Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/8b40567c24c2b634d2d30969b552db45dd05b510.roa
File:                     8b40567c24c2b634d2d30969b552db45dd05b510.roa (raw, json)
Hash identifier:          CZYp7oibqVwZzgSEsmIg92PqBO+wpJaawM+ZEZ6y+8w=
Subject key identifier:   FF:5A:CB:FE:89:50:07:D1:75:79:C7:F8:C3:65:70:B7:00:FF:FD:D0
Certificate issuer:       /CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
Certificate serial:       16AB41
Authority key identifier: 54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/8b40567c24c2b634d2d30969b552db45dd05b510.roa
Signing time:             Wed 15 Mar 2023 21:55:27 +0000
ROA not before:           Sat 25 Feb 2023 13:12:28 +0000
ROA not after:            Fri 28 Feb 2025 13:12:28 +0000
asID:                     267919
IP address blocks:        2803:ee60:30::/44 maxlen: 44
                          2803:ee60:40::/44 maxlen: 44
                          2803:ee60:50::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1485633 (0x16ab41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
        Validity
            Not Before: Feb 25 13:12:28 2023 GMT
            Not After : Feb 28 13:12:28 2025 GMT
        Subject: CN=8b40567c24c2b634d2d30969b552db45dd05b510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3f:a2:af:40:4d:39:54:ed:7d:63:b1:3c:d5:
                    ad:22:a1:ce:50:c1:84:e8:96:73:58:c0:dc:e3:f7:
                    78:06:26:da:f3:63:e3:66:7c:2a:31:ec:0d:f2:7b:
                    fa:08:24:81:52:21:61:2a:63:fc:4d:bb:54:d4:ff:
                    9a:80:a4:8d:8f:76:f5:15:9d:f9:67:77:86:36:4c:
                    86:1a:69:7c:c4:bd:22:6b:3a:17:17:d2:de:d2:5d:
                    8c:06:f2:e6:d0:89:6d:d0:b1:6f:14:5c:f4:a1:15:
                    9d:dd:af:97:83:1d:89:0f:ef:3a:7a:38:38:1a:5b:
                    e0:62:9e:e7:74:8c:0b:86:84:57:5b:51:1e:27:69:
                    d5:a7:5a:c8:2c:11:e9:fb:31:1a:ed:c0:8f:47:7a:
                    f0:32:c1:cb:90:22:2c:10:20:e7:c8:e4:02:91:b4:
                    2f:35:bd:d9:48:f5:fd:35:3b:91:7b:ed:6d:fb:7d:
                    aa:00:a6:74:90:c2:e3:2d:72:4e:c7:82:aa:be:c9:
                    59:fb:ff:86:0a:7a:d8:a6:c7:2e:ae:5e:65:88:b5:
                    35:4d:42:58:d6:0b:ad:a4:c8:64:16:6f:1c:7a:dc:
                    71:0e:07:14:8a:23:c0:44:4c:49:c9:d5:80:42:0b:
                    c5:3c:55:88:cf:45:08:d2:f2:a6:40:d0:38:36:97:
                    14:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5A:CB:FE:89:50:07:D1:75:79:C7:F8:C3:65:70:B7:00:FF:FD:D0
            X509v3 Authority Key Identifier:
                keyid:54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/8b40567c24c2b634d2d30969b552db45dd05b510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/27a5488123c2689d948f7eb4b73b6005b88be1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee60:30::-2803:ee60:5f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         85:f4:c4:75:70:fb:f7:71:1a:b4:3b:ab:58:03:69:2d:95:d5:
         50:f0:19:e5:af:24:89:0d:c1:ef:f4:eb:4d:74:e7:71:ab:0c:
         52:7d:ae:67:74:31:88:f5:c2:f2:b8:03:99:61:63:d4:3c:ef:
         15:36:d2:b6:72:fc:f3:c4:a1:4f:1f:69:6d:c9:11:d1:a2:35:
         2e:0f:54:de:ea:66:10:62:24:04:eb:7d:7e:fb:dc:e9:2d:fa:
         58:e7:52:50:9c:96:ad:4d:bd:73:56:1e:d2:7b:db:6b:ea:51:
         5e:fc:21:8e:14:02:e6:f8:81:76:e8:46:52:30:cf:99:19:42:
         bc:f9:5a:c6:40:24:53:93:6c:1e:ef:e0:cb:3e:aa:62:00:8a:
         a4:20:68:45:f7:21:f3:57:e1:c1:bd:96:f2:d6:3c:ac:91:bf:
         ec:07:b4:3f:a1:5c:d3:4e:1d:76:a4:36:d9:24:2a:ce:6f:85:
         0c:3a:80:98:5d:ed:fd:32:8b:c8:64:e5:de:d5:3c:ff:cf:75:
         5b:4c:74:c2:62:d8:f2:c5:9e:ad:d5:9a:da:ae:fe:9b:39:c7:
         92:ce:ae:d1:6c:e4:1a:7e:11:26:b7:17:d0:3a:a0:25:c6:cc:
         84:44:a8:e2:8d:6f:14:d6:87:83:85:23:e1:a4:77:f7:3f:ef:
         c5:48:dd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----