Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/d1266b9f9ab4a21c845352708c5659ed71f81d7e.roa
File:                     d1266b9f9ab4a21c845352708c5659ed71f81d7e.roa (raw, json)
Hash identifier:          z5kZDERIsjT+n6XRucS2IxvAWSeXWJNdNrPIpxUCtR8=
Subject key identifier:   A0:6B:14:20:EB:9F:BB:77:9D:3F:41:FA:78:4E:8F:32:BF:CC:49:50
Certificate issuer:       /CN=2ae468b8299e75fa14ef96ff11d36d88a9ac22a1
Certificate serial:       1A00F3
Authority key identifier: 93:A1:D3:C1:5F:09:8E:01:D8:F9:B7:9C:0C:87:E7:E9:57:E9:82:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/d1266b9f9ab4a21c845352708c5659ed71f81d7e.roa
Signing time:             Fri 01 Jul 2022 22:19:33 +0000
ROA not before:           Fri 01 Jul 2022 03:00:00 +0000
ROA not after:            Mon 01 Jul 2024 03:00:00 +0000
asID:                     265824
IP address blocks:        2803:d420::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1704179 (0x1a00f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ae468b8299e75fa14ef96ff11d36d88a9ac22a1
        Validity
            Not Before: Jul  1 03:00:00 2022 GMT
            Not After : Jul  1 03:00:00 2024 GMT
        Subject: CN=d1266b9f9ab4a21c845352708c5659ed71f81d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2d:5a:3f:e9:64:50:7a:d3:bf:c1:2d:0b:81:
                    3d:30:7b:b8:c9:6c:4b:09:f0:58:cf:5c:dc:63:cf:
                    e1:6a:24:b9:15:5f:78:ed:52:00:9f:bd:e6:9d:7c:
                    4a:25:0a:4a:51:04:8c:02:ba:35:94:d6:be:87:a1:
                    1b:7e:ea:f6:21:a1:17:3f:25:84:19:ff:b6:07:0e:
                    b5:e8:86:5f:5f:d0:da:ff:ba:d5:a8:ee:bd:db:4c:
                    ed:50:bf:f0:30:e3:71:1b:da:0a:36:79:8d:09:41:
                    61:a4:4c:5c:ba:c2:96:4d:a4:cd:bc:92:c4:26:7b:
                    0e:ee:7d:8a:23:45:32:83:08:33:89:d0:1a:16:e3:
                    47:ec:d0:ff:b1:1c:71:33:98:ea:28:9b:20:6f:af:
                    cb:56:54:57:8d:89:ef:3c:88:03:e7:09:91:0c:79:
                    79:9b:d1:d3:ff:7f:a0:6e:af:b2:8f:7f:d5:91:52:
                    98:70:35:ef:3f:fc:1b:5a:78:0c:3b:d8:dc:c8:38:
                    14:21:d4:f7:6a:4f:d3:07:f0:7c:85:03:cf:02:db:
                    86:8c:c8:97:90:12:60:19:18:14:e0:dc:97:18:c1:
                    46:9e:52:81:05:06:e5:38:8e:74:5f:7e:50:8a:fd:
                    b5:76:5d:f9:f5:dd:9b:4f:d6:3f:4f:31:e0:60:27:
                    18:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6B:14:20:EB:9F:BB:77:9D:3F:41:FA:78:4E:8F:32:BF:CC:49:50
            X509v3 Authority Key Identifier:
                keyid:93:A1:D3:C1:5F:09:8E:01:D8:F9:B7:9C:0C:87:E7:E9:57:E9:82:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/d1266b9f9ab4a21c845352708c5659ed71f81d7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d420::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:e0:5d:fc:29:31:6d:9f:bc:49:fe:6f:05:fe:f7:05:1a:13:
         fb:f1:62:eb:96:cc:8c:cc:db:15:3d:2c:8b:18:65:32:d6:aa:
         5c:f5:a0:7a:94:5c:16:99:5a:eb:db:be:7d:9b:fe:32:0f:31:
         cc:07:7e:72:29:69:3d:2a:12:fb:97:84:0e:ec:1b:82:44:01:
         06:4b:7c:d8:39:49:f4:78:4e:01:65:0b:cd:e0:ab:01:fb:91:
         e2:68:bd:f4:80:6c:9b:97:84:3b:7a:30:c8:45:db:de:53:df:
         58:3c:a5:e5:fb:c7:53:c1:de:81:28:19:f4:96:ac:b1:d4:cb:
         91:48:70:e7:5a:21:af:04:ae:4b:ff:9b:c6:5c:86:12:d9:85:
         2d:4e:07:a3:d1:e2:12:42:c8:bc:41:fd:b0:71:ba:a4:e5:c8:
         1c:0e:ca:43:ac:d3:9b:e9:6f:3f:3e:01:a9:a2:76:3b:b9:46:
         95:6f:22:43:49:ad:59:90:a9:5e:a2:98:9b:b1:15:e7:af:bc:
         54:67:bf:28:c7:46:30:0a:4d:cf:d4:4a:32:21:3d:23:c8:57:
         73:2a:18:3f:a6:97:06:69:1e:92:70:21:58:0c:c0:02:3f:38:
         9e:2b:2f:4a:52:6c:db:56:f8:dd:e4:46:66:17:b0:8e:0f:83:
         d4:aa:3e:68
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDGgDzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh
ZTQ2OGI4Mjk5ZTc1ZmExNGVmOTZmZjExZDM2ZDg4YTlhYzIyYTEwHhcNMjIwNzAx
MDMwMDAwWhcNMjQwNzAxMDMwMDAwWjAzMTEwLwYDVQQDEyhkMTI2NmI5ZjlhYjRh
MjFjODQ1MzUyNzA4YzU2NTllZDcxZjgxZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhC1aP+lkUHrTv8EtC4E9MHu4yWxLCfBYz1zcY8/haiS5FV94
7VIAn73mnXxKJQpKUQSMAro1lNa+h6Ebfur2IaEXPyWEGf+2Bw616IZfX9Da/7rV
qO6920ztUL/wMONxG9oKNnmNCUFhpExcusKWTaTNvJLEJnsO7n2KI0UygwgzidAa
FuNH7ND/sRxxM5jqKJsgb6/LVlRXjYnvPIgD5wmRDHl5m9HT/3+gbq+yj3/VkVKY
cDXvP/wbWngMO9jcyDgUIdT3ak/TB/B8hQPPAtuGjMiXkBJgGRgU4NyXGMFGnlKB
BQblOI50X35Qiv21dl359d2bT9Y/TzHgYCcYuwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFKBrFCDrn7t3nT9B+nhOjzK/zElQMB8GA1UdIwQYMBaAFJOh08FfCY4B2Pm3
nAyH5+lX6YKhMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmFlNDY4
YjgyOTllNzVmYTE0ZWY5NmZmMTFkMzZkODhhOWFjMjJhMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTYwYTJkMDgtOTdiMS00OTY2LTllNzYtZjgxZDYz
OWNmMGI4L2QxMjY2YjlmOWFiNGEyMWM4NDUzNTI3MDhjNTY1OWVkNzFmODFkN2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNjBhMmQwOC05N2IxLTQ5NjYtOWU3Ni1mODFk
NjM5Y2YwYjgvMmFlNDY4YjgyOTllNzVmYTE0ZWY5NmZmMTFkMzZkODhhOWFjMjJh
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD1CAwDQYJKoZIhvcNAQELBQADggEBACrgXfwpMW2fvEn+
bwX+9wUaE/vxYuuWzIzM2xU9LIsYZTLWqlz1oHqUXBaZWuvbvn2b/jIPMcwHfnIp
aT0qEvuXhA7sG4JEAQZLfNg5SfR4TgFlC83gqwH7keJovfSAbJuXhDt6MMhF295T
31g8peX7x1PB3oEoGfSWrLHUy5FIcOdaIa8Erkv/m8ZchhLZhS1OB6PR4hJCyLxB
/bBxuqTlyBwOykOs05vpbz8+Aamidju5RpVvIkNJrVmQqV6imJuxFeevvFRnvyjH
RjAKTc/USjIhPSPIV3MqGD+mlwZpHpJwIVgMwAI/OJ4rL0pSbNtW+N3kRmYXsI4P
g9SqPmg=
-----END CERTIFICATE-----