Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54ae1231-b48d-4081-b5c1-57da5f5034aa/67adfbe320d23e6604a53838a23e84d82f5c49d3.roa
File:                     67adfbe320d23e6604a53838a23e84d82f5c49d3.roa (raw, json)
Hash identifier:          xcGXLFaQXKeuFyYjQ9zQcQlehorvreT1Y+SKiGcBL0Y=
Subject key identifier:   42:95:4D:12:DB:24:18:F1:05:6C:1F:77:13:A0:47:8B:90:85:10:CA
Certificate issuer:       /CN=e57f4a5c31ef43865da0ca860f9a05f89cde6f9b
Certificate serial:       4DD3
Authority key identifier: A2:E9:D7:53:95:AE:4E:41:89:A8:73:C0:C3:B0:BB:31:41:A5:3B:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e57f4a5c31ef43865da0ca860f9a05f89cde6f9b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54ae1231-b48d-4081-b5c1-57da5f5034aa/67adfbe320d23e6604a53838a23e84d82f5c49d3.roa
Signing time:             Tue 10 Jan 2023 02:34:20 +0000
ROA not before:           Mon 09 Jan 2023 02:34:15 +0000
ROA not after:            Fri 10 Jan 2025 02:34:15 +0000
asID:                     272051
IP address blocks:        2803:1d10::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19923 (0x4dd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e57f4a5c31ef43865da0ca860f9a05f89cde6f9b
        Validity
            Not Before: Jan  9 02:34:15 2023 GMT
            Not After : Jan 10 02:34:15 2025 GMT
        Subject: CN=67adfbe320d23e6604a53838a23e84d82f5c49d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:76:3f:b4:1d:b3:9e:6b:57:ca:a6:9c:f6:7c:
                    c2:3e:f9:5b:ba:8a:a0:7e:f8:c2:df:44:6a:67:11:
                    af:22:9e:d5:3c:4e:22:64:da:3c:96:39:6c:ec:4c:
                    5e:6e:32:68:e4:84:33:76:0f:31:5a:eb:ba:f4:48:
                    92:06:1e:bf:39:7f:47:35:0e:0e:29:e6:14:10:68:
                    70:c8:39:11:f4:8c:48:8e:8f:da:05:a1:54:73:aa:
                    2b:e0:b6:34:18:ee:3a:10:7a:b9:82:17:24:28:34:
                    65:4e:d6:e9:41:0f:c3:4f:f3:3d:e5:92:47:ed:1b:
                    dc:99:83:74:54:b4:28:91:f3:f7:e4:49:62:27:57:
                    fc:de:ce:57:07:89:17:be:e2:82:80:48:b1:71:f4:
                    38:fc:9b:51:26:d0:b2:0c:19:9c:6a:dd:d2:9b:3b:
                    d3:8d:63:5d:f7:35:42:ae:94:71:c3:19:3f:0b:c5:
                    b9:f2:44:d7:52:a9:b1:83:b1:17:f3:ff:31:fd:35:
                    b4:ba:77:1f:46:09:a6:b4:0d:7b:da:a1:7a:9d:e2:
                    b8:11:f3:f0:10:ea:c4:b3:f8:e9:f6:e7:08:60:5a:
                    9f:2a:0c:a4:4d:58:b7:1a:17:b7:c5:23:92:51:d7:
                    63:ee:84:61:96:73:5c:ff:82:f7:d2:82:47:67:52:
                    c4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:95:4D:12:DB:24:18:F1:05:6C:1F:77:13:A0:47:8B:90:85:10:CA
            X509v3 Authority Key Identifier:
                keyid:A2:E9:D7:53:95:AE:4E:41:89:A8:73:C0:C3:B0:BB:31:41:A5:3B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e57f4a5c31ef43865da0ca860f9a05f89cde6f9b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54ae1231-b48d-4081-b5c1-57da5f5034aa/67adfbe320d23e6604a53838a23e84d82f5c49d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54ae1231-b48d-4081-b5c1-57da5f5034aa/e57f4a5c31ef43865da0ca860f9a05f89cde6f9b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:b4:32:a9:b4:ec:a4:a5:b4:7b:c2:44:a4:c6:b8:1f:c5:cb:
         a2:66:94:e7:bc:15:39:7e:7c:28:32:94:1c:9b:60:7a:d3:ca:
         aa:78:e7:a3:de:4f:95:15:46:b4:0a:26:7e:2c:f0:8d:18:e4:
         ee:c4:b3:a1:5a:ee:5d:ee:9e:00:68:50:50:bd:d1:f5:3b:7d:
         77:09:4e:5e:9f:4b:7b:0c:c4:2f:09:57:10:4d:5b:8d:58:0c:
         3f:f8:d5:e1:ae:3b:ff:64:23:02:04:20:1e:ab:38:81:1f:9d:
         16:51:52:e5:32:0a:f8:f8:91:45:41:74:b0:45:c8:0f:87:7c:
         c5:27:4d:d1:11:a0:4a:8b:44:11:78:21:e2:be:dd:56:5e:02:
         2b:d9:fb:18:e7:be:08:b5:65:05:34:08:3a:86:fa:cd:04:91:
         a1:cb:3d:dc:f1:4a:62:10:e3:91:11:34:b9:4a:60:18:28:0e:
         f3:2c:14:da:6f:df:71:55:e1:e2:75:5a:75:e5:ee:cf:24:dc:
         41:66:83:72:e9:16:62:8c:a2:06:f4:b7:e5:73:3f:30:65:a4:
         a5:0d:31:95:ec:16:d2:be:56:2b:27:9e:8d:92:4d:d5:96:0e:
         d8:aa:59:2c:ac:46:61:b3:ce:33:7f:ce:58:8c:42:48:27:5b:
         3a:ed:af:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----