Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/6399cc5755f538f129d7e396db7963c6a195abbf.roa
File:                     6399cc5755f538f129d7e396db7963c6a195abbf.roa (raw, json)
Hash identifier:          bJxzKHKUuY804JJ9Bqzj9jb2sj+iR6eR92Shdw2xbCc=
Subject key identifier:   8E:4E:B0:84:05:B7:AD:59:01:D9:95:AB:46:01:85:8F:83:47:F6:B9
Certificate issuer:       /CN=2affce9463fa8415cf700b389ea137e31e6bc44d
Certificate serial:       20E77F
Authority key identifier: 57:C5:73:CA:21:B7:22:60:38:1E:CD:62:D5:85:B5:5B:49:4B:DA:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2affce9463fa8415cf700b389ea137e31e6bc44d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/6399cc5755f538f129d7e396db7963c6a195abbf.roa
Signing time:             Mon 26 Jun 2023 02:29:35 +0000
ROA not before:           Sun 25 Jun 2023 02:29:35 +0000
ROA not after:            Thu 26 Jun 2025 02:29:35 +0000
asID:                     263801
IP address blocks:        2803:7c40::/32 maxlen: 48

Validation:               Failed, certificate revoked on Tue 27 Feb 2024 11:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2156415 (0x20e77f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2affce9463fa8415cf700b389ea137e31e6bc44d
        Validity
            Not Before: Jun 25 02:29:35 2023 GMT
            Not After : Jun 26 02:29:35 2025 GMT
        Subject: CN=6399cc5755f538f129d7e396db7963c6a195abbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6c:5c:7e:68:36:7c:25:79:05:f0:32:c2:33:
                    4c:98:d4:39:c1:ec:41:4c:fa:06:a2:0a:a6:cb:f4:
                    a3:d6:b5:d7:1a:11:ef:1d:0b:d7:a4:45:34:9c:72:
                    ba:f2:c8:88:f6:eb:92:6d:e9:3d:7a:7f:d2:5d:f7:
                    13:67:80:9d:76:82:f7:af:b6:9c:d8:40:ea:f9:1a:
                    1e:c8:ad:13:64:12:44:63:ca:b9:f2:59:17:bb:f0:
                    26:c7:30:93:8b:06:78:96:0a:ea:02:7b:fe:69:81:
                    74:45:54:df:07:e7:7f:f3:eb:bc:f8:ff:e0:30:e7:
                    9a:b1:43:61:db:88:f9:3d:06:22:2b:5e:9e:e7:6f:
                    02:c3:15:e6:52:3c:29:f1:18:7f:48:46:49:6f:64:
                    08:b6:04:57:bc:49:6a:4a:18:7b:46:b8:0a:ed:40:
                    5b:17:bc:26:3b:b6:b7:3c:4b:45:7c:d1:30:13:b2:
                    c1:de:22:f8:87:12:67:61:27:b1:b5:e4:52:2c:fb:
                    83:8f:45:46:2c:fe:cc:53:00:69:93:9a:13:1c:7e:
                    14:6a:e6:4b:7b:05:a2:c4:4a:22:0d:1a:21:85:1d:
                    0e:1f:05:99:4b:a3:f3:bd:96:b8:b8:9d:73:33:5a:
                    55:37:17:7d:c5:0c:1b:14:9f:86:01:2f:3a:6f:23:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4E:B0:84:05:B7:AD:59:01:D9:95:AB:46:01:85:8F:83:47:F6:B9
            X509v3 Authority Key Identifier:
                keyid:57:C5:73:CA:21:B7:22:60:38:1E:CD:62:D5:85:B5:5B:49:4B:DA:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2affce9463fa8415cf700b389ea137e31e6bc44d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/6399cc5755f538f129d7e396db7963c6a195abbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/2affce9463fa8415cf700b389ea137e31e6bc44d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:27:18:88:24:ea:36:34:8a:66:70:c6:13:80:fc:7b:6f:4e:
         bd:f0:98:84:d5:bf:67:25:72:39:90:09:51:64:7e:3e:ac:e3:
         96:c8:58:aa:6c:80:99:84:cd:53:d6:8f:2e:21:a2:e9:e2:51:
         c1:c3:e2:c2:c5:4a:9c:cd:4f:64:ab:a4:a9:8a:11:a8:2e:9a:
         ea:43:55:0f:06:48:bb:e6:71:6a:e2:11:f2:53:90:fa:ae:93:
         c6:34:96:5e:1a:18:4e:4b:98:fc:9b:4a:f9:de:90:14:f4:eb:
         3f:c3:0e:d8:e4:23:81:95:18:6b:e7:13:f6:f1:33:fc:69:4e:
         56:0a:4d:2e:4f:d3:0e:d1:58:93:dd:35:c5:31:31:83:0d:f9:
         9f:16:89:d2:38:71:f6:66:57:e1:88:75:98:89:a3:4e:cc:37:
         08:16:75:a1:38:bc:10:b7:09:c0:d4:1b:8c:5b:4f:5f:3f:f5:
         b9:e3:2f:4e:85:44:bd:67:c1:6b:1b:b3:e7:82:cd:7c:02:21:
         2a:d0:c4:71:df:2a:42:f6:4c:e7:7c:0b:a8:0e:13:82:bb:56:
         9c:a9:94:ed:45:ba:e9:e9:38:b0:b8:f1:24:b8:85:85:28:a5:
         bd:ee:1d:ad:ff:02:88:cd:76:ef:4a:f2:91:d9:85:6c:78:08:
         f0:87:be:ec
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDIOd/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh
ZmZjZTk0NjNmYTg0MTVjZjcwMGIzODllYTEzN2UzMWU2YmM0NGQwHhcNMjMwNjI1
MDIyOTM1WhcNMjUwNjI2MDIyOTM1WjAzMTEwLwYDVQQDEyg2Mzk5Y2M1NzU1ZjUz
OGYxMjlkN2UzOTZkYjc5NjNjNmExOTVhYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA52xcfmg2fCV5BfAywjNMmNQ5wexBTPoGogqmy/Sj1rXXGhHv
HQvXpEU0nHK68siI9uuSbek9en/SXfcTZ4CddoL3r7ac2EDq+RoeyK0TZBJEY8q5
8lkXu/AmxzCTiwZ4lgrqAnv+aYF0RVTfB+d/8+u8+P/gMOeasUNh24j5PQYiK16e
528CwxXmUjwp8Rh/SEZJb2QItgRXvElqShh7RrgK7UBbF7wmO7a3PEtFfNEwE7LB
3iL4hxJnYSexteRSLPuDj0VGLP7MUwBpk5oTHH4UauZLewWixEoiDRohhR0OHwWZ
S6PzvZa4uJ1zM1pVNxd9xQwbFJ+GAS86byODCQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFI5OsIQFt61ZAdmVq0YBhY+DR/a5MB8GA1UdIwQYMBaAFFfFc8ohtyJgOB7N
YtWFtVtJS9pTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmFmZmNl
OTQ2M2ZhODQxNWNmNzAwYjM4OWVhMTM3ZTMxZTZiYzQ0ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjViMDVkNjgtYTNkYS00NWMwLTgxYTYtYjlkMzAw
MzQ3NDhmLzYzOTljYzU3NTVmNTM4ZjEyOWQ3ZTM5NmRiNzk2M2M2YTE5NWFiYmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iNWIwNWQ2OC1hM2RhLTQ1YzAtODFhNi1iOWQz
MDAzNDc0OGYvMmFmZmNlOTQ2M2ZhODQxNWNmNzAwYjM4OWVhMTM3ZTMxZTZiYzQ0
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDfEAwDQYJKoZIhvcNAQELBQADggEBAIsnGIgk6jY0imZw
xhOA/HtvTr3wmITVv2clcjmQCVFkfj6s45bIWKpsgJmEzVPWjy4houniUcHD4sLF
SpzNT2SrpKmKEagumupDVQ8GSLvmcWriEfJTkPquk8Y0ll4aGE5LmPybSvnekBT0
6z/DDtjkI4GVGGvnE/bxM/xpTlYKTS5P0w7RWJPdNcUxMYMN+Z8WidI4cfZmV+GI
dZiJo07MNwgWdaE4vBC3CcDUG4xbT18/9bnjL06FRL1nwWsbs+eCzXwCISrQxHHf
KkL2TOd8C6gOE4K7VpyplO1FuunpOLC48SS4hYUopb3uHa3/AojNdu9K8pHZhWx4
CPCHvuw=
-----END CERTIFICATE-----