Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/22e6c3dc4dcb674b068fefd7700a333bf90506e5.roa
File:                     22e6c3dc4dcb674b068fefd7700a333bf90506e5.roa (raw, json)
Hash identifier:          Rf1dCK3ku+nOM+2yzKwE4fK0FGUcL9cfVyd/O/YUtxs=
Subject key identifier:   5D:7B:5C:65:84:F3:9F:5F:85:4C:9E:BA:8B:3A:43:46:31:E6:29:96
Certificate issuer:       /CN=3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d
Certificate serial:       051E
Authority key identifier: F2:F1:2A:57:7E:1C:1E:E1:95:2E:70:F8:99:6B:B7:EB:89:C7:BD:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/22e6c3dc4dcb674b068fefd7700a333bf90506e5.roa
Signing time:             Wed 08 Mar 2023 13:31:21 +0000
ROA not before:           Tue 07 Mar 2023 13:30:28 +0000
ROA not after:            Sat 08 Mar 2025 13:30:28 +0000
asID:                     269746
IP address blocks:        2803:3960:1::/48 maxlen: 48
                          2803:3960:2::/48 maxlen: 48
                          2803:3960:3::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1310 (0x51e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d
        Validity
            Not Before: Mar  7 13:30:28 2023 GMT
            Not After : Mar  8 13:30:28 2025 GMT
        Subject: CN=22e6c3dc4dcb674b068fefd7700a333bf90506e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2b:f7:bd:fc:ef:c4:df:17:58:fd:9d:92:98:
                    79:6a:af:2c:aa:0a:4d:7e:e2:06:02:f2:75:95:33:
                    66:c3:b5:0f:c6:b5:d9:e6:0f:3d:a1:6f:de:99:61:
                    00:d6:bb:a5:b8:60:fa:cd:61:43:77:70:a3:18:22:
                    ba:49:fd:90:18:23:40:c8:f2:83:89:39:67:4e:88:
                    c8:75:8f:88:2f:82:94:c6:b3:5b:66:20:e5:99:ce:
                    07:b1:c8:94:02:07:d5:6e:cd:a3:99:46:1c:dc:6d:
                    01:08:37:b4:de:3e:b1:2c:c0:14:e6:66:91:12:70:
                    63:1a:71:5c:37:99:cb:1c:e7:10:3a:ba:af:6a:11:
                    3a:32:1b:9c:f1:c9:48:4d:28:9d:c6:6b:13:3f:78:
                    8a:6b:da:17:79:e5:55:ca:36:da:6b:04:f5:3e:69:
                    9f:e9:36:34:a6:be:26:40:99:46:35:18:c6:f5:c1:
                    c3:62:0f:01:50:d3:10:e0:bc:ed:0f:ff:7b:93:75:
                    82:a7:93:ff:13:da:d7:77:d5:a7:7f:08:d5:c2:e0:
                    e8:0e:73:e2:17:95:cd:95:6d:3e:a7:15:b2:cb:72:
                    13:25:20:84:77:4d:57:f4:5e:f0:0f:c8:ea:c0:f6:
                    32:04:6d:91:a8:6e:ae:6a:7e:dd:5f:cf:1e:6a:66:
                    0b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7B:5C:65:84:F3:9F:5F:85:4C:9E:BA:8B:3A:43:46:31:E6:29:96
            X509v3 Authority Key Identifier:
                keyid:F2:F1:2A:57:7E:1C:1E:E1:95:2E:70:F8:99:6B:B7:EB:89:C7:BD:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/22e6c3dc4dcb674b068fefd7700a333bf90506e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3960:1::-2803:3960:3:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         76:51:75:89:93:04:a2:7b:ed:7f:58:52:9f:4e:1e:b7:f5:04:
         35:76:88:6d:e7:a0:59:c1:2b:6d:36:41:b3:f1:c4:fb:f8:5c:
         43:c7:6b:a6:c9:39:d2:c0:1a:a2:99:95:d2:29:76:b7:f7:76:
         e8:1a:75:b3:31:44:57:ab:08:54:c7:73:38:87:7a:ea:57:11:
         29:71:b3:0f:30:fe:fe:49:91:b5:d8:b0:4e:4e:e9:ae:46:e0:
         e5:fb:5f:b7:02:0a:47:48:15:7c:cc:dd:9c:7b:dd:e8:30:5b:
         c5:1c:cc:6e:ec:c2:fc:6e:c0:e5:c2:d3:1d:30:d3:90:2f:ee:
         44:92:db:aa:f9:6a:83:8f:da:3d:c5:a1:d4:72:f6:a1:3c:25:
         98:d8:e9:3e:06:a7:c3:2f:24:4d:f2:aa:ee:50:ed:86:0a:ec:
         3c:97:bd:ff:4c:bf:fc:ec:26:df:31:9c:dc:7d:f1:ad:24:ff:
         17:79:3d:04:49:49:13:77:d3:76:2e:b1:8f:50:84:3b:5b:80:
         df:11:a1:ec:1d:6b:fa:17:3c:9c:cc:a7:97:91:ed:48:23:92:
         3d:cd:8c:46:4f:4f:d6:9e:bd:b3:75:e0:22:73:a1:61:53:9d:
         9c:e1:cf:a0:ff:e7:4e:62:d8:f4:ff:df:4b:96:e9:9b:bc:5a:
         eb:4a:b8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----