Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/8dd5577933a8acf87b4d2a8eade8fc2da419f0b3.roa
File:                     8dd5577933a8acf87b4d2a8eade8fc2da419f0b3.roa (raw, json)
Hash identifier:          VOhd+ByZrmEbHaFkDRLjyD1jYaX2e1RUXlqdKPaQpoo=
Subject key identifier:   36:A0:B5:42:D2:83:B4:CB:6A:24:B5:D4:ED:71:AE:67:0A:35:26:83
Certificate issuer:       /CN=30415e525ae2a6911d8229a69de6df7b5716b468
Certificate serial:       0DF9B8
Authority key identifier: AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/8dd5577933a8acf87b4d2a8eade8fc2da419f0b3.roa
Signing time:             Wed 24 Mar 2021 14:39:13 +0000
ROA not before:           Wed 24 Mar 2021 14:39:12 +0000
ROA not after:            Tue 24 Mar 2026 14:39:12 +0000
asID:                     265762
IP address blocks:        2803:fbc0::/32 maxlen: 48

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 00:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915896 (0xdf9b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30415e525ae2a6911d8229a69de6df7b5716b468
        Validity
            Not Before: Mar 24 14:39:12 2021 GMT
            Not After : Mar 24 14:39:12 2026 GMT
        Subject: CN=8dd5577933a8acf87b4d2a8eade8fc2da419f0b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:17:a4:11:e9:19:20:21:30:53:d9:ff:fb:4a:
                    4c:99:23:ae:5d:c2:51:12:8a:9d:fd:ea:63:16:fe:
                    80:ca:ff:08:1b:af:b9:10:54:bf:c3:b3:8d:c5:a1:
                    8f:71:b0:09:41:fd:83:0d:c1:36:f0:f6:61:c9:37:
                    40:8f:d9:be:a5:bc:dd:47:a0:20:a3:a4:53:91:e7:
                    55:7d:6a:dd:e7:03:bf:a9:cd:6c:b4:18:1c:41:51:
                    02:cd:a3:64:e2:51:5d:19:24:cb:cd:74:d4:ca:65:
                    0d:68:73:1a:08:95:b4:19:81:10:81:9f:af:fc:58:
                    e0:01:66:68:c7:6e:78:bf:9e:c3:b4:d3:e3:dc:28:
                    4d:c2:db:39:28:ad:ce:51:81:92:61:85:75:30:83:
                    31:db:41:4c:09:8d:b1:d7:0d:0a:1c:76:f8:d7:44:
                    cb:14:51:88:ad:b5:09:e0:8a:c5:44:fc:c9:bf:d3:
                    9d:a4:dc:93:a7:08:83:cd:b3:1e:13:a5:03:4c:57:
                    85:37:4c:18:3e:b7:f9:8e:d2:3f:73:ba:bd:9f:38:
                    c6:2d:50:77:75:33:85:d5:b5:f3:8b:1c:e4:d4:c5:
                    69:59:35:b3:d8:e6:6f:7e:d8:9f:ad:07:16:80:ff:
                    6a:43:7c:7e:62:0a:43:b1:5b:5f:76:bc:37:1d:80:
                    92:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A0:B5:42:D2:83:B4:CB:6A:24:B5:D4:ED:71:AE:67:0A:35:26:83
            X509v3 Authority Key Identifier:
                keyid:AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/8dd5577933a8acf87b4d2a8eade8fc2da419f0b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/30415e525ae2a6911d8229a69de6df7b5716b468.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:f1:63:a3:f8:bb:ac:f8:a7:b6:ea:ea:ba:c0:4d:d2:2a:7f:
         c8:3c:3f:c5:13:ca:6b:97:c1:cb:a2:bd:9f:b7:62:4e:03:cc:
         5a:e0:f3:ce:3f:7e:fe:16:9b:eb:b2:22:47:3c:35:07:bc:eb:
         60:9a:0b:f8:cb:e0:8d:c7:3e:ad:a5:ba:71:c3:3a:37:d5:c2:
         3a:f0:fe:9a:e8:63:d8:8f:0a:26:e3:fb:2d:b9:f4:90:cc:7d:
         fe:27:17:26:6f:c6:42:22:50:a8:d5:94:97:9a:b2:da:a4:f1:
         f1:39:99:7d:6e:54:b5:73:41:f8:77:69:23:7d:e3:f8:e7:8b:
         4a:d4:b3:3b:07:db:54:58:8a:cd:33:2a:8b:f7:cb:85:3d:d4:
         69:60:f0:4b:2e:e4:62:f3:63:e2:82:ee:50:84:61:69:64:4b:
         70:af:f6:bf:e8:04:44:5c:b5:17:c8:30:13:26:c1:3c:af:46:
         28:49:36:15:5c:c4:98:d9:2d:70:39:52:55:9c:d8:ce:1b:6a:
         2d:5d:57:e1:f6:41:a3:ce:61:b1:a2:58:a3:bc:3b:1b:b2:c2:
         bf:0e:e1:ae:0a:e2:42:0b:2c:48:d5:c2:db:1f:51:3a:8a:ce:
         b8:ec:fb:c4:10:6f:71:79:6a:11:b0:42:9f:e2:14:c6:ae:d7:
         d4:e5:20:db
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDfm4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMw
NDE1ZTUyNWFlMmE2OTExZDgyMjlhNjlkZTZkZjdiNTcxNmI0NjgwHhcNMjEwMzI0
MTQzOTEyWhcNMjYwMzI0MTQzOTEyWjAzMTEwLwYDVQQDEyg4ZGQ1NTc3OTMzYThh
Y2Y4N2I0ZDJhOGVhZGU4ZmMyZGE0MTlmMGIzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlBekEekZICEwU9n/+0pMmSOuXcJREoqd/epjFv6Ayv8IG6+5
EFS/w7ONxaGPcbAJQf2DDcE28PZhyTdAj9m+pbzdR6Ago6RTkedVfWrd5wO/qc1s
tBgcQVECzaNk4lFdGSTLzXTUymUNaHMaCJW0GYEQgZ+v/FjgAWZox254v57DtNPj
3ChNwts5KK3OUYGSYYV1MIMx20FMCY2x1w0KHHb410TLFFGIrbUJ4IrFRPzJv9Od
pNyTpwiDzbMeE6UDTFeFN0wYPrf5jtI/c7q9nzjGLVB3dTOF1bXzixzk1MVpWTWz
2OZvftifrQcWgP9qQ3x+YgpDsVtfdrw3HYCSMwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFDagtULSg7TLaiS11O1xrmcKNSaDMB8GA1UdIwQYMBaAFK9gvUmjqME+4/is
PN730/SHcbGqMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzA0MTVl
NTI1YWUyYTY5MTFkODIyOWE2OWRlNmRmN2I1NzE2YjQ2OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzM4M2ViZDYtZmQzZS00ZDYzLWE4MjItZThjZDlm
YTJjMjllLzhkZDU1Nzc5MzNhOGFjZjg3YjRkMmE4ZWFkZThmYzJkYTQxOWYwYjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MzgzZWJkNi1mZDNlLTRkNjMtYTgyMi1lOGNk
OWZhMmMyOWUvMzA0MTVlNTI1YWUyYTY5MTFkODIyOWE2OWRlNmRmN2I1NzE2YjQ2
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD+8AwDQYJKoZIhvcNAQELBQADggEBAFTxY6P4u6z4p7bq
6rrATdIqf8g8P8UTymuXwcuivZ+3Yk4DzFrg884/fv4Wm+uyIkc8NQe862CaC/jL
4I3HPq2lunHDOjfVwjrw/proY9iPCibj+y259JDMff4nFyZvxkIiUKjVlJeastqk
8fE5mX1uVLVzQfh3aSN94/jni0rUszsH21RYis0zKov3y4U91Glg8Esu5GLzY+KC
7lCEYWlkS3Cv9r/oBERctRfIMBMmwTyvRihJNhVcxJjZLXA5UlWc2M4bai1dV+H2
QaPOYbGiWKO8Oxuywr8O4a4K4kILLEjVwtsfUTqKzrjs+8QQb3F5ahGwQp/iFMau
19TlINs=
-----END CERTIFICATE-----