Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/da80ec0002dce302f17dc99b804d845a0a9b6498.roa
File:                     da80ec0002dce302f17dc99b804d845a0a9b6498.roa (raw, json)
Hash identifier:          xdXTKHnNJz3KP8SDZvil0aHIKZd2QWWz6mliOPx1kgY=
Subject key identifier:   BC:EC:CA:31:FC:4C:B0:BF:BA:0F:13:73:06:7C:98:35:1D:D2:32:2C
Certificate issuer:       /CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
Certificate serial:       168501
Authority key identifier: 0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/da80ec0002dce302f17dc99b804d845a0a9b6498.roa
Signing time:             Sat 11 Jun 2022 02:03:12 +0000
ROA not before:           Fri 10 Jun 2022 03:00:00 +0000
ROA not after:            Mon 10 Jun 2024 03:00:00 +0000
asID:                     267849
IP address blocks:        2803:ac60:3e::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1475841 (0x168501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
        Validity
            Not Before: Jun 10 03:00:00 2022 GMT
            Not After : Jun 10 03:00:00 2024 GMT
        Subject: CN=da80ec0002dce302f17dc99b804d845a0a9b6498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a1:f2:b9:5c:4a:2b:7f:ab:cb:57:be:25:d3:
                    4f:82:7e:50:f4:2c:c6:32:17:08:7c:a8:ae:31:05:
                    83:59:33:ba:7e:33:8a:0e:c9:44:26:5d:1e:3e:e2:
                    72:2a:08:38:4f:0e:4a:92:05:b0:1e:a9:b5:a3:c7:
                    8c:07:ae:2e:cc:2f:ac:d8:d9:80:10:58:c9:aa:6b:
                    50:04:a9:df:4f:45:ea:b4:c5:fe:05:f0:ac:60:bb:
                    65:9b:68:1c:9c:a8:ef:08:0b:4a:ec:5e:5f:b5:7d:
                    e3:74:d9:12:5a:92:c4:f1:b6:27:45:fb:cf:08:60:
                    5c:9d:c3:a0:8f:24:e9:de:b0:2d:9d:37:bd:2d:a4:
                    67:98:00:27:4d:77:97:b2:7e:a9:82:ee:2e:2b:59:
                    b4:56:31:26:22:ec:24:88:0e:31:45:e5:37:fe:ba:
                    5a:b7:d6:2b:0c:a5:ee:77:17:56:6c:23:9d:cb:3c:
                    c7:ed:ca:a9:15:97:02:e7:09:35:6d:32:43:a0:53:
                    c1:db:78:60:d0:62:22:7b:aa:3c:c5:85:ff:f3:31:
                    68:4d:ce:f7:7e:54:d5:9f:2f:0c:5c:6c:cd:e6:06:
                    20:c2:0a:df:9c:d0:cb:ee:70:75:9e:c6:32:41:7f:
                    00:b2:16:2e:db:6d:91:8b:1f:54:e4:a7:69:5e:b2:
                    0b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EC:CA:31:FC:4C:B0:BF:BA:0F:13:73:06:7C:98:35:1D:D2:32:2C
            X509v3 Authority Key Identifier:
                keyid:0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/da80ec0002dce302f17dc99b804d845a0a9b6498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/d53e5113cbffa42dda2928ee24c7eff1286a8644.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac60:3e::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:eb:bb:fa:78:bb:9c:7f:28:46:60:86:8a:c3:26:a6:8c:23:
         7b:aa:79:6e:67:a2:f5:72:3c:49:71:5f:fa:ff:18:e4:13:7c:
         95:45:57:2e:05:ea:83:b3:1f:7d:6a:9a:c9:5d:30:68:fe:73:
         f7:99:c6:83:2c:1a:9b:61:74:f5:e6:81:1b:54:3c:7a:c9:f0:
         35:d7:86:03:ea:a5:1f:23:ad:b1:64:a9:a2:e5:a6:8f:87:f2:
         0c:12:bd:51:bc:6f:8c:1c:6e:0f:04:b8:30:ad:f4:c5:66:d8:
         a1:5a:b6:c3:43:4a:93:93:26:3a:84:52:ba:84:09:09:83:ed:
         7a:a3:6c:48:4f:92:2d:e5:d7:31:49:15:24:8c:84:e7:4d:d4:
         7b:99:d1:61:61:92:69:16:cd:6d:ce:cf:1f:41:ae:ed:d4:e0:
         fb:9e:2c:26:98:8a:ee:72:1d:67:1a:e0:53:4c:54:cf:8d:ac:
         92:cf:29:f3:db:83:b3:4c:9b:de:88:99:7d:5a:69:21:09:25:
         bc:a1:59:a5:ed:c1:a9:d0:eb:89:59:d7:64:9d:eb:89:82:0d:
         d1:65:59:9f:11:80:f9:67:90:04:4d:ee:1c:fb:21:08:9e:be:
         4b:e0:28:d6:50:db:af:19:01:9b:5d:eb:27:b4:df:48:92:5d:
         53:70:46:c9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDFoUBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
M2U1MTEzY2JmZmE0MmRkYTI5MjhlZTI0YzdlZmYxMjg2YTg2NDQwHhcNMjIwNjEw
MDMwMDAwWhcNMjQwNjEwMDMwMDAwWjAzMTEwLwYDVQQDEyhkYTgwZWMwMDAyZGNl
MzAyZjE3ZGM5OWI4MDRkODQ1YTBhOWI2NDk4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk6HyuVxKK3+ry1e+JdNPgn5Q9CzGMhcIfKiuMQWDWTO6fjOK
DslEJl0ePuJyKgg4Tw5KkgWwHqm1o8eMB64uzC+s2NmAEFjJqmtQBKnfT0XqtMX+
BfCsYLtlm2gcnKjvCAtK7F5ftX3jdNkSWpLE8bYnRfvPCGBcncOgjyTp3rAtnTe9
LaRnmAAnTXeXsn6pgu4uK1m0VjEmIuwkiA4xReU3/rpat9YrDKXudxdWbCOdyzzH
7cqpFZcC5wk1bTJDoFPB23hg0GIie6o8xYX/8zFoTc73flTVny8MXGzN5gYgwgrf
nNDL7nB1nsYyQX8AshYu222Rix9U5KdpXrIL9wIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFLzsyjH8TLC/ug8TcwZ8mDUd0jIsMB8GA1UdIwQYMBaAFAuTS1sgOMh/+q0e
N1+EX6sugu1dMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDUzZTUx
MTNjYmZmYTQyZGRhMjkyOGVlMjRjN2VmZjEyODZhODY0NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTE0NTJiZWQtMjZhNi00Mjk4LWFjZDMtMDllNGJi
YzQ0NTQyL2RhODBlYzAwMDJkY2UzMDJmMTdkYzk5YjgwNGQ4NDVhMGE5YjY0OTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMTQ1MmJlZC0yNmE2LTQyOTgtYWNkMy0wOWU0
YmJjNDQ1NDIvZDUzZTUxMTNjYmZmYTQyZGRhMjkyOGVlMjRjN2VmZjEyODZhODY0
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDrGAAPjANBgkqhkiG9w0BAQsFAAOCAQEAX+u7+ni7nH8o
RmCGisMmpowje6p5bmei9XI8SXFf+v8Y5BN8lUVXLgXqg7MffWqayV0waP5z95nG
gywam2F09eaBG1Q8esnwNdeGA+qlHyOtsWSpouWmj4fyDBK9UbxvjBxuDwS4MK30
xWbYoVq2w0NKk5MmOoRSuoQJCYPteqNsSE+SLeXXMUkVJIyE503Ue5nRYWGSaRbN
bc7PH0Gu7dTg+54sJpiK7nIdZxrgU0xUz42sks8p89uDs0yb3oiZfVppIQklvKFZ
pe3BqdDriVnXZJ3riYIN0WVZnxGA+WeQBE3uHPshCJ6+S+Ao1lDbrxkBm13rJ7Tf
SJJdU3BGyQ==
-----END CERTIFICATE-----