Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/c3bdab3be446819aa8d7c7778cf33465f0941749.roa
File:                     c3bdab3be446819aa8d7c7778cf33465f0941749.roa (raw, json)
Hash identifier:          U2QJoaQj39+bnv3y6Ucu8+DgbhVqxGblPrAE9MzgSzw=
Subject key identifier:   C7:58:0E:E3:5F:E8:A0:C3:FC:AD:84:2F:A3:69:C7:61:22:C6:85:29
Certificate issuer:       /CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
Certificate serial:       0A5D85
Authority key identifier: 84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/c3bdab3be446819aa8d7c7778cf33465f0941749.roa
Signing time:             Mon 03 Jan 2022 17:52:42 +0000
ROA not before:           Mon 03 Jan 2022 03:00:00 +0000
ROA not after:            Wed 03 Jan 2024 03:00:00 +0000
asID:                     265639
IP address blocks:        2803:6c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679301 (0xa5d85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
        Validity
            Not Before: Jan  3 03:00:00 2022 GMT
            Not After : Jan  3 03:00:00 2024 GMT
        Subject: CN=c3bdab3be446819aa8d7c7778cf33465f0941749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bf:c0:f6:12:f3:53:7c:5f:62:b1:1f:e3:ce:
                    96:46:22:06:b9:85:ac:c9:81:2a:96:f9:e7:21:02:
                    36:1b:85:41:9e:ce:32:a2:0b:fb:45:e6:97:52:84:
                    c9:ef:50:cd:ee:5b:7b:45:62:69:c8:67:81:71:59:
                    70:e7:1c:8e:04:b5:68:3b:30:a1:05:91:92:21:24:
                    ce:87:4a:ce:a4:ba:d5:b4:7c:75:87:4e:f6:5e:24:
                    fb:6e:4d:22:f4:ad:86:0d:9a:de:69:76:79:d5:1e:
                    9d:73:40:50:26:71:27:ef:44:26:0c:48:ec:ad:ab:
                    bf:58:75:e5:50:b2:00:83:61:f7:7f:59:c5:7e:79:
                    dd:5a:32:cd:ae:f2:84:52:e0:12:e2:b3:a7:a2:b6:
                    fb:89:45:c4:58:fe:af:69:7b:55:45:89:b5:47:13:
                    6b:39:6f:94:d4:bc:07:55:18:21:78:26:c4:64:81:
                    d4:d3:f9:d3:72:d6:03:79:5f:d3:12:a3:a7:27:07:
                    1e:c2:e7:e1:a7:31:3a:f4:d7:69:d3:85:81:71:82:
                    82:22:8f:e9:1e:2a:b4:53:20:c6:ce:f1:d3:25:cb:
                    27:64:e3:db:50:d4:c9:71:9e:60:26:54:34:a0:34:
                    e9:54:56:e7:12:83:a1:10:35:0a:7d:f4:e9:45:9c:
                    12:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:58:0E:E3:5F:E8:A0:C3:FC:AD:84:2F:A3:69:C7:61:22:C6:85:29
            X509v3 Authority Key Identifier:
                keyid:84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/c3bdab3be446819aa8d7c7778cf33465f0941749.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/501f1f0f3a2acdfd121143683d0a9cfc1657da67.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:ba:cb:a5:d7:39:e7:a7:74:6a:fb:0b:26:73:7a:29:68:e2:
         1c:19:84:52:c9:50:8e:1b:0e:dd:fe:0a:67:90:52:2a:a6:ec:
         0f:f2:6f:64:33:df:3c:64:dc:4b:cc:24:82:cc:31:34:be:09:
         58:7f:5b:48:ff:31:cb:e0:24:b7:a8:67:0e:50:f1:ae:2d:9b:
         d7:eb:fe:6d:54:cc:c7:ca:6f:3c:e3:8d:54:de:d4:6e:43:b2:
         c3:f3:9a:fa:4a:77:e1:01:2a:cf:db:64:5e:5f:74:aa:da:25:
         92:6a:92:a9:10:96:11:bf:ff:cf:75:a0:11:57:19:71:2d:4c:
         e6:02:d7:25:a2:6a:f6:cd:6d:66:2d:fb:de:8b:08:64:70:6e:
         41:59:bf:86:37:73:66:33:1f:34:21:8b:b2:1e:41:b4:3e:19:
         32:ba:61:d8:09:be:34:a6:fb:48:3a:40:af:23:d8:eb:55:64:
         61:f3:12:c4:30:4a:b0:5d:c6:cb:ab:c5:44:93:a1:23:80:81:
         09:66:6a:50:a1:c6:10:1b:5f:9c:74:8d:c0:b0:fe:c4:ca:db:
         bb:54:d7:02:d9:f5:18:94:0b:63:5d:a9:5f:cd:5b:25:57:6e:
         38:e2:de:dc:91:9f:ca:bf:ba:eb:ad:4f:dc:b0:f8:2e:1d:76:
         ab:18:38:73
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDCl2FMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUw
MWYxZjBmM2EyYWNkZmQxMjExNDM2ODNkMGE5Y2ZjMTY1N2RhNjcwHhcNMjIwMTAz
MDMwMDAwWhcNMjQwMTAzMDMwMDAwWjAzMTEwLwYDVQQDEyhjM2JkYWIzYmU0NDY4
MTlhYThkN2M3Nzc4Y2YzMzQ2NWYwOTQxNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj7/A9hLzU3xfYrEf486WRiIGuYWsyYEqlvnnIQI2G4VBns4y
ogv7ReaXUoTJ71DN7lt7RWJpyGeBcVlw5xyOBLVoOzChBZGSISTOh0rOpLrVtHx1
h072XiT7bk0i9K2GDZreaXZ51R6dc0BQJnEn70QmDEjsrau/WHXlULIAg2H3f1nF
fnndWjLNrvKEUuAS4rOnorb7iUXEWP6vaXtVRYm1RxNrOW+U1LwHVRgheCbEZIHU
0/nTctYDeV/TEqOnJwcewufhpzE69Ndp04WBcYKCIo/pHiq0UyDGzvHTJcsnZOPb
UNTJcZ5gJlQ0oDTpVFbnEoOhEDUKffTpRZwS2QIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFMdYDuNf6KDD/K2EL6Npx2EixoUpMB8GA1UdIwQYMBaAFIS97Fj5htw9xVHc
zP20tc5Ov6edMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTAxZjFm
MGYzYTJhY2RmZDEyMTE0MzY4M2QwYTljZmMxNjU3ZGE2Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODZkOGYxYzMtYTcyNy00MDY1LTkxZDMtMzUwYmMz
ZGI1YmE0L2MzYmRhYjNiZTQ0NjgxOWFhOGQ3Yzc3NzhjZjMzNDY1ZjA5NDE3NDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NmQ4ZjFjMy1hNzI3LTQwNjUtOTFkMy0zNTBi
YzNkYjViYTQvNTAxZjFmMGYzYTJhY2RmZDEyMTE0MzY4M2QwYTljZmMxNjU3ZGE2
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDBsAwDQYJKoZIhvcNAQELBQADggEBAFG6y6XXOeendGr7
CyZzeilo4hwZhFLJUI4bDt3+CmeQUiqm7A/yb2Qz3zxk3EvMJILMMTS+CVh/W0j/
McvgJLeoZw5Q8a4tm9fr/m1UzMfKbzzjjVTe1G5DssPzmvpKd+EBKs/bZF5fdKra
JZJqkqkQlhG//891oBFXGXEtTOYC1yWiavbNbWYt+96LCGRwbkFZv4Y3c2YzHzQh
i7IeQbQ+GTK6YdgJvjSm+0g6QK8j2OtVZGHzEsQwSrBdxsurxUSToSOAgQlmalCh
xhAbX5x0jcCw/sTK27tU1wLZ9RiUC2NdqV/NWyVXbjji3tyRn8q/uuutT9yw+C4d
dqsYOHM=
-----END CERTIFICATE-----