Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/0f941b7ea2782e5418cff1de42db9f04e8d1e76e.roa
File:                     0f941b7ea2782e5418cff1de42db9f04e8d1e76e.roa (raw, json)
Hash identifier:          C/wAj6jksPqAWlnIh2DCKC8cxFXCzFQzee2qx5WCcqM=
Subject key identifier:   EE:65:72:6E:19:A1:89:EC:23:28:28:AF:66:BF:8B:9E:E3:BB:68:D3
Certificate issuer:       /CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
Certificate serial:       1677E1
Authority key identifier: 0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/0f941b7ea2782e5418cff1de42db9f04e8d1e76e.roa
Signing time:             Sat 11 Jun 2022 01:57:10 +0000
ROA not before:           Fri 10 Jun 2022 03:00:00 +0000
ROA not after:            Mon 10 Jun 2024 03:00:00 +0000
asID:                     267849
IP address blocks:        2803:ac60:2e::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1472481 (0x1677e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
        Validity
            Not Before: Jun 10 03:00:00 2022 GMT
            Not After : Jun 10 03:00:00 2024 GMT
        Subject: CN=0f941b7ea2782e5418cff1de42db9f04e8d1e76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3f:ca:df:8f:05:88:b5:98:ce:74:d9:c9:e9:
                    85:91:81:20:30:91:e8:66:6f:af:70:7c:30:74:2c:
                    5d:27:13:90:ba:eb:3d:60:09:15:c2:62:82:ed:35:
                    17:9e:62:0f:df:0a:b3:2c:1b:0c:d1:c5:39:b0:20:
                    23:78:1c:45:cc:eb:c9:72:0b:f0:ab:02:a0:be:70:
                    fd:80:45:6a:72:74:4d:7a:21:6c:5f:fd:ff:d0:53:
                    11:66:16:71:5e:c0:b8:dd:4b:18:50:cc:cd:6f:b5:
                    83:5a:4d:fe:0f:a7:2f:91:d5:1b:3c:58:77:d3:40:
                    84:8e:de:91:10:61:d2:71:9e:83:77:b5:6a:37:a5:
                    83:0c:07:97:7f:8c:df:0e:26:0f:e2:5a:fa:6b:81:
                    09:ed:d5:c1:52:0a:ed:a1:e6:2e:76:45:3b:2c:55:
                    7b:ea:45:09:62:d1:5b:74:3e:3e:9b:23:94:e6:79:
                    b3:00:37:4d:6e:5f:bd:70:22:0f:64:b9:f5:cc:11:
                    67:ed:85:01:b4:1c:5a:f6:c8:bf:f5:77:b7:75:f9:
                    02:35:d9:3a:6d:5d:85:ba:c5:aa:a1:69:0a:21:0e:
                    c0:f7:b5:59:cc:d1:70:bc:cb:10:da:db:8a:47:64:
                    58:1a:70:07:0b:c8:d1:2f:04:53:93:c4:a8:fb:11:
                    99:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:65:72:6E:19:A1:89:EC:23:28:28:AF:66:BF:8B:9E:E3:BB:68:D3
            X509v3 Authority Key Identifier:
                keyid:0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/0f941b7ea2782e5418cff1de42db9f04e8d1e76e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/d53e5113cbffa42dda2928ee24c7eff1286a8644.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac60:2e::/48

    Signature Algorithm: sha256WithRSAEncryption
         e1:32:1b:80:5c:5c:6f:52:5e:cf:2f:7e:81:e2:80:71:58:15:
         37:7c:dc:40:f9:48:f1:92:61:9a:ed:91:28:3a:99:55:4e:0f:
         17:8c:8f:80:d0:bc:85:e6:8f:28:92:8b:e6:11:ee:c8:f2:e1:
         d0:b4:5d:78:a1:bc:62:c8:d9:f6:5c:fc:09:7e:3f:01:fb:f4:
         27:f4:bb:33:16:02:40:4e:ab:67:65:56:86:70:bd:6f:f4:d4:
         24:8f:01:b2:a9:ba:7b:fe:20:10:52:d4:08:03:a2:08:8c:f6:
         35:1b:e9:a0:02:47:1d:8e:02:5b:db:a2:e5:16:0e:ae:38:5c:
         af:74:80:44:22:db:b9:c8:db:92:e7:d9:6a:b9:49:7d:ac:70:
         db:85:13:17:78:46:ed:58:f7:66:9f:a6:4b:af:62:a3:71:a8:
         b6:ae:63:18:60:64:a6:ef:47:2d:a9:e7:cc:7b:41:6e:50:4c:
         dd:4a:4f:56:ad:22:3e:2e:20:95:1f:85:a2:00:c5:2a:07:5f:
         20:ab:75:13:cd:a7:40:bc:4c:88:0c:39:e3:ab:25:15:0c:33:
         75:b9:68:96:3b:82:2f:66:48:eb:23:d1:46:f9:ff:22:52:ba:
         ec:73:25:b7:16:c4:8a:6d:fd:9c:7a:6e:54:03:81:50:d7:84:
         b5:8f:18:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----