Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/3d8b093cae00e987ddb7000cf57c24e1132820fe.roa
File:                     3d8b093cae00e987ddb7000cf57c24e1132820fe.roa (raw, json)
Hash identifier:          5SPHR/PjE5tUdFKIzzsnOTc2gAdx1iVrWqsAKBWskBs=
Subject key identifier:   73:0B:0B:25:4E:B5:3C:23:D8:7A:69:57:28:74:F8:E1:62:BA:8C:67
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       0F4D7D
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/3d8b093cae00e987ddb7000cf57c24e1132820fe.roa
Signing time:             Wed 05 May 2021 17:14:01 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     28001
IP address blocks:        2801:1b8::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1002877 (0xf4d7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=3d8b093cae00e987ddb7000cf57c24e1132820fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c9:30:b7:51:a4:b6:cc:53:82:d5:4c:7a:0a:
                    67:40:47:26:36:6d:d4:81:69:36:41:ff:93:e4:e1:
                    4f:fc:15:0a:b5:62:aa:41:16:4b:95:06:44:a1:4a:
                    97:fc:b8:9f:a7:6d:56:52:52:d0:f4:02:11:4c:2a:
                    01:93:fd:51:53:30:ba:7b:ba:b7:22:b3:ac:96:54:
                    24:34:54:8d:54:0b:b0:bf:1e:4e:7c:8f:0b:ff:fc:
                    ed:7f:6d:a1:ea:0f:5e:09:e0:a5:cd:61:b2:74:ec:
                    3d:1f:7c:9f:87:7d:22:95:a8:94:98:f2:1a:34:e6:
                    40:5c:b6:da:99:4a:c2:b2:b4:10:28:b0:08:4a:57:
                    8e:6f:c3:a5:08:18:16:df:8f:b8:80:ac:e2:d7:09:
                    7a:9a:06:4a:7c:df:7a:96:37:f6:5c:e0:ce:70:de:
                    da:1d:8d:d2:dc:ca:ea:b5:59:77:03:e9:d4:44:ae:
                    3f:ee:ea:a9:eb:26:3a:85:72:bc:f8:2e:c7:67:1b:
                    52:43:e3:29:98:9e:56:86:74:2a:1a:57:85:2f:98:
                    9c:dd:6b:0e:e8:4a:16:bd:97:f3:3d:1c:bc:35:ae:
                    98:a3:b3:68:02:a7:af:69:32:fe:79:30:f8:f5:94:
                    5a:4d:19:f5:65:a1:7b:9f:47:97:c5:87:45:ef:b9:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0B:0B:25:4E:B5:3C:23:D8:7A:69:57:28:74:F8:E1:62:BA:8C:67
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/3d8b093cae00e987ddb7000cf57c24e1132820fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b8::/44

    Signature Algorithm: sha256WithRSAEncryption
         35:4a:b9:3b:f0:fc:90:65:6b:d7:d0:36:39:66:71:8d:6d:bd:
         85:18:4e:f5:cf:dc:bb:a7:f4:8f:8d:c2:a8:3d:5a:98:e6:ad:
         ff:fd:fa:57:37:f2:40:77:e3:86:25:9d:c2:6b:04:bd:b6:9c:
         f4:9e:32:0c:ea:1b:f0:f2:db:da:a8:f5:45:f4:be:71:37:d3:
         33:a9:bb:10:bd:71:ba:ad:cd:9d:18:94:5b:1e:38:d4:f8:fe:
         66:f0:77:d6:b4:bb:f0:fd:d9:2e:5f:cb:be:66:f3:73:f1:40:
         24:fa:10:ca:f8:2f:38:b3:8b:83:76:e8:90:07:60:d0:a1:6c:
         5d:75:4b:f6:16:b3:4e:f9:e0:43:0d:b2:0e:30:7e:48:ac:f4:
         d7:94:16:49:20:c7:e4:93:42:99:85:cd:76:2d:37:5f:1c:7d:
         f2:24:1e:ea:fd:30:43:54:b3:a7:26:2e:1b:04:d2:ba:1f:fd:
         9b:2a:7d:06:2e:1c:a9:60:25:f8:33:57:a6:25:69:63:7c:e7:
         ac:8f:79:6a:57:a2:44:ec:21:12:38:17:62:c0:d3:05:b0:1a:
         f9:b8:f1:bb:c3:27:c7:14:1c:b9:b6:9d:65:c7:2a:bb:5b:30:
         59:09:67:5a:1a:ad:bd:a2:dd:3d:86:fd:18:59:70:cc:93:a1:
         45:3e:d9:3f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDD019MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
ZDNiNjMyNTJmYWZiY2Q2YmFlNmUxZjRjZWJiMDJmY2MyYWY4ZDIwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygzZDhiMDkzY2FlMDBl
OTg3ZGRiNzAwMGNmNTdjMjRlMTEzMjgyMGZlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgskwt1GktsxTgtVMegpnQEcmNm3UgWk2Qf+T5OFP/BUKtWKq
QRZLlQZEoUqX/Lifp21WUlLQ9AIRTCoBk/1RUzC6e7q3IrOsllQkNFSNVAuwvx5O
fI8L//ztf22h6g9eCeClzWGydOw9H3yfh30ilaiUmPIaNOZAXLbamUrCsrQQKLAI
SleOb8OlCBgW34+4gKzi1wl6mgZKfN96ljf2XODOcN7aHY3S3MrqtVl3A+nURK4/
7uqp6yY6hXK8+C7HZxtSQ+MpmJ5WhnQqGleFL5ic3WsO6EoWvZfzPRy8Na6Yo7No
AqevaTL+eTD49ZRaTRn1ZaF7n0eXxYdF77mvvQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFHMLCyVOtTwj2HppVyh0+OFiuoxnMB8GA1UdIwQYMBaAFH+Jf8zsEQtTeV2M
m5FVamZ66VzVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWJkM2I2
MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhkMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjIyYzBjMjgtY2M3ZC00MjFkLWI0NWItOWFjMmI3
Y2VkMjA5LzNkOGIwOTNjYWUwMGU5ODdkZGI3MDAwY2Y1N2MyNGUxMTMyODIwZmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjJjMGMyOC1jYzdkLTQyMWQtYjQ1Yi05YWMy
YjdjZWQyMDkvOWJkM2I2MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhk
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHBCgBAbgAADANBgkqhkiG9w0BAQsFAAOCAQEANUq5O/D8kGVr
19A2OWZxjW29hRhO9c/cu6f0j43CqD1amOat//36VzfyQHfjhiWdwmsEvbac9J4y
DOob8PLb2qj1RfS+cTfTM6m7EL1xuq3NnRiUWx441Pj+ZvB31rS78P3ZLl/Lvmbz
c/FAJPoQyvgvOLOLg3bokAdg0KFsXXVL9hazTvngQw2yDjB+SKz015QWSSDH5JNC
mYXNdi03Xxx98iQe6v0wQ1SzpyYuGwTSuh/9myp9Bi4cqWAl+DNXpiVpY3znrI95
aleiROwhEjgXYsDTBbAa+bjxu8MnxxQcubadZccqu1swWQlnWhqtvaLdPYb9GFlw
zJOhRT7ZPw==
-----END CERTIFICATE-----