Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/1155d89b564ff38427fc3c4b215aeec00609bb05.roa
File:                     1155d89b564ff38427fc3c4b215aeec00609bb05.roa (raw, json)
Hash identifier:          8yfm0NeyPb51EBSHiJyWZrfOFRLC/rhTb/bOkGj1z9I=
Subject key identifier:   8F:F3:48:25:E7:8B:AB:36:66:12:2C:41:BB:C7:AD:45:E6:55:6F:AD
Certificate issuer:       /CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
Certificate serial:       164839
Authority key identifier: 54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/1155d89b564ff38427fc3c4b215aeec00609bb05.roa
Signing time:             Tue 28 Feb 2023 13:12:31 +0000
ROA not before:           Mon 27 Feb 2023 13:12:28 +0000
ROA not after:            Fri 28 Feb 2025 13:12:28 +0000
asID:                     3549
IP address blocks:        2803:ee60:20::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1460281 (0x164839)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
        Validity
            Not Before: Feb 27 13:12:28 2023 GMT
            Not After : Feb 28 13:12:28 2025 GMT
        Subject: CN=1155d89b564ff38427fc3c4b215aeec00609bb05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d9:5b:55:a7:41:34:35:25:c3:e1:b9:ba:2c:
                    5e:7e:92:f4:a1:c1:0c:1a:60:e4:c5:31:c9:17:8e:
                    22:ab:fb:f2:45:c9:7a:fb:45:0f:27:a9:55:74:75:
                    56:71:f8:40:b8:f3:43:d8:9f:d0:d8:a7:2d:61:b2:
                    3a:2f:32:ba:ab:29:5c:e4:18:10:14:3b:8b:a9:19:
                    64:da:6d:d1:05:f1:f7:b1:8d:39:13:87:65:3d:b8:
                    82:f5:33:2a:af:1e:b7:ac:60:9e:88:6b:24:a1:06:
                    d2:76:ab:f7:4d:b5:44:27:b9:5b:65:91:04:83:11:
                    52:7c:4d:e9:74:f2:ef:cc:25:0d:1b:5e:d5:10:c9:
                    c0:4d:c7:cb:3e:81:5d:2f:78:22:ac:98:15:35:84:
                    47:10:23:5a:eb:bb:0a:d1:d9:41:aa:4a:22:c1:b5:
                    11:ea:67:97:69:b0:db:84:3d:5d:ac:20:11:07:58:
                    18:96:07:14:57:a7:34:43:19:25:86:49:18:1f:4c:
                    50:82:06:2a:13:87:e0:ac:48:e2:c8:68:5e:4f:04:
                    84:e2:c8:e0:04:49:c7:9e:43:a3:cf:4b:2e:e3:cf:
                    09:5c:79:81:b8:1b:64:95:93:44:01:f8:8c:2f:2c:
                    24:dd:08:f7:6b:e0:45:ae:ef:09:6a:97:73:cf:6d:
                    b5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F3:48:25:E7:8B:AB:36:66:12:2C:41:BB:C7:AD:45:E6:55:6F:AD
            X509v3 Authority Key Identifier:
                keyid:54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/1155d89b564ff38427fc3c4b215aeec00609bb05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/27a5488123c2689d948f7eb4b73b6005b88be1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee60:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         46:70:5f:44:8d:08:82:5c:78:d0:1d:f8:69:2d:d5:5f:e2:b2:
         bc:01:b6:1a:b9:04:15:e5:47:0a:bf:d5:8c:29:70:78:c0:65:
         9d:c4:77:f3:83:62:0b:b4:72:9f:aa:9a:85:b2:61:95:12:8f:
         54:f5:1e:01:32:4e:70:13:fb:23:82:37:bf:11:ef:c2:bf:80:
         49:08:4f:ce:a3:ea:b5:ef:e3:2a:2e:bd:df:8a:4d:77:c4:d8:
         9a:29:6d:87:fe:2d:45:8d:56:b0:d0:ae:5f:5b:22:97:86:af:
         67:42:21:d2:4d:e5:59:33:60:ff:f9:02:cd:be:e9:ff:c5:51:
         a0:72:e5:de:c8:4b:d5:71:51:21:36:44:c1:5e:df:17:77:60:
         0d:61:97:31:9a:95:c1:84:3c:2e:56:58:af:93:d1:7c:fd:72:
         76:4b:cc:56:98:c1:c6:8c:c4:77:c2:6b:9f:71:b0:27:6e:cb:
         6a:1a:48:3f:56:50:48:01:dd:1f:d5:4d:42:31:88:25:d0:d7:
         42:27:f7:6a:ed:89:0a:c8:bb:63:8b:87:fc:c8:45:6d:e3:d2:
         8e:16:33:df:e6:52:8f:85:09:9c:f0:04:96:55:aa:e4:5c:9d:
         c3:c1:16:48:ff:74:24:05:16:e6:d2:61:12:43:55:b8:20:7c:
         1c:2b:bb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----