Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/eb8bf9d358604365f44fb59c0622c870c6f60e97.roa
File:                     eb8bf9d358604365f44fb59c0622c870c6f60e97.roa (raw, json)
Hash identifier:          Tz+SrR5LN/Vr/sE8XY3v5cN9NC/kba+8pSa56uua/0M=
Subject key identifier:   AB:22:65:BC:00:9D:B3:0B:D7:FF:21:7C:EF:DE:73:58:0A:DD:22:B8
Certificate issuer:       /CN=b5f258ef62df2b196ded7286480ca5b964511dbe
Certificate serial:       19BF27
Authority key identifier: B1:7C:AD:16:94:EC:05:3C:8F:1A:C0:FE:78:30:5D:B8:A6:71:AF:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5f258ef62df2b196ded7286480ca5b964511dbe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/eb8bf9d358604365f44fb59c0622c870c6f60e97.roa
Signing time:             Sat 15 Oct 2022 01:49:21 +0000
ROA not before:           Fri 14 Oct 2022 01:48:25 +0000
ROA not after:            Tue 15 Oct 2024 01:48:25 +0000
asID:                     28423
IP address blocks:        2806:30e::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687335 (0x19bf27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f258ef62df2b196ded7286480ca5b964511dbe
        Validity
            Not Before: Oct 14 01:48:25 2022 GMT
            Not After : Oct 15 01:48:25 2024 GMT
        Subject: CN=eb8bf9d358604365f44fb59c0622c870c6f60e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e1:e6:4c:0b:c6:66:bb:74:8a:4b:56:8b:f5:
                    a7:e2:24:91:e1:90:9d:70:12:85:74:5f:68:a7:ad:
                    0c:58:b0:59:57:03:81:2b:71:7a:2c:3c:b2:e7:97:
                    71:e8:b7:6b:3d:c6:05:2d:c8:17:98:fb:c8:91:f2:
                    05:15:12:fa:01:69:5e:e6:7d:f0:bd:b4:8c:af:5a:
                    f0:47:99:ee:1a:39:59:70:98:1c:86:e9:66:a3:c5:
                    c2:4d:82:4f:bb:a7:04:d3:77:bf:82:a3:60:bf:f7:
                    02:bb:17:f8:0f:c1:44:dd:d8:b4:fd:62:9a:ab:78:
                    66:4d:65:47:e4:f0:e4:fb:48:5d:97:2b:b9:09:a2:
                    51:81:cb:1c:26:13:9b:fc:23:25:79:c7:85:69:e9:
                    17:84:c4:89:ee:6b:70:de:b8:7a:c4:a3:2e:ab:8f:
                    74:45:c9:cd:9a:06:e9:cb:a3:90:44:29:be:16:58:
                    35:24:a0:8b:d8:aa:ac:b2:4d:2e:ba:b6:38:bf:10:
                    84:1d:f6:54:55:7d:97:f6:85:b7:18:c5:45:5b:e6:
                    89:19:bf:2d:fa:22:30:38:0b:88:7b:1a:a7:e0:05:
                    b3:1c:8c:53:9e:9f:80:2e:5b:77:51:7d:7f:34:b2:
                    6d:c4:b2:8f:96:ce:5d:2b:67:d8:0d:00:98:54:fe:
                    9a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:22:65:BC:00:9D:B3:0B:D7:FF:21:7C:EF:DE:73:58:0A:DD:22:B8
            X509v3 Authority Key Identifier:
                keyid:B1:7C:AD:16:94:EC:05:3C:8F:1A:C0:FE:78:30:5D:B8:A6:71:AF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5f258ef62df2b196ded7286480ca5b964511dbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/eb8bf9d358604365f44fb59c0622c870c6f60e97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/b5f258ef62df2b196ded7286480ca5b964511dbe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:30e::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:a8:ce:50:74:8a:01:37:4a:20:56:f2:a5:a0:84:67:fe:3b:
         44:8e:42:e6:cf:25:42:cd:03:1b:be:95:a0:54:c5:b8:85:6e:
         65:37:ea:bc:86:ce:0d:ec:a6:0a:b8:69:ca:91:fd:58:73:6d:
         34:49:1c:a6:0a:76:d6:f6:23:34:51:af:51:94:2b:98:1f:b1:
         9c:22:c6:30:a4:67:72:83:8a:14:3a:2f:e6:d6:67:fa:95:ad:
         6e:f7:6a:f8:d3:0c:e1:0d:e2:b5:2e:e2:84:a6:14:7f:2c:37:
         a0:c9:ec:95:84:6b:21:d2:48:d6:80:c5:ae:90:ad:07:0c:cf:
         2d:d3:a8:11:4a:90:25:39:70:8a:e1:b2:db:91:a4:c7:8d:e3:
         64:55:5d:86:4e:a7:c1:ad:32:8a:22:be:1e:e3:4e:60:83:6a:
         5c:12:eb:b9:fb:af:28:22:76:e1:1d:09:19:86:e6:d1:6f:6c:
         bb:1c:d1:6b:ff:50:d4:a2:1d:b9:5b:b5:81:24:e0:83:8b:90:
         f1:5d:9f:f4:8d:59:7b:31:ab:f8:65:f7:1d:e9:05:78:c1:3d:
         ac:2f:7a:f8:ca:15:43:80:09:68:a9:cb:e9:9a:a8:cd:fa:03:
         aa:35:8f:cb:9a:c8:b1:ac:17:47:12:a3:87:29:31:b2:4d:9a:
         fa:31:bb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----