Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6cf28d0c-d8bb-4d08-9c9a-f4b64080a218/e1bfd44db5dba75fccc0ea273c76ab48c3a4e8e9.roa
File:                     e1bfd44db5dba75fccc0ea273c76ab48c3a4e8e9.roa (raw, json)
Hash identifier:          +df5q10eaXZP264nA4uqq4DMvlOv5oMqtUE1yOmtSqQ=
Subject key identifier:   C8:49:28:51:1A:3C:1F:E6:BA:1A:29:D0:67:32:03:53:6A:7F:6F:A2
Certificate issuer:       /CN=f056ff181e8a36b117e826806311244d7a47db80
Certificate serial:       0B1C6E
Authority key identifier: A5:D6:AC:49:50:33:7A:48:BF:76:31:43:0A:DF:EB:37:15:F1:77:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f056ff181e8a36b117e826806311244d7a47db80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6cf28d0c-d8bb-4d08-9c9a-f4b64080a218/e1bfd44db5dba75fccc0ea273c76ab48c3a4e8e9.roa
Signing time:             Wed 24 Mar 2021 14:41:25 +0000
ROA not before:           Wed 24 Mar 2021 14:41:25 +0000
ROA not after:            Tue 24 Mar 2026 14:41:25 +0000
asID:                     269792
IP address blocks:        2801:1e:4800::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728174 (0xb1c6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f056ff181e8a36b117e826806311244d7a47db80
        Validity
            Not Before: Mar 24 14:41:25 2021 GMT
            Not After : Mar 24 14:41:25 2026 GMT
        Subject: CN=e1bfd44db5dba75fccc0ea273c76ab48c3a4e8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ce:96:0a:c3:c2:c2:14:23:f0:c3:c2:dd:3a:
                    ba:1f:0e:9b:02:9e:f3:26:70:46:f2:ac:8b:3f:b0:
                    25:11:96:05:27:72:6d:20:01:49:91:f6:cd:be:b0:
                    4e:28:10:c2:e7:47:02:5c:d0:c6:24:23:18:ab:21:
                    38:e8:d5:e1:02:f0:68:73:6a:49:13:33:df:3f:96:
                    84:1b:c6:64:2f:cc:d5:bb:ad:1b:f1:8c:62:ec:eb:
                    56:46:b3:8f:05:a8:be:80:9e:78:ef:d2:73:fc:6c:
                    a1:6b:32:b9:63:59:4c:ab:4a:cf:92:9b:8d:59:e5:
                    22:a7:55:cd:4e:8b:40:58:96:d1:48:07:b5:0f:2b:
                    da:f8:0e:2b:fe:9d:17:bc:86:8a:8b:61:76:1f:fc:
                    c2:32:c4:a5:7b:5b:d8:55:e7:32:18:23:ae:aa:0d:
                    5b:74:75:a5:4d:80:36:39:fe:56:01:99:9f:20:2d:
                    41:8e:19:46:e5:d0:4d:98:92:15:12:ca:1b:7c:50:
                    88:90:13:48:86:7c:ce:63:54:ff:56:76:35:93:0d:
                    9e:13:16:e5:ea:d9:df:9f:e9:74:d2:07:79:8c:5c:
                    05:ce:f3:ac:c0:fa:d2:da:22:c2:cf:88:03:26:54:
                    ca:03:eb:9c:b6:93:00:b4:10:4c:e1:cc:b9:09:26:
                    16:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:49:28:51:1A:3C:1F:E6:BA:1A:29:D0:67:32:03:53:6A:7F:6F:A2
            X509v3 Authority Key Identifier:
                keyid:A5:D6:AC:49:50:33:7A:48:BF:76:31:43:0A:DF:EB:37:15:F1:77:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f056ff181e8a36b117e826806311244d7a47db80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6cf28d0c-d8bb-4d08-9c9a-f4b64080a218/e1bfd44db5dba75fccc0ea273c76ab48c3a4e8e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6cf28d0c-d8bb-4d08-9c9a-f4b64080a218/f056ff181e8a36b117e826806311244d7a47db80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:0e:26:38:a8:1a:28:b9:89:67:a9:2c:d8:7a:0f:17:b5:7b:
         4c:d8:3f:fc:cb:90:e6:b5:4d:5a:2e:26:cc:c5:59:27:10:72:
         79:1a:9b:40:c4:29:a2:53:30:1b:ee:aa:9c:67:89:80:7a:74:
         b0:3a:da:05:ed:95:79:b7:99:32:9b:32:6e:2e:40:9d:09:08:
         2d:92:31:76:6b:2e:d0:e7:ff:51:f4:7a:ea:36:21:c4:bc:c8:
         f4:80:d8:e1:5f:1a:a9:ea:cb:fc:f8:1f:62:4c:b9:93:eb:23:
         85:e9:87:60:40:40:e4:0e:0e:fd:06:29:ba:0f:82:55:fe:9c:
         c3:e0:7f:6e:3a:e8:32:9b:fb:a1:8f:5b:d9:40:6a:7c:c3:11:
         64:2d:66:c1:59:66:fb:91:88:40:ee:74:a2:fe:bc:ea:1c:02:
         3f:d6:3f:bf:f8:7d:14:94:b0:7f:29:33:52:3f:90:ff:2a:2e:
         53:47:e9:98:04:31:17:d8:bd:59:3f:fd:3a:45:ec:23:f1:d3:
         ac:49:d4:92:41:3a:b0:4b:46:4c:75:cb:60:3c:31:d5:58:fb:
         7c:09:97:a7:ea:c7:80:d4:38:a1:9b:f1:3e:10:f0:94:76:ce:
         7c:16:33:56:f8:5f:77:b8:6e:32:96:4e:58:34:8e:e8:26:39:
         8a:b8:03:14
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDCxxuMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYw
NTZmZjE4MWU4YTM2YjExN2U4MjY4MDYzMTEyNDRkN2E0N2RiODAwHhcNMjEwMzI0
MTQ0MTI1WhcNMjYwMzI0MTQ0MTI1WjAzMTEwLwYDVQQDEyhlMWJmZDQ0ZGI1ZGJh
NzVmY2NjMGVhMjczYzc2YWI0OGMzYTRlOGU5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAks6WCsPCwhQj8MPC3Tq6Hw6bAp7zJnBG8qyLP7AlEZYFJ3Jt
IAFJkfbNvrBOKBDC50cCXNDGJCMYqyE46NXhAvBoc2pJEzPfP5aEG8ZkL8zVu60b
8Yxi7OtWRrOPBai+gJ5479Jz/GyhazK5Y1lMq0rPkpuNWeUip1XNTotAWJbRSAe1
Dyva+A4r/p0XvIaKi2F2H/zCMsSle1vYVecyGCOuqg1bdHWlTYA2Of5WAZmfIC1B
jhlG5dBNmJIVEsobfFCIkBNIhnzOY1T/VnY1kw2eExbl6tnfn+l00gd5jFwFzvOs
wPrS2iLCz4gDJlTKA+uctpMAtBBM4cy5CSYW8QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFMhJKFEaPB/muhop0GcyA1Nqf2+iMB8GA1UdIwQYMBaAFKXWrElQM3pIv3Yx
Qwrf6zcV8XczMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjA1NmZm
MTgxZThhMzZiMTE3ZTgyNjgwNjMxMTI0NGQ3YTQ3ZGI4MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmNmMjhkMGMtZDhiYi00ZDA4LTljOWEtZjRiNjQw
ODBhMjE4L2UxYmZkNDRkYjVkYmE3NWZjY2MwZWEyNzNjNzZhYjQ4YzNhNGU4ZTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82Y2YyOGQwYy1kOGJiLTRkMDgtOWM5YS1mNGI2
NDA4MGEyMTgvZjA1NmZmMTgxZThhMzZiMTE3ZTgyNjgwNjMxMTI0NGQ3YTQ3ZGI4
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB5IADANBgkqhkiG9w0BAQsFAAOCAQEAfw4mOKgaKLmJ
Z6ks2HoPF7V7TNg//MuQ5rVNWi4mzMVZJxByeRqbQMQpolMwG+6qnGeJgHp0sDra
Be2VebeZMpsybi5AnQkILZIxdmsu0Of/UfR66jYhxLzI9IDY4V8aqerL/PgfYky5
k+sjhemHYEBA5A4O/QYpug+CVf6cw+B/bjroMpv7oY9b2UBqfMMRZC1mwVlm+5GI
QO50ov686hwCP9Y/v/h9FJSwfykzUj+Q/youU0fpmAQxF9i9WT/9OkXsI/HTrEnU
kkE6sEtGTHXLYDwx1Vj7fAmXp+rHgNQ4oZvxPhDwlHbOfBYzVvhfd7huMpZOWDSO
6CY5irgDFA==
-----END CERTIFICATE-----