Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/c3d33fec638c09fdb70d842cc2c8a7e6514d5833.roa
File:                     c3d33fec638c09fdb70d842cc2c8a7e6514d5833.roa (raw, json)
Hash identifier:          30ZiL3Shv+R4WkWislwqTp+w+568W/0xDJDF04R/zwo=
Subject key identifier:   15:DA:6A:0E:36:2A:E5:C6:70:98:72:D0:5A:25:A4:51:67:52:FD:1F
Certificate issuer:       /CN=16b44d2a0bda515371a4ded869185f017218c9f2
Certificate serial:       13161C
Authority key identifier: 8B:D4:A3:27:C7:20:6E:AB:E2:43:83:6B:43:71:C4:D1:F1:5F:A1:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16b44d2a0bda515371a4ded869185f017218c9f2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/c3d33fec638c09fdb70d842cc2c8a7e6514d5833.roa
Signing time:             Tue 09 Nov 2021 14:04:29 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     271970
IP address blocks:        2800:d00::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1250844 (0x13161c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b44d2a0bda515371a4ded869185f017218c9f2
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=c3d33fec638c09fdb70d842cc2c8a7e6514d5833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:5f:6a:ac:ae:f7:9c:71:d5:6d:2b:3d:d6:
                    16:37:8a:ad:d2:a1:06:f2:2b:66:1d:45:ef:e2:dd:
                    c3:fc:d6:26:dd:6e:81:be:73:79:b8:31:86:37:c8:
                    66:58:f7:1b:d7:19:58:8d:6c:10:03:ef:51:3a:31:
                    16:39:2a:28:3c:7f:22:b0:68:ba:25:af:a9:23:83:
                    93:0d:36:34:c6:ab:9b:5a:99:25:28:82:cd:25:7a:
                    90:37:4e:ea:98:b1:ae:ab:d6:00:32:7f:7a:ba:ee:
                    c6:2b:5e:5b:44:d8:69:45:0c:a2:6f:87:2a:ae:8c:
                    b2:28:19:57:49:b0:f4:c0:f1:be:8a:3b:5c:6a:1b:
                    41:1b:cf:55:17:ce:e6:a9:40:66:99:67:bc:a4:d8:
                    34:0c:fd:12:e8:8f:a7:50:8d:cf:27:6c:4e:ba:d1:
                    8e:0a:4b:61:ff:06:44:2b:28:e3:00:aa:b3:3a:27:
                    af:0a:1b:89:9b:d5:b4:07:8a:52:5d:20:2e:d8:21:
                    44:3d:46:9c:1a:1c:1a:99:8f:b3:60:be:e4:0f:9a:
                    94:3e:8d:f8:6b:74:82:e5:7e:16:bc:f7:14:0f:c0:
                    54:d7:96:fe:ac:b3:97:ce:50:9e:94:de:4e:a5:43:
                    7c:dd:44:ab:b1:e7:e8:03:4c:d8:b9:ff:d5:b6:1b:
                    c6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DA:6A:0E:36:2A:E5:C6:70:98:72:D0:5A:25:A4:51:67:52:FD:1F
            X509v3 Authority Key Identifier:
                keyid:8B:D4:A3:27:C7:20:6E:AB:E2:43:83:6B:43:71:C4:D1:F1:5F:A1:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16b44d2a0bda515371a4ded869185f017218c9f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/c3d33fec638c09fdb70d842cc2c8a7e6514d5833.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/16b44d2a0bda515371a4ded869185f017218c9f2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:b5:b0:c2:6b:72:f0:9b:d5:34:2f:d2:6f:ab:b2:56:11:19:
         93:6b:cb:5a:4a:4d:cb:d0:b3:4e:3f:6c:70:90:ab:17:bd:47:
         31:df:e4:99:1a:86:29:de:b4:3f:56:6b:4c:6e:db:bd:e1:d8:
         f0:df:5f:da:25:b0:4c:fc:a4:26:e4:7f:03:05:cd:e5:80:65:
         90:53:e4:d4:e0:a8:ab:33:f8:3e:63:f8:9d:39:db:5b:a1:29:
         94:85:d6:23:34:70:c3:e7:19:c6:f0:6d:10:a7:03:42:ec:c0:
         a5:9d:29:46:c0:67:6b:9e:05:17:6a:b8:07:39:4d:c7:73:5a:
         78:84:4b:6c:bb:1f:1d:bc:be:90:e1:aa:7c:6b:cb:2d:1e:22:
         25:15:87:6a:f6:7f:c5:fa:13:90:88:d8:93:37:c8:b5:62:2f:
         c9:28:bf:7a:8c:de:e1:9a:de:a6:90:60:05:1c:7a:a7:bd:36:
         d2:b4:b4:5e:7d:6b:2b:c0:ac:fa:1e:4d:8d:31:98:4f:39:7e:
         93:c7:44:ae:64:b8:ba:70:68:9a:ea:c9:5b:5f:79:f7:1e:49:
         a9:60:8e:d0:07:5b:df:a0:1a:a4:01:11:78:af:43:fd:a7:9b:
         88:b9:eb:a8:de:44:dc:41:04:93:b3:7c:76:4e:c5:77:a0:46:
         82:a3:3d:f0
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDExYcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE2
YjQ0ZDJhMGJkYTUxNTM3MWE0ZGVkODY5MTg1ZjAxNzIxOGM5ZjIwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhjM2QzM2ZlYzYzOGMw
OWZkYjcwZDg0MmNjMmM4YTdlNjUxNGQ1ODMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwp1faqyu95xx1W0rPdYWN4qt0qEG8itmHUXv4t3D/NYm3W6B
vnN5uDGGN8hmWPcb1xlYjWwQA+9ROjEWOSooPH8isGi6Ja+pI4OTDTY0xqubWpkl
KILNJXqQN07qmLGuq9YAMn96uu7GK15bRNhpRQyib4cqroyyKBlXSbD0wPG+ijtc
ahtBG89VF87mqUBmmWe8pNg0DP0S6I+nUI3PJ2xOutGOCkth/wZEKyjjAKqzOiev
ChuJm9W0B4pSXSAu2CFEPUacGhwamY+zYL7kD5qUPo34a3SC5X4WvPcUD8BU15b+
rLOXzlCelN5OpUN83USrsefoA0zYuf/VthvGEwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFBXaag42KuXGcJhy0FolpFFnUv0fMB8GA1UdIwQYMBaAFIvUoyfHIG6r4kOD
a0NxxNHxX6EkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTZiNDRk
MmEwYmRhNTE1MzcxYTRkZWQ4NjkxODVmMDE3MjE4YzlmMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmFhOGE1MWQtZjllYy00ZDEwLWFmNmEtOTM0YmU0
NTU2ZTVlL2MzZDMzZmVjNjM4YzA5ZmRiNzBkODQyY2MyYzhhN2U2NTE0ZDU4MzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mYWE4YTUxZC1mOWVjLTRkMTAtYWY2YS05MzRi
ZTQ1NTZlNWUvMTZiNDRkMmEwYmRhNTE1MzcxYTRkZWQ4NjkxODVmMDE3MjE4Yzlm
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgADQAwDQYJKoZIhvcNAQELBQADggEBACK1sMJrcvCb1TQv
0m+rslYRGZNry1pKTcvQs04/bHCQqxe9RzHf5JkahinetD9Wa0xu273h2PDfX9ol
sEz8pCbkfwMFzeWAZZBT5NTgqKsz+D5j+J0521uhKZSF1iM0cMPnGcbwbRCnA0Ls
wKWdKUbAZ2ueBRdquAc5TcdzWniES2y7Hx28vpDhqnxryy0eIiUVh2r2f8X6E5CI
2JM3yLViL8kov3qM3uGa3qaQYAUceqe9NtK0tF59ayvArPoeTY0xmE85fpPHRK5k
uLpwaJrqyVtfefceSalgjtAHW9+gGqQBEXivQ/2nm4i566jeRNxBBJOzfHZOxXeg
RoKjPfA=
-----END CERTIFICATE-----