Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/955be988-0766-42bc-b84f-ef4aa9f6625e/49d02717bd892c1d035a6982b3dd06262e672a64.roa
File:                     49d02717bd892c1d035a6982b3dd06262e672a64.roa (raw, json)
Hash identifier:          wB2HSq0ccUgHZ7p98iUltHgBKjD8Tt4v0rbyoEmPay4=
Subject key identifier:   E8:54:29:67:F7:8D:DE:42:AA:37:AD:F0:7D:1E:93:E0:F8:AC:17:93
Certificate issuer:       /CN=de4267281632ed5870c17320b110df8594425b92
Certificate serial:       0D7243
Authority key identifier: 27:9D:AC:70:6E:FC:C5:18:94:86:8D:62:51:D8:59:B1:F4:42:DE:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de4267281632ed5870c17320b110df8594425b92.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/955be988-0766-42bc-b84f-ef4aa9f6625e/49d02717bd892c1d035a6982b3dd06262e672a64.roa
Signing time:             Wed 24 Mar 2021 14:29:12 +0000
ROA not before:           Wed 24 Mar 2021 14:29:11 +0000
ROA not after:            Tue 24 Mar 2026 14:29:11 +0000
asID:                     27833
IP address blocks:        2800:560::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881219 (0xd7243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de4267281632ed5870c17320b110df8594425b92
        Validity
            Not Before: Mar 24 14:29:11 2021 GMT
            Not After : Mar 24 14:29:11 2026 GMT
        Subject: CN=49d02717bd892c1d035a6982b3dd06262e672a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6a:cc:4a:f6:db:ac:c2:10:01:bb:fb:ef:8f:
                    7f:a1:19:28:98:67:56:01:63:3d:82:a4:2c:0c:96:
                    68:cb:e1:4e:02:80:32:b5:a2:ea:9a:11:27:59:27:
                    6a:d9:73:3f:95:4b:62:2c:e6:d5:aa:0c:54:cc:97:
                    91:d2:ff:93:a0:5b:6d:a5:65:c3:1b:9b:a0:d5:bb:
                    31:ee:a5:9a:f7:5b:d8:dd:87:0b:7f:66:07:86:75:
                    c3:4c:42:11:81:d9:ee:3f:ac:ab:0f:52:d3:bc:8f:
                    67:f7:77:5f:1a:f3:a1:bd:62:d0:42:09:f3:3e:2f:
                    05:1c:5c:39:71:53:cd:98:ad:81:24:7f:1e:3e:d8:
                    2d:58:31:48:8a:4c:04:78:4f:62:9d:e6:34:3e:4a:
                    52:48:c6:ec:a8:4b:81:15:d9:aa:00:54:08:80:e7:
                    ce:d8:31:46:5a:12:d2:a9:3d:2a:3f:0f:10:10:b4:
                    2e:e0:73:dc:bd:ba:c4:07:08:49:aa:ca:31:57:01:
                    08:0e:3a:31:45:59:ca:50:ba:61:0e:b1:cc:88:60:
                    02:1d:20:c9:98:89:84:fd:86:59:7d:98:37:e2:34:
                    40:8d:6c:ab:74:14:2c:04:7b:aa:3d:ad:3c:d0:39:
                    8b:42:9c:56:09:71:00:94:52:4e:a4:0e:fd:6e:c9:
                    4b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:54:29:67:F7:8D:DE:42:AA:37:AD:F0:7D:1E:93:E0:F8:AC:17:93
            X509v3 Authority Key Identifier:
                keyid:27:9D:AC:70:6E:FC:C5:18:94:86:8D:62:51:D8:59:B1:F4:42:DE:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de4267281632ed5870c17320b110df8594425b92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/955be988-0766-42bc-b84f-ef4aa9f6625e/49d02717bd892c1d035a6982b3dd06262e672a64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/955be988-0766-42bc-b84f-ef4aa9f6625e/de4267281632ed5870c17320b110df8594425b92.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:560::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:b9:39:7e:44:a8:d0:f9:36:4a:e9:b1:c4:59:f4:8f:82:8b:
         5c:7f:81:98:ef:87:73:82:1c:e5:52:39:35:17:31:fd:60:e7:
         fa:4c:36:1f:4a:00:b0:75:29:ab:31:85:6a:98:c4:ab:f6:ab:
         08:13:ec:ce:b0:97:b7:4a:67:f8:85:00:08:9e:56:93:ff:ed:
         8e:be:5a:96:95:31:1d:7d:c2:4d:12:12:37:8d:98:f4:a2:be:
         43:43:62:19:a5:dd:19:f6:f7:51:4e:6b:5e:06:17:d6:74:bf:
         26:6f:00:84:83:18:52:6f:2a:64:f3:85:2e:76:bf:3d:41:21:
         cc:cc:38:4d:9b:ed:ec:02:84:1b:75:62:8f:9d:47:e6:44:1f:
         8a:03:be:77:75:ab:5f:c5:56:65:96:a9:15:74:1a:f0:bd:e8:
         8d:4d:87:67:f7:90:3c:a0:e6:18:b3:76:93:92:c4:a8:ea:12:
         32:ef:d0:eb:e1:ae:a7:02:5b:05:cb:92:33:e6:e0:07:b5:ad:
         a6:75:a9:0f:5c:41:5c:c6:e7:c1:08:92:54:e1:2a:a6:91:0d:
         fd:05:9b:c5:4f:e8:b6:eb:dc:5b:0f:bd:4b:1a:7c:11:aa:8b:
         3b:e8:9d:bf:a3:14:18:37:c7:96:9e:85:f4:62:52:40:63:18:
         58:e2:67:af
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDXJDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRl
NDI2NzI4MTYzMmVkNTg3MGMxNzMyMGIxMTBkZjg1OTQ0MjViOTIwHhcNMjEwMzI0
MTQyOTExWhcNMjYwMzI0MTQyOTExWjAzMTEwLwYDVQQDEyg0OWQwMjcxN2JkODky
YzFkMDM1YTY5ODJiM2RkMDYyNjJlNjcyYTY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnmrMSvbbrMIQAbv7749/oRkomGdWAWM9gqQsDJZoy+FOAoAy
taLqmhEnWSdq2XM/lUtiLObVqgxUzJeR0v+ToFttpWXDG5ug1bsx7qWa91vY3YcL
f2YHhnXDTEIRgdnuP6yrD1LTvI9n93dfGvOhvWLQQgnzPi8FHFw5cVPNmK2BJH8e
PtgtWDFIikwEeE9ineY0PkpSSMbsqEuBFdmqAFQIgOfO2DFGWhLSqT0qPw8QELQu
4HPcvbrEBwhJqsoxVwEIDjoxRVnKULphDrHMiGACHSDJmImE/YZZfZg34jRAjWyr
dBQsBHuqPa080DmLQpxWCXEAlFJOpA79bslLcwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFOhUKWf3jd5Cqjet8H0ek+D4rBeTMB8GA1UdIwQYMBaAFCedrHBu/MUYlIaN
YlHYWbH0Qt6cMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGU0MjY3
MjgxNjMyZWQ1ODcwYzE3MzIwYjExMGRmODU5NDQyNWI5Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTU1YmU5ODgtMDc2Ni00MmJjLWI4NGYtZWY0YWE5
ZjY2MjVlLzQ5ZDAyNzE3YmQ4OTJjMWQwMzVhNjk4MmIzZGQwNjI2MmU2NzJhNjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NTViZTk4OC0wNzY2LTQyYmMtYjg0Zi1lZjRh
YTlmNjYyNWUvZGU0MjY3MjgxNjMyZWQ1ODcwYzE3MzIwYjExMGRmODU5NDQyNWI5
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgABWAwDQYJKoZIhvcNAQELBQADggEBAAu5OX5EqND5Nkrp
scRZ9I+Ci1x/gZjvh3OCHOVSOTUXMf1g5/pMNh9KALB1KasxhWqYxKv2qwgT7M6w
l7dKZ/iFAAieVpP/7Y6+WpaVMR19wk0SEjeNmPSivkNDYhml3Rn291FOa14GF9Z0
vyZvAISDGFJvKmTzhS52vz1BIczMOE2b7ewChBt1Yo+dR+ZEH4oDvnd1q1/FVmWW
qRV0GvC96I1Nh2f3kDyg5hizdpOSxKjqEjLv0OvhrqcCWwXLkjPm4Ae1raZ1qQ9c
QVzG58EIklThKqaRDf0Fm8VP6Lbr3FsPvUsafBGqizvonb+jFBg3x5aehfRiUkBj
GFjiZ68=
-----END CERTIFICATE-----