Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/188476b3-5d3f-4d64-ac65-77901fccd937/6293daec1e733413cbd8f65c9f336e4033a59423.roa
File:                     6293daec1e733413cbd8f65c9f336e4033a59423.roa (raw, json)
Hash identifier:          cAKIhE7GmzG4wTlUnV9r4gLrrU5D6MfD5i1hh3NYcCQ=
Subject key identifier:   38:84:B6:AA:81:98:B5:CA:04:12:AC:1E:95:58:64:BF:86:D5:5E:D7
Certificate issuer:       /CN=b8249050f2290c5a8ad5903e489ea8217ff11259
Certificate serial:       0A12
Authority key identifier: DD:00:7C:4E:A2:93:00:E0:03:23:82:94:FF:0A:A7:B9:8E:AC:45:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8249050f2290c5a8ad5903e489ea8217ff11259.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/188476b3-5d3f-4d64-ac65-77901fccd937/6293daec1e733413cbd8f65c9f336e4033a59423.roa
Signing time:             Wed 13 Jul 2022 03:43:11 +0000
ROA not before:           Wed 13 Jul 2022 03:00:00 +0000
ROA not after:            Sat 13 Jul 2024 03:00:00 +0000
asID:                     262823
IP address blocks:        2803:9490::/32 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2578 (0xa12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8249050f2290c5a8ad5903e489ea8217ff11259
        Validity
            Not Before: Jul 13 03:00:00 2022 GMT
            Not After : Jul 13 03:00:00 2024 GMT
        Subject: CN=6293daec1e733413cbd8f65c9f336e4033a59423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:44:cc:d1:23:35:a7:14:2f:59:3e:73:d5:c6:
                    0a:e4:00:5c:cd:a6:49:5f:4e:7e:e2:6d:23:3e:9e:
                    87:a3:71:14:37:15:1c:0f:bc:1c:d6:20:32:5c:43:
                    53:b5:9e:eb:f7:69:6a:ad:36:57:a7:bb:f4:1c:8b:
                    58:f1:ec:6c:b3:0e:21:8c:d2:e9:7d:37:48:0c:78:
                    60:82:46:95:ed:a0:07:94:df:cb:78:ad:6a:b4:de:
                    4d:b9:19:2d:54:e9:5b:2f:d1:ea:f1:71:b7:69:16:
                    39:89:a3:06:34:69:27:06:89:a8:56:3f:56:40:bd:
                    8c:9f:80:73:5c:2e:1c:74:db:37:60:24:1b:09:51:
                    7d:6f:5e:14:bb:ee:8b:71:d5:9a:19:c9:81:85:98:
                    24:7f:41:ae:01:d0:c7:00:ac:0f:46:91:3c:56:c0:
                    98:9d:9f:75:e4:3e:f1:25:a0:e1:55:2e:7c:4d:7e:
                    8c:67:49:e7:68:4c:7f:39:29:5a:b9:fd:6f:bf:f7:
                    ba:1d:b5:bb:df:e7:61:3a:09:17:60:6c:5d:60:3a:
                    89:d9:59:a9:ff:d4:16:b0:61:de:10:3f:c4:5f:3b:
                    8c:d9:cc:ed:c9:f8:dd:70:ef:ab:83:08:e4:55:19:
                    ce:1a:9e:de:6d:ac:73:c9:68:d7:74:44:30:6d:e3:
                    09:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:84:B6:AA:81:98:B5:CA:04:12:AC:1E:95:58:64:BF:86:D5:5E:D7
            X509v3 Authority Key Identifier:
                keyid:DD:00:7C:4E:A2:93:00:E0:03:23:82:94:FF:0A:A7:B9:8E:AC:45:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8249050f2290c5a8ad5903e489ea8217ff11259.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/188476b3-5d3f-4d64-ac65-77901fccd937/6293daec1e733413cbd8f65c9f336e4033a59423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/188476b3-5d3f-4d64-ac65-77901fccd937/b8249050f2290c5a8ad5903e489ea8217ff11259.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9490::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:15:df:22:55:08:98:4c:cb:5a:09:15:09:f9:dd:62:e8:74:
         6e:32:47:ee:bd:0a:d3:f7:01:e1:23:f7:f0:50:81:ff:40:57:
         cd:e2:a7:92:ba:f6:6b:2f:43:bd:db:9b:50:43:35:6d:bd:c5:
         93:c9:b3:68:42:ad:26:ee:95:2c:19:c0:86:29:f8:f6:41:aa:
         a6:24:ed:0a:dc:a7:57:08:37:62:76:4a:5d:ee:61:c8:22:1a:
         fe:d3:7e:36:bc:b9:01:5e:61:55:e2:a4:2c:81:b3:a2:c1:eb:
         1a:5e:6f:01:13:2a:d5:b9:09:71:5f:4d:d3:e8:a5:22:49:bd:
         4a:3f:fd:13:7c:ce:84:ef:bc:29:dc:26:79:b5:cc:ae:95:32:
         5a:1b:5a:16:56:82:b7:bd:d1:5c:66:64:f7:56:b8:f0:56:0c:
         3e:ff:ac:43:20:71:ca:c8:56:91:ad:aa:3f:af:04:75:b0:d4:
         e2:c7:e7:86:5c:8a:1b:3e:f6:c4:2a:26:e9:89:35:f6:51:07:
         62:5a:06:97:23:e1:b5:ce:b0:28:3c:68:66:60:be:bb:63:36:
         5f:2e:4a:51:a8:af:e3:80:00:f5:be:fb:9d:cb:e7:9d:67:82:
         31:e0:1b:d1:4b:c5:7e:4e:26:e4:24:f0:68:6e:7b:28:df:c5:
         2c:60:2a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----