Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/c57fdf7e2444db292cdc7727428f2960b10fb83b.roa
File:                     c57fdf7e2444db292cdc7727428f2960b10fb83b.roa (raw, json)
Hash identifier:          Mc/lz0YcNyKu3pedrpCofrGmZ07GmF3UW46rO4bPaxo=
Subject key identifier:   8F:50:57:3C:C1:C0:66:FF:92:02:D4:FC:5E:E7:88:A0:E3:D7:0C:4D
Certificate issuer:       /CN=ff21b6b8874efa4815d9d8305ad936329fe73ac8
Certificate serial:       02B6
Authority key identifier: 94:8F:91:BF:DF:A7:DC:66:1E:61:BA:45:90:97:AB:DD:15:5C:22:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff21b6b8874efa4815d9d8305ad936329fe73ac8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/c57fdf7e2444db292cdc7727428f2960b10fb83b.roa
Signing time:             Thu 16 Mar 2023 22:33:17 +0000
ROA not before:           Wed 15 Mar 2023 22:29:00 +0000
ROA not after:            Sun 16 Mar 2025 22:29:00 +0000
asID:                     3816
IP address blocks:        2801:1f9::/48 maxlen: 48
                          2801:1f9:3::/48 maxlen: 48
                          2801:1f9:5::/48 maxlen: 48
                          2801:1f9:7::/48 maxlen: 48
                          2801:1f9:9::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff21b6b8874efa4815d9d8305ad936329fe73ac8
        Validity
            Not Before: Mar 15 22:29:00 2023 GMT
            Not After : Mar 16 22:29:00 2025 GMT
        Subject: CN=c57fdf7e2444db292cdc7727428f2960b10fb83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:27:bf:4f:27:d0:16:41:a1:0c:13:8a:b7:60:
                    10:eb:c7:a2:0b:e7:c1:a4:e4:b1:b2:29:f7:81:3e:
                    a7:cc:d3:9b:4e:08:55:f4:ce:7f:1d:ea:2e:8c:04:
                    2d:d0:f1:ac:94:36:59:dd:05:57:72:ec:0f:b8:e0:
                    21:83:6a:30:99:51:6b:9f:2d:eb:1a:80:37:90:96:
                    40:de:9f:b2:46:73:93:28:23:e2:51:44:86:b4:8e:
                    a8:57:b9:f2:18:93:78:dd:02:82:3e:1d:47:b1:3e:
                    67:66:11:6e:0a:d2:17:0c:e3:9f:2d:d1:99:83:41:
                    a4:ec:fc:26:31:58:8c:56:a1:c0:b3:3d:ed:8e:12:
                    10:19:05:d1:20:c8:98:2a:27:19:34:50:c5:1d:17:
                    62:95:47:3b:c3:dc:26:39:f6:0b:72:ad:c7:6c:a7:
                    45:c4:af:73:d8:48:eb:d9:0b:ad:82:f4:e7:b4:e3:
                    f7:c8:89:b5:dc:5b:ae:29:55:d7:f1:ef:32:d2:6f:
                    81:35:08:0f:d4:71:b6:2a:0b:ec:b7:64:96:03:d4:
                    b4:f0:1e:c5:fe:12:9b:71:98:60:8a:f4:cd:8a:cf:
                    92:e1:41:e7:25:a0:e1:6f:93:f8:26:66:c4:7b:b1:
                    47:32:0d:87:3c:29:78:4a:de:e0:fb:c2:df:a0:3d:
                    3a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:50:57:3C:C1:C0:66:FF:92:02:D4:FC:5E:E7:88:A0:E3:D7:0C:4D
            X509v3 Authority Key Identifier:
                keyid:94:8F:91:BF:DF:A7:DC:66:1E:61:BA:45:90:97:AB:DD:15:5C:22:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff21b6b8874efa4815d9d8305ad936329fe73ac8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/c57fdf7e2444db292cdc7727428f2960b10fb83b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/ff21b6b8874efa4815d9d8305ad936329fe73ac8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f9::/48
                  2801:1f9:3::/48
                  2801:1f9:5::/48
                  2801:1f9:7::/48
                  2801:1f9:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:9b:4f:56:77:e8:bf:47:72:6f:1b:a2:56:f6:9c:f2:a7:6c:
         2f:77:83:4a:cf:43:10:d2:c3:05:f5:0a:b1:28:d6:b2:cb:31:
         31:9d:7b:62:0e:06:6f:a8:91:51:86:d4:ca:e6:a0:bc:af:d8:
         93:91:d8:f9:db:47:88:6d:17:74:75:4f:04:01:d4:de:01:e4:
         bd:f8:29:f0:3d:55:a9:2c:0f:13:45:50:21:7e:c1:ee:d9:88:
         5c:88:67:4c:7d:f9:05:cb:46:63:4f:aa:3f:1b:20:c9:78:f8:
         ce:94:b2:3d:fd:48:78:3d:85:01:4f:4c:fb:ba:a0:7e:36:45:
         4f:cc:e2:6a:1a:91:8d:2f:3e:25:25:92:49:d7:06:de:d8:ad:
         60:8f:fa:25:42:ff:61:11:36:9e:ec:88:bc:3f:72:14:60:42:
         73:6a:a6:01:86:7a:63:28:5a:de:37:de:09:da:52:98:aa:50:
         27:27:43:a7:8b:bf:e4:b0:f4:68:c4:d0:cf:4b:a0:92:56:68:
         23:0f:26:14:c5:d8:d4:3e:5d:aa:a4:cb:df:68:bf:1e:c8:f5:
         93:7a:ba:f1:d7:e8:f7:bb:b1:f2:f4:e4:ca:01:23:b8:7c:32:
         d6:70:69:55:e8:be:37:47:a6:a6:95:c7:a8:c2:34:89:db:67:
         bb:3c:72:a6
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgICArYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZmYy
MWI2Yjg4NzRlZmE0ODE1ZDlkODMwNWFkOTM2MzI5ZmU3M2FjODAeFw0yMzAzMTUy
MjI5MDBaFw0yNTAzMTYyMjI5MDBaMDMxMTAvBgNVBAMTKGM1N2ZkZjdlMjQ0NGRi
MjkyY2RjNzcyNzQyOGYyOTYwYjEwZmI4M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCSJ79PJ9AWQaEME4q3YBDrx6IL58Gk5LGyKfeBPqfM05tOCFX0
zn8d6i6MBC3Q8ayUNlndBVdy7A+44CGDajCZUWufLesagDeQlkDen7JGc5MoI+JR
RIa0jqhXufIYk3jdAoI+HUexPmdmEW4K0hcM458t0ZmDQaTs/CYxWIxWocCzPe2O
EhAZBdEgyJgqJxk0UMUdF2KVRzvD3CY59gtyrcdsp0XEr3PYSOvZC62C9Oe04/fI
ibXcW64pVdfx7zLSb4E1CA/UcbYqC+y3ZJYD1LTwHsX+EptxmGCK9M2Kz5LhQecl
oOFvk/gmZsR7sUcyDYc8KXhK3uD7wt+gPTq5AgMBAAGjggKCMIICfjAdBgNVHQ4E
FgQUj1BXPMHAZv+SAtT8XueIoOPXDE0wHwYDVR0jBBgwFoAUlI+Rv9+n3GYeYbpF
kJer3RVcInMwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9mZjIxYjZi
ODg3NGVmYTQ4MTVkOWQ4MzA1YWQ5MzYzMjlmZTczYWM4LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy85YTA1NWFjZi02YjA1LTQyMzItOGYxNy1hNjc0MDEw
NTAzNTUvYzU3ZmRmN2UyNDQ0ZGIyOTJjZGM3NzI3NDI4ZjI5NjBiMTBmYjgzYi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzlhMDU1YWNmLTZiMDUtNDIzMi04ZjE3LWE2NzQw
MTA1MDM1NS9mZjIxYjZiODg3NGVmYTQ4MTVkOWQ4MzA1YWQ5MzYzMjlmZTczYWM4
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcw
NTAzBAIAAjAtAwcAKAEB+QAAAwcAKAEB+QADAwcAKAEB+QAFAwcAKAEB+QAHAwcA
KAEB+QAJMA0GCSqGSIb3DQEBCwUAA4IBAQBBm09Wd+i/R3JvG6JW9pzyp2wvd4NK
z0MQ0sMF9QqxKNayyzExnXtiDgZvqJFRhtTK5qC8r9iTkdj520eIbRd0dU8EAdTe
AeS9+CnwPVWpLA8TRVAhfsHu2YhciGdMffkFy0ZjT6o/GyDJePjOlLI9/Uh4PYUB
T0z7uqB+NkVPzOJqGpGNLz4lJZJJ1wbe2K1gj/olQv9hETae7Ii8P3IUYEJzaqYB
hnpjKFreN94J2lKYqlAnJ0Oni7/ksPRoxNDPS6CSVmgjDyYUxdjUPl2qpMvfaL8e
yPWTerrx1+j3u7Hy9OTKASO4fDLWcGlV6L43R6amlceowjSJ22e7PHKm
-----END CERTIFICATE-----