Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/25fb6f8acb5c5ac694de436c7d8234446d17adf8.roa
File:                     25fb6f8acb5c5ac694de436c7d8234446d17adf8.roa (raw, json)
Hash identifier:          drUAMGbK+Mf0PnCFbMB9BUn7+FblLgoUxYk9VBHfpdA=
Subject key identifier:   C6:5E:70:01:24:4C:81:0A:65:5B:D7:9A:8E:8D:0D:30:0F:79:C1:DF
Certificate issuer:       /CN=fc6cb1153f9d2823a345e050aa08a59869c1972e
Certificate serial:       060A8D
Authority key identifier: B1:91:4D:1E:D5:69:1F:1F:92:2C:EE:5F:8A:E0:F6:18:CE:1D:37:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6cb1153f9d2823a345e050aa08a59869c1972e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/25fb6f8acb5c5ac694de436c7d8234446d17adf8.roa
Signing time:             Wed 07 Dec 2022 13:31:56 +0000
ROA not before:           Fri 02 Dec 2022 21:50:33 +0000
ROA not after:            Sun 05 Dec 2027 21:50:33 +0000
asID:                     262589
IP address blocks:        2801:1d:8800::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395917 (0x60a8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6cb1153f9d2823a345e050aa08a59869c1972e
        Validity
            Not Before: Dec  2 21:50:33 2022 GMT
            Not After : Dec  5 21:50:33 2027 GMT
        Subject: CN=25fb6f8acb5c5ac694de436c7d8234446d17adf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:13:be:d7:90:98:22:c6:c7:d6:86:1a:7b:44:
                    15:2a:3b:a7:1d:b5:0a:fe:c0:90:cb:f7:81:99:36:
                    5f:33:1e:5d:61:1c:40:3e:73:88:f7:47:46:77:28:
                    25:e4:af:38:51:36:f6:6a:d0:3a:55:34:f9:dd:f7:
                    17:f9:fe:d4:db:da:3c:4e:1e:79:ee:b1:90:21:66:
                    75:4f:39:30:3f:c1:11:af:c8:df:9d:e5:fa:91:b3:
                    97:ac:35:f7:3d:1b:0a:79:8d:1d:ee:3e:23:47:35:
                    ee:ef:86:b1:0a:bb:af:a3:27:af:87:92:86:5b:30:
                    6b:03:1c:9c:f7:b0:18:43:82:62:04:7a:d2:a7:90:
                    1e:55:b6:d5:ff:ce:6a:c6:4b:29:ab:32:83:fd:a8:
                    2a:3c:fa:36:dd:0b:6f:cb:60:02:b3:76:75:8d:20:
                    9c:d7:98:2a:b4:2d:9f:b7:fa:2d:28:e9:fc:5c:70:
                    b0:51:1e:7e:47:c0:ef:86:43:8f:85:c3:81:6e:b3:
                    2d:53:48:79:22:01:19:4c:24:c3:a7:da:63:45:94:
                    31:e7:0a:f9:28:ce:6f:05:b4:8a:07:bd:35:64:81:
                    f6:5f:d3:0e:1e:d9:57:02:b0:df:32:fe:03:09:07:
                    68:c6:d8:ab:52:ad:c0:d0:dd:31:7a:3a:e5:48:35:
                    f3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5E:70:01:24:4C:81:0A:65:5B:D7:9A:8E:8D:0D:30:0F:79:C1:DF
            X509v3 Authority Key Identifier:
                keyid:B1:91:4D:1E:D5:69:1F:1F:92:2C:EE:5F:8A:E0:F6:18:CE:1D:37:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6cb1153f9d2823a345e050aa08a59869c1972e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/25fb6f8acb5c5ac694de436c7d8234446d17adf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/fc6cb1153f9d2823a345e050aa08a59869c1972e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:72:15:e5:82:a7:3f:8f:53:87:8c:f6:a4:e7:c1:25:89:b7:
         ad:ee:4b:0b:c2:d3:d6:21:f2:4b:a1:e3:03:44:44:46:ca:d4:
         22:69:1b:f9:9f:a8:77:93:97:3a:9a:14:ba:66:06:e8:d0:ce:
         0a:8e:f0:7b:da:e6:48:22:83:32:44:fa:59:02:7e:08:7b:7a:
         79:5e:7f:13:37:47:2f:cc:9a:e6:3e:03:94:ae:5e:c1:4d:1f:
         1f:95:56:c9:a7:77:f2:d3:cb:f4:28:59:8c:7a:8f:88:6f:f2:
         c7:1e:3f:96:4d:52:40:95:e3:02:5f:d5:73:13:8d:ef:27:fd:
         88:f4:be:b0:06:e8:a9:bb:de:fd:91:57:5b:d2:b9:2d:24:e5:
         27:9f:c1:70:7d:5a:b9:b0:a7:b1:4d:6a:2b:36:d0:28:c8:7f:
         fd:a7:11:a1:5f:07:40:1e:e5:fa:4b:ff:1f:e6:92:1d:52:e5:
         16:f5:16:db:26:14:d1:20:b5:c0:0e:24:10:7d:6d:3a:5d:f7:
         09:ee:c8:27:34:15:13:a7:44:74:58:fc:7b:03:c8:1f:06:79:
         70:1c:f7:87:cc:b9:09:ae:22:f7:5b:f7:49:a5:51:26:d1:4b:
         3b:0c:f7:9e:ef:24:2d:05:af:4d:e8:a6:9b:19:c1:8c:64:66:
         14:bd:54:17
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDBgqNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZj
NmNiMTE1M2Y5ZDI4MjNhMzQ1ZTA1MGFhMDhhNTk4NjljMTk3MmUwHhcNMjIxMjAy
MjE1MDMzWhcNMjcxMjA1MjE1MDMzWjAzMTEwLwYDVQQDEygyNWZiNmY4YWNiNWM1
YWM2OTRkZTQzNmM3ZDgyMzQ0NDZkMTdhZGY4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyxO+15CYIsbH1oYae0QVKjunHbUK/sCQy/eBmTZfMx5dYRxA
PnOI90dGdygl5K84UTb2atA6VTT53fcX+f7U29o8Th557rGQIWZ1TzkwP8ERr8jf
neX6kbOXrDX3PRsKeY0d7j4jRzXu74axCruvoyevh5KGWzBrAxyc97AYQ4JiBHrS
p5AeVbbV/85qxkspqzKD/agqPPo23Qtvy2ACs3Z1jSCc15gqtC2ft/otKOn8XHCw
UR5+R8DvhkOPhcOBbrMtU0h5IgEZTCTDp9pjRZQx5wr5KM5vBbSKB701ZIH2X9MO
HtlXArDfMv4DCQdoxtirUq3A0N0xejrlSDXzXQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFMZecAEkTIEKZVvXmo6NDTAPecHfMB8GA1UdIwQYMBaAFLGRTR7VaR8fkizu
X4rg9hjOHTcWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmM2Y2Ix
MTUzZjlkMjgyM2EzNDVlMDUwYWEwOGE1OTg2OWMxOTcyZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjE0OWU2MzgtZGYzNi00NmMzLTgwNTUtNmIyNjMx
N2MyMzVlLzI1ZmI2ZjhhY2I1YzVhYzY5NGRlNDM2YzdkODIzNDQ0NmQxN2FkZjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MTQ5ZTYzOC1kZjM2LTQ2YzMtODA1NS02YjI2
MzE3YzIzNWUvZmM2Y2IxMTUzZjlkMjgyM2EzNDVlMDUwYWEwOGE1OTg2OWMxOTcy
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB2IADANBgkqhkiG9w0BAQsFAAOCAQEAhHIV5YKnP49T
h4z2pOfBJYm3re5LC8LT1iHyS6HjA0RERsrUImkb+Z+od5OXOpoUumYG6NDOCo7w
e9rmSCKDMkT6WQJ+CHt6eV5/EzdHL8ya5j4DlK5ewU0fH5VWyad38tPL9ChZjHqP
iG/yxx4/lk1SQJXjAl/VcxON7yf9iPS+sAboqbve/ZFXW9K5LSTlJ5/BcH1aubCn
sU1qKzbQKMh//acRoV8HQB7l+kv/H+aSHVLlFvUW2yYU0SC1wA4kEH1tOl33Ce7I
JzQVE6dEdFj8ewPIHwZ5cBz3h8y5Ca4i91v3SaVRJtFLOwz3nu8kLQWvTeimmxnB
jGRmFL1UFw==
-----END CERTIFICATE-----