Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/291dbd9aaa25944e13cd4c28705ad884e3f30f01.roa
File:                     291dbd9aaa25944e13cd4c28705ad884e3f30f01.roa (raw, json)
Hash identifier:          2kZWRn93uefeKwi1t7tveLi9oatmA+YU0iN885ag5Nw=
Subject key identifier:   3D:5D:4C:10:1E:65:B8:78:C7:8B:23:E5:29:34:7C:12:84:44:3F:94
Certificate issuer:       /CN=e2edf50309c3c920eebef8b0ecf1643bb8c31a10
Certificate serial:       1242A4
Authority key identifier: AC:6A:EB:DB:86:63:84:03:68:2E:07:33:65:62:7F:97:35:CC:4A:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/291dbd9aaa25944e13cd4c28705ad884e3f30f01.roa
Signing time:             Wed 06 Oct 2021 19:20:05 +0000
ROA not before:           Wed 06 Oct 2021 03:00:00 +0000
ROA not after:            Fri 06 Oct 2023 03:00:00 +0000
asID:                     20207
IP address blocks:        2800:6f0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1196708 (0x1242a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2edf50309c3c920eebef8b0ecf1643bb8c31a10
        Validity
            Not Before: Oct  6 03:00:00 2021 GMT
            Not After : Oct  6 03:00:00 2023 GMT
        Subject: CN=291dbd9aaa25944e13cd4c28705ad884e3f30f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e8:84:bc:70:6c:f4:23:d1:88:a1:57:1d:93:
                    6c:b0:9f:f0:78:1f:05:26:62:a0:33:27:1c:a7:69:
                    84:25:cd:73:06:71:a8:0a:0f:bf:85:35:4d:1e:e2:
                    66:8a:ec:90:e2:f2:40:97:2d:44:61:dd:00:5d:cb:
                    c1:88:8e:4a:9f:c5:b7:12:77:17:52:6e:d1:94:7e:
                    da:d7:5b:8b:63:fc:3a:77:b5:60:bc:64:37:6f:a0:
                    80:f0:26:b4:d2:52:23:ca:28:7e:f2:b4:5f:f9:3a:
                    c2:e1:40:08:d9:7b:33:c9:3e:42:97:ac:01:9f:ca:
                    4d:45:c9:25:4b:3a:be:5f:28:ed:f5:1f:41:05:01:
                    2e:38:fe:d9:3d:4b:46:b5:89:1b:6a:96:61:06:23:
                    46:e8:66:d7:80:47:1e:91:e8:bc:2c:19:99:6e:e4:
                    74:2f:ae:d9:f1:c6:16:a5:4e:46:df:45:7a:43:b6:
                    76:82:c2:15:48:ae:63:6b:fb:d7:2d:b7:30:71:da:
                    63:45:b9:5d:68:a8:a4:74:1b:f1:f6:67:de:5f:b9:
                    eb:5d:23:49:ba:74:aa:18:45:a8:33:05:4f:42:24:
                    d3:ee:fb:22:66:98:70:19:e2:47:ae:05:8f:a7:17:
                    5f:45:f0:4f:82:83:75:af:79:c0:02:61:ea:59:03:
                    2d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5D:4C:10:1E:65:B8:78:C7:8B:23:E5:29:34:7C:12:84:44:3F:94
            X509v3 Authority Key Identifier:
                keyid:AC:6A:EB:DB:86:63:84:03:68:2E:07:33:65:62:7F:97:35:CC:4A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/291dbd9aaa25944e13cd4c28705ad884e3f30f01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:6f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:8f:8c:48:66:2d:65:07:b0:c1:e9:23:d7:7f:c3:63:c6:1b:
         5f:f7:e3:84:41:86:00:42:36:1e:03:c7:e3:ac:63:28:04:f3:
         d7:2f:95:eb:49:65:5d:f3:c8:4c:6c:d9:06:b2:6d:52:3f:67:
         07:ae:2a:09:ab:d4:1d:80:97:67:8e:5e:d0:e5:23:3f:05:d8:
         a4:87:55:10:f8:e1:2a:e9:2e:9f:97:4e:3b:ca:cd:de:bd:76:
         ae:5b:40:2e:76:dc:56:7a:04:66:19:fd:e5:4a:18:85:b3:0d:
         1b:b9:de:ef:04:cb:65:b4:49:f0:0d:1c:d9:09:77:2f:34:e0:
         4d:e1:2f:2a:56:8f:95:4b:35:78:2b:09:d9:1b:62:80:54:21:
         25:b7:bf:a7:d5:e7:26:2a:41:22:1b:73:4d:ef:b5:bf:82:7a:
         3d:fb:ed:77:69:19:0c:45:e1:47:6d:05:e9:a3:36:88:20:8c:
         e7:39:5c:b4:72:30:45:eb:3b:59:d9:bf:c3:5d:b6:51:ae:09:
         86:4c:81:63:02:ad:ff:ab:b7:21:ac:57:60:a7:f9:f5:4d:b7:
         36:5d:f9:92:2b:1f:10:8e:44:fb:63:cb:ac:d0:41:fb:e9:1d:
         63:d6:3c:e2:7a:fe:60:cf:e3:06:d0:fb:30:44:36:d5:74:1a:
         44:ef:26:40
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDEkKkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGUy
ZWRmNTAzMDljM2M5MjBlZWJlZjhiMGVjZjE2NDNiYjhjMzFhMTAwHhcNMjExMDA2
MDMwMDAwWhcNMjMxMDA2MDMwMDAwWjAzMTEwLwYDVQQDEygyOTFkYmQ5YWFhMjU5
NDRlMTNjZDRjMjg3MDVhZDg4NGUzZjMwZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj+iEvHBs9CPRiKFXHZNssJ/weB8FJmKgMyccp2mEJc1zBnGo
Cg+/hTVNHuJmiuyQ4vJAly1EYd0AXcvBiI5Kn8W3EncXUm7RlH7a11uLY/w6d7Vg
vGQ3b6CA8Ca00lIjyih+8rRf+TrC4UAI2XszyT5Cl6wBn8pNRcklSzq+Xyjt9R9B
BQEuOP7ZPUtGtYkbapZhBiNG6GbXgEcekei8LBmZbuR0L67Z8cYWpU5G30V6Q7Z2
gsIVSK5ja/vXLbcwcdpjRbldaKikdBvx9mfeX7nrXSNJunSqGEWoMwVPQiTT7vsi
ZphwGeJHrgWPpxdfRfBPgoN1r3nAAmHqWQMteQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFD1dTBAeZbh4x4sj5Sk0fBKERD+UMB8GA1UdIwQYMBaAFKxq69uGY4QDaC4H
M2Vif5c1zErmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTJlZGY1
MDMwOWMzYzkyMGVlYmVmOGIwZWNmMTY0M2JiOGMzMWExMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2RjZDIzZmMtMDBiOC00Zjk1LWJmNDktOWVjY2Qx
NGVhNjQ4LzI5MWRiZDlhYWEyNTk0NGUxM2NkNGMyODcwNWFkODg0ZTNmMzBmMDEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83ZGNkMjNmYy0wMGI4LTRmOTUtYmY0OS05ZWNj
ZDE0ZWE2NDgvZTJlZGY1MDMwOWMzYzkyMGVlYmVmOGIwZWNmMTY0M2JiOGMzMWEx
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgABvAwDQYJKoZIhvcNAQELBQADggEBALmPjEhmLWUHsMHp
I9d/w2PGG1/344RBhgBCNh4Dx+OsYygE89cvletJZV3zyExs2QaybVI/ZweuKgmr
1B2Al2eOXtDlIz8F2KSHVRD44SrpLp+XTjvKzd69dq5bQC523FZ6BGYZ/eVKGIWz
DRu53u8Ey2W0SfANHNkJdy804E3hLypWj5VLNXgrCdkbYoBUISW3v6fV5yYqQSIb
c03vtb+Cej377XdpGQxF4UdtBemjNoggjOc5XLRyMEXrO1nZv8NdtlGuCYZMgWMC
rf+rtyGsV2Cn+fVNtzZd+ZIrHxCORPtjy6zQQfvpHWPWPOJ6/mDP4wbQ+zBENtV0
GkTvJkA=
-----END CERTIFICATE-----