Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/041bd34e-7e91-4026-9f6c-9c7a7ed4f7b7/4839f6572db369516477625257081adc295a81ee.roa
File:                     4839f6572db369516477625257081adc295a81ee.roa (raw, json)
Hash identifier:          z5JZmGqj1GiqoZ3gh9OnqxCah/FcjgUkMTSeePPMucw=
Subject key identifier:   E4:2D:73:70:DE:C5:3B:A1:BE:19:71:CC:45:C9:9D:F3:1C:42:81:8C
Certificate issuer:       /CN=c8d5d2f58c6c8370f4ffd8e364d9ae3c91bc4f19
Certificate serial:       097804
Authority key identifier: 40:72:A6:1E:FA:C1:4C:06:80:7A:C9:1F:93:B0:F9:66:35:B4:65:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8d5d2f58c6c8370f4ffd8e364d9ae3c91bc4f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/041bd34e-7e91-4026-9f6c-9c7a7ed4f7b7/4839f6572db369516477625257081adc295a81ee.roa
Signing time:             Wed 29 Mar 2023 21:49:11 +0000
ROA not before:           Wed 09 Mar 2022 03:00:00 +0000
ROA not after:            Sun 10 Mar 2024 03:00:00 +0000
asID:                     271936
IP address blocks:        2803:fa10::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620548 (0x97804)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d5d2f58c6c8370f4ffd8e364d9ae3c91bc4f19
        Validity
            Not Before: Mar  9 03:00:00 2022 GMT
            Not After : Mar 10 03:00:00 2024 GMT
        Subject: CN=4839f6572db369516477625257081adc295a81ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:c6:a2:5a:01:c3:50:fa:f5:1a:89:3a:c7:
                    31:77:46:db:0f:c8:58:bb:31:4f:04:61:3c:de:d3:
                    bf:51:ac:c2:f8:c3:9a:a3:eb:b5:c4:48:d0:d8:eb:
                    ef:7b:5c:d0:69:50:d8:e6:e2:09:7d:f7:b8:35:39:
                    65:fe:70:f9:53:33:f4:42:6e:fe:f9:52:d9:d8:9a:
                    ba:7a:0b:f9:58:d2:3f:cd:0a:8d:65:f1:6d:16:28:
                    2d:76:bb:bd:ee:8a:03:a4:e7:50:b4:b8:74:2a:38:
                    9c:7e:02:7d:e9:24:ce:c6:c0:d3:7d:51:65:df:4c:
                    8d:09:ae:7f:6f:eb:85:46:82:d4:b4:95:4b:60:53:
                    be:c6:c1:eb:22:a5:b1:b2:98:dd:0a:a3:66:82:17:
                    b0:7b:67:4f:7a:42:0f:8a:1a:21:32:15:a5:9e:78:
                    91:75:e5:52:71:98:e8:39:bc:96:5f:bc:21:39:46:
                    0c:89:7d:8b:89:fe:d5:21:2d:fc:52:8e:e9:79:8f:
                    4b:16:f2:9e:f3:3f:90:d3:a9:14:b0:6b:13:a3:d8:
                    25:3b:bc:14:99:c2:04:4a:23:06:c1:a4:a3:34:68:
                    fa:0b:b9:82:d3:78:2c:fe:e7:c1:1e:b7:5b:3d:b0:
                    9f:66:a4:9e:10:ba:e4:31:1a:4b:a7:65:4d:90:c3:
                    bd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2D:73:70:DE:C5:3B:A1:BE:19:71:CC:45:C9:9D:F3:1C:42:81:8C
            X509v3 Authority Key Identifier:
                keyid:40:72:A6:1E:FA:C1:4C:06:80:7A:C9:1F:93:B0:F9:66:35:B4:65:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8d5d2f58c6c8370f4ffd8e364d9ae3c91bc4f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/041bd34e-7e91-4026-9f6c-9c7a7ed4f7b7/4839f6572db369516477625257081adc295a81ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/041bd34e-7e91-4026-9f6c-9c7a7ed4f7b7/c8d5d2f58c6c8370f4ffd8e364d9ae3c91bc4f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fa10::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:90:3e:df:9f:cb:bb:26:a6:0f:93:30:b0:50:4a:b1:83:78:
         37:c2:fe:db:2a:a5:c4:84:ca:77:d4:39:49:ab:1c:e0:df:0d:
         4c:dd:76:51:17:d0:51:bb:01:9f:35:18:9b:a5:cb:de:2a:5b:
         a7:b5:59:0f:bc:68:cc:5d:e4:a4:ab:37:44:37:ce:07:58:9f:
         8e:b7:36:4c:41:11:5f:b6:cb:aa:38:73:5e:94:dc:67:66:2a:
         93:68:2d:07:cd:7c:f3:ff:bf:a6:ce:15:e5:85:39:55:63:be:
         48:42:54:ad:3e:87:62:b6:92:68:2e:07:89:06:d9:8e:4b:6e:
         da:ff:23:08:0a:2a:e3:b5:ff:32:5f:e7:96:4b:1b:8e:6f:92:
         fc:ff:25:94:b4:f1:9e:26:56:b0:3a:a9:b6:6d:2e:0e:01:b9:
         eb:dd:55:ce:06:82:42:9d:49:5f:6c:3d:e4:bd:d5:10:dd:14:
         79:cd:eb:48:8c:9d:b7:d7:83:72:da:e4:e4:00:07:ef:13:1e:
         24:58:10:b5:80:20:97:e1:db:17:7c:09:ae:52:9e:32:d6:83:
         3e:b4:b8:3a:41:33:3e:3a:da:f9:e0:8b:37:10:7e:aa:67:b9:
         d1:8b:c9:5d:5e:d4:05:e5:35:80:77:91:04:46:b8:b0:b4:8e:
         f1:ea:b2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----