Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/70b82356189801613f9ff819a837e3cab0b2d7df.roa
File:                     70b82356189801613f9ff819a837e3cab0b2d7df.roa (raw, json)
Hash identifier:          1OG3/2gnfJdAiAOGV6RX6a5iJtrVl5E2GYjXZdWBq+A=
Subject key identifier:   94:A9:8F:F6:D1:29:D8:56:48:A2:93:AB:54:10:CD:74:BA:71:B2:0B
Certificate issuer:       /CN=619037b36cd18d11904cb9935ece4cb8ee755731
Certificate serial:       0BEEE9
Authority key identifier: 35:66:10:B7:BB:39:08:4B:FC:26:DF:D1:C8:D4:2A:71:EC:52:82:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/619037b36cd18d11904cb9935ece4cb8ee755731.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/70b82356189801613f9ff819a837e3cab0b2d7df.roa
Signing time:             Mon 13 Jun 2022 13:04:18 +0000
ROA not before:           Mon 13 Jun 2022 13:04:13 +0000
ROA not after:            Sun 13 Jun 2027 13:04:13 +0000
asID:                     269905
IP address blocks:        2803:4ce0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 782057 (0xbeee9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=619037b36cd18d11904cb9935ece4cb8ee755731
        Validity
            Not Before: Jun 13 13:04:13 2022 GMT
            Not After : Jun 13 13:04:13 2027 GMT
        Subject: CN=70b82356189801613f9ff819a837e3cab0b2d7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3c:6c:81:03:70:03:6a:98:3d:24:51:84:cd:
                    40:25:2a:0c:4c:6f:7f:f2:4f:60:d9:e1:31:24:ef:
                    78:2c:f4:21:65:60:b8:15:c6:bd:22:55:24:f8:5a:
                    9b:dd:3b:a5:9f:35:ff:6f:b3:23:03:dc:1e:e8:b6:
                    d3:c0:f7:ba:de:78:5b:35:5b:d3:ac:58:40:1e:d7:
                    2f:32:66:c0:34:37:d5:d0:e5:cd:18:89:af:19:60:
                    3b:be:e0:1b:4b:f8:5c:25:e8:38:d1:f6:58:ce:cd:
                    e3:3f:a6:fa:91:85:d6:4d:c7:47:2b:65:04:c0:29:
                    32:75:86:27:40:85:59:f0:9d:bf:25:c6:8c:20:7b:
                    b1:bd:31:b3:5b:34:14:0e:97:cc:b0:7d:de:5b:53:
                    40:cc:db:92:81:f0:7b:4a:03:ae:ee:c1:44:65:e9:
                    2d:60:3e:7e:20:6f:71:7e:6a:28:32:3f:e6:bc:f2:
                    d7:3d:12:0b:7f:fc:a6:b5:28:8e:6c:2a:1f:5e:53:
                    58:13:0a:93:e9:8c:7d:71:27:89:8e:c3:e1:ca:39:
                    b0:35:ee:f0:28:4f:42:4c:47:66:91:9a:be:3e:31:
                    59:63:5c:47:f4:91:b1:87:f6:18:6e:97:e7:9b:42:
                    16:f6:6b:39:45:08:27:94:79:d8:76:82:73:f2:c3:
                    d5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A9:8F:F6:D1:29:D8:56:48:A2:93:AB:54:10:CD:74:BA:71:B2:0B
            X509v3 Authority Key Identifier:
                keyid:35:66:10:B7:BB:39:08:4B:FC:26:DF:D1:C8:D4:2A:71:EC:52:82:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/619037b36cd18d11904cb9935ece4cb8ee755731.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/70b82356189801613f9ff819a837e3cab0b2d7df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/619037b36cd18d11904cb9935ece4cb8ee755731.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:a7:1b:5a:88:38:6f:56:e8:9e:e0:bb:0f:09:a9:c9:cb:91:
         15:bb:56:7c:56:9e:7a:79:2e:1e:5d:40:8d:bb:fe:76:5d:f4:
         de:b0:fe:d1:88:3e:94:45:13:ed:22:30:bd:31:cf:5e:d7:29:
         b8:9b:5e:c9:d3:1a:f0:cd:53:df:5b:68:e4:da:35:dd:db:d1:
         d6:e6:9d:bf:ce:4c:6c:af:56:4d:ad:fe:f6:09:49:90:01:6a:
         03:d6:1b:83:79:f4:17:33:47:58:59:f9:88:43:e7:d6:49:52:
         90:de:57:02:3d:5f:04:09:ee:28:2e:f7:bc:a8:eb:a4:c2:71:
         b9:16:55:be:45:69:d9:50:4d:b4:dc:89:be:67:e9:97:d4:00:
         29:f5:85:a2:e9:20:8e:d3:e4:9c:d5:5c:dd:c7:d0:c3:d2:0d:
         a8:c5:de:07:f2:f8:8d:d3:7a:d3:9b:a1:64:0e:0b:f8:78:01:
         e7:f5:f9:e7:d4:50:09:2c:20:76:d8:17:5d:33:11:2f:2b:ed:
         97:cb:d3:29:95:45:24:53:18:e7:2f:c9:81:bf:4b:21:c2:e6:
         3e:ce:9f:e2:b0:a2:55:1e:6e:70:aa:22:95:06:ca:f9:42:f6:
         3f:5e:b6:99:b4:24:c1:c8:bb:8a:c7:0c:b1:0b:dd:2b:18:ee:
         53:67:7f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----