAAOCAQEAZiVgQH6WKY9u0By9
YiksfsNe1CbSCyLzKzvHm2pF+jrT90VW6NtZ+3/ZUTcZs53As7MMxyQW0fbObFcZ
KqN+dwdwzvqNcRcALtPwuLAfsX5PcaOZ2bRitxBRvOClfvoAqve8RdU2eD0H2ViM
hZ6dhSXHYTZ/aK3A1qLquFWuwMFeGTaeSkfIIkIxb3kVC7g+HusDuWktv85EMNXg
RirDJUlPv9CHGBOLrnh9pKJyR+Kr44RNe7K2FuFPjV+3ZGBuuBszOUETKPv2O7jd
XUTASmamARdEMPwsWAXBwhyIGP1Xdb0o3pouyX9Cl0GIT4/EGdrtFELQQe+3esBr
JggPhA==
-----END CERTIFICATE-----