Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be2f55b8-72c4-4578-8085-35c9bbfd9026/d8a948d4e1349ba8280bf123b34b78bf21c3d7f4.roa
File:                     d8a948d4e1349ba8280bf123b34b78bf21c3d7f4.roa (raw, json)
Hash identifier:          HGEPPY2MN/oI3wW13ynboFqqJU0xeZIXFx1RfE2/QE0=
Subject key identifier:   79:CE:69:F5:10:EA:38:C5:87:AF:DC:27:E1:54:8C:C3:33:73:82:2F
Certificate issuer:       /CN=41ecccbe7e4a661da433906d48e7f564fc8690e5
Certificate serial:       3431
Authority key identifier: E8:6F:F0:F9:5C:24:45:E3:73:DE:CD:4D:34:47:1D:4F:63:1D:90:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41ecccbe7e4a661da433906d48e7f564fc8690e5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/be2f55b8-72c4-4578-8085-35c9bbfd9026/d8a948d4e1349ba8280bf123b34b78bf21c3d7f4.roa
Signing time:             Wed 05 Apr 2023 22:41:32 +0000
ROA not before:           Tue 04 Apr 2023 22:39:15 +0000
ROA not after:            Sat 05 Apr 2025 22:39:15 +0000
asID:                     272952
IP address blocks:        2801:1b9:1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13361 (0x3431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41ecccbe7e4a661da433906d48e7f564fc8690e5
        Validity
            Not Before: Apr  4 22:39:15 2023 GMT
            Not After : Apr  5 22:39:15 2025 GMT
        Subject: CN=d8a948d4e1349ba8280bf123b34b78bf21c3d7f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:f7:e1:d6:f9:b4:72:1f:91:b1:b0:14:52:
                    62:8f:2b:a9:b1:6e:0c:2b:92:0b:24:78:28:c7:e2:
                    82:20:3f:d3:d0:0a:41:e7:11:42:59:00:21:8e:e4:
                    a6:bf:53:e6:fb:22:1d:d8:f9:fe:f7:9a:41:e9:b6:
                    24:e4:92:c4:db:86:fa:30:9f:56:21:6b:7e:d2:99:
                    cc:2b:49:d2:0e:7b:6b:de:6c:01:78:e8:03:4b:b6:
                    c2:49:94:17:f1:a7:13:61:b5:8e:19:0b:07:54:ad:
                    e3:52:2a:8d:d3:05:f7:b7:d2:bb:b1:24:b8:90:2a:
                    4d:a9:96:a7:27:2e:b1:28:6e:c1:cc:0b:af:9d:a7:
                    1c:91:0e:09:cc:b2:2d:94:66:13:3d:ae:ac:ee:ba:
                    b1:32:54:9b:b9:d7:9c:80:b4:01:8f:91:b6:af:04:
                    3a:1b:9e:08:b9:20:e9:23:8f:ab:14:51:16:4f:17:
                    fe:54:b1:b1:01:74:1a:f6:2b:21:3a:59:c3:a4:c9:
                    47:57:3e:04:9d:ab:55:d2:04:2e:47:46:6a:33:50:
                    2c:c0:99:14:ce:ed:94:ad:ed:e7:2c:5c:32:df:3c:
                    38:38:c2:7c:6c:55:f7:5b:f6:34:fb:65:9a:cd:20:
                    89:18:e9:d2:cf:7c:7d:e4:8a:f5:f8:fe:1f:b0:68:
                    49:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CE:69:F5:10:EA:38:C5:87:AF:DC:27:E1:54:8C:C3:33:73:82:2F
            X509v3 Authority Key Identifier:
                keyid:E8:6F:F0:F9:5C:24:45:E3:73:DE:CD:4D:34:47:1D:4F:63:1D:90:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41ecccbe7e4a661da433906d48e7f564fc8690e5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be2f55b8-72c4-4578-8085-35c9bbfd9026/d8a948d4e1349ba8280bf123b34b78bf21c3d7f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/be2f55b8-72c4-4578-8085-35c9bbfd9026/41ecccbe7e4a661da433906d48e7f564fc8690e5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b9:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:13:c8:16:ec:3a:be:be:43:0d:95:7c:47:05:b2:9c:62:20:
         92:bf:38:22:6e:b5:31:9b:84:ed:03:e4:d8:c3:e7:35:84:79:
         41:26:b8:6d:c5:1c:bb:b2:65:d3:e2:2d:12:63:f9:4a:c8:93:
         fe:52:e0:f3:5f:35:ef:25:09:cb:2a:84:d0:76:39:55:53:02:
         78:29:e1:10:95:57:13:e2:79:f3:bb:91:a0:6e:4f:f8:b7:6a:
         6d:55:1d:ca:3a:ed:42:7a:a6:36:a8:e0:b9:a9:2d:71:9c:d2:
         d2:f3:26:f9:74:91:1a:1a:16:96:45:15:28:3b:a9:36:d1:88:
         f0:84:c0:a3:40:76:a9:bd:6b:41:cb:8c:cc:a8:1c:b9:39:c4:
         71:ef:07:2e:bd:ad:53:ee:50:d4:60:ae:bb:f2:d8:79:01:e2:
         57:76:b9:f9:d1:b0:24:46:0f:da:c8:05:74:f6:c2:de:88:f1:
         c5:8e:3e:0a:e3:fa:05:35:46:f2:1e:3c:50:ec:ac:f2:4a:f6:
         90:ad:34:95:9c:0b:b9:30:23:b4:8c:9a:1c:1e:7a:f0:5b:0a:
         c1:f0:08:90:e9:e3:f3:8f:29:95:5b:14:67:88:83:6f:bc:20:
         17:aa:93:fd:77:fe:03:2f:7e:78:ba:fc:b5:bf:f3:73:cd:00:
         b5:2e:bd:71
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICNDEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDFl
Y2NjYmU3ZTRhNjYxZGE0MzM5MDZkNDhlN2Y1NjRmYzg2OTBlNTAeFw0yMzA0MDQy
MjM5MTVaFw0yNTA0MDUyMjM5MTVaMDMxMTAvBgNVBAMTKGQ4YTk0OGQ0ZTEzNDli
YTgyODBiZjEyM2IzNGI3OGJmMjFjM2Q3ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnm/fh1vm0ch+RsbAUUmKPK6mxbgwrkgskeCjH4oIgP9PQCkHn
EUJZACGO5Ka/U+b7Ih3Y+f73mkHptiTkksTbhvown1Yha37SmcwrSdIOe2vebAF4
6ANLtsJJlBfxpxNhtY4ZCwdUreNSKo3TBfe30ruxJLiQKk2plqcnLrEobsHMC6+d
pxyRDgnMsi2UZhM9rqzuurEyVJu515yAtAGPkbavBDobngi5IOkjj6sUURZPF/5U
sbEBdBr2KyE6WcOkyUdXPgSdq1XSBC5HRmozUCzAmRTO7ZSt7ecsXDLfPDg4wnxs
Vfdb9jT7ZZrNIIkY6dLPfH3kivX4/h+waEnfAgMBAAGjggJeMIICWjAdBgNVHQ4E
FgQUec5p9RDqOMWHr9wn4VSMwzNzgi8wHwYDVR0jBBgwFoAU6G/w+VwkReNz3s1N
NEcdT2MdkAMwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS80MWVjY2Ni
ZTdlNGE2NjFkYTQzMzkwNmQ0OGU3ZjU2NGZjODY5MGU1LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9iZTJmNTViOC03MmM0LTQ1NzgtODA4NS0zNWM5YmJm
ZDkwMjYvZDhhOTQ4ZDRlMTM0OWJhODI4MGJmMTIzYjM0Yjc4YmYyMWMzZDdmNC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2JlMmY1NWI4LTcyYzQtNDU3OC04MDg1LTM1Yzli
YmZkOTAyNi80MWVjY2NiZTdlNGE2NjFkYTQzMzkwNmQ0OGU3ZjU2NGZjODY5MGU1
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw
ETAPBAIAAjAJAwcAKAEBuQABMA0GCSqGSIb3DQEBCwUAA4IBAQAdE8gW7Dq+vkMN
lXxHBbKcYiCSvzgibrUxm4TtA+TYw+c1hHlBJrhtxRy7smXT4i0SY/lKyJP+UuDz
XzXvJQnLKoTQdjlVUwJ4KeEQlVcT4nnzu5Ggbk/4t2ptVR3KOu1CeqY2qOC5qS1x
nNLS8yb5dJEaGhaWRRUoO6k20YjwhMCjQHapvWtBy4zMqBy5OcRx7wcuva1T7lDU
YK678th5AeJXdrn50bAkRg/ayAV09sLeiPHFjj4K4/oFNUbyHjxQ7KzySvaQrTSV
nAu5MCO0jJocHnrwWwrB8AiQ6ePzjymVWxRniINvvCAXqpP9d/4DL354uvy1v/Nz
zQC1Lr1x
-----END CERTIFICATE-----