Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63b5f77f-ccc6-4cee-94db-4677eefc5da7/916886cf1893a2b69ed259f4a9564aad786e007a.roa
File:                     916886cf1893a2b69ed259f4a9564aad786e007a.roa (raw, json)
Hash identifier:          o3/ghPaUIlBmzHqvdg1UDrGY95DO0LNwfmCflYMh32Y=
Subject key identifier:   F8:F6:2A:EB:2C:A6:B9:81:08:B5:6B:23:5A:CC:5C:9A:C4:48:EC:86
Certificate issuer:       /CN=2992018c1338674cb760d954bf606483b9b3a7d8
Certificate serial:       0E3DCF
Authority key identifier: 5A:CB:88:0A:8F:D2:85:1B:74:EB:F9:7D:46:04:8E:1A:CF:B7:06:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2992018c1338674cb760d954bf606483b9b3a7d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63b5f77f-ccc6-4cee-94db-4677eefc5da7/916886cf1893a2b69ed259f4a9564aad786e007a.roa
Signing time:             Thu 23 Mar 2023 16:10:16 +0000
ROA not before:           Wed 22 Mar 2023 16:10:03 +0000
ROA not after:            Sun 23 Mar 2025 16:10:03 +0000
asID:                     271896
IP address blocks:        2803:2210:1::/48 maxlen: 48
                          2803:2210:2::/47 maxlen: 48
                          2803:2210:4::/46 maxlen: 48
                          2803:2210:8::/45 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933327 (0xe3dcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2992018c1338674cb760d954bf606483b9b3a7d8
        Validity
            Not Before: Mar 22 16:10:03 2023 GMT
            Not After : Mar 23 16:10:03 2025 GMT
        Subject: CN=916886cf1893a2b69ed259f4a9564aad786e007a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:4f:cb:0b:1c:a5:e8:aa:77:d5:14:40:ed:
                    91:0b:4e:5c:d8:40:73:1b:91:e8:7d:55:a8:6d:90:
                    fc:08:bc:83:3f:74:c4:46:ce:e0:3c:2e:57:03:2c:
                    af:c8:52:96:93:41:4a:59:25:7b:83:a3:25:11:ff:
                    e8:6c:66:1c:98:07:9f:52:3b:90:93:fd:a6:50:70:
                    de:16:0a:72:41:13:9a:d7:e3:28:33:02:67:57:b0:
                    64:e2:90:24:f0:86:65:9b:bf:f8:d8:e4:52:96:50:
                    a5:9e:03:ad:1a:08:29:20:86:1f:08:a7:a4:72:75:
                    97:d6:36:07:ba:83:21:2f:b0:e9:ee:c3:20:fd:76:
                    a2:02:4b:d7:61:df:3d:99:36:7f:1c:1f:a4:02:ee:
                    5d:14:b5:16:62:6b:13:94:cf:d8:15:f7:a3:c0:3d:
                    e2:28:bc:4f:8e:39:84:cf:44:59:14:a1:20:0d:61:
                    b5:3a:e0:cd:e2:1f:98:16:e9:05:89:c4:ce:f6:cb:
                    58:5c:90:a5:68:96:35:f5:01:fe:91:52:ab:5f:13:
                    aa:f5:fa:e2:f2:5a:f4:42:8a:fd:49:56:4d:f4:8a:
                    d6:64:b9:f7:72:0c:ca:32:d9:0f:37:02:f0:59:1c:
                    f0:fc:de:dd:d3:9b:58:fc:b6:b6:25:09:4f:e9:6c:
                    34:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F6:2A:EB:2C:A6:B9:81:08:B5:6B:23:5A:CC:5C:9A:C4:48:EC:86
            X509v3 Authority Key Identifier:
                keyid:5A:CB:88:0A:8F:D2:85:1B:74:EB:F9:7D:46:04:8E:1A:CF:B7:06:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2992018c1338674cb760d954bf606483b9b3a7d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63b5f77f-ccc6-4cee-94db-4677eefc5da7/916886cf1893a2b69ed259f4a9564aad786e007a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63b5f77f-ccc6-4cee-94db-4677eefc5da7/2992018c1338674cb760d954bf606483b9b3a7d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2210:1::-2803:2210:f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         65:77:57:6e:7c:b6:a0:14:7b:39:45:24:61:5d:f6:b0:2b:eb:
         dd:8d:a4:45:b2:29:a9:2d:8b:42:da:b4:ff:b8:35:40:e7:37:
         4e:62:f5:da:d2:26:61:a2:15:60:62:cd:c5:87:cb:4e:1c:70:
         ee:05:b6:a1:aa:55:a4:68:13:27:41:cf:48:ea:21:38:a6:41:
         28:16:91:ca:93:4a:f7:a2:bc:12:df:77:10:0b:da:a9:89:d6:
         4b:b5:06:be:94:86:8c:ee:0d:91:e0:c8:3d:1a:35:ac:d7:d8:
         57:c0:72:a7:52:c0:a3:c3:09:ac:86:dc:40:ef:28:a1:f0:da:
         ec:ca:1d:9c:e0:e8:6b:26:39:a8:51:4a:3c:62:04:cd:01:1e:
         af:26:65:86:e7:7e:05:d3:d2:3d:6a:f2:3c:03:81:c7:81:12:
         7d:94:41:b0:e2:ed:91:ad:8e:1b:9e:e7:40:29:21:fd:8a:55:
         d9:17:15:2a:a1:90:8f:17:41:a1:8d:67:01:f4:ab:94:2a:52:
         fe:c1:26:31:c0:78:16:61:78:9f:52:ef:11:bf:00:41:e5:b6:
         db:f4:d4:74:6c:b8:a9:4e:62:10:a9:42:16:57:41:05:b9:a0:
         f7:66:bd:82:1e:a6:84:ea:6e:4b:33:9d:9c:bc:5b:6b:7d:4b:
         3c:da:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----