Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/225d1b469755c1d6a8458268c082837a265d2ae8.roa
File:                     225d1b469755c1d6a8458268c082837a265d2ae8.roa (raw, json)
Hash identifier:          k3MsmjyT91Rp8/HtRqF185jbR3BOKWDM7RhL5Zmuuhc=
Subject key identifier:   CE:0D:2C:33:AB:46:73:D5:BE:0A:FD:8C:21:6D:D2:9A:A6:7F:CB:A3
Certificate issuer:       /CN=569d9c53d2d7a2dabbb573b437a4edbd78719117
Certificate serial:       061550
Authority key identifier: 7E:23:73:C2:1C:1C:73:EA:50:DA:EE:CE:10:06:0B:BB:52:C4:C2:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569d9c53d2d7a2dabbb573b437a4edbd78719117.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/225d1b469755c1d6a8458268c082837a265d2ae8.roa
Signing time:             Thu 13 Jan 2022 14:20:33 +0000
ROA not before:           Thu 13 Jan 2022 03:00:00 +0000
ROA not after:            Sat 13 Jan 2024 03:00:00 +0000
asID:                     264658
IP address blocks:        2803:4540::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 11 Jan 2024 18:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398672 (0x61550)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569d9c53d2d7a2dabbb573b437a4edbd78719117
        Validity
            Not Before: Jan 13 03:00:00 2022 GMT
            Not After : Jan 13 03:00:00 2024 GMT
        Subject: CN=225d1b469755c1d6a8458268c082837a265d2ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2a:f7:8e:44:6a:25:75:71:66:70:ef:f6:31:
                    08:ce:8c:15:dd:29:e4:e7:b5:24:90:eb:be:08:18:
                    b0:12:28:3b:73:a9:b5:1d:66:cc:6e:b5:0d:1b:c5:
                    fb:02:0e:26:66:4f:38:c1:45:c9:a4:6b:3a:6d:e4:
                    1f:6a:bb:ad:25:fd:ca:9d:59:37:0d:d2:9b:9e:a4:
                    1f:97:3b:8b:f0:17:74:7b:1e:10:67:60:25:b6:a0:
                    41:ae:c0:87:74:54:55:2a:26:73:42:0b:95:81:82:
                    86:ee:a7:85:fd:d8:cf:60:d8:e8:71:ec:c6:dd:fb:
                    bc:02:b1:3d:7e:ef:f0:4d:c9:ad:be:a7:5f:1d:ab:
                    7c:c4:6c:10:e2:9c:53:37:30:ac:c6:d5:a5:ed:c5:
                    89:87:85:40:64:dc:20:98:24:33:23:1d:c6:2d:0e:
                    45:80:6e:32:4f:79:76:56:1b:7e:8a:9d:e5:06:64:
                    d1:75:35:37:7f:ee:92:a9:62:4f:27:2c:67:9d:fe:
                    7e:5f:2b:2a:27:ca:fe:e1:1f:6c:8b:4b:33:07:48:
                    33:fe:df:e5:82:dd:2a:a9:8f:05:7f:e0:37:b1:81:
                    15:52:b5:cd:19:59:ae:39:1a:4a:8f:49:25:da:e3:
                    8a:9c:94:0a:a6:77:b5:b6:2d:2e:5a:d5:a8:28:6a:
                    2e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0D:2C:33:AB:46:73:D5:BE:0A:FD:8C:21:6D:D2:9A:A6:7F:CB:A3
            X509v3 Authority Key Identifier:
                keyid:7E:23:73:C2:1C:1C:73:EA:50:DA:EE:CE:10:06:0B:BB:52:C4:C2:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569d9c53d2d7a2dabbb573b437a4edbd78719117.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/225d1b469755c1d6a8458268c082837a265d2ae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/569d9c53d2d7a2dabbb573b437a4edbd78719117.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4540::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:4c:51:14:c4:9c:35:21:7e:2a:48:5d:71:ea:8a:fc:cf:7b:
         ab:b8:12:69:aa:4f:0a:86:13:cf:17:a1:ff:c5:e0:97:54:b1:
         80:8f:2b:c9:6e:fe:d9:10:44:da:1b:c6:e8:a8:dc:c3:c4:5b:
         67:80:5b:ee:1e:d4:70:7a:b9:d6:d2:8b:f2:ed:c1:e5:fc:be:
         46:c7:36:e1:a1:15:ae:57:89:18:95:c5:8c:00:63:eb:07:46:
         9c:b3:f2:3e:75:7a:60:38:45:01:e8:50:1e:98:07:a4:58:89:
         d5:45:83:7e:a8:1d:a3:ee:aa:9f:01:f6:3e:5c:3a:82:a0:fc:
         54:ab:d6:8c:49:36:7d:eb:bd:c7:e0:04:7d:fe:89:b1:ec:b1:
         c3:ca:17:55:36:80:9c:64:49:df:12:0c:e7:33:7d:18:de:5e:
         99:8e:7b:8c:79:fb:6c:14:49:48:10:a3:d8:a6:1b:69:3c:98:
         66:a3:9b:15:8c:52:73:fb:bb:b7:0a:67:c2:fe:89:28:78:59:
         58:74:01:91:4d:7c:e1:8f:da:d3:1b:d4:5b:11:c8:3b:c3:37:
         92:a4:0e:82:aa:34:6b:e7:63:c6:0e:33:e5:28:da:f0:77:fe:
         69:b5:41:82:4c:5e:37:c3:3a:79:5f:5e:05:df:e3:4b:9d:1e:
         e3:b6:e9:69
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDBhVQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU2
OWQ5YzUzZDJkN2EyZGFiYmI1NzNiNDM3YTRlZGJkNzg3MTkxMTcwHhcNMjIwMTEz
MDMwMDAwWhcNMjQwMTEzMDMwMDAwWjAzMTEwLwYDVQQDEygyMjVkMWI0Njk3NTVj
MWQ2YTg0NTgyNjhjMDgyODM3YTI2NWQyYWU4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmSr3jkRqJXVxZnDv9jEIzowV3Snk57UkkOu+CBiwEig7c6m1
HWbMbrUNG8X7Ag4mZk84wUXJpGs6beQfarutJf3KnVk3DdKbnqQflzuL8Bd0ex4Q
Z2AltqBBrsCHdFRVKiZzQguVgYKG7qeF/djPYNjocezG3fu8ArE9fu/wTcmtvqdf
Hat8xGwQ4pxTNzCsxtWl7cWJh4VAZNwgmCQzIx3GLQ5FgG4yT3l2Vht+ip3lBmTR
dTU3f+6SqWJPJyxnnf5+XysqJ8r+4R9si0szB0gz/t/lgt0qqY8Ff+A3sYEVUrXN
GVmuORpKj0kl2uOKnJQKpne1ti0uWtWoKGoudQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFM4NLDOrRnPVvgr9jCFt0pqmf8ujMB8GA1UdIwQYMBaAFH4jc8IcHHPqUNru
zhAGC7tSxMIjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTY5ZDlj
NTNkMmQ3YTJkYWJiYjU3M2I0MzdhNGVkYmQ3ODcxOTExNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGQ3MTE0YjAtYjY1Ni00YzFiLTk3NTQtMjczODg1
MzhlMzIxLzIyNWQxYjQ2OTc1NWMxZDZhODQ1ODI2OGMwODI4MzdhMjY1ZDJhZTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZDcxMTRiMC1iNjU2LTRjMWItOTc1NC0yNzM4
ODUzOGUzMjEvNTY5ZDljNTNkMmQ3YTJkYWJiYjU3M2I0MzdhNGVkYmQ3ODcxOTEx
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDRUAwDQYJKoZIhvcNAQELBQADggEBAGBMURTEnDUhfipI
XXHqivzPe6u4EmmqTwqGE88Xof/F4JdUsYCPK8lu/tkQRNobxuio3MPEW2eAW+4e
1HB6udbSi/LtweX8vkbHNuGhFa5XiRiVxYwAY+sHRpyz8j51emA4RQHoUB6YB6RY
idVFg36oHaPuqp8B9j5cOoKg/FSr1oxJNn3rvcfgBH3+ibHsscPKF1U2gJxkSd8S
DOczfRjeXpmOe4x5+2wUSUgQo9imG2k8mGajmxWMUnP7u7cKZ8L+iSh4WVh0AZFN
fOGP2tMb1FsRyDvDN5KkDoKqNGvnY8YOM+Uo2vB3/mm1QYJMXjfDOnlfXgXf40ud
HuO26Wk=
-----END CERTIFICATE-----