Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/c8ae7beda4cfb665f8a506a0ee2e4551e1a2a58d.roa
File:                     c8ae7beda4cfb665f8a506a0ee2e4551e1a2a58d.roa (raw, json)
Hash identifier:          sxgPelL5HaWM0+3H+Doe7GZAHaJarQ5Q3qN9cHCPptg=
Subject key identifier:   22:CE:87:26:0B:FE:A9:3C:26:82:41:19:4F:12:94:5E:A1:52:30:97
Certificate issuer:       /CN=0617fe284eadaecc300caf805a55753001bc6052
Certificate serial:       4E99
Authority key identifier: 23:11:AC:04:68:03:80:BD:6D:72:01:7E:23:B2:26:48:24:56:3C:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0617fe284eadaecc300caf805a55753001bc6052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/c8ae7beda4cfb665f8a506a0ee2e4551e1a2a58d.roa
Signing time:             Fri 11 Nov 2022 22:58:36 +0000
ROA not before:           Wed 09 Nov 2022 22:56:08 +0000
ROA not after:            Mon 11 Nov 2024 22:56:08 +0000
asID:                     270141
IP address blocks:        2806:3dc:ffff::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20121 (0x4e99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0617fe284eadaecc300caf805a55753001bc6052
        Validity
            Not Before: Nov  9 22:56:08 2022 GMT
            Not After : Nov 11 22:56:08 2024 GMT
        Subject: CN=c8ae7beda4cfb665f8a506a0ee2e4551e1a2a58d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:db:59:07:07:cc:c4:4b:c4:35:dd:da:21:c6:
                    be:e7:12:9a:2b:f8:19:fb:b0:31:5d:08:91:2b:d4:
                    3a:3b:69:56:68:94:48:85:f0:31:f5:52:93:2f:9f:
                    26:95:85:ed:63:a1:fb:db:c7:c6:ad:5c:d5:70:4b:
                    9f:a1:60:0a:1a:4d:17:50:5c:97:b6:a8:8e:a5:69:
                    d0:33:44:f8:34:85:ab:f1:33:e0:fe:43:30:d6:06:
                    f0:8e:3f:81:11:72:5b:3e:07:ec:63:53:70:d1:4d:
                    8f:88:7a:fe:02:4c:ec:c0:83:de:0d:2f:c5:d0:75:
                    c1:00:6d:99:2c:a2:25:9c:2e:95:d8:30:58:94:38:
                    3b:2b:f5:e7:db:af:e2:ad:3b:ed:95:eb:8b:34:b5:
                    98:3f:0d:14:3c:54:13:e3:d1:92:ff:d9:38:fd:08:
                    c6:e9:34:b0:e7:0f:42:88:ba:15:dd:72:85:68:83:
                    5b:bb:06:f9:49:ee:68:f0:9a:0e:4d:05:32:36:f5:
                    b4:e8:6b:2d:8c:f5:6e:fa:74:f1:2b:59:4a:2d:ff:
                    66:07:dd:0a:72:bb:fb:b0:57:8c:24:81:dc:14:a0:
                    95:50:0c:c3:7d:bc:4d:ff:a8:4d:a4:02:cf:4c:e7:
                    c8:7a:28:38:b0:eb:6e:4e:bf:b9:ce:5b:a6:2d:85:
                    11:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CE:87:26:0B:FE:A9:3C:26:82:41:19:4F:12:94:5E:A1:52:30:97
            X509v3 Authority Key Identifier:
                keyid:23:11:AC:04:68:03:80:BD:6D:72:01:7E:23:B2:26:48:24:56:3C:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0617fe284eadaecc300caf805a55753001bc6052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/c8ae7beda4cfb665f8a506a0ee2e4551e1a2a58d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/0617fe284eadaecc300caf805a55753001bc6052.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3dc:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:ac:3f:7c:1f:ae:f5:e9:ee:d5:cc:51:8c:19:6b:2f:fa:66:
         d9:7b:f8:9a:ef:54:9c:13:8b:cc:fa:70:2b:55:98:68:c1:5b:
         49:82:64:7a:75:fc:0c:6f:18:df:b1:5d:cc:b4:b0:8c:03:c3:
         2c:15:be:07:b8:a4:b9:f8:2b:06:98:57:6d:36:3f:9b:bf:57:
         29:af:1b:ee:e3:01:c5:ea:8f:03:6a:d5:a2:e3:ab:0f:6c:12:
         28:4d:16:08:6e:2f:a6:13:da:b1:48:ca:b4:b4:0c:f0:ae:bb:
         7e:44:3e:2a:0c:2f:c9:cb:c6:87:7d:41:4d:c8:88:c0:6b:2d:
         f7:4c:3a:fe:4e:e9:74:84:c3:08:7e:0b:f7:1d:07:23:d0:4d:
         68:14:72:03:32:39:8a:ab:b9:6b:ce:18:8a:4c:c5:f8:8a:a1:
         54:25:e8:ae:6b:20:5d:26:e7:08:5d:ed:d0:e9:8e:71:32:bf:
         8a:58:e3:91:e6:8a:7b:0e:b6:ad:0b:56:38:44:de:2d:90:45:
         3e:c4:e4:d0:23:f5:ea:d7:9e:24:f2:b5:01:55:9b:b8:a9:3b:
         99:8e:50:4c:92:73:8e:08:4d:b9:0c:e8:1c:4b:c5:28:42:1f:
         7d:60:10:f0:dd:6a:42:9d:26:28:89:24:11:07:9e:df:03:20:
         b1:cc:31:dd
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICTpkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDYx
N2ZlMjg0ZWFkYWVjYzMwMGNhZjgwNWE1NTc1MzAwMWJjNjA1MjAeFw0yMjExMDky
MjU2MDhaFw0yNDExMTEyMjU2MDhaMDMxMTAvBgNVBAMTKGM4YWU3YmVkYTRjZmI2
NjVmOGE1MDZhMGVlMmU0NTUxZTFhMmE1OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCH21kHB8zES8Q13dohxr7nEpor+Bn7sDFdCJEr1Do7aVZolEiF
8DH1UpMvnyaVhe1jofvbx8atXNVwS5+hYAoaTRdQXJe2qI6ladAzRPg0havxM+D+
QzDWBvCOP4ERcls+B+xjU3DRTY+Iev4CTOzAg94NL8XQdcEAbZksoiWcLpXYMFiU
ODsr9efbr+KtO+2V64s0tZg/DRQ8VBPj0ZL/2Tj9CMbpNLDnD0KIuhXdcoVog1u7
BvlJ7mjwmg5NBTI29bToay2M9W76dPErWUot/2YH3Qpyu/uwV4wkgdwUoJVQDMN9
vE3/qE2kAs9M58h6KDiw625Ov7nOW6YthRFlAgMBAAGjggJeMIICWjAdBgNVHQ4E
FgQUIs6HJgv+qTwmgkEZTxKUXqFSMJcwHwYDVR0jBBgwFoAUIxGsBGgDgL1tcgF+
I7ImSCRWPHgwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8wNjE3ZmUy
ODRlYWRhZWNjMzAwY2FmODA1YTU1NzUzMDAxYmM2MDUyLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy82ODU0MTJiOS0wYTEyLTQ5NDUtOTliNy0wZDc4ZDQw
NjFiZjMvYzhhZTdiZWRhNGNmYjY2NWY4YTUwNmEwZWUyZTQ1NTFlMWEyYTU4ZC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzY4NTQxMmI5LTBhMTItNDk0NS05OWI3LTBkNzhk
NDA2MWJmMy8wNjE3ZmUyODRlYWRhZWNjMzAwY2FmODA1YTU1NzUzMDAxYmM2MDUy
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw
ETAPBAIAAjAJAwcAKAYD3P//MA0GCSqGSIb3DQEBCwUAA4IBAQCSrD98H6716e7V
zFGMGWsv+mbZe/ia71ScE4vM+nArVZhowVtJgmR6dfwMbxjfsV3MtLCMA8MsFb4H
uKS5+CsGmFdtNj+bv1cprxvu4wHF6o8DatWi46sPbBIoTRYIbi+mE9qxSMq0tAzw
rrt+RD4qDC/Jy8aHfUFNyIjAay33TDr+Tul0hMMIfgv3HQcj0E1oFHIDMjmKq7lr
zhiKTMX4iqFUJeiuayBdJucIXe3Q6Y5xMr+KWOOR5op7DratC1Y4RN4tkEU+xOTQ
I/Xq154k8rUBVZu4qTuZjlBMknOOCE25DOgcS8UoQh99YBDw3WpCnSYoiSQRB57f
AyCxzDHd
-----END CERTIFICATE-----