Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/de66a36c956ffbdd44535e5853d04cc994ff188e.roa
File:                     de66a36c956ffbdd44535e5853d04cc994ff188e.roa (raw, json)
Hash identifier:          6AMlv3XA5lhaPbwN1Yen5XORHNBJUg5nbnANNSWkXBE=
Subject key identifier:   E3:42:7D:D4:10:05:F9:26:5F:08:A6:80:FF:F6:41:8C:CB:01:DE:21
Certificate issuer:       /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial:       0D6A33
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/de66a36c956ffbdd44535e5853d04cc994ff188e.roa
Signing time:             Sat 01 Jan 2022 17:48:45 +0000
ROA not before:           Sat 01 Jan 2022 03:00:00 +0000
ROA not after:            Sun 01 Jan 2023 03:00:00 +0000
asID:                     269862
IP address blocks:        2803:b0e0:9983::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879155 (0xd6a33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
        Validity
            Not Before: Jan  1 03:00:00 2022 GMT
            Not After : Jan  1 03:00:00 2023 GMT
        Subject: CN=de66a36c956ffbdd44535e5853d04cc994ff188e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:a9:3c:b4:57:ea:80:5e:ea:12:71:01:fb:
                    92:16:e1:97:ff:3a:d3:e0:e0:20:65:8e:27:4b:ba:
                    a5:44:c9:47:64:b9:61:9a:e5:6d:e4:09:d2:d1:14:
                    7e:fe:fd:b7:39:ea:f6:82:0c:16:43:12:81:7f:a8:
                    24:f6:95:f0:e4:b5:cc:2c:49:b1:29:4a:e4:6e:8d:
                    57:f2:89:58:ad:53:2e:e1:14:61:c0:18:d6:40:6d:
                    64:1e:0a:a0:dd:ed:0e:01:9e:c4:a7:94:6e:84:b9:
                    c3:b6:13:a5:4e:79:5e:2a:2d:2c:1e:b7:6f:82:06:
                    5f:94:d5:d0:25:16:b8:30:03:81:9e:bd:9c:eb:b9:
                    58:47:c7:3b:2c:34:7c:cc:e3:a6:9e:b8:34:4d:24:
                    5f:c8:66:18:9c:c8:fd:4e:fb:6c:e5:6c:bc:53:e7:
                    73:99:8e:4e:27:96:0e:4f:33:36:34:ab:11:c3:2c:
                    3c:41:bc:7a:2a:de:0b:86:bd:ce:70:79:69:eb:64:
                    30:cb:1c:4f:e3:a3:0e:a9:77:74:45:e4:cd:25:92:
                    d0:da:0b:c2:b8:bb:4f:0a:63:4a:15:0d:d2:97:3e:
                    71:e5:96:09:ba:ed:4a:d4:9a:c6:a5:56:96:9d:79:
                    7e:68:1d:5d:80:ac:54:56:d9:12:bb:a7:55:4e:38:
                    0b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:42:7D:D4:10:05:F9:26:5F:08:A6:80:FF:F6:41:8C:CB:01:DE:21
            X509v3 Authority Key Identifier:
                keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/de66a36c956ffbdd44535e5853d04cc994ff188e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:9983::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:79:c9:f8:f3:fd:0f:ce:1d:c4:6b:b0:79:5e:bb:83:1b:24:
         08:53:7c:05:25:6a:7d:58:78:22:81:9b:3e:70:33:78:7c:92:
         cf:4c:47:1e:13:20:d4:8e:75:9d:69:97:fc:db:0c:35:62:0f:
         71:77:09:89:b7:57:2d:74:93:32:ac:45:73:b2:5a:61:93:a3:
         bc:e3:23:bd:81:ad:67:73:1b:71:cc:ca:e6:fc:95:18:87:b0:
         01:bd:94:d4:62:86:7e:2d:b3:36:56:ac:a0:9d:29:b3:d8:40:
         e4:48:b7:f4:c0:61:9a:86:6c:c5:0f:65:7a:81:81:4a:61:8a:
         89:a5:d5:6d:61:59:5a:93:77:54:0c:0f:51:ce:34:7d:49:25:
         84:23:4c:93:95:4c:18:37:b8:b7:67:fd:82:b0:13:1c:a8:69:
         a4:f7:2b:ab:05:9e:33:3c:e9:c2:13:44:88:a0:33:33:6b:4f:
         38:5a:3b:9b:10:3a:cf:93:75:d0:a0:26:a6:a4:99:b9:b6:31:
         50:60:4a:75:0e:16:1f:48:dc:ff:a6:67:1a:a0:d8:36:62:48:
         af:8a:20:02:08:1f:71:4a:b7:c4:05:20:34:bf:91:8c:be:f8:
         e8:31:52:65:6b:4f:f7:5c:d6:c2:98:04:95:d1:73:c1:cf:6f:
         8e:45:4e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----