Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/c2129f988d8596bca39cabe3307ca118b5f29498.roa
File:                     c2129f988d8596bca39cabe3307ca118b5f29498.roa (raw, json)
Hash identifier:          cHVOKCEndpRc/DZaGohu3b8VSUk+2qeJpkf4tMijAPE=
Subject key identifier:   43:F7:3E:F0:C0:E0:03:4B:94:E4:65:B9:B0:D2:85:D9:23:E8:1E:B3
Certificate issuer:       /CN=0317b9d1456b48aa14ec8d784f305e45943a6533
Certificate serial:       038E
Authority key identifier: F4:47:05:7F:65:3B:51:F1:25:37:4B:6E:18:CD:11:CA:E3:4C:38:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0317b9d1456b48aa14ec8d784f305e45943a6533.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/c2129f988d8596bca39cabe3307ca118b5f29498.roa
Signing time:             Wed 11 May 2022 15:21:46 +0000
ROA not before:           Wed 11 May 2022 03:00:00 +0000
ROA not after:            Sat 11 May 2024 03:00:00 +0000
asID:                     265622
IP address blocks:        2806:3a3::/35 maxlen: 35

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910 (0x38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0317b9d1456b48aa14ec8d784f305e45943a6533
        Validity
            Not Before: May 11 03:00:00 2022 GMT
            Not After : May 11 03:00:00 2024 GMT
        Subject: CN=c2129f988d8596bca39cabe3307ca118b5f29498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:25:cb:0e:d4:3a:20:8c:36:e4:32:74:bb:
                    a9:4b:b8:a2:51:e3:cb:ac:0b:a7:0d:4f:be:19:ca:
                    46:7f:08:be:0a:ab:62:e1:d8:c9:d9:c3:b1:86:b7:
                    b5:e6:e3:96:67:27:2a:4e:8c:3a:12:ee:d8:ca:90:
                    f7:c5:73:2a:0c:ef:41:06:f3:87:67:bf:e9:7c:37:
                    c1:25:a7:47:72:31:91:d6:d9:b9:7c:f5:5e:50:be:
                    5c:b3:ce:15:2f:91:42:8e:27:03:07:86:e7:e6:b5:
                    a4:c9:ed:b2:92:3c:1c:67:9b:ee:33:66:31:dd:62:
                    6c:94:2e:82:26:42:86:19:72:48:49:c3:d6:d4:de:
                    ea:38:54:82:f4:f1:86:64:42:c5:02:10:a5:36:1b:
                    5f:e3:d9:89:36:c5:ad:e5:e2:9e:07:ea:10:45:3c:
                    7e:23:40:6c:4f:4a:55:be:d7:7c:db:2b:97:b9:1d:
                    18:4e:db:72:45:a1:03:ef:19:a2:45:0d:9f:32:40:
                    eb:a9:a8:9f:05:6f:20:23:76:63:10:44:f5:a5:26:
                    b2:45:bc:b1:3b:5c:fe:82:6a:4f:bb:f0:3f:8d:ed:
                    90:99:ee:34:11:32:02:68:d0:64:4e:26:f2:db:9a:
                    d6:3a:13:4a:44:1a:9e:12:75:5f:e2:1f:30:63:b5:
                    19:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F7:3E:F0:C0:E0:03:4B:94:E4:65:B9:B0:D2:85:D9:23:E8:1E:B3
            X509v3 Authority Key Identifier:
                keyid:F4:47:05:7F:65:3B:51:F1:25:37:4B:6E:18:CD:11:CA:E3:4C:38:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0317b9d1456b48aa14ec8d784f305e45943a6533.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/c2129f988d8596bca39cabe3307ca118b5f29498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/0317b9d1456b48aa14ec8d784f305e45943a6533.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3a3::/35

    Signature Algorithm: sha256WithRSAEncryption
         38:cb:52:35:61:e9:e7:26:27:bd:3c:cc:3a:b0:cd:ed:c4:d5:
         c2:37:68:59:48:83:54:3e:e7:bd:e1:f5:09:5a:0a:a9:05:b3:
         3e:70:24:58:e3:b3:61:18:75:3c:fb:c7:e5:8d:06:98:83:c7:
         3a:2f:bd:87:05:5f:ac:54:23:19:d5:3f:a0:bf:09:da:35:f4:
         9b:a0:b6:26:df:52:e7:5b:b3:10:de:2a:5c:53:b4:0f:d7:8f:
         b8:9f:e5:62:4d:fa:82:47:47:33:d4:45:cf:bd:c1:2c:23:cc:
         fb:eb:f6:b7:5f:87:ed:ff:2a:2b:2d:f5:87:46:be:5f:46:94:
         fc:c3:3c:31:ed:b3:36:fa:9d:19:62:d1:d9:07:9a:90:2c:4a:
         6d:13:3b:8b:6e:7f:62:a4:7f:3e:4b:46:9f:07:d6:30:5d:74:
         80:56:75:8d:41:79:82:e3:db:bb:0b:74:4f:e5:1f:dd:a2:bd:
         89:a5:05:b7:c3:53:01:9d:bd:2b:ee:28:e9:f0:cd:1d:dd:0a:
         96:ca:21:ed:12:ca:f6:47:e6:7d:f0:b9:6f:5c:f7:fc:cf:6b:
         09:18:7d:fe:85:e5:9a:a1:c7:28:36:6c:36:db:ac:8e:38:e0:
         a6:d2:a0:32:2c:d8:f8:ce:4e:12:db:a7:54:96:a0:01:e6:66:
         29:6f:ed:8f
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgICA44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDMx
N2I5ZDE0NTZiNDhhYTE0ZWM4ZDc4NGYzMDVlNDU5NDNhNjUzMzAeFw0yMjA1MTEw
MzAwMDBaFw0yNDA1MTEwMzAwMDBaMDMxMTAvBgNVBAMTKGMyMTI5Zjk4OGQ4NTk2
YmNhMzljYWJlMzMwN2NhMTE4YjVmMjk0OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5pCXLDtQ6IIw25DJ0u6lLuKJR48usC6cNT74ZykZ/CL4Kq2Lh
2MnZw7GGt7Xm45ZnJypOjDoS7tjKkPfFcyoM70EG84dnv+l8N8Elp0dyMZHW2bl8
9V5QvlyzzhUvkUKOJwMHhufmtaTJ7bKSPBxnm+4zZjHdYmyULoImQoYZckhJw9bU
3uo4VIL08YZkQsUCEKU2G1/j2Yk2xa3l4p4H6hBFPH4jQGxPSlW+13zbK5e5HRhO
23JFoQPvGaJFDZ8yQOupqJ8FbyAjdmMQRPWlJrJFvLE7XP6Cak+78D+N7ZCZ7jQR
MgJo0GROJvLbmtY6E0pEGp4SdV/iHzBjtRmtAgMBAAGjggJdMIICWTAdBgNVHQ4E
FgQUQ/c+8MDgA0uU5GW5sNKF2SPoHrMwHwYDVR0jBBgwFoAU9EcFf2U7UfElN0tu
GM0RyuNMOLkwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8wMzE3Yjlk
MTQ1NmI0OGFhMTRlYzhkNzg0ZjMwNWU0NTk0M2E2NTMzLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9jOWRkNzIzMS1hOGQ2LTRjNTEtOTQ5ZS0zMGQyYmM1
OGYwOTEvYzIxMjlmOTg4ZDg1OTZiY2EzOWNhYmUzMzA3Y2ExMThiNWYyOTQ5OC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2M5ZGQ3MjMxLWE4ZDYtNGM1MS05NDllLTMwZDJi
YzU4ZjA5MS8wMzE3YjlkMTQ1NmI0OGFhMTRlYzhkNzg0ZjMwNWU0NTk0M2E2NTMz
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAOBAIAAjAIAwYFKAYDowAwDQYJKoZIhvcNAQELBQADggEBADjLUjVh6ecmJ708
zDqwze3E1cI3aFlIg1Q+573h9QlaCqkFsz5wJFjjs2EYdTz7x+WNBpiDxzovvYcF
X6xUIxnVP6C/Cdo19JugtibfUudbsxDeKlxTtA/Xj7if5WJN+oJHRzPURc+9wSwj
zPvr9rdfh+3/Kist9YdGvl9GlPzDPDHtszb6nRli0dkHmpAsSm0TO4tuf2Kkfz5L
Rp8H1jBddIBWdY1BeYLj27sLdE/lH92ivYmlBbfDUwGdvSvuKOnwzR3dCpbKIe0S
yvZH5n3wuW9c9/zPawkYff6F5Zqhxyg2bDbbrI444KbSoDIs2PjOThLbp1SWoAHm
Zilv7Y8=
-----END CERTIFICATE-----