Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/bcf3a504da158fe6f13dfd59ede991666ddcfb5c.roa
File:                     bcf3a504da158fe6f13dfd59ede991666ddcfb5c.roa (raw, json)
Hash identifier:          EkVXxbCokxXQdZ3G4xcA5BgpJRYWlMyPUisZ2RUQn04=
Subject key identifier:   44:4F:48:AD:64:83:07:20:E5:04:54:63:24:49:B7:00:4C:AD:4B:40
Certificate issuer:       /CN=ea7028769533b4ca1a1bb8492dcfde9795a18ca2
Certificate serial:       20586B
Authority key identifier: 83:82:FD:78:F2:44:81:2B:A0:DB:7C:4E:FE:41:D2:1E:DA:BA:17:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ea7028769533b4ca1a1bb8492dcfde9795a18ca2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/bcf3a504da158fe6f13dfd59ede991666ddcfb5c.roa
Signing time:             Wed 10 May 2023 11:18:23 +0000
ROA not before:           Tue 09 May 2023 11:18:23 +0000
ROA not after:            Sat 10 May 2025 11:18:23 +0000
asID:                     27940
IP address blocks:        2803:4b80::/32 maxlen: 127

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2119787 (0x20586b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7028769533b4ca1a1bb8492dcfde9795a18ca2
        Validity
            Not Before: May  9 11:18:23 2023 GMT
            Not After : May 10 11:18:23 2025 GMT
        Subject: CN=bcf3a504da158fe6f13dfd59ede991666ddcfb5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:18:fd:b8:c6:0f:7f:9b:a0:59:af:8c:be:
                    c3:06:8e:98:1e:4b:0c:d8:1a:9e:42:6f:fd:e3:cc:
                    ee:34:85:75:3c:5d:8f:a9:5d:2d:37:16:92:c1:d9:
                    03:86:c8:85:32:a2:a2:f6:0c:07:0e:65:27:97:a0:
                    b9:ea:7c:38:24:db:be:db:c9:24:0c:c7:3f:0e:87:
                    5f:fe:f9:2f:64:aa:bf:51:1b:ca:e7:02:16:64:85:
                    ef:87:32:62:e9:06:fd:4a:a2:64:4b:34:58:8a:87:
                    0c:05:34:a5:fc:66:7e:fe:23:2f:f9:35:0c:e1:eb:
                    89:2a:c5:63:dc:4b:30:ed:a5:cb:31:13:e6:e6:74:
                    01:5a:53:0f:6f:13:d8:e8:85:da:17:9d:23:8e:be:
                    6a:5d:01:23:b1:63:e1:94:28:5a:10:42:39:39:e1:
                    e4:b1:82:54:c7:d1:31:3d:b1:e8:82:22:b1:07:fc:
                    63:f1:cc:28:73:bc:33:9f:02:95:e3:98:89:41:33:
                    bf:2f:e9:a0:95:3e:15:4d:ff:df:3b:bb:8c:16:8f:
                    93:8a:77:a3:cb:3e:51:2a:15:71:4d:c4:09:9e:f3:
                    44:9d:31:e6:49:06:20:c9:8d:e9:ed:f3:2b:e9:ac:
                    a6:5f:c6:c1:63:07:c4:4f:b0:03:0a:d6:4c:d1:6e:
                    6e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4F:48:AD:64:83:07:20:E5:04:54:63:24:49:B7:00:4C:AD:4B:40
            X509v3 Authority Key Identifier:
                keyid:83:82:FD:78:F2:44:81:2B:A0:DB:7C:4E:FE:41:D2:1E:DA:BA:17:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ea7028769533b4ca1a1bb8492dcfde9795a18ca2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/bcf3a504da158fe6f13dfd59ede991666ddcfb5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/ea7028769533b4ca1a1bb8492dcfde9795a18ca2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:c4:4b:e1:5d:aa:c6:53:10:68:9a:13:80:67:29:3c:34:2d:
         03:97:5f:9d:8c:be:b4:13:d2:1d:cc:ec:24:05:d1:87:bb:5c:
         e5:24:e4:2c:cf:d4:78:ee:b1:ae:22:13:0b:d8:92:ae:82:37:
         c6:b3:93:6d:3f:dc:be:dd:ed:a7:d4:6c:ab:0c:42:01:5a:37:
         e4:9d:cd:6a:52:1d:a6:8b:55:46:d2:b8:58:99:4f:b2:49:84:
         3c:5f:6b:aa:76:7b:4a:ac:c5:dc:96:d3:bb:62:5f:6f:80:1f:
         f2:61:3b:b5:9f:3d:26:64:30:93:57:90:a5:f5:48:8b:c6:36:
         93:f9:f0:6a:d3:ef:d1:66:25:ce:4f:c4:d6:1c:66:a6:64:a1:
         bb:92:3f:a3:13:0e:70:33:70:40:5e:7a:ac:3a:db:24:79:41:
         fe:ce:bd:40:34:2a:15:e8:d5:eb:52:43:83:65:e5:5c:36:3d:
         4f:4c:5d:ca:de:ab:c0:35:b1:40:14:05:dd:aa:ee:aa:77:f1:
         54:cf:fc:d2:4a:0c:48:32:a7:50:f4:34:80:33:ce:0c:ca:21:
         43:59:03:18:b8:ae:73:fd:92:2c:d3:a6:7d:08:81:8e:46:04:
         73:97:97:c3:fe:d2:b2:f8:19:34:3e:98:91:a2:ff:ec:03:86:
         71:9c:99:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----