Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/7a3ab3ace715256c1bab517b084699bd09d58381.roa
File:                     7a3ab3ace715256c1bab517b084699bd09d58381.roa (raw, json)
Hash identifier:          PH2It78MWh7Ozb6f4139VQPAbNcglAHlkMCn8zemngk=
Subject key identifier:   A3:4F:49:49:CA:57:50:01:DD:58:E6:F7:A7:C8:7A:F9:DB:4B:96:A4
Certificate issuer:       /CN=1c011c49ef045ef0e106ad87280aa70643378a03
Certificate serial:       150234
Authority key identifier: 75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/7a3ab3ace715256c1bab517b084699bd09d58381.roa
Signing time:             Mon 30 Jan 2023 18:54:57 +0000
ROA not before:           Tue 23 Mar 2021 14:34:47 +0000
ROA not after:            Tue 24 Mar 2026 14:34:47 +0000
asID:                     270035
IP address blocks:        2803:e5e0::/30 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1376820 (0x150234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c011c49ef045ef0e106ad87280aa70643378a03
        Validity
            Not Before: Mar 23 14:34:47 2021 GMT
            Not After : Mar 24 14:34:47 2026 GMT
        Subject: CN=7a3ab3ace715256c1bab517b084699bd09d58381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:64:1f:8e:46:e5:df:56:85:26:fb:ad:81:6c:
                    13:ab:24:8b:42:03:9c:86:f6:36:3f:9e:37:6c:c6:
                    02:0d:0c:18:f3:a5:31:11:62:36:fb:d1:ca:73:46:
                    3b:f3:7c:9f:c8:58:0a:2e:29:8d:2e:2a:76:02:e9:
                    7a:02:c0:0c:79:f3:85:d3:b9:c4:83:a4:16:47:99:
                    89:3a:dc:5e:fe:87:ee:8d:07:96:76:79:12:ae:a4:
                    ec:86:0b:b5:29:e8:a6:c3:33:a2:7e:d0:99:83:3a:
                    0e:18:b1:d9:90:29:04:d4:b0:5e:f6:0b:dd:37:da:
                    cf:54:f1:37:eb:cc:22:b8:46:4e:52:8c:79:7b:d2:
                    23:98:c0:82:6c:d3:eb:4d:7a:7f:e5:e9:06:cf:f3:
                    cf:78:29:d3:d5:92:c0:e5:46:db:b4:97:08:c6:4e:
                    4b:2f:6b:d8:a1:43:88:3d:29:77:89:42:80:f4:2c:
                    51:bf:e8:57:c3:d6:e9:bd:f1:b6:bd:65:cf:a9:73:
                    de:ef:57:db:24:4b:3a:97:6f:c6:cd:bf:af:fd:78:
                    34:ea:7e:ea:fa:c5:cc:c7:86:11:0f:3e:9f:e3:60:
                    35:65:64:23:72:f9:5d:92:71:26:5e:ee:93:aa:6b:
                    4f:ff:c4:69:74:49:2c:98:1a:61:4d:3f:21:31:4d:
                    89:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4F:49:49:CA:57:50:01:DD:58:E6:F7:A7:C8:7A:F9:DB:4B:96:A4
            X509v3 Authority Key Identifier:
                keyid:75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/7a3ab3ace715256c1bab517b084699bd09d58381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c011c49ef045ef0e106ad87280aa70643378a03.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e5e0::/30

    Signature Algorithm: sha256WithRSAEncryption
         5b:bd:65:44:00:7e:ae:e3:dc:4a:0f:70:84:33:b7:ad:32:29:
         f6:6c:d2:d0:57:3b:98:6b:50:a6:d7:4a:d9:53:a7:66:bd:9d:
         dc:23:0a:1f:e2:5a:81:8b:a5:84:87:08:46:1e:20:a0:7b:fb:
         64:01:94:c5:26:a6:54:6c:c1:a0:ac:2e:57:a9:b0:52:50:99:
         58:08:68:66:20:3e:37:16:a3:09:70:50:9a:e0:fc:6f:20:86:
         46:bf:74:9e:87:27:c9:93:ec:bf:15:a5:09:58:09:7d:1b:c8:
         2f:b7:65:f2:7b:8a:17:26:f5:e6:f3:71:7f:4a:ab:40:30:1f:
         00:3a:8d:27:6d:4e:05:6b:7f:44:6b:74:86:30:12:45:d0:97:
         ae:22:71:3c:3a:ac:3f:4e:57:9b:72:fe:5c:3d:cf:57:28:b0:
         f5:ed:48:75:ac:f8:25:9a:dd:00:92:b9:5a:31:83:24:fb:6c:
         a7:5f:06:15:8b:8f:76:27:c5:39:14:27:ff:fe:a5:ba:f8:8d:
         42:21:00:2a:17:fd:86:3e:1b:f3:d7:6e:13:e7:5f:3e:f3:bc:
         88:25:89:c2:f3:41:c2:8a:5f:b1:d6:61:f8:00:45:d8:7b:c1:
         55:05:3c:05:e6:bd:a0:9c:9b:11:90:c2:4f:d6:69:b9:c3:91:
         2f:0a:ab:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----