Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27ad8d62-5452-47d0-b425-505bad9890c3/56e0f9384c9cf33de844dcfa0921e76404eb853c.roa
File:                     56e0f9384c9cf33de844dcfa0921e76404eb853c.roa (raw, json)
Hash identifier:          wxS+eHoGLR321XpXK+jWk0EFa97h3ZEqncTosmHrjGg=
Subject key identifier:   86:75:0C:FD:6A:BE:21:BD:7A:C9:13:C3:46:71:89:C1:9A:84:A1:99
Certificate issuer:       /CN=19fdaf7213e9c0035d7ccdc05f07ceca37cdfdeb
Certificate serial:       7960
Authority key identifier: CE:65:61:1E:20:D7:63:69:5B:1B:57:37:32:E3:CB:FA:80:EF:E7:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19fdaf7213e9c0035d7ccdc05f07ceca37cdfdeb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27ad8d62-5452-47d0-b425-505bad9890c3/56e0f9384c9cf33de844dcfa0921e76404eb853c.roa
Signing time:             Wed 09 Mar 2022 23:01:22 +0000
ROA not before:           Fri 18 Feb 2022 03:00:00 +0000
ROA not after:            Sun 18 Feb 2024 03:00:00 +0000
asID:                     272004
IP address blocks:        2803:6910::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31072 (0x7960)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19fdaf7213e9c0035d7ccdc05f07ceca37cdfdeb
        Validity
            Not Before: Feb 18 03:00:00 2022 GMT
            Not After : Feb 18 03:00:00 2024 GMT
        Subject: CN=56e0f9384c9cf33de844dcfa0921e76404eb853c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:aa:f4:08:dd:bd:0c:3e:4b:ee:8d:61:79:48:
                    da:ba:25:1b:94:34:1d:37:f0:96:d2:c1:1f:9d:10:
                    5f:ab:dc:dc:0b:5a:8a:ef:f2:d2:22:54:7d:89:4c:
                    c6:1e:8a:ab:0c:5d:66:8c:88:33:16:25:22:40:15:
                    48:42:59:f1:76:ac:9e:cf:a3:32:34:8f:06:6e:cc:
                    fc:53:10:cb:39:3c:26:fc:c6:ec:ea:c7:6d:a9:77:
                    97:ff:cf:69:ea:a7:d7:2c:eb:de:a2:4b:4c:b2:76:
                    de:8a:b7:f4:b4:ee:23:0f:6f:a8:3f:16:eb:90:95:
                    9b:de:9f:e6:b6:9a:3d:d5:bf:bc:98:21:b9:e3:4c:
                    a1:d3:8e:5c:97:7b:a0:a9:67:d9:ec:35:51:8e:11:
                    6e:25:0c:da:74:33:1c:66:c6:74:16:2d:82:32:1c:
                    90:90:65:be:cc:31:25:4e:ba:28:71:37:bc:32:8b:
                    0a:74:51:bd:18:8b:53:30:1c:bf:57:bc:88:28:e7:
                    67:63:50:29:5f:77:6a:79:c4:8e:57:ba:7f:94:15:
                    ed:fa:22:ba:c4:89:2f:47:4b:0e:bd:49:02:0e:47:
                    89:b6:46:ee:b9:9c:6d:7e:6f:3d:b5:1a:80:fa:8a:
                    fd:e8:ec:f8:fe:0f:bd:9b:5f:a7:29:3c:95:e9:6e:
                    7f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:75:0C:FD:6A:BE:21:BD:7A:C9:13:C3:46:71:89:C1:9A:84:A1:99
            X509v3 Authority Key Identifier:
                keyid:CE:65:61:1E:20:D7:63:69:5B:1B:57:37:32:E3:CB:FA:80:EF:E7:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19fdaf7213e9c0035d7ccdc05f07ceca37cdfdeb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27ad8d62-5452-47d0-b425-505bad9890c3/56e0f9384c9cf33de844dcfa0921e76404eb853c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27ad8d62-5452-47d0-b425-505bad9890c3/19fdaf7213e9c0035d7ccdc05f07ceca37cdfdeb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6910::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:2c:44:4f:e3:ae:dd:73:1a:4b:4f:c7:54:ef:e1:ac:74:2a:
         c2:9e:99:23:38:c3:99:05:5f:30:73:ec:85:ec:f1:08:e0:c2:
         eb:73:c3:75:79:0a:26:3e:7f:6a:d8:0f:e9:39:25:e1:ca:c9:
         65:a8:b1:d5:e8:8f:9d:a4:46:56:cb:c0:c0:27:c7:ce:77:1e:
         19:2d:98:78:a3:d1:0b:a2:6b:8d:3c:f7:58:15:2c:d0:24:8c:
         32:45:2f:2d:bc:02:a0:53:39:76:75:07:e4:9b:25:bc:5f:db:
         91:c0:3c:51:75:ed:78:86:97:cd:ed:49:41:da:4a:d6:46:32:
         9b:03:d4:ed:bb:2c:5d:d1:35:a3:11:12:d0:bc:78:5c:70:c0:
         d2:6b:00:cc:16:3a:e0:65:18:e3:c7:c3:94:9a:f1:6a:9b:ef:
         6d:2c:43:19:9b:03:6e:46:74:d8:fa:40:70:b4:09:3f:d3:e4:
         01:25:e7:93:50:a7:b0:f4:1a:fd:b8:d4:8a:2b:9b:66:16:31:
         0c:00:a8:2d:a8:36:f2:a0:53:cd:d4:d8:e7:06:51:4b:01:4e:
         5f:ab:4f:7f:47:d9:06:4c:5f:c6:4d:20:97:b1:96:fd:3d:5e:
         3a:14:45:0f:43:4f:1d:f7:7d:b5:e7:50:80:45:fc:52:09:98:
         74:c6:9c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----