Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/e189cf236b8234cdca736f5b95ca90eefb528fe5.roa
File:                     e189cf236b8234cdca736f5b95ca90eefb528fe5.roa (raw, json)
Hash identifier:          9BEYN6tqbKL9UG1hB5/BE8GWDuMup0STDN1luYnGDrc=
Subject key identifier:   C4:57:24:BE:B1:A1:CE:94:BE:14:3E:4C:89:44:BF:14:AE:52:4B:17
Certificate issuer:       /CN=43d1351614e693788211d4b7aaaf7f8f5d919d3d
Certificate serial:       5544
Authority key identifier: CB:68:5C:F7:85:F0:12:21:37:BD:7F:BF:AE:D3:EF:F7:5C:3D:27:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43d1351614e693788211d4b7aaaf7f8f5d919d3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/e189cf236b8234cdca736f5b95ca90eefb528fe5.roa
Signing time:             Thu 13 Oct 2022 15:35:21 +0000
ROA not before:           Wed 12 Oct 2022 15:32:28 +0000
ROA not after:            Sun 13 Oct 2024 15:32:28 +0000
asID:                     272875
IP address blocks:        2803:4a90::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21828 (0x5544)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d1351614e693788211d4b7aaaf7f8f5d919d3d
        Validity
            Not Before: Oct 12 15:32:28 2022 GMT
            Not After : Oct 13 15:32:28 2024 GMT
        Subject: CN=e189cf236b8234cdca736f5b95ca90eefb528fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:44:9b:16:06:2c:47:26:86:1b:31:f3:0b:28:
                    23:b7:b1:ae:8d:8a:90:76:26:d7:e3:0e:0c:f3:72:
                    bd:93:1a:aa:d8:5a:86:92:ba:89:c9:04:67:05:47:
                    56:cf:4b:97:53:79:3f:31:1a:04:6b:c1:ed:03:32:
                    0a:6a:97:88:e4:69:fa:78:82:e6:ea:3c:c0:a3:a7:
                    30:9f:de:ca:cc:69:d9:b6:53:ed:57:55:61:3a:6c:
                    a5:69:b0:8d:a8:c0:a8:aa:5e:82:80:4b:1b:5d:9b:
                    61:b3:fc:57:c9:f2:02:19:49:f7:ea:a8:3e:ee:d6:
                    7b:ce:12:ab:bf:39:ff:c6:c4:c2:7d:4a:53:41:bd:
                    35:ca:28:94:68:ed:cc:e5:55:fb:95:43:53:f9:16:
                    20:b9:e2:bf:3a:e2:27:1a:7e:8d:5b:c5:83:5a:cf:
                    a6:a3:8d:c9:4e:c3:b1:a0:4b:59:d2:9e:1d:02:36:
                    99:fc:0a:06:00:76:f5:95:54:c2:ca:1b:dc:fb:6b:
                    5a:f6:86:52:df:d5:8b:3e:55:2f:cb:37:0b:ba:d2:
                    d9:15:46:be:61:ed:39:30:94:d1:8c:43:f9:d2:cd:
                    15:73:c7:9a:b5:ec:f9:27:37:17:81:81:e2:9a:8b:
                    e9:6d:e2:2f:7f:9d:46:6f:57:e1:e8:e8:a9:84:27:
                    c3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:57:24:BE:B1:A1:CE:94:BE:14:3E:4C:89:44:BF:14:AE:52:4B:17
            X509v3 Authority Key Identifier:
                keyid:CB:68:5C:F7:85:F0:12:21:37:BD:7F:BF:AE:D3:EF:F7:5C:3D:27:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43d1351614e693788211d4b7aaaf7f8f5d919d3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/e189cf236b8234cdca736f5b95ca90eefb528fe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/43d1351614e693788211d4b7aaaf7f8f5d919d3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:d2:58:77:35:0d:4f:ab:5b:63:24:50:7b:77:f1:4f:a3:cb:
         fe:60:23:36:43:d7:46:0d:bc:f6:98:1a:fb:ae:d3:e8:8a:ba:
         83:4d:16:38:48:61:6c:a7:df:e5:20:d2:21:61:f5:6c:00:bb:
         73:d4:bb:1b:e2:47:40:de:d6:fe:24:3e:79:24:d9:49:d3:16:
         54:5b:15:1d:1b:05:4f:ff:a0:7c:69:86:d6:b2:4b:78:0b:59:
         34:d7:0f:38:4d:92:3e:76:7c:76:f1:10:4e:b5:a3:2c:6f:1c:
         ff:a2:13:19:b0:b4:8d:43:2d:20:e5:66:3f:58:9d:c8:8d:92:
         1a:04:61:e9:60:92:b9:cf:21:f6:6c:43:d5:08:44:6d:ef:a4:
         97:8c:15:1e:46:e5:4f:fb:49:93:b6:e0:eb:3c:c1:fa:41:46:
         f0:45:81:bf:f8:d7:d1:0d:ec:7f:a7:3b:06:f7:37:ef:b1:82:
         27:f6:a9:a8:64:72:b7:ac:ea:ad:79:6f:b7:da:e3:d9:64:b0:
         86:9f:21:d6:06:a1:ac:7c:91:3e:1b:7b:74:0a:73:3c:29:8a:
         10:9c:2d:50:f4:e3:ed:0a:66:8a:aa:fa:b3:7b:51:4a:b1:9c:
         b1:45:4a:01:cc:e3:e2:2b:95:b4:2e:2e:94:34:4b:16:64:88:
         f7:38:17:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----