Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/d815a1c4c9dc6b116d0ee45e720e93702c64c150.roa
File:                     d815a1c4c9dc6b116d0ee45e720e93702c64c150.roa (raw, json)
Hash identifier:          FnbSNbhxPSsxs2Do+WqFlRza6avty5rlLJ3+MHMpqYM=
Subject key identifier:   B5:91:B6:16:62:58:2E:55:64:E3:73:93:5C:27:87:D3:8F:55:E9:E5
Certificate issuer:       /CN=8b9a11aeaeba482db300e5c15088db3c41615181
Certificate serial:       0ADF07
Authority key identifier: D0:2D:22:55:35:1F:15:DC:12:7B:79:8B:4D:D1:63:7D:FD:20:5D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b9a11aeaeba482db300e5c15088db3c41615181.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/d815a1c4c9dc6b116d0ee45e720e93702c64c150.roa
Signing time:             Wed 17 Jan 2024 02:56:10 +0000
ROA not before:           Wed 17 Jan 2024 02:56:10 +0000
ROA not after:            Sat 17 Jan 2026 02:56:10 +0000
asID:                     272859
IP address blocks:        2803:6290::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 24 Jan 2024 17:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 712455 (0xadf07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9a11aeaeba482db300e5c15088db3c41615181
        Validity
            Not Before: Jan 17 02:56:10 2024 GMT
            Not After : Jan 17 02:56:10 2026 GMT
        Subject: CN=d815a1c4c9dc6b116d0ee45e720e93702c64c150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:03:dd:df:a8:09:3f:47:8c:d3:be:ac:c6:b5:
                    95:9e:73:a5:69:3b:a5:be:0d:f4:09:bb:43:4f:31:
                    d2:99:25:ff:07:a4:42:ac:4f:df:e7:da:19:83:d5:
                    54:3d:13:63:9b:78:b3:4c:27:d7:61:7c:79:17:e1:
                    ae:97:60:72:58:f5:7c:4a:9b:04:db:65:5b:76:7b:
                    f3:a4:fd:b8:0b:45:8a:f1:9a:24:c0:38:d7:c3:e9:
                    26:f0:a3:98:29:76:35:2d:cd:ef:0b:cd:2f:13:55:
                    fd:15:11:bb:81:4b:5a:9a:88:9a:da:ab:dc:f9:c1:
                    f2:f8:4a:74:bb:21:91:40:c5:71:f7:00:5b:d3:be:
                    31:b9:45:77:ca:77:a0:f6:be:66:ee:e2:b3:0b:d9:
                    95:f0:f2:7f:bc:81:ea:38:cc:26:0b:97:4d:1a:45:
                    7d:52:d8:ee:3e:c0:2a:cd:71:bf:14:4b:03:b3:ec:
                    0f:6e:d2:a6:57:84:ef:0b:10:c0:24:71:98:da:65:
                    cf:4e:2b:0e:9c:13:77:48:f8:6d:0e:67:04:2b:81:
                    d4:c2:3c:97:92:57:a8:c5:c3:de:d2:96:3a:f2:3d:
                    61:6d:20:dd:09:61:ae:c3:60:d8:42:51:30:b1:5e:
                    57:c2:a0:27:1a:ae:c7:4e:2c:10:be:fe:fe:58:26:
                    a1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:91:B6:16:62:58:2E:55:64:E3:73:93:5C:27:87:D3:8F:55:E9:E5
            X509v3 Authority Key Identifier:
                keyid:D0:2D:22:55:35:1F:15:DC:12:7B:79:8B:4D:D1:63:7D:FD:20:5D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b9a11aeaeba482db300e5c15088db3c41615181.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/d815a1c4c9dc6b116d0ee45e720e93702c64c150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/8b9a11aeaeba482db300e5c15088db3c41615181.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6290::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:ac:f5:f7:07:66:9c:bc:c4:4b:5b:da:d2:52:d0:4d:7b:7b:
         b5:cd:89:6c:78:7b:fd:f5:30:3e:60:19:6e:21:32:18:0b:8b:
         ae:5e:7e:5e:50:33:b8:aa:aa:ff:32:48:6d:cc:52:23:0a:ee:
         fe:2b:cd:1d:8a:30:5f:52:0d:7b:da:c1:e9:6c:22:bc:4c:7a:
         19:8c:71:1b:40:e9:06:c1:62:a1:2b:58:04:e6:5f:a7:d0:9e:
         73:e6:be:db:27:65:b6:0d:cf:a3:47:4a:09:b6:3c:0d:8b:23:
         f6:d8:00:b9:de:3e:98:24:a1:0a:26:f9:ce:1e:f4:e1:19:9a:
         d7:aa:36:b4:9b:b3:ed:71:68:f8:cc:18:31:8b:e0:27:83:79:
         95:a2:d4:21:2a:a0:a1:cc:c2:da:04:44:56:34:c5:4c:bd:c1:
         e5:c5:0d:3d:8b:52:7c:71:65:4d:33:9e:ae:bd:b7:e5:2b:c8:
         20:c4:9b:23:d6:2c:8a:06:23:55:f0:8a:81:cb:3f:8a:10:aa:
         8a:72:8b:57:9a:c0:14:5c:54:a9:27:f5:69:ea:b4:c3:65:88:
         e7:6c:d6:aa:85:50:1a:6e:44:83:14:cc:3b:c3:8b:81:82:9f:
         3b:45:8b:1f:1c:d1:b4:f8:ac:d0:b5:87:02:cc:1e:92:fd:d2:
         01:42:c9:69
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDCt8HMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhi
OWExMWFlYWViYTQ4MmRiMzAwZTVjMTUwODhkYjNjNDE2MTUxODEwHhcNMjQwMTE3
MDI1NjEwWhcNMjYwMTE3MDI1NjEwWjAzMTEwLwYDVQQDEyhkODE1YTFjNGM5ZGM2
YjExNmQwZWU0NWU3MjBlOTM3MDJjNjRjMTUwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlQPd36gJP0eM076sxrWVnnOlaTulvg30CbtDTzHSmSX/B6RC
rE/f59oZg9VUPRNjm3izTCfXYXx5F+Gul2ByWPV8SpsE22VbdnvzpP24C0WK8Zok
wDjXw+km8KOYKXY1Lc3vC80vE1X9FRG7gUtamoia2qvc+cHy+Ep0uyGRQMVx9wBb
074xuUV3yneg9r5m7uKzC9mV8PJ/vIHqOMwmC5dNGkV9UtjuPsAqzXG/FEsDs+wP
btKmV4TvCxDAJHGY2mXPTisOnBN3SPhtDmcEK4HUwjyXkleoxcPe0pY68j1hbSDd
CWGuw2DYQlEwsV5XwqAnGq7HTiwQvv7+WCah/wIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFLWRthZiWC5VZONzk1wnh9OPVenlMB8GA1UdIwQYMBaAFNAtIlU1HxXcEnt5
i03RY339IF2DMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGI5YTEx
YWVhZWJhNDgyZGIzMDBlNWMxNTA4OGRiM2M0MTYxNTE4MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTNiNTk4MDItNmZlMi00NzI0LThlNzMtZDk2NzNm
YjYxYmMwL2Q4MTVhMWM0YzlkYzZiMTE2ZDBlZTQ1ZTcyMGU5MzcwMmM2NGMxNTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85M2I1OTgwMi02ZmUyLTQ3MjQtOGU3My1kOTY3
M2ZiNjFiYzAvOGI5YTExYWVhZWJhNDgyZGIzMDBlNWMxNTA4OGRiM2M0MTYxNTE4
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDYpAwDQYJKoZIhvcNAQELBQADggEBADis9fcHZpy8xEtb
2tJS0E17e7XNiWx4e/31MD5gGW4hMhgLi65efl5QM7iqqv8ySG3MUiMK7v4rzR2K
MF9SDXvawelsIrxMehmMcRtA6QbBYqErWATmX6fQnnPmvtsnZbYNz6NHSgm2PA2L
I/bYALnePpgkoQom+c4e9OEZmteqNrSbs+1xaPjMGDGL4CeDeZWi1CEqoKHMwtoE
RFY0xUy9weXFDT2LUnxxZU0znq69t+UryCDEmyPWLIoGI1XwioHLP4oQqopyi1ea
wBRcVKkn9WnqtMNliOds1qqFUBpuRIMUzDvDi4GCnztFix8c0bT4rNC1hwLMHpL9
0gFCyWk=
-----END CERTIFICATE-----