Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/fc4e5fd5e2e6d1ae0edcfa5745e16b7ee539ab20.roa
File:                     fc4e5fd5e2e6d1ae0edcfa5745e16b7ee539ab20.roa (raw, json)
Hash identifier:          wc4FLm58TPG86UvUO7FQlFD3yBuM9jmQO3QFh54O2Sg=
Subject key identifier:   A1:36:C8:8B:04:46:C7:0C:CF:AB:08:81:41:B6:74:62:EA:CF:9D:17
Certificate issuer:       /CN=5c448bed8874701c9e691585bf2686e0b7a5e36e
Certificate serial:       0554B2
Authority key identifier: E9:96:69:D1:16:3E:65:7F:6D:C1:BC:F5:E5:89:67:F3:59:51:C0:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c448bed8874701c9e691585bf2686e0b7a5e36e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/fc4e5fd5e2e6d1ae0edcfa5745e16b7ee539ab20.roa
Signing time:             Wed 08 Mar 2023 00:27:13 +0000
ROA not before:           Tue 07 Mar 2023 00:24:29 +0000
ROA not after:            Sat 08 Mar 2025 00:24:29 +0000
asID:                     272812
IP address blocks:        2803:f890:1000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349362 (0x554b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c448bed8874701c9e691585bf2686e0b7a5e36e
        Validity
            Not Before: Mar  7 00:24:29 2023 GMT
            Not After : Mar  8 00:24:29 2025 GMT
        Subject: CN=fc4e5fd5e2e6d1ae0edcfa5745e16b7ee539ab20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bb:bc:cd:86:46:2e:af:a8:72:d0:18:06:dd:
                    9a:4e:08:fa:1a:33:19:b8:98:a8:df:1b:6d:d3:82:
                    85:2a:88:27:30:97:7a:20:42:1c:c9:72:f7:50:d4:
                    00:90:5f:06:1d:d3:e3:2f:d0:fa:57:25:96:ca:20:
                    8e:a9:9e:6b:71:4e:df:5c:79:79:1d:a2:74:a4:bb:
                    02:11:50:d3:d2:f9:b9:a8:2c:8d:e4:40:c4:5d:d0:
                    58:77:0a:71:b9:82:b3:39:dc:7a:37:d6:d3:67:31:
                    f0:84:50:0c:da:6b:a1:da:ae:21:5b:f0:f6:40:14:
                    16:e1:a2:f3:4a:ba:ca:5b:83:9b:52:dc:9e:7b:0c:
                    6c:1e:41:2e:3e:48:c5:48:cd:84:96:76:87:18:4e:
                    de:60:cd:9c:5b:91:43:07:ae:01:98:2d:56:e0:85:
                    bf:56:9d:04:5e:50:06:26:0b:e0:4c:b7:5a:cf:dd:
                    08:10:c5:82:b9:32:99:13:ec:56:10:ff:8b:ce:67:
                    c8:a5:eb:dd:2b:9f:9f:bd:f5:de:a4:6c:53:55:00:
                    70:80:80:61:41:a1:e7:1b:7e:8a:1c:fa:29:f5:0f:
                    1c:b7:78:32:af:8d:7c:d5:ee:0f:16:8b:c9:0e:42:
                    01:3c:1b:65:b2:07:aa:72:f0:5d:93:2b:9e:e9:19:
                    4c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:36:C8:8B:04:46:C7:0C:CF:AB:08:81:41:B6:74:62:EA:CF:9D:17
            X509v3 Authority Key Identifier:
                keyid:E9:96:69:D1:16:3E:65:7F:6D:C1:BC:F5:E5:89:67:F3:59:51:C0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c448bed8874701c9e691585bf2686e0b7a5e36e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/fc4e5fd5e2e6d1ae0edcfa5745e16b7ee539ab20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/5c448bed8874701c9e691585bf2686e0b7a5e36e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f890:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         63:ea:a0:10:d1:23:cd:7d:93:c8:ef:a2:96:57:c2:fc:89:78:
         af:30:27:c1:e3:c2:56:f3:24:22:78:9a:2e:34:ea:7c:82:de:
         fd:4c:43:8d:93:d3:76:3d:65:ff:43:66:79:82:62:14:b0:19:
         72:2c:75:d1:e7:98:b7:58:d9:54:59:65:6f:07:d3:2a:08:b4:
         42:dd:9e:0c:99:c2:5e:c0:96:4d:70:09:b4:85:3a:bc:22:bf:
         50:13:59:62:f0:92:3c:de:cc:b8:a6:60:bf:9b:4f:7a:2c:03:
         1b:3a:58:c6:fc:d3:19:02:37:14:94:4d:81:cc:a1:63:7b:14:
         45:e6:ba:00:7f:ef:3f:90:34:c6:e2:14:b6:b5:65:6d:e5:aa:
         21:25:cb:43:c8:c6:6f:c9:36:e8:3d:22:b7:4b:59:5a:60:50:
         f0:84:4a:f9:87:8b:25:4c:49:42:e4:9e:cf:46:d2:8b:8b:b8:
         d0:9c:92:22:f3:3f:02:ce:32:c6:ca:0c:fa:c3:ec:69:45:a9:
         88:de:4a:34:ef:c7:e1:95:38:1d:04:3a:72:70:dc:dc:13:e5:
         7d:e6:b7:e6:52:1a:47:9d:22:26:63:08:c3:4e:df:39:ed:5a:
         a1:19:20:d3:d2:3a:73:da:3f:e5:aa:c2:d0:7e:7b:64:bf:a3:
         49:08:16:f6
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDBVSyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVj
NDQ4YmVkODg3NDcwMWM5ZTY5MTU4NWJmMjY4NmUwYjdhNWUzNmUwHhcNMjMwMzA3
MDAyNDI5WhcNMjUwMzA4MDAyNDI5WjAzMTEwLwYDVQQDEyhmYzRlNWZkNWUyZTZk
MWFlMGVkY2ZhNTc0NWUxNmI3ZWU1MzlhYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiru8zYZGLq+octAYBt2aTgj6GjMZuJio3xtt04KFKognMJd6
IEIcyXL3UNQAkF8GHdPjL9D6VyWWyiCOqZ5rcU7fXHl5HaJ0pLsCEVDT0vm5qCyN
5EDEXdBYdwpxuYKzOdx6N9bTZzHwhFAM2muh2q4hW/D2QBQW4aLzSrrKW4ObUtye
ewxsHkEuPkjFSM2ElnaHGE7eYM2cW5FDB64BmC1W4IW/Vp0EXlAGJgvgTLdaz90I
EMWCuTKZE+xWEP+LzmfIpevdK5+fvfXepGxTVQBwgIBhQaHnG36KHPop9Q8ct3gy
r4181e4PFovJDkIBPBtlsgeqcvBdkyue6RlMiwIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFKE2yIsERscMz6sIgUG2dGLqz50XMB8GA1UdIwQYMBaAFOmWadEWPmV/bcG8
9eWJZ/NZUcBOMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWM0NDhi
ZWQ4ODc0NzAxYzllNjkxNTg1YmYyNjg2ZTBiN2E1ZTM2ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTVlY2JlN2QtNDg3ZS00ZDg0LWFjZTgtNWRkYWZi
ZjU0MWYyL2ZjNGU1ZmQ1ZTJlNmQxYWUwZWRjZmE1NzQ1ZTE2YjdlZTUzOWFiMjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNWVjYmU3ZC00ODdlLTRkODQtYWNlOC01ZGRh
ZmJmNTQxZjIvNWM0NDhiZWQ4ODc0NzAxYzllNjkxNTg1YmYyNjg2ZTBiN2E1ZTM2
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGBCgD+JAQMA0GCSqGSIb3DQEBCwUAA4IBAQBj6qAQ0SPNfZPI
76KWV8L8iXivMCfB48JW8yQieJouNOp8gt79TEONk9N2PWX/Q2Z5gmIUsBlyLHXR
55i3WNlUWWVvB9MqCLRC3Z4MmcJewJZNcAm0hTq8Ir9QE1li8JI83sy4pmC/m096
LAMbOljG/NMZAjcUlE2BzKFjexRF5roAf+8/kDTG4hS2tWVt5aohJctDyMZvyTbo
PSK3S1laYFDwhEr5h4slTElC5J7PRtKLi7jQnJIi8z8CzjLGygz6w+xpRamI3ko0
78fhlTgdBDpycNzcE+V95rfmUhpHnSImYwjDTt857VqhGSDT0jpz2j/lqsLQfntk
v6NJCBb2
-----END CERTIFICATE-----