Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db06222b-ab13-47a4-9055-54e3a924ed0b/94b68e55baf09f5ac7fd55b9fbaa259acb08ab90.roa
File:                     94b68e55baf09f5ac7fd55b9fbaa259acb08ab90.roa (raw, json)
Hash identifier:          spGVJHqtAHH0kIdGvfGWl03hPKokwMU+V6WsqE2LvNY=
Subject key identifier:   E6:2B:CA:1A:3E:AC:B7:A8:DC:30:01:92:EA:C2:6E:56:02:62:52:8B
Certificate issuer:       /CN=7db044f18ec6db172c49aa346f3a11d1fedc19fc
Certificate serial:       0B91DC
Authority key identifier: 61:97:7C:68:FA:B0:B6:96:7A:65:24:9C:8C:AD:EE:5F:A4:79:34:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7db044f18ec6db172c49aa346f3a11d1fedc19fc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db06222b-ab13-47a4-9055-54e3a924ed0b/94b68e55baf09f5ac7fd55b9fbaa259acb08ab90.roa
Signing time:             Thu 10 Jun 2021 15:16:34 +0000
ROA not before:           Thu 10 Jun 2021 03:00:00 +0000
ROA not after:            Sat 10 Jun 2023 03:00:00 +0000
asID:                     19429
IP address blocks:        2801:1aa::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 758236 (0xb91dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7db044f18ec6db172c49aa346f3a11d1fedc19fc
        Validity
            Not Before: Jun 10 03:00:00 2021 GMT
            Not After : Jun 10 03:00:00 2023 GMT
        Subject: CN=94b68e55baf09f5ac7fd55b9fbaa259acb08ab90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:a0:71:8a:e9:23:4c:d9:bf:b0:28:72:39:
                    db:43:8e:ca:65:8a:ef:cc:a0:3b:d2:ff:d7:f9:f3:
                    59:b0:44:fa:af:a6:68:92:60:d8:83:7b:db:7f:ce:
                    66:72:94:b6:a3:6b:7d:aa:2e:c4:10:07:a1:24:31:
                    9a:5d:91:fc:f5:2a:ea:a5:22:2d:72:5a:51:b7:51:
                    f6:06:6c:c2:25:f2:87:ae:a3:46:d3:4f:9b:a0:71:
                    11:e8:1f:5c:43:ee:6f:8e:8d:ce:07:15:ee:14:79:
                    71:cc:ae:b1:c4:25:5a:b4:d2:b3:47:6f:5b:27:4f:
                    02:2a:2c:d6:5a:6a:83:c2:b8:29:e4:b1:22:b1:49:
                    4e:de:fd:6e:96:ff:64:16:85:07:a8:08:a8:00:dc:
                    7a:85:62:7f:09:c3:f3:ce:ce:e8:ed:dd:7e:31:69:
                    74:07:8b:e2:1a:c1:df:6e:d6:25:31:0e:24:5c:64:
                    15:ff:68:40:a5:62:01:e8:a7:9b:35:e5:eb:5d:48:
                    13:ac:ab:fc:bd:2a:55:50:76:87:b7:81:fb:98:ab:
                    70:e0:f2:2d:9e:08:8a:28:26:6f:96:c4:90:b1:42:
                    60:4e:60:fc:75:86:b7:d0:81:68:40:4f:d2:e5:41:
                    d8:94:0b:ec:e6:47:5e:67:76:23:77:a3:6d:5a:8d:
                    2e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2B:CA:1A:3E:AC:B7:A8:DC:30:01:92:EA:C2:6E:56:02:62:52:8B
            X509v3 Authority Key Identifier:
                keyid:61:97:7C:68:FA:B0:B6:96:7A:65:24:9C:8C:AD:EE:5F:A4:79:34:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7db044f18ec6db172c49aa346f3a11d1fedc19fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db06222b-ab13-47a4-9055-54e3a924ed0b/94b68e55baf09f5ac7fd55b9fbaa259acb08ab90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db06222b-ab13-47a4-9055-54e3a924ed0b/7db044f18ec6db172c49aa346f3a11d1fedc19fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1aa::/44

    Signature Algorithm: sha256WithRSAEncryption
         80:8e:a1:57:14:aa:3a:60:b5:7d:76:f6:b9:11:4d:d5:d2:43:
         5b:97:41:6f:86:9e:92:8c:12:ae:87:d2:e1:93:77:d0:c2:b6:
         7e:3f:08:49:d4:24:ef:8b:e2:d6:d5:1d:54:bf:e5:d3:29:7c:
         3b:8a:71:a1:8e:be:65:7a:e9:cf:57:95:d4:92:24:aa:b1:09:
         ff:49:f8:58:f8:73:6a:34:34:c9:89:09:0e:05:93:3d:84:2f:
         71:fc:9e:b3:de:79:22:ae:21:44:cf:9b:b7:bf:95:31:6c:d6:
         74:ae:15:6d:c9:e2:80:79:c4:3c:45:99:9e:3c:1a:a7:74:c2:
         6c:cb:e5:3d:8a:65:51:ff:75:c5:15:c2:e7:0d:5c:8e:c3:a8:
         f1:14:0b:56:2d:c4:de:00:fa:e6:02:bf:cb:80:90:26:67:4c:
         81:90:72:bf:35:f9:14:07:ff:6c:6e:ea:3b:0c:b1:c5:40:89:
         b6:20:c6:c1:6a:4a:eb:e9:9f:ad:29:c3:2f:d0:82:80:fb:33:
         52:d1:da:9c:aa:10:86:5d:c2:19:3b:aa:7c:1e:f1:6a:3a:55:
         91:c9:4d:40:29:35:ef:98:9b:f4:8f:f6:21:65:b3:66:41:77:
         19:03:a8:0a:35:e3:61:88:3d:e2:69:ad:f0:3c:b3:ae:1b:b3:
         68:65:f1:5f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDC5HcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdk
YjA0NGYxOGVjNmRiMTcyYzQ5YWEzNDZmM2ExMWQxZmVkYzE5ZmMwHhcNMjEwNjEw
MDMwMDAwWhcNMjMwNjEwMDMwMDAwWjAzMTEwLwYDVQQDEyg5NGI2OGU1NWJhZjA5
ZjVhYzdmZDU1YjlmYmFhMjU5YWNiMDhhYjkwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqVugcYrpI0zZv7AocjnbQ47KZYrvzKA70v/X+fNZsET6r6Zo
kmDYg3vbf85mcpS2o2t9qi7EEAehJDGaXZH89SrqpSItclpRt1H2BmzCJfKHrqNG
00+boHER6B9cQ+5vjo3OBxXuFHlxzK6xxCVatNKzR29bJ08CKizWWmqDwrgp5LEi
sUlO3v1ulv9kFoUHqAioANx6hWJ/CcPzzs7o7d1+MWl0B4viGsHfbtYlMQ4kXGQV
/2hApWIB6KebNeXrXUgTrKv8vSpVUHaHt4H7mKtw4PItngiKKCZvlsSQsUJgTmD8
dYa30IFoQE/S5UHYlAvs5kdeZ3Yjd6NtWo0uLQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFOYryho+rLeo3DABkurCblYCYlKLMB8GA1UdIwQYMBaAFGGXfGj6sLaWemUk
nIyt7l+keTTvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2RiMDQ0
ZjE4ZWM2ZGIxNzJjNDlhYTM0NmYzYTExZDFmZWRjMTlmYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGIwNjIyMmItYWIxMy00N2E0LTkwNTUtNTRlM2E5
MjRlZDBiLzk0YjY4ZTU1YmFmMDlmNWFjN2ZkNTViOWZiYWEyNTlhY2IwOGFiOTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYjA2MjIyYi1hYjEzLTQ3YTQtOTA1NS01NGUz
YTkyNGVkMGIvN2RiMDQ0ZjE4ZWM2ZGIxNzJjNDlhYTM0NmYzYTExZDFmZWRjMTlm
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHBCgBAaoAADANBgkqhkiG9w0BAQsFAAOCAQEAgI6hVxSqOmC1
fXb2uRFN1dJDW5dBb4aekowSrofS4ZN30MK2fj8ISdQk74vi1tUdVL/l0yl8O4px
oY6+ZXrpz1eV1JIkqrEJ/0n4WPhzajQ0yYkJDgWTPYQvcfyes955Iq4hRM+bt7+V
MWzWdK4VbcnigHnEPEWZnjwap3TCbMvlPYplUf91xRXC5w1cjsOo8RQLVi3E3gD6
5gK/y4CQJmdMgZByvzX5FAf/bG7qOwyxxUCJtiDGwWpK6+mfrSnDL9CCgPszUtHa
nKoQhl3CGTuqfB7xajpVkclNQCk175ib9I/2IWWzZkF3GQOoCjXjYYg94mmt8Dyz
rhuzaGXxXw==
-----END CERTIFICATE-----