Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6848d5a0-04e9-468c-a560-b114cb450392/4a5619fe44a4fcd55e4bb17a819e7ea233582428.roa
File:                     4a5619fe44a4fcd55e4bb17a819e7ea233582428.roa (raw, json)
Hash identifier:          SfF3c7jFbTToLWDsbAU2ZhoUKI/rfuZoInG056Sqtyc=
Subject key identifier:   35:5E:87:A0:18:49:05:BA:68:EE:93:32:92:A2:9F:52:12:8E:40:A2
Certificate issuer:       /CN=3d7e92fe67745c4ed93e7215168d5bb095f17102
Certificate serial:       060799
Authority key identifier: 83:06:15:9A:93:EC:35:FF:9F:A7:18:AC:73:96:0E:B0:1A:68:DB:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d7e92fe67745c4ed93e7215168d5bb095f17102.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6848d5a0-04e9-468c-a560-b114cb450392/4a5619fe44a4fcd55e4bb17a819e7ea233582428.roa
Signing time:             Sat 12 Feb 2022 02:33:38 +0000
ROA not before:           Wed 09 Jun 2021 03:00:00 +0000
ROA not after:            Fri 09 Jun 2023 03:00:00 +0000
asID:                     271916
IP address blocks:        2803:4a10::/32 maxlen: 32
                          2803:4a10:a000::/36 maxlen: 36
                          2803:4a10:f000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395161 (0x60799)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7e92fe67745c4ed93e7215168d5bb095f17102
        Validity
            Not Before: Jun  9 03:00:00 2021 GMT
            Not After : Jun  9 03:00:00 2023 GMT
        Subject: CN=4a5619fe44a4fcd55e4bb17a819e7ea233582428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:09:0a:37:8e:85:53:8a:2a:ca:c3:e2:00:51:
                    4d:d9:2f:f0:f5:3e:34:72:c6:ec:d1:f8:3c:f7:10:
                    47:29:2b:91:19:69:b1:f0:48:4f:b9:2f:1a:b9:65:
                    10:db:42:ee:3a:c5:25:bc:da:53:fa:f3:5f:b2:4e:
                    05:7c:e5:61:ff:4c:c7:cf:e6:4c:ed:56:fd:c8:9a:
                    02:a4:96:8a:08:de:56:c3:71:8b:ff:3e:84:11:53:
                    6b:1b:59:ef:05:73:a7:a8:e5:09:61:19:8c:4e:00:
                    2b:a7:d9:23:46:5c:38:5d:ff:93:02:39:82:4f:41:
                    56:15:ee:eb:9d:24:ef:5d:69:7a:23:84:59:a1:40:
                    ad:44:d8:7e:94:83:a3:7f:dd:75:7a:1f:a4:a0:ca:
                    f9:55:39:cd:b6:96:fa:d2:34:3e:82:4e:9e:6b:84:
                    c3:39:71:1d:76:dd:8e:bb:7a:f8:0c:b9:3f:ff:2c:
                    16:88:58:ae:f7:62:5f:3a:fb:22:15:45:27:af:c5:
                    50:19:72:79:ca:c3:bf:dc:d7:64:e2:d0:86:52:44:
                    1d:79:32:a3:48:07:9b:73:f9:12:53:6d:fa:38:41:
                    08:c3:0f:be:8c:90:c1:0d:c9:92:f8:66:19:a5:99:
                    a1:c5:ec:30:e6:85:0d:1e:03:80:b9:9c:22:58:b9:
                    30:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5E:87:A0:18:49:05:BA:68:EE:93:32:92:A2:9F:52:12:8E:40:A2
            X509v3 Authority Key Identifier:
                keyid:83:06:15:9A:93:EC:35:FF:9F:A7:18:AC:73:96:0E:B0:1A:68:DB:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d7e92fe67745c4ed93e7215168d5bb095f17102.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6848d5a0-04e9-468c-a560-b114cb450392/4a5619fe44a4fcd55e4bb17a819e7ea233582428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6848d5a0-04e9-468c-a560-b114cb450392/3d7e92fe67745c4ed93e7215168d5bb095f17102.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:a2:74:3a:e7:16:a5:da:34:71:b0:68:07:2e:d5:aa:38:22:
         b6:88:d8:7c:97:ee:53:0c:a8:85:96:7b:87:ab:07:b9:3d:a9:
         2e:34:d0:76:51:21:69:e4:fd:7e:5c:2c:bc:f1:12:15:0d:a2:
         00:1a:4a:9c:9e:4c:42:08:0b:17:b5:e5:7b:ca:d0:ff:c8:d6:
         7d:f7:7a:7d:00:b6:9a:83:4c:e0:87:35:42:5e:e6:fe:ba:82:
         f8:f8:91:6c:cd:05:91:aa:85:c1:66:63:03:6b:32:e5:16:16:
         b8:72:1d:3e:f7:34:b7:e3:4a:97:35:ae:b2:37:4c:e8:f3:c7:
         65:bf:67:90:97:3d:14:45:37:4c:31:52:5f:da:89:63:54:c2:
         13:4f:fe:bb:68:e7:1e:e9:21:3b:f8:1c:64:37:87:59:33:9a:
         a3:54:7a:bf:65:5b:48:e5:15:bc:99:4f:c5:25:ad:a5:74:af:
         eb:2c:c2:99:f5:e4:f6:ef:ce:ee:c3:2b:4a:fc:1a:c8:5c:e3:
         18:b3:b4:6e:69:aa:28:dc:9b:c6:f9:3d:34:86:1e:2f:fe:af:
         1e:b3:68:99:4d:64:28:d4:48:dd:a2:e5:61:f4:97:16:26:0b:
         8a:69:14:ae:1c:0c:78:ce:38:9e:bb:c1:cb:79:72:71:f4:2d:
         21:c6:68:ce
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDBgeZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNk
N2U5MmZlNjc3NDVjNGVkOTNlNzIxNTE2OGQ1YmIwOTVmMTcxMDIwHhcNMjEwNjA5
MDMwMDAwWhcNMjMwNjA5MDMwMDAwWjAzMTEwLwYDVQQDEyg0YTU2MTlmZTQ0YTRm
Y2Q1NWU0YmIxN2E4MTllN2VhMjMzNTgyNDI4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqgkKN46FU4oqysPiAFFN2S/w9T40csbs0fg89xBHKSuRGWmx
8EhPuS8auWUQ20LuOsUlvNpT+vNfsk4FfOVh/0zHz+ZM7Vb9yJoCpJaKCN5Ww3GL
/z6EEVNrG1nvBXOnqOUJYRmMTgArp9kjRlw4Xf+TAjmCT0FWFe7rnSTvXWl6I4RZ
oUCtRNh+lIOjf911eh+koMr5VTnNtpb60jQ+gk6ea4TDOXEddt2Ou3r4DLk//ywW
iFiu92JfOvsiFUUnr8VQGXJ5ysO/3Ndk4tCGUkQdeTKjSAebc/kSU236OEEIww++
jJDBDcmS+GYZpZmhxeww5oUNHgOAuZwiWLkwcwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFDVeh6AYSQW6aO6TMpKin1ISjkCiMB8GA1UdIwQYMBaAFIMGFZqT7DX/n6cY
rHOWDrAaaNvbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2Q3ZTky
ZmU2Nzc0NWM0ZWQ5M2U3MjE1MTY4ZDViYjA5NWYxNzEwMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjg0OGQ1YTAtMDRlOS00NjhjLWE1NjAtYjExNGNi
NDUwMzkyLzRhNTYxOWZlNDRhNGZjZDU1ZTRiYjE3YTgxOWU3ZWEyMzM1ODI0Mjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ODQ4ZDVhMC0wNGU5LTQ2OGMtYTU2MC1iMTE0
Y2I0NTAzOTIvM2Q3ZTkyZmU2Nzc0NWM0ZWQ5M2U3MjE1MTY4ZDViYjA5NWYxNzEw
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDShAwDQYJKoZIhvcNAQELBQADggEBAI2idDrnFqXaNHGw
aAcu1ao4IraI2HyX7lMMqIWWe4erB7k9qS400HZRIWnk/X5cLLzxEhUNogAaSpye
TEIICxe15XvK0P/I1n33en0AtpqDTOCHNUJe5v66gvj4kWzNBZGqhcFmYwNrMuUW
FrhyHT73NLfjSpc1rrI3TOjzx2W/Z5CXPRRFN0wxUl/aiWNUwhNP/rto5x7pITv4
HGQ3h1kzmqNUer9lW0jlFbyZT8UlraV0r+sswpn15Pbvzu7DK0r8Gshc4xiztG5p
qijcm8b5PTSGHi/+rx6zaJlNZCjUSN2i5WH0lxYmC4ppFK4cDHjOOJ67wct5cnH0
LSHGaM4=
-----END CERTIFICATE-----