Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/8b7e8998d8fe58c329fa59aaedc2da5758d7e846.roa
File:                     8b7e8998d8fe58c329fa59aaedc2da5758d7e846.roa (raw, json)
Hash identifier:          wgmKOkb7hkcayi0mz3L79kcsRW5i/8TlHvtPfq/ktEQ=
Subject key identifier:   2D:FA:BE:46:FD:EC:DF:9D:12:29:61:B1:96:87:C3:0C:F8:3F:D9:50
Certificate issuer:       /CN=5d6739fb330fec46825943b9c33eaee7782d7827
Certificate serial:       1CF401
Authority key identifier: 4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/8b7e8998d8fe58c329fa59aaedc2da5758d7e846.roa
Signing time:             Wed 07 Dec 2022 23:34:56 +0000
ROA not before:           Fri 02 Dec 2022 16:04:59 +0000
ROA not after:            Thu 05 Dec 2024 16:04:59 +0000
asID:                     263195
IP address blocks:        2803:ac80:1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1897473 (0x1cf401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6739fb330fec46825943b9c33eaee7782d7827
        Validity
            Not Before: Dec  2 16:04:59 2022 GMT
            Not After : Dec  5 16:04:59 2024 GMT
        Subject: CN=8b7e8998d8fe58c329fa59aaedc2da5758d7e846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ff:fd:19:ad:40:30:40:72:82:7f:9a:82:1b:
                    85:03:c4:25:6f:04:67:6b:10:68:f7:1b:e4:6b:1c:
                    00:a8:b9:5d:5a:b5:91:44:45:b6:ef:e7:20:23:1e:
                    97:4b:97:4f:55:a2:79:a9:2b:c7:4f:10:bb:a4:07:
                    a6:e3:6a:73:5e:e1:3e:eb:e3:06:a4:22:09:93:68:
                    88:19:4b:99:2f:bf:08:b1:e5:57:de:db:6d:38:0f:
                    1e:0e:92:d6:ca:b9:f8:80:f3:b9:1d:4c:e7:b9:cc:
                    08:fa:08:43:a8:fc:f2:8e:c3:e1:41:d5:07:14:c2:
                    04:17:35:91:9e:28:aa:b5:87:80:a9:cb:c4:7b:a0:
                    5e:cd:ee:7f:da:f0:14:e2:b5:69:60:73:bd:4d:80:
                    d5:70:38:b7:cd:90:b7:50:40:54:e8:5d:e0:df:71:
                    9c:cc:68:85:c6:1b:7d:ed:0f:46:0a:93:3b:c8:51:
                    85:ce:64:da:01:79:0b:0c:58:6e:1c:63:ea:c6:f7:
                    55:65:69:c6:f6:41:f4:39:3d:60:a3:a3:96:90:26:
                    5a:76:3f:6d:d8:e6:16:8f:8e:c0:01:14:c9:02:b4:
                    49:a0:d9:4c:c7:2c:9a:7c:66:43:3c:33:ed:ea:2a:
                    d9:05:2e:73:8d:6d:14:56:f5:aa:84:23:7e:50:86:
                    c7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FA:BE:46:FD:EC:DF:9D:12:29:61:B1:96:87:C3:0C:F8:3F:D9:50
            X509v3 Authority Key Identifier:
                keyid:4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/8b7e8998d8fe58c329fa59aaedc2da5758d7e846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/5d6739fb330fec46825943b9c33eaee7782d7827.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac80:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:3f:11:98:a6:92:d9:8d:1a:04:1a:e8:a1:95:79:f1:c7:b6:
         70:89:78:39:eb:9f:e3:7d:fc:81:43:63:d7:6f:94:b5:a5:00:
         a5:6c:c6:c0:9a:bb:2a:e2:de:48:66:2b:45:7f:5e:6c:c1:b6:
         cf:a7:2b:31:c7:77:0b:17:7d:00:a5:33:95:f9:49:90:d6:34:
         42:58:cf:7e:fd:d8:71:3d:e5:97:b6:02:15:82:59:36:6b:4f:
         62:00:38:de:a5:ee:03:1d:ec:72:05:37:63:41:fc:a2:aa:8a:
         37:d6:b0:46:c7:f6:03:0c:c8:65:1d:be:13:7c:c6:94:8c:8c:
         be:91:56:ea:2e:28:12:4b:9b:70:68:63:d0:97:51:1b:8e:44:
         f1:36:99:67:95:c3:b2:b4:db:38:ac:8e:cc:b0:45:be:4f:dc:
         88:ad:44:da:76:86:5a:d4:41:38:22:13:89:9e:09:9c:e9:21:
         35:e9:e3:ed:7a:a9:2a:3a:c0:90:9b:02:e2:d3:65:10:67:c3:
         dc:0a:26:db:88:0e:2d:cb:35:fb:54:fb:36:b4:3d:98:79:09:
         fb:21:25:35:32:37:44:32:7a:08:42:8b:f1:60:6e:f1:93:2a:
         b2:56:36:ad:99:87:3c:52:17:7d:5e:e0:e8:cf:1d:72:5a:cf:
         d5:d9:a9:f3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDHPQBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVk
NjczOWZiMzMwZmVjNDY4MjU5NDNiOWMzM2VhZWU3NzgyZDc4MjcwHhcNMjIxMjAy
MTYwNDU5WhcNMjQxMjA1MTYwNDU5WjAzMTEwLwYDVQQDEyg4YjdlODk5OGQ4ZmU1
OGMzMjlmYTU5YWFlZGMyZGE1NzU4ZDdlODQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoP/9Ga1AMEBygn+aghuFA8QlbwRnaxBo9xvkaxwAqLldWrWR
REW27+cgIx6XS5dPVaJ5qSvHTxC7pAem42pzXuE+6+MGpCIJk2iIGUuZL78IseVX
3tttOA8eDpLWyrn4gPO5HUznucwI+ghDqPzyjsPhQdUHFMIEFzWRniiqtYeAqcvE
e6Beze5/2vAU4rVpYHO9TYDVcDi3zZC3UEBU6F3g33GczGiFxht97Q9GCpM7yFGF
zmTaAXkLDFhuHGPqxvdVZWnG9kH0OT1go6OWkCZadj9t2OYWj47AARTJArRJoNlM
xyyafGZDPDPt6irZBS5zjW0UVvWqhCN+UIbH7QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFC36vkb97N+dEilhsZaHwwz4P9lQMB8GA1UdIwQYMBaAFEsCxjmldtSgQ0Bd
542qYYQGaS98MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWQ2NzM5
ZmIzMzBmZWM0NjgyNTk0M2I5YzMzZWFlZTc3ODJkNzgyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWUzODYzODUtMjJjOS00NGVkLTgyMDUtNWMyOWE2
OTUwMGE2LzhiN2U4OTk4ZDhmZTU4YzMyOWZhNTlhYWVkYzJkYTU3NThkN2U4NDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZTM4NjM4NS0yMmM5LTQ0ZWQtODIwNS01YzI5
YTY5NTAwYTYvNWQ2NzM5ZmIzMzBmZWM0NjgyNTk0M2I5YzMzZWFlZTc3ODJkNzgy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDrIAAATANBgkqhkiG9w0BAQsFAAOCAQEAOj8RmKaS2Y0a
BBrooZV58ce2cIl4Oeuf4338gUNj12+UtaUApWzGwJq7KuLeSGYrRX9ebMG2z6cr
Mcd3Cxd9AKUzlflJkNY0QljPfv3YcT3ll7YCFYJZNmtPYgA43qXuAx3scgU3Y0H8
oqqKN9awRsf2AwzIZR2+E3zGlIyMvpFW6i4oEkubcGhj0JdRG45E8TaZZ5XDsrTb
OKyOzLBFvk/ciK1E2naGWtRBOCITiZ4JnOkhNenj7XqpKjrAkJsC4tNlEGfD3Aom
24gOLcs1+1T7NrQ9mHkJ+yElNTI3RDJ6CEKL8WBu8ZMqslY2rZmHPFIXfV7g6M8d
clrP1dmp8w==
-----END CERTIFICATE-----