Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/49f05c97af972ad073986b9edea5de3d88bea048.roa
File:                     49f05c97af972ad073986b9edea5de3d88bea048.roa (raw, json)
Hash identifier:          K3xbeYxE1S7qTCxbJ5JOmK25wepzniheFCZFW3CZH5w=
Subject key identifier:   61:D2:43:7A:9F:45:E9:44:7E:81:9F:B0:9B:BF:9A:A7:10:52:3C:18
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       1D46F6
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/49f05c97af972ad073986b9edea5de3d88bea048.roa
Signing time:             Mon 05 Dec 2022 21:55:26 +0000
ROA not before:           Sat 22 Oct 2022 22:15:02 +0000
ROA not after:            Wed 27 Oct 2027 22:15:02 +0000
asID:                     272121
IP address blocks:        2803:2220:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1918710 (0x1d46f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Oct 22 22:15:02 2022 GMT
            Not After : Oct 27 22:15:02 2027 GMT
        Subject: CN=49f05c97af972ad073986b9edea5de3d88bea048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:17:57:b5:e6:72:cf:13:c8:6a:38:3a:b0:66:
                    f2:c9:b4:db:43:2f:0a:e8:15:57:66:34:d6:fc:94:
                    74:10:cd:04:f0:c4:c6:63:f9:d2:a1:57:22:f5:6e:
                    e3:0b:7a:69:dc:f8:d1:3a:20:ee:fd:b7:c6:18:26:
                    93:b2:43:c6:e8:5a:ca:2f:e0:b2:b6:1c:83:40:6d:
                    e2:a6:ab:da:12:73:e6:f6:f7:19:f4:87:59:aa:a4:
                    3b:b6:de:d5:c9:00:6a:78:4c:77:56:b7:31:7f:47:
                    04:46:c9:e2:4f:92:7d:e2:62:fa:a5:cd:14:2f:21:
                    3d:c1:4d:d8:2c:fd:b7:7c:73:90:0a:65:12:ff:80:
                    14:37:38:a3:ba:9e:f4:62:cd:f4:e3:29:56:f3:fe:
                    8d:a7:b6:70:52:7e:c3:cc:83:3f:c5:db:28:31:91:
                    d4:48:f6:8f:08:2f:81:5e:18:82:8b:55:26:18:b6:
                    88:79:8f:99:36:19:c8:f4:dd:fe:f5:02:fb:c7:fb:
                    7e:38:56:35:4c:cf:0d:91:30:3f:0e:cf:b2:4d:6a:
                    3f:a9:1b:55:7a:47:f0:fe:96:a3:29:bb:84:b2:c8:
                    92:49:ec:4c:48:a2:16:93:93:e3:8b:d2:34:04:22:
                    4e:18:f6:c8:e6:a7:48:8f:e4:d1:30:a3:5b:55:4b:
                    46:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D2:43:7A:9F:45:E9:44:7E:81:9F:B0:9B:BF:9A:A7:10:52:3C:18
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/49f05c97af972ad073986b9edea5de3d88bea048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2220:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9a:a1:50:b7:68:01:77:8e:56:bb:60:a1:a4:0e:ef:ba:7b:f3:
         fe:e5:13:16:11:24:52:c2:42:88:fe:93:30:8a:fe:09:db:77:
         ad:7c:71:7a:5f:7f:83:36:d7:f4:07:ef:71:7f:d2:d2:ef:b1:
         4c:29:99:33:35:26:0c:11:44:c1:8d:dc:82:55:22:51:cd:48:
         20:7b:7d:7a:99:97:f7:e1:84:a2:de:88:a1:52:00:88:fe:00:
         a7:1a:08:f4:74:cc:af:5b:ac:99:08:4f:8d:c6:8c:9b:61:81:
         c8:95:99:a8:6e:68:1f:3d:01:d3:e1:fe:ca:c0:29:ed:58:fb:
         3a:7e:d8:8e:ab:d2:84:32:2c:95:e3:df:ba:ea:6c:e2:42:3c:
         49:7c:e2:8c:aa:09:24:cb:96:98:70:b3:1c:65:f8:ec:90:a2:
         67:55:26:52:b2:fd:f9:2f:9c:d0:83:af:19:e7:67:1f:2d:05:
         f7:11:4b:b9:fc:99:1b:1c:a5:ac:a9:38:6f:05:0f:d2:b4:8f:
         9e:03:8c:52:bc:b2:0b:b0:08:5b:a5:59:d1:f4:90:be:80:7b:
         06:f4:66:d2:b4:88:9a:be:cf:04:78:9c:86:54:52:a8:47:95:
         6c:bf:20:fa:7f:27:45:19:71:73:e9:46:01:25:0f:23:f3:ed:
         85:90:49:db
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDHUb2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc4
YzMzY2I3OWY2NWMyZTFhYzg1YWE1MjRmZDg0ZDc0ZThjY2EyYTcwHhcNMjIxMDIy
MjIxNTAyWhcNMjcxMDI3MjIxNTAyWjAzMTEwLwYDVQQDEyg0OWYwNWM5N2FmOTcy
YWQwNzM5ODZiOWVkZWE1ZGUzZDg4YmVhMDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkBdXteZyzxPIajg6sGbyybTbQy8K6BVXZjTW/JR0EM0E8MTG
Y/nSoVci9W7jC3pp3PjROiDu/bfGGCaTskPG6FrKL+CythyDQG3ipqvaEnPm9vcZ
9IdZqqQ7tt7VyQBqeEx3Vrcxf0cERsniT5J94mL6pc0ULyE9wU3YLP23fHOQCmUS
/4AUNzijup70Ys304ylW8/6Np7ZwUn7DzIM/xdsoMZHUSPaPCC+BXhiCi1UmGLaI
eY+ZNhnI9N3+9QL7x/t+OFY1TM8NkTA/Ds+yTWo/qRtVekfw/pajKbuEssiSSexM
SKIWk5Pji9I0BCJOGPbI5qdIj+TRMKNbVUtGRQIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFGHSQ3qfRelEfoGfsJu/mqcQUjwYMB8GA1UdIwQYMBaAFAfCv4K4sqyYwHmL
sDAfVkkV0zA1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzhjMzNj
Yjc5ZjY1YzJlMWFjODVhYTUyNGZkODRkNzRlOGNjYTJhNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTU1OTdjNjYtZjBjYi00YmVjLTk2NzUtZjM0MzVk
YzU1ZDU3LzQ5ZjA1Yzk3YWY5NzJhZDA3Mzk4NmI5ZWRlYTVkZTNkODhiZWEwNDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NTU5N2M2Ni1mMGNiLTRiZWMtOTY3NS1mMzQz
NWRjNTVkNTcvNzhjMzNjYjc5ZjY1YzJlMWFjODVhYTUyNGZkODRkNzRlOGNjYTJh
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGBygDIiCAMA0GCSqGSIb3DQEBCwUAA4IBAQCaoVC3aAF3jla7
YKGkDu+6e/P+5RMWESRSwkKI/pMwiv4J23etfHF6X3+DNtf0B+9xf9LS77FMKZkz
NSYMEUTBjdyCVSJRzUgge316mZf34YSi3oihUgCI/gCnGgj0dMyvW6yZCE+Nxoyb
YYHIlZmobmgfPQHT4f7KwCntWPs6ftiOq9KEMiyV49+66mziQjxJfOKMqgkky5aY
cLMcZfjskKJnVSZSsv35L5zQg68Z52cfLQX3EUu5/JkbHKWsqThvBQ/StI+eA4xS
vLILsAhbpVnR9JC+gHsG9GbStIiavs8EeJyGVFKoR5VsvyD6fydFGXFz6UYBJQ8j
8+2FkEnb
-----END CERTIFICATE-----