Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/188476b3-5d3f-4d64-ac65-77901fccd937/885ffc0be9cb6fa67a7ce227605a89f5ef719d6d.roa
File:                     885ffc0be9cb6fa67a7ce227605a89f5ef719d6d.roa (raw, json)
Hash identifier:          fJt04uG5QR6qNhMkl494bdbSFow0VELGpFBSLUVsruM=
Subject key identifier:   A5:68:87:55:7B:B3:08:3C:6D:AC:60:69:70:DE:85:F7:0C:8D:1E:61
Certificate issuer:       /CN=b8249050f2290c5a8ad5903e489ea8217ff11259
Certificate serial:       854B
Authority key identifier: DD:00:7C:4E:A2:93:00:E0:03:23:82:94:FF:0A:A7:B9:8E:AC:45:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8249050f2290c5a8ad5903e489ea8217ff11259.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/188476b3-5d3f-4d64-ac65-77901fccd937/885ffc0be9cb6fa67a7ce227605a89f5ef719d6d.roa
Signing time:             Mon 01 Aug 2022 17:43:46 +0000
ROA not before:           Wed 13 Jul 2022 03:00:00 +0000
ROA not after:            Sat 13 Jul 2024 03:00:00 +0000
asID:                     272823
IP address blocks:        2803:9490::/32 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34123 (0x854b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8249050f2290c5a8ad5903e489ea8217ff11259
        Validity
            Not Before: Jul 13 03:00:00 2022 GMT
            Not After : Jul 13 03:00:00 2024 GMT
        Subject: CN=885ffc0be9cb6fa67a7ce227605a89f5ef719d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:01:53:09:2c:8a:8c:87:dc:98:34:60:cb:88:
                    38:55:29:02:ad:b0:98:a5:0f:5e:24:11:43:5e:f9:
                    4f:65:b5:ee:ab:f5:66:07:34:e5:78:f1:b2:86:2c:
                    c3:37:c0:40:5e:59:1b:64:7b:44:3f:92:02:35:75:
                    ef:19:34:b7:5e:6c:a1:09:4c:35:fe:a4:84:39:81:
                    7d:54:97:c7:9e:d0:1d:c1:ca:21:d8:db:84:7c:55:
                    75:2a:90:fc:9a:3c:95:70:fd:ed:6e:2b:5b:ce:1c:
                    ed:f4:13:28:ac:75:63:1c:4a:93:96:ec:e7:a6:71:
                    59:54:b2:7c:5d:d3:8e:c8:65:6a:5c:b0:e0:e8:ae:
                    b6:71:26:76:25:09:11:ed:53:9e:d1:34:d8:3c:12:
                    a9:76:5f:81:d4:ec:26:36:3e:36:5d:32:e1:66:74:
                    98:62:92:82:1d:c8:95:b4:11:d9:b3:ed:ea:ac:41:
                    36:0b:80:a7:fe:a7:da:3d:58:3e:0a:cc:fd:6d:55:
                    b4:7c:68:39:95:9e:0d:3a:63:3d:bd:77:e1:fa:05:
                    e6:aa:0b:92:e9:1e:1f:46:25:1e:b6:ef:4b:52:16:
                    05:06:3d:4e:ad:4a:c2:de:f5:2b:81:70:38:c7:75:
                    81:40:bb:13:56:fd:fd:50:ac:70:94:e8:1f:39:ce:
                    93:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:68:87:55:7B:B3:08:3C:6D:AC:60:69:70:DE:85:F7:0C:8D:1E:61
            X509v3 Authority Key Identifier:
                keyid:DD:00:7C:4E:A2:93:00:E0:03:23:82:94:FF:0A:A7:B9:8E:AC:45:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8249050f2290c5a8ad5903e489ea8217ff11259.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/188476b3-5d3f-4d64-ac65-77901fccd937/885ffc0be9cb6fa67a7ce227605a89f5ef719d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/188476b3-5d3f-4d64-ac65-77901fccd937/b8249050f2290c5a8ad5903e489ea8217ff11259.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9490::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:90:5d:3a:cf:63:75:24:01:00:a1:2d:71:f9:79:09:c3:35:
         58:a9:ff:41:6e:83:be:b8:85:15:57:1f:f9:1e:c6:fc:cc:c3:
         25:0f:3d:00:c6:8f:65:ea:d5:03:21:74:5c:e3:5b:60:a4:ad:
         f1:8c:0e:b2:01:1e:e5:39:e4:2e:34:59:c9:ac:84:c7:f8:a0:
         62:e7:b4:8e:e1:48:f9:6b:26:87:34:c2:bf:80:f3:2e:14:0f:
         4d:7a:b2:22:0d:2c:ba:03:2b:57:f0:3b:04:10:ec:ff:83:4e:
         de:56:c3:b4:52:5e:37:7d:0c:c0:99:d5:9f:dc:b9:f6:09:cd:
         0d:63:1b:16:48:e7:1d:18:aa:1c:45:ec:b8:d8:82:20:5d:b4:
         59:f3:28:8a:52:60:59:10:a0:47:ce:02:fd:36:b3:5c:fc:cc:
         7f:10:42:64:ea:df:c2:20:a2:80:50:3b:42:97:88:57:96:81:
         ce:39:b6:4e:9d:e3:23:ff:42:aa:ea:dd:a1:34:48:47:0d:bb:
         16:38:4f:69:41:32:b8:b8:b9:6b:b8:df:06:1f:55:04:c3:c8:
         54:85:a3:80:ba:ac:20:97:b0:df:c8:6b:5b:b2:dc:33:d6:1f:
         d0:5c:b1:f8:dd:91:71:a0:35:b8:bd:af:74:5d:87:04:d5:0a:
         93:5f:bb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----