Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bdf7ba73-5e8f-4a2f-8a91-a1394f6e3164/aed60215b153e1f5ead8eacddd235670c167b8f2.roa
File:                     aed60215b153e1f5ead8eacddd235670c167b8f2.roa (raw, json)
Hash identifier:          EXl6whJsivmtgVIUsvBPVECSz3jTb2HPR0v20rRlK/k=
Subject key identifier:   BE:46:02:40:19:4F:1A:B0:96:D4:6C:09:7C:88:4C:63:9F:4F:1B:A6
Certificate issuer:       /CN=badc597dac1debf52afd4da6abc08896e46e7502
Certificate serial:       053C
Authority key identifier: 7D:88:53:4C:C6:C1:D1:42:DF:C1:AC:17:ED:6A:CC:A0:55:8D:48:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/badc597dac1debf52afd4da6abc08896e46e7502.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bdf7ba73-5e8f-4a2f-8a91-a1394f6e3164/aed60215b153e1f5ead8eacddd235670c167b8f2.roa
Signing time:             Tue 01 Feb 2022 18:28:51 +0000
ROA not before:           Tue 01 Feb 2022 03:00:00 +0000
ROA not after:            Thu 01 Feb 2024 03:00:00 +0000
asID:                     271991
IP address blocks:        2803:1110::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 07:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1340 (0x53c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=badc597dac1debf52afd4da6abc08896e46e7502
        Validity
            Not Before: Feb  1 03:00:00 2022 GMT
            Not After : Feb  1 03:00:00 2024 GMT
        Subject: CN=aed60215b153e1f5ead8eacddd235670c167b8f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bf:13:69:85:cc:2c:46:60:6c:76:d3:e8:79:
                    39:00:d1:f6:ee:22:f4:55:04:52:e7:7a:ce:e0:de:
                    6e:73:5f:fb:5f:4c:fb:95:e3:4a:a2:58:2d:63:03:
                    76:53:1e:b9:a2:8b:ca:19:12:37:1d:23:0f:3d:f6:
                    d8:25:d1:31:c3:f4:59:00:66:9d:40:b0:58:68:26:
                    ed:8e:f9:8e:86:6a:07:48:45:98:f4:e7:fa:d7:af:
                    6d:6b:aa:cc:ae:9f:1f:06:d2:cb:86:2b:df:f1:48:
                    f7:28:d3:e2:00:06:77:98:7d:ed:21:00:61:14:00:
                    71:76:6f:0d:ef:25:da:de:fd:65:8c:ce:69:0c:02:
                    2e:22:ba:97:df:23:46:d3:1f:1d:62:6e:61:7d:26:
                    8b:f3:e8:c0:7e:8f:f1:96:7b:95:2f:2b:21:72:d5:
                    32:cb:95:ae:c6:4d:d0:dc:77:cc:45:3d:ff:85:24:
                    32:84:ff:dd:51:9d:83:9a:da:50:6e:fa:dc:27:fa:
                    94:27:f8:a2:3d:f7:57:06:83:5f:7e:28:02:b8:d3:
                    e7:58:e6:18:4e:00:b8:f4:1b:7d:dd:30:26:73:c7:
                    3a:8c:4f:84:41:8e:66:bd:6d:59:07:4e:c6:5c:93:
                    ca:a4:77:e1:30:c6:5b:b8:80:df:d7:e2:3a:5f:67:
                    6b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:46:02:40:19:4F:1A:B0:96:D4:6C:09:7C:88:4C:63:9F:4F:1B:A6
            X509v3 Authority Key Identifier:
                keyid:7D:88:53:4C:C6:C1:D1:42:DF:C1:AC:17:ED:6A:CC:A0:55:8D:48:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/badc597dac1debf52afd4da6abc08896e46e7502.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bdf7ba73-5e8f-4a2f-8a91-a1394f6e3164/aed60215b153e1f5ead8eacddd235670c167b8f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bdf7ba73-5e8f-4a2f-8a91-a1394f6e3164/badc597dac1debf52afd4da6abc08896e46e7502.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1110::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:ab:1c:eb:73:f4:54:a9:6e:1a:06:35:cc:ea:da:fc:9a:7a:
         f4:81:f0:fa:85:2b:e4:e8:75:e4:6d:24:46:62:1e:f0:9e:bb:
         52:61:c3:95:f5:6b:bb:3f:f7:25:9e:44:89:9f:38:12:88:5c:
         80:c9:f7:e0:04:fd:81:f9:16:09:f3:61:95:ee:69:b0:20:60:
         43:e2:78:46:16:5f:cd:ed:7e:03:4a:7f:b9:da:c1:54:73:c1:
         ce:29:d7:10:37:4d:76:b2:ba:cb:90:ba:ac:a8:68:99:07:78:
         45:6d:b5:6a:24:d7:b5:97:5a:c2:22:5a:0e:80:19:e2:e4:7c:
         75:f7:a0:f3:b7:fc:3f:fe:12:2b:8e:e1:ec:f7:33:03:2d:07:
         91:cd:08:4a:56:c7:b9:42:6c:41:d1:90:b1:02:69:10:e4:93:
         6a:b8:04:e4:19:0e:63:99:47:3f:7c:41:bd:a8:97:1f:7c:c6:
         34:66:7a:bf:0e:1f:33:65:d1:1e:56:d0:8e:26:c1:b8:2d:7b:
         14:b1:02:d3:a0:7f:88:6f:ba:fe:7f:4c:37:6d:00:60:20:49:
         48:ff:0e:fe:02:85:b5:39:4e:44:df:dd:bc:e9:fc:d4:95:5d:
         42:90:d6:0c:b8:d0:5c:a6:5a:8f:f4:fc:4b:c4:83:a1:b6:84:
         94:ac:44:40
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICBTwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYmFk
YzU5N2RhYzFkZWJmNTJhZmQ0ZGE2YWJjMDg4OTZlNDZlNzUwMjAeFw0yMjAyMDEw
MzAwMDBaFw0yNDAyMDEwMzAwMDBaMDMxMTAvBgNVBAMTKGFlZDYwMjE1YjE1M2Ux
ZjVlYWQ4ZWFjZGRkMjM1NjcwYzE2N2I4ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCavxNphcwsRmBsdtPoeTkA0fbuIvRVBFLnes7g3m5zX/tfTPuV
40qiWC1jA3ZTHrmii8oZEjcdIw899tgl0THD9FkAZp1AsFhoJu2O+Y6GagdIRZj0
5/rXr21rqsyunx8G0suGK9/xSPco0+IABneYfe0hAGEUAHF2bw3vJdre/WWMzmkM
Ai4iupffI0bTHx1ibmF9Jovz6MB+j/GWe5UvKyFy1TLLla7GTdDcd8xFPf+FJDKE
/91RnYOa2lBu+twn+pQn+KI991cGg19+KAK40+dY5hhOALj0G33dMCZzxzqMT4RB
jma9bVkHTsZck8qkd+Ewxlu4gN/X4jpfZ2vxAgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUvkYCQBlPGrCW1GwJfIhMY59PG6YwHwYDVR0jBBgwFoAUfYhTTMbB0ULfwawX
7WrMoFWNSAgwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9iYWRjNTk3
ZGFjMWRlYmY1MmFmZDRkYTZhYmMwODg5NmU0NmU3NTAyLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9iZGY3YmE3My01ZThmLTRhMmYtOGE5MS1hMTM5NGY2
ZTMxNjQvYWVkNjAyMTViMTUzZTFmNWVhZDhlYWNkZGQyMzU2NzBjMTY3YjhmMi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2JkZjdiYTczLTVlOGYtNGEyZi04YTkxLWExMzk0
ZjZlMzE2NC9iYWRjNTk3ZGFjMWRlYmY1MmFmZDRkYTZhYmMwODg5NmU0NmU3NTAy
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAMREDANBgkqhkiG9w0BAQsFAAOCAQEAPqsc63P0VKluGgY1
zOra/Jp69IHw+oUr5Oh15G0kRmIe8J67UmHDlfVruz/3JZ5EiZ84EohcgMn34AT9
gfkWCfNhle5psCBgQ+J4RhZfze1+A0p/udrBVHPBzinXEDdNdrK6y5C6rKhomQd4
RW21aiTXtZdawiJaDoAZ4uR8dfeg87f8P/4SK47h7PczAy0Hkc0ISlbHuUJsQdGQ
sQJpEOSTargE5BkOY5lHP3xBvaiXH3zGNGZ6vw4fM2XRHlbQjibBuC17FLEC06B/
iG+6/n9MN20AYCBJSP8O/gKFtTlORN/dvOn81JVdQpDWDLjQXKZaj/T8S8SDobaE
lKxEQA==
-----END CERTIFICATE-----