Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/830b0914d57d90c4042f0971bd86b4913cda5c04.roa
File:                     830b0914d57d90c4042f0971bd86b4913cda5c04.roa (raw, json)
Hash identifier:          3L2zcW+v4SBCuFPdwjsMsXf95JZg6ACGN/oEuSBQUN0=
Subject key identifier:   9C:8E:86:93:94:28:0B:C6:41:EA:1B:66:00:B1:47:59:ED:68:2D:4A
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       1377C4
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/830b0914d57d90c4042f0971bd86b4913cda5c04.roa
Signing time:             Thu 14 Oct 2021 13:46:02 +0000
ROA not before:           Thu 14 Oct 2021 03:00:00 +0000
ROA not after:            Sat 14 Oct 2023 03:00:00 +0000
asID:                     28075
IP address blocks:        2803:6603:c000::/35 maxlen: 35

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1275844 (0x1377c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: Oct 14 03:00:00 2021 GMT
            Not After : Oct 14 03:00:00 2023 GMT
        Subject: CN=830b0914d57d90c4042f0971bd86b4913cda5c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d5:b7:12:e1:00:2f:c5:11:d6:f7:08:fe:b2:
                    0f:ad:3d:f3:3a:e2:22:ea:5c:97:b4:88:2b:cc:a6:
                    fa:89:80:f9:34:67:4f:49:86:a6:88:b3:97:ab:4e:
                    66:e8:75:06:06:0b:77:fe:a8:fa:05:e3:9e:0b:47:
                    9e:d9:f2:e0:b6:4b:eb:ce:71:1b:7a:55:b6:e7:3b:
                    a1:fd:67:83:4f:a5:32:3d:24:96:6a:86:65:b1:a1:
                    6b:58:2f:1a:de:23:28:a7:b7:a9:ab:d1:33:21:d8:
                    06:72:14:6c:19:e1:e9:81:8b:4b:75:08:f4:8b:8b:
                    9a:b0:4f:4a:e4:c1:fa:c1:7d:1d:8d:d7:15:cd:60:
                    74:8c:d2:ac:fe:5a:d0:7f:a1:f6:88:fa:f5:c4:a8:
                    a1:10:c3:20:00:0b:9f:5f:79:d7:13:66:52:1b:c5:
                    78:19:10:1a:f8:aa:09:f6:54:2c:a7:fc:00:94:db:
                    2a:5b:da:91:c5:f2:01:2a:84:cf:b3:bd:f9:db:dc:
                    4b:5a:91:b7:a6:7a:64:f2:47:40:18:e1:a9:58:b3:
                    ac:76:c0:6e:ac:1d:d8:d9:ab:d4:80:4d:ae:12:f2:
                    3a:fd:99:aa:78:77:97:c4:c8:7b:00:a6:b5:0a:cd:
                    1c:0f:0f:1c:c3:0e:2b:45:6a:31:11:da:2b:13:8b:
                    02:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8E:86:93:94:28:0B:C6:41:EA:1B:66:00:B1:47:59:ED:68:2D:4A
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/830b0914d57d90c4042f0971bd86b4913cda5c04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6603:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         7b:3a:d1:82:dc:ef:01:a8:76:ba:63:96:06:43:46:81:3d:bb:
         a7:c8:4c:14:49:ce:11:36:39:3c:02:bf:b9:83:f4:70:d9:bd:
         61:b8:e2:b8:a8:89:22:88:2b:b4:07:b0:d8:28:de:c0:68:af:
         82:0d:e2:19:a4:2d:22:af:ce:23:ce:db:99:3d:d7:c3:33:fe:
         d8:d0:b4:5e:12:8b:d5:ae:ff:0c:1a:ab:af:29:b7:99:e2:ee:
         0c:da:7e:7c:f4:e2:7e:46:42:dd:57:87:03:e4:73:c8:43:ed:
         60:34:95:3d:b3:db:64:bf:ae:37:fc:57:d1:8e:1f:9d:e3:d5:
         0d:7d:f8:b8:e0:44:2b:53:fd:59:ba:a0:3f:a7:b2:c9:2a:91:
         a6:4b:b2:7c:c4:05:9d:48:28:30:13:24:83:2b:41:a9:72:5c:
         89:7b:72:b6:1b:d4:9b:0d:b3:2b:38:0a:ac:c8:31:ab:9a:d7:
         fa:4c:35:76:6e:0a:85:4b:64:3a:a2:0e:2a:65:20:1c:01:7c:
         57:12:b2:9d:22:4a:fb:0c:b8:55:0f:34:ae:f7:49:83:f9:35:
         e1:f3:c7:27:cb:e0:ce:d6:43:13:62:b4:7c:f7:21:4f:d8:3b:
         3d:14:a5:63:7c:b8:ee:4f:1e:ad:16:58:a5:5f:cb:cc:51:ab:
         15:86:74:69
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDE3fEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg4
ZDNiMzhmYjliZmNlZDU3YzZhZDVlYjE2MGMxMzBhY2YzMjY0MWMwHhcNMjExMDE0
MDMwMDAwWhcNMjMxMDE0MDMwMDAwWjAzMTEwLwYDVQQDEyg4MzBiMDkxNGQ1N2Q5
MGM0MDQyZjA5NzFiZDg2YjQ5MTNjZGE1YzA0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp9W3EuEAL8UR1vcI/rIPrT3zOuIi6lyXtIgrzKb6iYD5NGdP
SYamiLOXq05m6HUGBgt3/qj6BeOeC0ee2fLgtkvrznEbelW25zuh/WeDT6UyPSSW
aoZlsaFrWC8a3iMop7epq9EzIdgGchRsGeHpgYtLdQj0i4uasE9K5MH6wX0djdcV
zWB0jNKs/lrQf6H2iPr1xKihEMMgAAufX3nXE2ZSG8V4GRAa+KoJ9lQsp/wAlNsq
W9qRxfIBKoTPs73529xLWpG3pnpk8kdAGOGpWLOsdsBurB3Y2avUgE2uEvI6/Zmq
eHeXxMh7AKa1Cs0cDw8cww4rRWoxEdorE4sCcwIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFJyOhpOUKAvGQeobZgCxR1ntaC1KMB8GA1UdIwQYMBaAFPsbKsFJ3WU0RJWG
NPmzt6e3aen4MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODhkM2Iz
OGZiOWJmY2VkNTdjNmFkNWViMTYwYzEzMGFjZjMyNjQxYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjAxNWM0NmItMTU0MC00OWViLWI5NjktMGYzYzQw
ZTAwMTQwLzgzMGIwOTE0ZDU3ZDkwYzQwNDJmMDk3MWJkODZiNDkxM2NkYTVjMDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMDE1YzQ2Yi0xNTQwLTQ5ZWItYjk2OS0wZjNj
NDBlMDAxNDAvODhkM2IzOGZiOWJmY2VkNTdjNmFkNWViMTYwYzEzMGFjZjMyNjQx
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGBSgDZgPAMA0GCSqGSIb3DQEBCwUAA4IBAQB7OtGC3O8BqHa6
Y5YGQ0aBPbunyEwUSc4RNjk8Ar+5g/Rw2b1huOK4qIkiiCu0B7DYKN7AaK+CDeIZ
pC0ir84jztuZPdfDM/7Y0LReEovVrv8MGquvKbeZ4u4M2n589OJ+RkLdV4cD5HPI
Q+1gNJU9s9tkv643/FfRjh+d49UNffi44EQrU/1ZuqA/p7LJKpGmS7J8xAWdSCgw
EySDK0GpclyJe3K2G9SbDbMrOAqsyDGrmtf6TDV2bgqFS2Q6og4qZSAcAXxXErKd
Ikr7DLhVDzSu90mD+TXh88cny+DO1kMTYrR89yFP2Ds9FKVjfLjuTx6tFlilX8vM
UasVhnRp
-----END CERTIFICATE-----