Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7473b339-5fea-4bc4-84c8-375fd39cc7a7/7d91126fae42305a504506d4c7a4fb1a509ca406.roa
File:                     7d91126fae42305a504506d4c7a4fb1a509ca406.roa (raw, json)
Hash identifier:          36F4evOEAgsFIl/4FtwUt2YB+PyhahwFLPW2huZ53CA=
Subject key identifier:   69:74:E4:D6:8C:46:E3:31:65:29:09:FD:32:73:60:A0:0E:62:D2:6D
Certificate issuer:       /CN=2114c12558d3e7c70c4a1a25a2c8de34959f5ec4
Certificate serial:       169491
Authority key identifier: 3C:5A:35:90:43:FA:D7:3A:F7:D0:0A:73:22:2A:9D:CB:73:06:05:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2114c12558d3e7c70c4a1a25a2c8de34959f5ec4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7473b339-5fea-4bc4-84c8-375fd39cc7a7/7d91126fae42305a504506d4c7a4fb1a509ca406.roa
Signing time:             Wed 30 Mar 2022 22:14:55 +0000
ROA not before:           Wed 30 Mar 2022 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     262223
IP address blocks:        2803:ab10::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1479825 (0x169491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2114c12558d3e7c70c4a1a25a2c8de34959f5ec4
        Validity
            Not Before: Mar 30 03:00:00 2022 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=7d91126fae42305a504506d4c7a4fb1a509ca406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1b:4c:a5:42:a7:eb:1a:14:bc:a8:64:5d:88:
                    de:45:ba:2f:21:b1:8d:7b:cc:07:d7:c2:53:72:02:
                    3e:1d:b9:1c:45:ca:1d:ef:68:25:a7:09:3f:22:f0:
                    06:bb:7c:2e:b5:ef:1c:0f:54:0a:37:25:56:21:72:
                    be:c4:ff:97:c8:b0:a0:94:b6:19:14:c2:83:23:02:
                    17:36:7b:db:d2:d8:e0:37:f2:23:1e:25:09:ef:68:
                    04:eb:87:58:e8:06:c1:54:b0:e8:a6:a9:18:21:de:
                    27:b2:bd:11:a3:1e:ed:33:59:3b:13:e3:e3:0e:a6:
                    0e:30:36:9c:b9:a9:34:9c:0a:ff:93:49:5d:ba:54:
                    30:3d:3e:cf:5b:3f:05:ea:80:e1:e9:d3:e6:6c:e2:
                    dc:12:a6:6c:a7:4a:21:7b:5a:9d:17:a7:b4:07:0a:
                    70:ad:f1:7c:81:8c:21:8b:b3:52:9d:14:35:6c:d3:
                    ac:04:b8:68:f8:2f:8e:bc:40:01:f4:96:7a:62:13:
                    28:80:70:0e:82:38:25:a9:6c:06:b7:aa:42:1b:5b:
                    48:39:fe:32:d4:96:43:d3:73:1f:5d:a8:74:3b:ca:
                    81:79:f0:27:99:7e:7b:5a:0c:fd:67:b6:58:d2:34:
                    44:71:f9:a8:73:5e:fe:16:06:e1:ec:bf:ab:fc:60:
                    ea:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:74:E4:D6:8C:46:E3:31:65:29:09:FD:32:73:60:A0:0E:62:D2:6D
            X509v3 Authority Key Identifier:
                keyid:3C:5A:35:90:43:FA:D7:3A:F7:D0:0A:73:22:2A:9D:CB:73:06:05:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2114c12558d3e7c70c4a1a25a2c8de34959f5ec4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7473b339-5fea-4bc4-84c8-375fd39cc7a7/7d91126fae42305a504506d4c7a4fb1a509ca406.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7473b339-5fea-4bc4-84c8-375fd39cc7a7/2114c12558d3e7c70c4a1a25a2c8de34959f5ec4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ab10::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:14:29:38:64:80:e0:24:39:6a:4e:3f:7b:47:1e:5b:ad:5f:
         43:b2:34:36:6a:b4:b9:9c:44:06:a7:ee:5b:27:91:5d:f8:34:
         ff:99:c5:7e:64:b6:cd:3a:36:4e:0e:3d:1b:5e:0a:70:7c:67:
         0f:40:9a:1d:13:66:6b:30:30:cb:ad:fd:fe:82:e1:a0:83:f8:
         d1:22:63:ff:ac:8a:0b:c6:aa:15:6a:9a:cc:7b:a9:58:f2:18:
         89:03:4d:04:d5:54:39:dc:2e:08:65:30:49:c4:71:1a:3f:87:
         6f:4c:ce:34:00:f7:2d:d7:b9:bc:bf:3a:85:d0:74:e8:a7:75:
         4c:7a:69:b6:e4:f3:1a:6b:59:08:e7:eb:8b:98:e3:cc:1e:e4:
         67:3f:14:5e:cb:b1:f9:0a:81:e3:97:3a:28:50:f9:11:e9:50:
         ea:41:df:a8:40:8b:71:5d:04:b3:99:9c:a5:ee:af:b3:77:18:
         cb:21:fa:ca:e9:33:07:2d:99:23:1a:fc:b4:73:f0:87:18:61:
         ae:71:72:22:fe:78:0f:45:6f:5a:c9:c2:ff:7d:5b:19:0e:e9:
         87:65:a9:50:6a:9a:f2:07:aa:57:49:02:a9:67:9d:b1:69:f4:
         4c:a5:62:c2:d3:3d:18:b7:9f:93:ff:58:dd:7a:96:63:62:4a:
         41:19:81:e0
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDFpSRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
MTRjMTI1NThkM2U3YzcwYzRhMWEyNWEyYzhkZTM0OTU5ZjVlYzQwHhcNMjIwMzMw
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg3ZDkxMTI2ZmFlNDIz
MDVhNTA0NTA2ZDRjN2E0ZmIxYTUwOWNhNDA2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgRtMpUKn6xoUvKhkXYjeRbovIbGNe8wH18JTcgI+HbkcRcod
72glpwk/IvAGu3wute8cD1QKNyVWIXK+xP+XyLCglLYZFMKDIwIXNnvb0tjgN/Ij
HiUJ72gE64dY6AbBVLDopqkYId4nsr0Rox7tM1k7E+PjDqYOMDacuak0nAr/k0ld
ulQwPT7PWz8F6oDh6dPmbOLcEqZsp0ohe1qdF6e0BwpwrfF8gYwhi7NSnRQ1bNOs
BLho+C+OvEAB9JZ6YhMogHAOgjglqWwGt6pCG1tIOf4y1JZD03MfXah0O8qBefAn
mX57Wgz9Z7ZY0jREcfmoc17+Fgbh7L+r/GDq4QIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFGl05NaMRuMxZSkJ/TJzYKAOYtJtMB8GA1UdIwQYMBaAFDxaNZBD+tc699AK
cyIqnctzBgWTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjExNGMx
MjU1OGQzZTdjNzBjNGExYTI1YTJjOGRlMzQ5NTlmNWVjNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzQ3M2IzMzktNWZlYS00YmM0LTg0YzgtMzc1ZmQz
OWNjN2E3LzdkOTExMjZmYWU0MjMwNWE1MDQ1MDZkNGM3YTRmYjFhNTA5Y2E0MDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83NDczYjMzOS01ZmVhLTRiYzQtODRjOC0zNzVm
ZDM5Y2M3YTcvMjExNGMxMjU1OGQzZTdjNzBjNGExYTI1YTJjOGRlMzQ5NTlmNWVj
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDqxAwDQYJKoZIhvcNAQELBQADggEBAAMUKThkgOAkOWpO
P3tHHlutX0OyNDZqtLmcRAan7lsnkV34NP+ZxX5kts06Nk4OPRteCnB8Zw9Amh0T
ZmswMMut/f6C4aCD+NEiY/+sigvGqhVqmsx7qVjyGIkDTQTVVDncLghlMEnEcRo/
h29MzjQA9y3Xuby/OoXQdOindUx6abbk8xprWQjn64uY48we5Gc/FF7LsfkKgeOX
OihQ+RHpUOpB36hAi3FdBLOZnKXur7N3GMsh+srpMwctmSMa/LRz8IcYYa5xciL+
eA9Fb1rJwv99WxkO6YdlqVBqmvIHqldJAqlnnbFp9EylYsLTPRi3n5P/WN16lmNi
SkEZgeA=
-----END CERTIFICATE-----