Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/8ad86e842233d7a5de4a800b631fc53a8e3bbbf3.roa
File:                     8ad86e842233d7a5de4a800b631fc53a8e3bbbf3.roa (raw, json)
Hash identifier:          9SRgBK8y0BmxjYDy8WSmxbR8zVByDEl+xh7Z1P7oScs=
Subject key identifier:   C3:FA:43:F0:66:A4:66:F7:E3:58:0B:62:40:81:90:68:D1:7D:DC:EC
Certificate issuer:       /CN=5acbc1040078c2c220281be4e4aebb06b6460703
Certificate serial:       0EFFC1
Authority key identifier: 22:BD:67:2F:43:87:2D:5D:46:CE:C3:29:6D:5C:C5:C6:C1:78:24:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5acbc1040078c2c220281be4e4aebb06b6460703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/8ad86e842233d7a5de4a800b631fc53a8e3bbbf3.roa
Signing time:             Tue 13 Dec 2022 14:34:56 +0000
ROA not before:           Mon 12 Dec 2022 14:34:20 +0000
ROA not after:            Fri 13 Dec 2024 14:34:20 +0000
asID:                     262589
IP address blocks:        2801:1e:6800::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 13 Feb 2024 20:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982977 (0xeffc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5acbc1040078c2c220281be4e4aebb06b6460703
        Validity
            Not Before: Dec 12 14:34:20 2022 GMT
            Not After : Dec 13 14:34:20 2024 GMT
        Subject: CN=8ad86e842233d7a5de4a800b631fc53a8e3bbbf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:63:bc:ee:8c:ef:70:d1:ea:ee:06:da:5c:
                    a3:f3:62:96:cb:59:c0:ce:98:a7:70:54:08:6e:5a:
                    15:d9:85:a3:c9:3a:79:e7:63:e8:bb:19:b0:69:30:
                    55:dd:21:b3:b3:aa:e9:64:54:4d:bd:08:7a:8b:c6:
                    19:3c:aa:88:13:56:1b:68:e4:43:a9:7f:f3:81:b4:
                    1e:76:7d:14:c3:43:0f:5c:8f:99:78:a4:48:b2:b0:
                    d5:41:19:c9:97:88:2c:39:6c:19:de:27:a9:43:57:
                    fa:95:96:31:66:64:0a:86:2a:37:cd:8e:2a:c7:02:
                    08:4d:f7:e4:13:d5:ec:45:4b:c1:b3:1c:5e:5b:b7:
                    78:2c:a5:16:d7:f1:af:4c:5c:e0:43:58:1c:18:dd:
                    78:81:5b:0c:d6:84:6d:25:f8:04:b5:fd:fe:62:ae:
                    81:61:66:43:1d:5e:52:47:b4:9b:24:89:ab:ea:9a:
                    48:43:40:69:51:15:c0:74:86:53:cb:e5:47:b2:79:
                    a0:a0:96:3e:46:97:a1:7d:e5:54:ca:df:50:66:c1:
                    cf:4e:ac:30:fe:f9:61:3d:53:09:6d:e6:11:d4:c4:
                    13:7e:50:f1:41:b1:4c:53:b2:88:8e:82:c0:76:9e:
                    37:9d:4f:d6:99:2a:b5:b8:2d:e3:06:e2:89:92:6f:
                    c7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FA:43:F0:66:A4:66:F7:E3:58:0B:62:40:81:90:68:D1:7D:DC:EC
            X509v3 Authority Key Identifier:
                keyid:22:BD:67:2F:43:87:2D:5D:46:CE:C3:29:6D:5C:C5:C6:C1:78:24:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5acbc1040078c2c220281be4e4aebb06b6460703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/8ad86e842233d7a5de4a800b631fc53a8e3bbbf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/5acbc1040078c2c220281be4e4aebb06b6460703.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:d0:33:3c:8d:a5:2f:a6:9c:b4:94:d4:e5:32:37:32:0b:db:
         cb:95:f3:54:06:4e:9f:0d:b6:f8:9e:54:e0:16:37:09:a4:cf:
         35:cd:e9:7b:2a:cc:05:4f:3c:28:23:80:de:26:4e:53:78:1c:
         70:6d:8c:a7:70:d6:d8:44:ed:8a:85:6e:67:ae:36:6e:33:44:
         58:ff:f5:71:11:24:7d:a3:2a:cb:54:d3:b0:04:51:95:b7:19:
         ff:cf:68:12:66:7a:46:2c:55:71:3b:6e:f3:79:bb:d9:82:2c:
         2d:3a:67:c1:89:a6:04:54:44:2b:d5:82:65:2c:87:83:1e:45:
         21:98:7f:53:53:c3:a2:27:93:67:70:42:3a:35:6b:ca:4c:d2:
         04:fe:3e:c1:98:2c:ac:0e:68:64:0e:05:16:09:3d:7f:c1:df:
         27:c4:3e:f2:cf:b5:7d:19:e3:20:fa:3b:6f:97:6b:0f:35:08:
         5e:e2:3d:5a:a4:ac:3c:50:d9:75:58:79:26:cc:79:c4:b9:4b:
         0d:33:a4:6a:90:81:ad:15:79:69:e4:e3:33:d7:28:c5:b1:1c:
         bc:82:ac:cf:3f:2f:9c:8f:15:4a:66:7c:2b:2c:9d:92:a9:d3:
         50:a7:df:99:f9:4d:fc:bc:60:e3:0f:c2:87:57:91:e3:e2:ac:
         8b:73:7d:03
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDv/BMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVh
Y2JjMTA0MDA3OGMyYzIyMDI4MWJlNGU0YWViYjA2YjY0NjA3MDMwHhcNMjIxMjEy
MTQzNDIwWhcNMjQxMjEzMTQzNDIwWjAzMTEwLwYDVQQDEyg4YWQ4NmU4NDIyMzNk
N2E1ZGU0YTgwMGI2MzFmYzUzYThlM2JiYmYzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAueRjvO6M73DR6u4G2lyj82KWy1nAzpincFQIbloV2YWjyTp5
52PouxmwaTBV3SGzs6rpZFRNvQh6i8YZPKqIE1YbaORDqX/zgbQedn0Uw0MPXI+Z
eKRIsrDVQRnJl4gsOWwZ3iepQ1f6lZYxZmQKhio3zY4qxwIITffkE9XsRUvBsxxe
W7d4LKUW1/GvTFzgQ1gcGN14gVsM1oRtJfgEtf3+Yq6BYWZDHV5SR7SbJImr6ppI
Q0BpURXAdIZTy+VHsnmgoJY+RpehfeVUyt9QZsHPTqww/vlhPVMJbeYR1MQTflDx
QbFMU7KIjoLAdp43nU/WmSq1uC3jBuKJkm/HewIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFMP6Q/BmpGb341gLYkCBkGjRfdzsMB8GA1UdIwQYMBaAFCK9Zy9Dhy1dRs7D
KW1cxcbBeCQvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWFjYmMx
MDQwMDc4YzJjMjIwMjgxYmU0ZTRhZWJiMDZiNjQ2MDcwMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmJhZTI0NjMtZTNlOS00ZGZkLTk1ZGUtNTMzOWNj
NWQxNDk4LzhhZDg2ZTg0MjIzM2Q3YTVkZTRhODAwYjYzMWZjNTNhOGUzYmJiZjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mYmFlMjQ2My1lM2U5LTRkZmQtOTVkZS01MzM5
Y2M1ZDE0OTgvNWFjYmMxMDQwMDc4YzJjMjIwMjgxYmU0ZTRhZWJiMDZiNjQ2MDcw
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB5oADANBgkqhkiG9w0BAQsFAAOCAQEAMdAzPI2lL6ac
tJTU5TI3Mgvby5XzVAZOnw22+J5U4BY3CaTPNc3peyrMBU88KCOA3iZOU3gccG2M
p3DW2ETtioVuZ642bjNEWP/1cREkfaMqy1TTsARRlbcZ/89oEmZ6RixVcTtu83m7
2YIsLTpnwYmmBFREK9WCZSyHgx5FIZh/U1PDoieTZ3BCOjVrykzSBP4+wZgsrA5o
ZA4FFgk9f8HfJ8Q+8s+1fRnjIPo7b5drDzUIXuI9WqSsPFDZdVh5Jsx5xLlLDTOk
apCBrRV5aeTjM9coxbEcvIKszz8vnI8VSmZ8KyydkqnTUKffmflN/Lxg4w/Ch1eR
4+Ksi3N9Aw==
-----END CERTIFICATE-----