Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5bb3592e-ba9a-4946-914d-7fee918b2577/9a0db5fdc89d1fd972956c14816a123764af9dfe.roa
File:                     9a0db5fdc89d1fd972956c14816a123764af9dfe.roa (raw, json)
Hash identifier:          Gmim1CgR1EA+gOKNUmgEv1oDMl3POOnyp9UDNe5DiZU=
Subject key identifier:   A0:CA:29:A1:17:AD:57:25:72:63:38:EF:CD:6F:30:90:73:6E:F3:7E
Certificate issuer:       /CN=06f6143d984e42d40da19f4f36d19bbb0ccf959c
Certificate serial:       024A
Authority key identifier: 07:2A:41:D8:27:9B:3D:D1:28:E2:FE:63:F4:DA:6E:D4:D8:65:63:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/06f6143d984e42d40da19f4f36d19bbb0ccf959c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5bb3592e-ba9a-4946-914d-7fee918b2577/9a0db5fdc89d1fd972956c14816a123764af9dfe.roa
Signing time:             Sat 16 Jul 2022 16:03:28 +0000
ROA not before:           Sat 16 Jul 2022 03:00:00 +0000
ROA not after:            Tue 16 Jul 2024 03:00:00 +0000
asID:                     272820
IP address blocks:        2803:e490::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f6143d984e42d40da19f4f36d19bbb0ccf959c
        Validity
            Not Before: Jul 16 03:00:00 2022 GMT
            Not After : Jul 16 03:00:00 2024 GMT
        Subject: CN=9a0db5fdc89d1fd972956c14816a123764af9dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:24:28:47:af:ea:85:b2:1e:6c:12:a1:12:f7:
                    98:28:45:91:76:85:fa:a6:25:85:71:d3:d3:bc:32:
                    5e:a0:50:be:3d:b6:9c:c5:67:97:6d:85:f2:e4:a9:
                    23:d8:cf:f4:37:de:b3:b4:70:35:02:5b:b6:32:2c:
                    90:a6:91:1a:03:89:b3:cf:3a:57:78:62:25:e3:a2:
                    17:6d:7d:fd:84:cc:35:ac:20:f4:d0:7b:4f:ae:c6:
                    c2:3c:e5:33:0c:26:c6:35:0e:7b:9e:78:ba:d0:41:
                    d2:63:9c:47:a0:0d:e1:e1:9c:07:f6:78:21:2f:9e:
                    8a:d0:54:46:18:b7:73:a1:a7:50:86:2b:46:98:86:
                    3d:8b:72:30:93:7a:7a:25:ce:ad:2f:7d:7f:af:6a:
                    e9:e0:60:7a:b0:a8:c1:12:1b:99:f1:b3:da:0f:e1:
                    24:bc:c7:74:2c:56:8f:82:29:d6:0f:eb:c4:09:10:
                    af:f4:c5:1d:8f:df:e3:28:92:f6:bc:18:fe:2e:ce:
                    9d:80:e6:78:18:16:00:53:c1:e0:dc:14:a9:73:df:
                    79:1c:4a:ea:35:22:9f:b9:a6:25:79:6f:e2:46:e5:
                    75:09:32:94:12:8b:02:ac:1a:e1:c4:d0:50:f6:f2:
                    a5:b2:19:fc:16:fa:b8:42:f3:60:33:5d:8f:52:86:
                    14:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CA:29:A1:17:AD:57:25:72:63:38:EF:CD:6F:30:90:73:6E:F3:7E
            X509v3 Authority Key Identifier:
                keyid:07:2A:41:D8:27:9B:3D:D1:28:E2:FE:63:F4:DA:6E:D4:D8:65:63:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/06f6143d984e42d40da19f4f36d19bbb0ccf959c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5bb3592e-ba9a-4946-914d-7fee918b2577/9a0db5fdc89d1fd972956c14816a123764af9dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5bb3592e-ba9a-4946-914d-7fee918b2577/06f6143d984e42d40da19f4f36d19bbb0ccf959c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e490::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:bb:60:d6:00:d8:e3:eb:73:a2:09:09:5d:23:16:c9:1f:2b:
         2d:f9:a2:27:86:34:1a:6b:61:89:eb:8d:ba:84:b1:84:b8:5f:
         f4:ab:5f:ca:2c:fd:dd:1a:18:93:54:1e:f9:f1:bd:cf:29:ba:
         78:bc:fb:a2:eb:4b:96:de:3b:3b:47:eb:ac:ab:ef:65:6e:a0:
         b8:96:fd:ce:93:d0:18:e8:6c:19:93:8a:b4:c5:02:d7:49:c2:
         87:87:f7:42:bd:4f:d5:dd:78:b0:cc:30:a1:03:25:07:ec:27:
         dc:2d:87:26:55:fd:d5:39:9c:d1:c1:b2:a6:e4:41:ff:2b:81:
         4c:37:72:72:06:4d:50:b4:14:12:09:51:56:1f:31:a3:7d:89:
         ea:3e:f2:09:80:6e:df:ae:d7:c0:a8:30:d1:39:fb:92:da:1c:
         24:1f:99:2c:69:44:cc:7d:7d:f9:ac:c0:bb:29:12:cb:61:9e:
         a2:ba:43:4c:59:d8:8a:da:e4:1c:57:98:23:66:83:63:fe:8e:
         38:68:89:16:9e:d0:c0:bb:b6:58:6b:4b:6b:ae:d1:73:83:ac:
         c8:af:09:ea:81:23:34:23:73:5c:dc:55:12:ba:39:e7:29:08:
         6e:43:ec:e0:94:cf:8e:39:30:bb:97:39:a6:02:1f:bf:2d:83:
         99:4e:eb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----