Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/b1b09adfe1a462f640ab85db78ce2288c3999fa3.roa
File:                     b1b09adfe1a462f640ab85db78ce2288c3999fa3.roa (raw, json)
Hash identifier:          SGmDgUQrVrtIFteBi05el0FmlVfdVlmmk91QMcNN1js=
Subject key identifier:   37:E7:21:77:D2:B0:9A:DC:65:72:6C:22:52:F9:57:20:3A:C9:55:21
Certificate issuer:       /CN=9d44e5cc8623c5cdabd559bdad688e9f03759533
Certificate serial:       242E7B
Authority key identifier: 88:50:96:CD:A6:E7:72:8D:C1:9C:13:39:45:81:74:B5:69:6E:44:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d44e5cc8623c5cdabd559bdad688e9f03759533.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/b1b09adfe1a462f640ab85db78ce2288c3999fa3.roa
Signing time:             Tue 19 Sep 2023 08:30:00 +0000
ROA not before:           Mon 18 Sep 2023 08:30:00 +0000
ROA not after:            Wed 17 Sep 2025 08:30:00 +0000
asID:                     61506
IP address blocks:        2803:4640::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 12 Jan 2024 19:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2371195 (0x242e7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d44e5cc8623c5cdabd559bdad688e9f03759533
        Validity
            Not Before: Sep 18 08:30:00 2023 GMT
            Not After : Sep 17 08:30:00 2025 GMT
        Subject: CN=b1b09adfe1a462f640ab85db78ce2288c3999fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9f:58:d8:0b:d9:90:c9:f9:be:33:f7:9e:3e:
                    ee:d7:7d:1d:a3:e4:de:b6:4b:7d:90:17:92:1a:5b:
                    9c:45:ed:4d:5e:d0:ec:a6:f6:ba:88:88:fe:fd:e4:
                    35:d2:13:2c:c4:e9:dc:7e:d7:c5:62:f0:f8:de:16:
                    49:3d:20:41:dc:c9:33:c9:23:04:d3:c5:e3:97:d3:
                    c0:9a:d1:b2:13:1b:5e:27:49:a0:df:62:47:8b:53:
                    1b:b1:25:eb:ec:92:26:e1:fa:d9:45:be:0b:3d:0e:
                    7a:ba:a2:ef:f2:73:a5:09:8a:4d:cd:33:53:75:bb:
                    20:95:19:0b:ca:3c:91:33:d7:83:77:ff:5e:31:79:
                    39:09:bb:6f:49:b6:66:a3:b1:52:27:24:58:b4:85:
                    4c:94:fb:be:23:32:ea:18:b5:2f:9a:d3:fc:6c:ef:
                    ac:e2:fb:f7:41:59:c7:1a:03:00:7f:6b:72:ae:3a:
                    e5:f6:93:74:6e:5c:16:a2:4a:cc:26:00:eb:4d:01:
                    0f:9c:45:b0:0b:ee:bc:bb:26:10:af:fa:88:40:3f:
                    5b:f5:3f:64:20:53:98:c1:b4:e6:e2:be:cf:fd:a0:
                    7d:51:fa:9e:37:bd:9c:55:d9:5e:87:2f:d3:0b:9a:
                    14:52:7a:9f:ac:40:d3:a6:cc:87:05:ff:7f:15:c0:
                    49:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E7:21:77:D2:B0:9A:DC:65:72:6C:22:52:F9:57:20:3A:C9:55:21
            X509v3 Authority Key Identifier:
                keyid:88:50:96:CD:A6:E7:72:8D:C1:9C:13:39:45:81:74:B5:69:6E:44:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d44e5cc8623c5cdabd559bdad688e9f03759533.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/b1b09adfe1a462f640ab85db78ce2288c3999fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/9d44e5cc8623c5cdabd559bdad688e9f03759533.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4640::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:f0:0c:a3:e1:66:ef:e5:71:5e:16:ce:5d:59:3e:df:55:5a:
         9c:23:14:f2:9c:dd:c9:d7:7d:93:f5:e9:c6:e5:a1:32:f0:fd:
         41:92:ea:33:99:ce:16:fa:19:05:74:7a:0d:8d:55:88:c8:eb:
         92:16:77:a3:8c:35:a0:0f:33:89:ba:4f:cb:d8:9c:a3:bc:c8:
         90:da:6c:4b:66:75:0b:5c:8d:a6:6e:6e:99:3b:63:cf:68:2e:
         35:bb:37:b1:b8:96:16:79:3a:24:a7:c5:af:28:b7:a8:45:35:
         62:a5:3e:ce:21:45:3e:f8:b0:d1:e8:ab:f3:e1:04:3f:d4:90:
         60:21:a7:97:47:4d:9b:0b:83:2b:a0:33:de:0d:00:0d:39:98:
         01:29:be:fe:c5:ba:58:ec:9a:e8:55:a4:8d:0a:cd:4d:5e:75:
         f1:30:f8:5e:5b:63:48:c4:65:58:23:ac:d1:9b:10:17:ee:7c:
         89:55:de:37:8a:2c:6a:cb:5f:6a:bb:b0:2a:89:ab:62:84:1f:
         0d:4a:e8:e0:22:a5:66:5c:e1:27:ee:66:38:b7:a5:6b:d3:24:
         92:11:3c:cd:87:68:7e:bf:91:a6:86:9d:09:40:cb:1e:8a:b3:
         b9:c4:7b:87:5b:60:0d:5d:e3:bf:36:b7:76:e0:b1:95:95:5a:
         1f:ed:58:83
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDJC57MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlk
NDRlNWNjODYyM2M1Y2RhYmQ1NTliZGFkNjg4ZTlmMDM3NTk1MzMwHhcNMjMwOTE4
MDgzMDAwWhcNMjUwOTE3MDgzMDAwWjAzMTEwLwYDVQQDEyhiMWIwOWFkZmUxYTQ2
MmY2NDBhYjg1ZGI3OGNlMjI4OGMzOTk5ZmEzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlJ9Y2AvZkMn5vjP3nj7u130do+Tetkt9kBeSGlucRe1NXtDs
pva6iIj+/eQ10hMsxOncftfFYvD43hZJPSBB3MkzySME08Xjl9PAmtGyExteJ0mg
32JHi1MbsSXr7JIm4frZRb4LPQ56uqLv8nOlCYpNzTNTdbsglRkLyjyRM9eDd/9e
MXk5CbtvSbZmo7FSJyRYtIVMlPu+IzLqGLUvmtP8bO+s4vv3QVnHGgMAf2tyrjrl
9pN0blwWokrMJgDrTQEPnEWwC+68uyYQr/qIQD9b9T9kIFOYwbTm4r7P/aB9Ufqe
N72cVdlehy/TC5oUUnqfrEDTpsyHBf9/FcBJ3wIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFDfnIXfSsJrcZXJsIlL5VyA6yVUhMB8GA1UdIwQYMBaAFIhQls2m53KNwZwT
OUWBdLVpbkT0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWQ0NGU1
Y2M4NjIzYzVjZGFiZDU1OWJkYWQ2ODhlOWYwMzc1OTUzMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmNmOTE5NzAtOTAzYS00NzM0LTgxNWYtNzYyYjM4
ZWZlNWEzL2IxYjA5YWRmZTFhNDYyZjY0MGFiODVkYjc4Y2UyMjg4YzM5OTlmYTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iY2Y5MTk3MC05MDNhLTQ3MzQtODE1Zi03NjJi
MzhlZmU1YTMvOWQ0NGU1Y2M4NjIzYzVjZGFiZDU1OWJkYWQ2ODhlOWYwMzc1OTUz
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDRkAwDQYJKoZIhvcNAQELBQADggEBAF/wDKPhZu/lcV4W
zl1ZPt9VWpwjFPKc3cnXfZP16cbloTLw/UGS6jOZzhb6GQV0eg2NVYjI65IWd6OM
NaAPM4m6T8vYnKO8yJDabEtmdQtcjaZubpk7Y89oLjW7N7G4lhZ5OiSnxa8ot6hF
NWKlPs4hRT74sNHoq/PhBD/UkGAhp5dHTZsLgyugM94NAA05mAEpvv7FuljsmuhV
pI0KzU1edfEw+F5bY0jEZVgjrNGbEBfufIlV3jeKLGrLX2q7sCqJq2KEHw1K6OAi
pWZc4SfuZji3pWvTJJIRPM2HaH6/kaaGnQlAyx6Ks7nEe4dbYA1d4782t3bgsZWV
Wh/tWIM=
-----END CERTIFICATE-----