Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f6f7cff-d142-4c55-a1da-30c88e2d7de7/bfa9e31d15765d7dea885ec6aad9fd04bb535bbf.roa
File:                     bfa9e31d15765d7dea885ec6aad9fd04bb535bbf.roa (raw, json)
Hash identifier:          hUzTpGgSzA7fWLMqiPIoEj/2iRzP4u4HMjp291hKjn8=
Subject key identifier:   4F:8E:2B:7D:A3:85:1F:74:80:82:2E:0D:19:B4:A3:7C:B6:2C:42:3D
Certificate issuer:       /CN=4ef467a028415587646ee8e311e81adea47f6ec7
Certificate serial:       023E75
Authority key identifier: 90:67:73:FC:82:AA:43:9F:49:7B:17:0E:E1:26:0B:6B:57:5B:C1:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ef467a028415587646ee8e311e81adea47f6ec7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f6f7cff-d142-4c55-a1da-30c88e2d7de7/bfa9e31d15765d7dea885ec6aad9fd04bb535bbf.roa
Signing time:             Sat 17 Sep 2022 01:33:40 +0000
ROA not before:           Sat 17 Sep 2022 01:33:00 +0000
ROA not after:            Tue 17 Sep 2024 01:33:00 +0000
asID:                     270160
IP address blocks:        2806:3e7:1000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147061 (0x23e75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef467a028415587646ee8e311e81adea47f6ec7
        Validity
            Not Before: Sep 17 01:33:00 2022 GMT
            Not After : Sep 17 01:33:00 2024 GMT
        Subject: CN=bfa9e31d15765d7dea885ec6aad9fd04bb535bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a4:e7:de:85:dd:98:33:b1:fe:6e:fb:a9:fe:
                    93:5e:2a:60:60:5a:5b:ef:0d:48:a5:4b:0c:ea:88:
                    b1:81:f2:3c:c1:da:ed:70:6c:ce:64:b2:ec:29:c7:
                    1d:08:62:5f:67:c8:a1:41:f4:e4:04:58:00:7f:27:
                    7b:d1:7a:0c:e9:36:7c:55:3e:b2:8a:ba:3e:20:c4:
                    66:a5:8b:23:ab:4a:92:03:74:ce:18:7c:f2:86:1c:
                    10:82:68:24:6a:e6:94:f7:55:ce:fe:38:b3:9f:29:
                    5c:73:e1:b2:9d:24:83:59:57:f3:14:97:4d:a8:43:
                    35:0d:40:12:f3:5d:c2:11:13:b7:76:84:ab:b0:37:
                    fa:77:2c:ef:43:64:8b:19:bb:d8:0e:ae:77:f6:2a:
                    72:3d:4e:dd:2a:5e:09:2d:6d:7a:56:56:78:5e:55:
                    20:d6:50:d9:00:a3:52:74:f9:62:f6:01:6f:82:36:
                    2f:49:9d:4b:4a:b3:37:7b:0c:9c:a6:a9:4d:1b:5f:
                    a3:c7:5c:7d:b3:36:31:7c:c5:43:e3:47:80:e5:fb:
                    9f:55:b1:39:d9:e2:e4:b6:2d:87:a3:2e:b5:84:48:
                    4b:86:81:8e:6f:51:5c:c0:18:9c:d3:54:01:b2:5b:
                    e0:1f:42:0a:b2:5c:e0:d7:1d:db:37:60:16:ad:c1:
                    9b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8E:2B:7D:A3:85:1F:74:80:82:2E:0D:19:B4:A3:7C:B6:2C:42:3D
            X509v3 Authority Key Identifier:
                keyid:90:67:73:FC:82:AA:43:9F:49:7B:17:0E:E1:26:0B:6B:57:5B:C1:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ef467a028415587646ee8e311e81adea47f6ec7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f6f7cff-d142-4c55-a1da-30c88e2d7de7/bfa9e31d15765d7dea885ec6aad9fd04bb535bbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f6f7cff-d142-4c55-a1da-30c88e2d7de7/4ef467a028415587646ee8e311e81adea47f6ec7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e7:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2b:e0:78:ee:21:c8:95:d2:be:57:04:5c:96:60:86:f3:18:fb:
         2a:4b:68:0f:7a:0a:74:04:d2:e8:74:c8:73:eb:50:06:5d:f9:
         91:47:02:6c:f9:66:18:eb:9f:a3:f4:96:14:53:dc:0c:bb:da:
         7f:0f:66:a6:cc:6f:fd:26:78:aa:35:e7:a9:65:4b:7e:86:a2:
         1d:d4:62:ab:9b:d8:ed:cf:b8:cd:6f:3f:a5:95:89:99:7a:35:
         05:23:e2:84:9c:ff:3f:96:74:4a:ea:ff:f7:2b:58:cc:e6:48:
         e7:f3:14:f6:47:ab:ac:e4:6b:27:fa:0f:d0:85:09:4d:5e:a0:
         1f:85:bf:97:6b:2f:7f:a6:19:41:2a:4a:98:33:08:ef:61:47:
         36:46:bc:c3:75:ae:91:f1:bc:32:7e:45:93:ab:43:26:52:b0:
         59:38:bd:d4:0d:51:81:b0:01:4d:6e:23:fc:20:3b:a7:e8:6d:
         89:c2:3c:31:c3:93:1c:b1:18:28:77:9f:be:33:48:ff:bb:f6:
         f0:fa:77:e8:26:40:d3:d6:24:a6:a0:d7:88:29:11:e1:5f:26:
         d4:03:2f:dc:7d:1a:7b:4e:aa:cb:18:54:62:e4:3b:1a:ba:45:
         b8:06:dc:9d:9d:9e:b4:e1:0f:25:73:71:15:db:2a:7c:88:86:
         23:2f:00:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----