Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22efec2f-3f07-44c2-a400-0dcfaecc6d98/51f9e0b31a1251b912f4ebcd5e3853e7ab5fccd0.roa
File:                     51f9e0b31a1251b912f4ebcd5e3853e7ab5fccd0.roa (raw, json)
Hash identifier:          NaigYXEFwPYmwKQdAzaSY6xdsZBxXWUVsGyEBDRJhec=
Subject key identifier:   5F:A0:BF:6D:03:19:F7:A1:B1:E5:B9:DD:64:7D:63:A2:E8:0E:3D:D9
Certificate issuer:       /CN=155b538c76786066deee9490cef7008c3829598e
Certificate serial:       03108B
Authority key identifier: 16:CA:3F:12:15:05:8A:99:58:0B:3F:E2:E8:1D:86:05:A4:33:B2:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/155b538c76786066deee9490cef7008c3829598e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22efec2f-3f07-44c2-a400-0dcfaecc6d98/51f9e0b31a1251b912f4ebcd5e3853e7ab5fccd0.roa
Signing time:             Thu 04 Jan 2024 01:47:15 +0000
ROA not before:           Thu 04 Jan 2024 01:47:15 +0000
ROA not after:            Sun 04 Jan 2026 01:47:15 +0000
asID:                     273074
IP address blocks:        2803:2f90::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200843 (0x3108b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=155b538c76786066deee9490cef7008c3829598e
        Validity
            Not Before: Jan  4 01:47:15 2024 GMT
            Not After : Jan  4 01:47:15 2026 GMT
        Subject: CN=51f9e0b31a1251b912f4ebcd5e3853e7ab5fccd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:22:fa:54:bf:7c:63:89:ec:b0:f3:e4:15:15:
                    5d:ba:51:ad:08:bd:e6:f7:4b:64:87:a7:68:5a:66:
                    e5:21:22:c4:7d:43:a2:68:f4:f6:93:e4:1f:a4:d2:
                    d3:82:8b:38:4a:a0:2d:58:f3:ab:95:d3:78:61:f3:
                    64:b2:22:c8:3b:e8:d5:6b:7a:51:69:5f:9b:bc:6e:
                    0b:f6:80:af:fd:63:ed:a2:ab:77:a5:7e:81:66:99:
                    ca:e1:e4:f7:f7:52:b8:2e:29:94:f3:26:18:83:a0:
                    77:93:d4:50:fe:d4:af:0f:3d:b0:fa:74:43:9c:44:
                    1e:16:4b:c0:f8:fd:43:20:80:3e:38:65:9c:c0:c6:
                    ee:47:1e:b7:4f:5c:d2:23:cb:78:cd:51:ab:ae:4b:
                    99:a4:68:73:17:11:0e:73:8a:8a:88:9d:af:38:77:
                    bf:fc:d8:0d:f2:bb:60:5e:db:35:e6:eb:4b:04:9e:
                    26:1b:34:2b:47:57:b7:29:0b:3f:37:71:a7:69:6c:
                    de:f1:0d:fd:69:88:03:c2:d1:54:ff:26:f2:0a:a4:
                    92:c9:ae:21:9c:11:e1:ce:1c:35:e2:dd:e0:4d:01:
                    6b:fc:42:e4:27:fb:08:17:da:aa:71:ec:21:ce:da:
                    c9:04:98:10:82:d5:cc:3e:16:56:58:59:2d:a1:c9:
                    01:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A0:BF:6D:03:19:F7:A1:B1:E5:B9:DD:64:7D:63:A2:E8:0E:3D:D9
            X509v3 Authority Key Identifier:
                keyid:16:CA:3F:12:15:05:8A:99:58:0B:3F:E2:E8:1D:86:05:A4:33:B2:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/155b538c76786066deee9490cef7008c3829598e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22efec2f-3f07-44c2-a400-0dcfaecc6d98/51f9e0b31a1251b912f4ebcd5e3853e7ab5fccd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22efec2f-3f07-44c2-a400-0dcfaecc6d98/155b538c76786066deee9490cef7008c3829598e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:62:1f:39:c6:f4:ab:c7:7b:7c:77:ac:2f:cd:18:bb:1b:e5:
         25:48:b4:5b:b2:2c:af:27:19:42:36:21:d0:8b:cd:e5:b2:ba:
         7e:70:6c:98:f5:8c:3f:7e:3f:b0:f3:ae:50:88:fa:01:81:80:
         ac:21:83:bf:29:c9:f2:07:46:08:64:65:03:04:00:8f:0c:38:
         9d:63:90:d4:81:6e:f4:d6:7f:8d:34:27:44:32:98:c8:19:50:
         57:04:68:92:d8:39:5f:25:ce:c6:15:29:e8:58:34:bd:1b:5b:
         e0:08:58:e4:03:b6:71:ee:b7:10:40:ef:cd:8a:49:30:2e:12:
         c8:d0:4f:0f:47:be:93:ae:39:28:6b:33:da:10:9d:22:01:21:
         c4:ca:67:4c:38:39:d0:75:5f:ba:4c:18:12:a9:c2:c6:f1:76:
         97:7e:25:2a:02:c0:48:f6:d5:a6:5c:9f:8f:d2:89:8e:da:0c:
         b6:ba:0a:5b:74:ab:cb:94:38:f4:92:20:55:f7:14:0f:84:84:
         aa:85:51:48:8a:9a:f4:91:c8:91:3b:b9:40:d9:40:41:ed:73:
         85:52:19:c4:26:4c:12:04:fa:fd:8e:49:1c:c8:13:5d:72:4d:
         08:d8:cf:84:1d:74:bd:d6:42:29:6f:88:2e:3e:de:25:02:22:
         25:67:db:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----