Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/54a3fc91a6f71aa3461666fcb323d73866dae810.roa
File:                     54a3fc91a6f71aa3461666fcb323d73866dae810.roa (raw, json)
Hash identifier:          5vVJ5EbdIWFrKsHc1AocxDHvC+sEM4AvRRmDHyjj0OM=
Subject key identifier:   3E:71:79:13:3F:2C:07:AA:8B:F6:96:C8:38:B4:80:F3:DF:F7:FA:E9
Certificate issuer:       /CN=30855b14b9a043ea2127093be7f867b091f60231
Certificate serial:       1F97B7
Authority key identifier: 2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/54a3fc91a6f71aa3461666fcb323d73866dae810.roa
Signing time:             Tue 11 Apr 2023 17:48:51 +0000
ROA not before:           Mon 10 Apr 2023 17:47:58 +0000
ROA not after:            Fri 11 Apr 2025 17:47:58 +0000
asID:                     264646
IP address blocks:        2803:1780:8001::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2070455 (0x1f97b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30855b14b9a043ea2127093be7f867b091f60231
        Validity
            Not Before: Apr 10 17:47:58 2023 GMT
            Not After : Apr 11 17:47:58 2025 GMT
        Subject: CN=54a3fc91a6f71aa3461666fcb323d73866dae810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:23:a3:dc:e2:ea:2b:93:4e:c9:7a:f6:68:f4:
                    44:27:e7:2c:8a:3f:8e:a9:f8:9f:10:eb:93:e9:66:
                    fd:41:c1:88:17:7c:6f:58:7d:bb:f7:3f:7e:63:0d:
                    8a:25:08:61:71:8b:fd:40:a9:1a:0d:c3:1f:f2:82:
                    0a:85:68:73:fe:9d:42:6a:f9:4e:1b:12:8b:2a:37:
                    1f:aa:3f:ff:22:90:43:81:e1:17:a5:50:d0:77:b6:
                    b4:5b:2e:4d:97:52:a0:ee:86:6f:eb:48:46:05:08:
                    8f:a9:eb:f3:4a:6f:dd:a5:e1:16:8b:d2:1b:d6:d0:
                    a8:48:60:8f:4a:15:0c:a7:75:16:69:41:a0:8a:59:
                    26:54:e5:d1:07:7d:77:f5:21:15:ab:f2:10:16:ab:
                    d5:28:5b:10:03:48:a9:a3:89:8d:7b:fd:7c:be:2d:
                    93:22:2b:8e:4a:41:48:9d:4e:81:a3:03:1e:8b:99:
                    d8:4e:73:b0:d8:f7:aa:87:88:37:9d:a8:9b:36:d3:
                    c2:43:bf:38:fe:52:15:d5:e3:42:fb:a6:a0:0b:f7:
                    ef:94:7c:a8:3b:46:22:47:2a:76:3e:ad:1d:19:52:
                    dd:09:c5:76:ce:cd:5f:1f:d8:bb:54:b4:63:f3:79:
                    fd:b1:9a:03:f4:e6:fc:22:36:98:66:75:ee:79:d0:
                    a9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:71:79:13:3F:2C:07:AA:8B:F6:96:C8:38:B4:80:F3:DF:F7:FA:E9
            X509v3 Authority Key Identifier:
                keyid:2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/54a3fc91a6f71aa3461666fcb323d73866dae810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/30855b14b9a043ea2127093be7f867b091f60231.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1780:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:d7:9e:67:6c:be:2d:b6:fa:99:ac:a0:89:b0:30:ea:91:4f:
         a9:02:3c:21:ab:ac:70:3f:b6:fe:fb:2a:16:13:e0:6a:54:8b:
         08:86:27:af:15:b6:85:c2:45:54:c7:9a:8a:a5:84:e6:db:ad:
         2e:d9:96:8b:bb:8d:af:1e:28:8b:43:29:48:ed:c4:b0:28:48:
         a1:e5:e7:f8:88:34:a3:0a:c9:a2:e9:bb:11:bd:98:69:fa:b5:
         af:65:47:cc:e3:b6:3e:72:a9:c3:53:84:15:9d:e9:3c:3e:7c:
         60:64:27:1e:12:58:a0:b2:b1:e7:c4:36:3d:18:58:e8:92:c4:
         f1:cb:8c:b7:00:5f:8f:30:1c:95:b2:17:e9:de:24:8a:f2:89:
         34:d1:68:18:75:c4:3e:cb:e1:b1:75:e7:2c:97:b9:20:98:7b:
         90:91:ac:cf:2c:63:e5:06:6e:2d:18:47:fe:b0:29:7c:06:aa:
         01:52:9c:a9:d1:7d:4f:55:4a:04:f0:62:98:d7:12:38:ba:79:
         2c:e6:d4:38:7b:d4:f0:12:ae:39:97:db:eb:23:aa:ea:88:6d:
         04:fc:6f:35:f5:18:15:1a:f4:48:88:df:61:4f:cc:9f:20:c3:
         94:e5:9e:94:e1:87:e2:3c:11:df:28:03:33:08:6b:a4:57:71:
         1b:83:aa:0a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDH5e3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMw
ODU1YjE0YjlhMDQzZWEyMTI3MDkzYmU3Zjg2N2IwOTFmNjAyMzEwHhcNMjMwNDEw
MTc0NzU4WhcNMjUwNDExMTc0NzU4WjAzMTEwLwYDVQQDEyg1NGEzZmM5MWE2Zjcx
YWEzNDYxNjY2ZmNiMzIzZDczODY2ZGFlODEwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlCOj3OLqK5NOyXr2aPREJ+csij+OqfifEOuT6Wb9QcGIF3xv
WH279z9+Yw2KJQhhcYv9QKkaDcMf8oIKhWhz/p1CavlOGxKLKjcfqj//IpBDgeEX
pVDQd7a0Wy5Nl1Kg7oZv60hGBQiPqevzSm/dpeEWi9Ib1tCoSGCPShUMp3UWaUGg
ilkmVOXRB3139SEVq/IQFqvVKFsQA0ipo4mNe/18vi2TIiuOSkFInU6BowMei5nY
TnOw2Peqh4g3naibNtPCQ784/lIV1eNC+6agC/fvlHyoO0YiRyp2Pq0dGVLdCcV2
zs1fH9i7VLRj83n9sZoD9Ob8IjaYZnXuedCpawIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFD5xeRM/LAeqi/aWyDi0gPPf9/rpMB8GA1UdIwQYMBaAFCrwKsBKA2VldyRG
rZupA0MvAGT5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzA4NTVi
MTRiOWEwNDNlYTIxMjcwOTNiZTdmODY3YjA5MWY2MDIzMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjljN2UyYzYtYTBkMy00NGRiLWJiZjAtYzE5NGQ1
NzZmODhjLzU0YTNmYzkxYTZmNzFhYTM0NjE2NjZmY2IzMjNkNzM4NjZkYWU4MTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iOWM3ZTJjNi1hMGQzLTQ0ZGItYmJmMC1jMTk0
ZDU3NmY4OGMvMzA4NTViMTRiOWEwNDNlYTIxMjcwOTNiZTdmODY3YjA5MWY2MDIz
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDF4CAATANBgkqhkiG9w0BAQsFAAOCAQEAFNeeZ2y+Lbb6
maygibAw6pFPqQI8IauscD+2/vsqFhPgalSLCIYnrxW2hcJFVMeaiqWE5tutLtmW
i7uNrx4oi0MpSO3EsChIoeXn+Ig0owrJoum7Eb2Yafq1r2VHzOO2PnKpw1OEFZ3p
PD58YGQnHhJYoLKx58Q2PRhY6JLE8cuMtwBfjzAclbIX6d4kivKJNNFoGHXEPsvh
sXXnLJe5IJh7kJGszyxj5QZuLRhH/rApfAaqAVKcqdF9T1VKBPBimNcSOLp5LObU
OHvU8BKuOZfb6yOq6ohtBPxvNfUYFRr0SIjfYU/MnyDDlOWelOGH4jwR3ygDMwhr
pFdxG4OqCg==
-----END CERTIFICATE-----