Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/5708a420d91a14b829b5adcc07a188cff942c9b6.roa
File:                     5708a420d91a14b829b5adcc07a188cff942c9b6.roa (raw, json)
Hash identifier:          HocI3gQSsh/fHXYLVwvEsCJguXh2DHMjLuCJnaxF5LM=
Subject key identifier:   15:6B:B7:71:B2:B1:EF:48:F3:52:97:55:B5:34:6B:19:04:6C:7C:13
Certificate issuer:       /CN=be51756b3d6021dd6ee3d4415280c6f6b7603b86
Certificate serial:       207F18
Authority key identifier: 35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/5708a420d91a14b829b5adcc07a188cff942c9b6.roa
Signing time:             Thu 25 May 2023 08:30:03 +0000
ROA not before:           Wed 24 May 2023 08:30:03 +0000
ROA not after:            Fri 23 May 2025 08:30:03 +0000
asID:                     26210
IP address blocks:        2800:88:11::/48 maxlen: 48
                          2800:88:12::/48 maxlen: 48
                          2800:88:13::/48 maxlen: 48
                          2800:88:1a00::/40 maxlen: 48
                          2800:88:1b00::/40 maxlen: 48
                          2800:88:40::/48 maxlen: 48
                          2800:88:d::/48 maxlen: 48
                          2800:88:e::/48 maxlen: 48
                          2800:88:f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2129688 (0x207f18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be51756b3d6021dd6ee3d4415280c6f6b7603b86
        Validity
            Not Before: May 24 08:30:03 2023 GMT
            Not After : May 23 08:30:03 2025 GMT
        Subject: CN=5708a420d91a14b829b5adcc07a188cff942c9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6c:63:c1:cb:1c:fe:18:16:70:bc:29:78:3f:
                    b4:57:6e:59:5f:94:bb:26:5c:b6:65:84:e0:60:78:
                    7b:16:5b:e8:d8:dd:b4:e9:c6:41:1a:85:08:08:0b:
                    ce:64:b7:0c:44:44:86:05:c5:fc:00:b6:40:3b:6a:
                    f8:0a:0c:a7:28:4b:da:52:67:fd:99:72:bb:ec:fe:
                    41:5e:60:28:9b:06:cd:68:d3:dc:30:c7:5e:38:93:
                    ef:13:1e:b3:71:27:32:f5:e4:90:c5:b5:b8:39:d3:
                    4a:a5:bb:62:35:ae:51:57:18:3d:8b:74:7d:1a:cb:
                    9c:cd:78:0e:aa:86:aa:77:41:a8:48:67:04:f1:9c:
                    05:24:18:a9:a6:0f:57:08:b1:6e:95:34:20:52:8a:
                    2a:43:1b:d6:4d:bd:c6:e2:1b:3f:d1:a2:78:e8:44:
                    7e:80:f3:c9:da:fc:5b:52:ef:97:7f:4e:7d:f5:b7:
                    53:87:a2:a3:0b:3b:cb:d4:46:82:a7:d7:3f:a6:26:
                    f9:24:18:38:dc:15:af:a7:64:6f:22:36:fe:7c:83:
                    75:b0:9e:a4:0d:c8:45:8e:df:4f:cc:86:80:2f:bf:
                    5c:c5:83:cd:67:d8:14:91:5c:31:55:b5:e3:88:92:
                    01:a5:ba:43:47:d5:b7:ac:9c:09:3e:8a:9a:67:cf:
                    2c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6B:B7:71:B2:B1:EF:48:F3:52:97:55:B5:34:6B:19:04:6C:7C:13
            X509v3 Authority Key Identifier:
                keyid:35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/5708a420d91a14b829b5adcc07a188cff942c9b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/be51756b3d6021dd6ee3d4415280c6f6b7603b86.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:88:d::-2800:88:f:ffff:ffff:ffff:ffff:ffff
                  2800:88:11::-2800:88:13:ffff:ffff:ffff:ffff:ffff
                  2800:88:40::/48
                  2800:88:1a00::/39

    Signature Algorithm: sha256WithRSAEncryption
         3e:7b:27:4d:39:16:1a:1e:f5:05:32:fb:50:49:1c:cc:2c:e8:
         70:e8:bb:58:8b:66:39:fa:32:a0:4c:9e:8f:7b:88:d4:76:c7:
         0d:31:08:3d:17:1f:d6:f1:05:5d:c9:f2:85:b6:98:03:b6:11:
         bb:1e:36:50:f6:00:b3:26:d2:b0:79:9b:e1:9d:db:1d:9a:18:
         a8:8a:02:39:23:03:1d:44:59:af:7b:e8:68:73:42:63:50:b4:
         a4:b6:2f:fd:87:b1:45:33:8e:fe:73:c4:0f:37:20:a5:16:1d:
         ac:0b:db:41:12:30:5a:d7:72:61:5f:85:83:14:55:99:8c:35:
         70:d9:4b:a0:1b:f1:73:60:b0:22:15:67:66:1c:44:cc:a6:f1:
         e5:47:5f:01:5f:ed:2a:4d:a3:3f:0d:50:57:32:ec:fe:81:af:
         00:ca:d6:86:76:67:d9:57:6d:0a:a0:03:24:4d:54:0a:a7:36:
         5d:02:f1:16:a9:5f:e8:d4:14:fd:7d:e5:87:b4:bf:5b:e6:9c:
         3b:90:5c:93:7b:71:ee:98:95:1a:85:f3:e4:a5:91:8b:a8:90:
         28:48:7e:85:e0:ba:e3:91:76:e5:a1:e5:94:0c:aa:62:a9:b4:
         1b:39:76:d5:41:59:57:00:00:d6:93:ea:1c:46:e6:5a:75:d2:
         88:ef:0f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----