Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/eb99598bed4388fe8c81bcd69f45bdbb3d843418.roa
File:                     eb99598bed4388fe8c81bcd69f45bdbb3d843418.roa (raw, json)
Hash identifier:          qJw2q9yyYCnBzKXdj59A7Kyawzj20hQiVGqXS++1bo4=
Subject key identifier:   10:61:66:A4:2D:8F:0D:70:6E:8E:58:90:08:D6:65:3C:1A:60:13:38
Certificate issuer:       /CN=72ed9f71dc0182564f0b1d89d7dbe402d3c34665
Certificate serial:       1531AB
Authority key identifier: AE:9B:5F:4B:06:21:A5:52:ED:6B:19:3E:63:61:DB:9C:E9:30:6E:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72ed9f71dc0182564f0b1d89d7dbe402d3c34665.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/eb99598bed4388fe8c81bcd69f45bdbb3d843418.roa
Signing time:             Wed 23 Mar 2022 06:23:25 +0000
ROA not before:           Sat 02 Oct 2021 03:00:00 +0000
ROA not after:            Mon 02 Oct 2023 03:00:00 +0000
asID:                     269730
IP address blocks:        2803:5160::/32 maxlen: 42

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1388971 (0x1531ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ed9f71dc0182564f0b1d89d7dbe402d3c34665
        Validity
            Not Before: Oct  2 03:00:00 2021 GMT
            Not After : Oct  2 03:00:00 2023 GMT
        Subject: CN=eb99598bed4388fe8c81bcd69f45bdbb3d843418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a5:52:3a:04:71:29:70:9b:e6:7c:66:46:0a:
                    68:c1:a5:2f:ee:10:80:28:1e:a6:f4:63:55:03:df:
                    f4:48:dc:a8:65:6a:90:92:af:15:9e:26:42:1c:c3:
                    cb:f4:87:0b:2e:50:69:d9:d9:dd:52:3d:aa:f5:a5:
                    3f:49:af:00:7a:6b:2b:16:2a:06:9a:74:46:dd:6f:
                    3c:fc:47:6c:f5:56:34:21:89:02:c4:77:23:90:8c:
                    cf:46:ea:10:89:c1:97:3c:20:a7:c8:79:08:a7:cb:
                    27:e2:07:3d:1c:fa:d5:10:90:c7:d7:c6:cf:06:c7:
                    6e:b3:ca:67:be:e4:7f:03:13:a7:08:b5:9b:dc:aa:
                    48:75:b9:4c:48:23:98:de:ec:bf:c9:e2:f0:7f:18:
                    47:e4:b8:75:28:ee:6e:84:7e:b7:e6:54:2e:43:f0:
                    d4:2c:bb:98:04:91:3c:5e:9e:71:f1:fd:9f:a9:ec:
                    4e:56:b3:64:8e:ee:77:22:a1:77:1e:66:d9:9e:f0:
                    de:b1:f1:aa:01:61:09:8d:a7:e0:ea:7a:ee:2c:d7:
                    c0:fb:74:29:3c:2d:de:33:e1:ac:ad:94:3e:ac:0d:
                    ab:9e:f5:b8:9e:0f:63:f9:10:f3:b3:ed:40:b1:97:
                    44:5c:d2:81:ff:4e:8a:61:6e:2e:cc:fe:81:bc:0d:
                    df:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:61:66:A4:2D:8F:0D:70:6E:8E:58:90:08:D6:65:3C:1A:60:13:38
            X509v3 Authority Key Identifier:
                keyid:AE:9B:5F:4B:06:21:A5:52:ED:6B:19:3E:63:61:DB:9C:E9:30:6E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72ed9f71dc0182564f0b1d89d7dbe402d3c34665.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/eb99598bed4388fe8c81bcd69f45bdbb3d843418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/72ed9f71dc0182564f0b1d89d7dbe402d3c34665.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:c1:2b:78:53:37:2e:53:18:e0:0d:36:ba:07:72:a8:90:ca:
         6a:bb:57:16:d2:48:dc:07:55:f3:36:52:cc:50:52:3a:d8:5c:
         3e:fc:0a:18:d9:b8:96:00:0e:7c:75:ae:8d:f7:51:9c:fa:44:
         db:61:c6:f8:fd:5f:da:2b:06:c3:fc:d1:ba:3a:6a:c5:2a:05:
         e3:05:a9:d5:da:47:68:ac:a0:1a:89:51:1c:b8:d7:27:f9:5c:
         19:c4:ca:8b:ad:09:49:b3:9a:ff:d0:a8:04:7d:84:85:be:24:
         60:86:a8:43:3b:1d:08:2d:d1:37:c8:86:64:b1:fc:e7:01:da:
         41:3b:94:1f:64:43:f3:dd:97:cb:31:04:0f:aa:f8:a2:cb:36:
         c7:2a:92:44:45:4c:1b:b1:09:b6:6e:53:8d:86:65:64:d8:7d:
         e2:38:24:0c:db:05:6e:ad:52:06:f6:90:ba:ae:0e:f2:7b:4c:
         db:a8:be:f3:42:d5:27:78:22:cc:76:a4:5b:ba:55:26:79:3c:
         85:86:51:dc:bb:fb:2b:ad:75:66:92:0a:00:04:1f:17:47:55:
         85:71:f5:fb:91:aa:cb:1e:f6:a4:56:25:06:eb:4c:c9:18:40:
         53:81:ae:98:17:8c:f6:7c:90:70:b9:de:2b:36:d4:6f:d4:fe:
         a1:83:d5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----