Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/356808e7ab5204e1b11c522213ec2fb493ed4524.roa
File:                     356808e7ab5204e1b11c522213ec2fb493ed4524.roa (raw, json)
Hash identifier:          bhVuR8Ohn1eu/3UOhkBXDajzHj1mU5aRgvK7c9wAQFY=
Subject key identifier:   15:14:55:06:86:84:7B:13:8E:5C:F5:CD:15:9C:AD:C6:78:D0:63:FB
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       19189A
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/356808e7ab5204e1b11c522213ec2fb493ed4524.roa
Signing time:             Mon 06 Jun 2022 03:24:43 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     28001
IP address blocks:        2801:1b8::/44 maxlen: 47

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1644698 (0x19189a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=356808e7ab5204e1b11c522213ec2fb493ed4524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:61:2d:a2:5e:95:af:b7:38:64:4b:b8:98:
                    6a:98:cb:7b:61:e1:84:7c:0e:18:a3:8a:fa:15:ff:
                    a5:fb:80:64:63:16:7e:1e:d9:8a:2e:02:62:a8:36:
                    55:a3:98:70:f7:6c:b0:ac:1d:9a:01:9d:c3:6c:dc:
                    42:a3:af:a1:4a:ff:c7:9e:f0:f1:21:36:1d:af:1a:
                    c3:c5:13:d1:84:18:5e:4e:c7:f9:ef:50:72:2c:52:
                    45:88:50:5b:b6:14:0e:96:8e:13:f0:4d:90:b0:ca:
                    65:44:e1:8a:86:dd:4b:ae:55:70:ab:5f:e0:c9:8c:
                    1e:41:b6:84:0d:46:3d:63:af:68:e2:bb:45:0d:22:
                    1d:8c:cd:33:62:50:a3:99:93:a7:cd:f4:44:d2:87:
                    0d:37:b7:ca:d8:62:91:ff:15:5c:5e:b8:11:d8:55:
                    6e:bc:e1:a4:87:ad:1b:72:03:1b:71:ce:a0:15:6c:
                    9c:1c:f3:99:e9:67:ff:4a:74:18:c1:2b:64:c7:11:
                    70:35:31:53:59:b7:4c:e5:0c:99:7e:1a:18:cd:1c:
                    78:e1:e8:93:7e:91:ab:ed:5b:fe:fa:4c:15:13:f4:
                    0a:16:1d:d6:fc:10:cf:a8:7a:00:70:6e:9d:ab:fa:
                    c8:ff:75:8b:bd:46:e9:9c:36:8d:06:0f:54:30:b5:
                    2d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:14:55:06:86:84:7B:13:8E:5C:F5:CD:15:9C:AD:C6:78:D0:63:FB
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/356808e7ab5204e1b11c522213ec2fb493ed4524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b8::/44

    Signature Algorithm: sha256WithRSAEncryption
         83:48:97:8f:d6:5e:65:b3:ba:74:f7:55:3c:e6:e6:7b:bd:f2:
         f8:98:b3:3a:9c:09:a1:99:f6:60:1d:5c:67:20:f6:c4:a7:c0:
         2b:a8:f7:e4:6a:98:39:8b:0f:9e:bb:60:c1:18:f5:79:5a:ca:
         05:b8:36:5e:e6:a6:22:92:7c:52:ef:bc:19:56:52:95:b8:0d:
         7a:b1:98:e9:69:91:94:da:97:35:87:28:5c:90:e0:9a:c9:cb:
         9c:e5:18:57:1b:89:6b:86:52:dd:96:2e:fb:56:de:1d:0e:f5:
         6e:76:5b:3d:07:21:47:f5:27:f5:d0:05:62:7c:0c:da:ab:2f:
         07:e2:5f:6a:ea:53:cd:e2:c0:aa:ce:c4:c3:d1:71:9c:bc:db:
         95:92:df:91:90:6f:73:e3:4a:38:05:3b:17:72:21:bc:36:a4:
         37:cf:0d:f3:c3:b6:a7:4e:54:98:8c:fc:fe:6b:d5:03:2a:a7:
         f9:48:e9:ab:ca:5e:4a:76:d7:76:0a:10:c7:8a:aa:42:5b:a9:
         6a:02:eb:3e:25:63:85:ad:07:01:d5:92:90:7f:e8:f6:cc:a9:
         3b:f1:73:27:46:9c:32:4d:e9:0d:bc:04:36:15:a7:b7:c2:1b:
         61:ac:34:fd:f4:a2:cc:08:a5:f6:63:73:05:87:70:19:9f:fd:
         af:60:de:ab
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDGRiaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
ZDNiNjMyNTJmYWZiY2Q2YmFlNmUxZjRjZWJiMDJmY2MyYWY4ZDIwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygzNTY4MDhlN2FiNTIw
NGUxYjExYzUyMjIxM2VjMmZiNDkzZWQ0NTI0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAooBhLaJela+3OGRLuJhqmMt7YeGEfA4Yo4r6Ff+l+4BkYxZ+
HtmKLgJiqDZVo5hw92ywrB2aAZ3DbNxCo6+hSv/HnvDxITYdrxrDxRPRhBheTsf5
71ByLFJFiFBbthQOlo4T8E2QsMplROGKht1LrlVwq1/gyYweQbaEDUY9Y69o4rtF
DSIdjM0zYlCjmZOnzfRE0ocNN7fK2GKR/xVcXrgR2FVuvOGkh60bcgMbcc6gFWyc
HPOZ6Wf/SnQYwStkxxFwNTFTWbdM5QyZfhoYzRx44eiTfpGr7Vv++kwVE/QKFh3W
/BDPqHoAcG6dq/rI/3WLvUbpnDaNBg9UMLUt1QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFBUUVQaGhHsTjlz1zRWcrcZ40GP7MB8GA1UdIwQYMBaAFH+Jf8zsEQtTeV2M
m5FVamZ66VzVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWJkM2I2
MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhkMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjIyYzBjMjgtY2M3ZC00MjFkLWI0NWItOWFjMmI3
Y2VkMjA5LzM1NjgwOGU3YWI1MjA0ZTFiMTFjNTIyMjEzZWMyZmI0OTNlZDQ1MjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjJjMGMyOC1jYzdkLTQyMWQtYjQ1Yi05YWMy
YjdjZWQyMDkvOWJkM2I2MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhk
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHBCgBAbgAADANBgkqhkiG9w0BAQsFAAOCAQEAg0iXj9ZeZbO6
dPdVPObme73y+JizOpwJoZn2YB1cZyD2xKfAK6j35GqYOYsPnrtgwRj1eVrKBbg2
XuamIpJ8Uu+8GVZSlbgNerGY6WmRlNqXNYcoXJDgmsnLnOUYVxuJa4ZS3ZYu+1be
HQ71bnZbPQchR/Un9dAFYnwM2qsvB+JfaupTzeLAqs7Ew9FxnLzblZLfkZBvc+NK
OAU7F3IhvDakN88N88O2p05UmIz8/mvVAyqn+Ujpq8peSnbXdgoQx4qqQlupagLr
PiVjha0HAdWSkH/o9sypO/FzJ0acMk3pDbwENhWnt8IbYaw0/fSizAil9mNzBYdw
GZ/9r2Deqw==
-----END CERTIFICATE-----