Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27ad8d62-5452-47d0-b425-505bad9890c3/034a5ff154f9c3de58d5eaf74ef80e4240915aa3.roa
File:                     034a5ff154f9c3de58d5eaf74ef80e4240915aa3.roa (raw, json)
Hash identifier:          +i2nyNg47tIsxfQ0xBfWc8ijw8uNz4uAN3qWEJQAX60=
Subject key identifier:   EF:F9:50:45:92:CE:B4:C4:18:77:27:95:8E:09:05:6D:64:15:41:35
Certificate issuer:       /CN=19fdaf7213e9c0035d7ccdc05f07ceca37cdfdeb
Certificate serial:       7A8A
Authority key identifier: CE:65:61:1E:20:D7:63:69:5B:1B:57:37:32:E3:CB:FA:80:EF:E7:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19fdaf7213e9c0035d7ccdc05f07ceca37cdfdeb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27ad8d62-5452-47d0-b425-505bad9890c3/034a5ff154f9c3de58d5eaf74ef80e4240915aa3.roa
Signing time:             Wed 09 Mar 2022 23:03:38 +0000
ROA not before:           Wed 09 Mar 2022 03:00:00 +0000
ROA not after:            Sat 09 Mar 2024 03:00:00 +0000
asID:                     272004
IP address blocks:        2803:6910::/34 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31370 (0x7a8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19fdaf7213e9c0035d7ccdc05f07ceca37cdfdeb
        Validity
            Not Before: Mar  9 03:00:00 2022 GMT
            Not After : Mar  9 03:00:00 2024 GMT
        Subject: CN=034a5ff154f9c3de58d5eaf74ef80e4240915aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:fc:33:e9:dd:2e:29:73:42:e2:01:cf:e7:
                    d5:43:9c:fb:2c:d9:1d:b5:27:9d:ad:06:ab:c1:bd:
                    c8:65:33:12:cd:f6:6a:ca:4c:75:74:46:d3:64:65:
                    fe:50:ce:68:22:15:7c:4b:21:18:58:5a:43:a5:48:
                    e8:99:0f:4b:ff:68:cc:27:27:35:44:43:f1:e2:44:
                    80:61:4f:dd:6e:1d:4d:a5:d4:64:e4:30:ad:52:fc:
                    c5:7a:bc:a7:60:97:36:e4:6d:7c:25:13:52:1b:71:
                    f6:31:18:c5:f0:92:20:b2:7b:2b:ab:9e:a3:6a:e9:
                    bc:32:34:b8:5e:96:af:a4:45:97:d2:ad:dd:76:f6:
                    5e:e8:dd:a4:75:0a:e1:3e:24:bc:52:7a:ba:57:01:
                    f6:c1:dc:41:35:cf:eb:cf:18:56:8b:8c:a5:d0:b8:
                    4e:26:1c:76:3b:c0:8d:9e:3f:d4:5f:a1:1a:77:43:
                    34:f6:57:ac:a7:a1:f1:62:fd:b8:d8:c7:73:56:ea:
                    cf:59:0a:76:77:17:13:5d:40:f9:17:91:f4:f5:88:
                    d3:00:7a:8c:89:0e:82:6e:34:52:96:b9:3b:88:58:
                    55:ad:d3:67:b4:f6:35:dc:92:da:32:d7:81:7b:cf:
                    8f:bd:5b:fa:ae:6b:2e:f1:d7:f7:14:d8:c0:da:d4:
                    15:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F9:50:45:92:CE:B4:C4:18:77:27:95:8E:09:05:6D:64:15:41:35
            X509v3 Authority Key Identifier:
                keyid:CE:65:61:1E:20:D7:63:69:5B:1B:57:37:32:E3:CB:FA:80:EF:E7:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19fdaf7213e9c0035d7ccdc05f07ceca37cdfdeb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27ad8d62-5452-47d0-b425-505bad9890c3/034a5ff154f9c3de58d5eaf74ef80e4240915aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27ad8d62-5452-47d0-b425-505bad9890c3/19fdaf7213e9c0035d7ccdc05f07ceca37cdfdeb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6910::/34

    Signature Algorithm: sha256WithRSAEncryption
         05:c7:76:36:ab:06:14:bd:5a:75:61:f4:6f:d6:3a:e4:39:6e:
         83:09:fe:7b:6b:48:83:1c:63:da:83:4e:e9:dc:4d:55:21:25:
         e7:c9:19:e1:ad:aa:0f:7e:75:d2:90:f9:8e:1a:f6:16:68:a1:
         0b:ad:09:58:db:73:e2:ac:53:52:50:13:8a:43:8a:01:21:45:
         10:e5:07:ef:65:fe:f1:4e:f9:34:f8:a8:c0:09:9b:45:2a:88:
         75:94:ef:c7:65:80:c7:d7:55:2d:c8:c0:a1:7d:9c:ad:6e:f6:
         c8:47:1d:35:0a:5c:a1:52:8b:68:ec:b4:45:17:83:88:a3:b8:
         2d:d6:85:14:bb:02:09:76:5a:5e:61:b2:8a:99:3e:01:7a:61:
         66:e2:48:23:78:98:3d:a4:00:23:04:0b:99:55:47:26:77:5c:
         bc:18:27:28:1c:28:ff:f8:f2:ee:da:24:50:71:76:7f:86:11:
         a9:03:ce:c0:f7:1d:68:06:6d:9c:ad:66:10:92:34:05:81:d5:
         7c:6f:1b:67:b7:ee:db:d3:97:74:3f:f0:b0:ad:50:20:c1:6a:
         e2:5b:e7:02:29:e2:84:b4:6b:e8:50:49:9c:f9:a2:d4:fd:8b:
         89:15:13:9d:6a:a4:9b:2d:38:16:e8:88:7e:1a:fb:03:23:a7:
         e9:60:ec:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----