Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/8096b563ab139a862f8a9562bf8c66a13c299f17.roa
File:                     8096b563ab139a862f8a9562bf8c66a13c299f17.roa (raw, json)
Hash identifier:          Ju/O5bnNbLw2by9uNV61UlZmc7eJTZ5+5QRAVxTIxJI=
Subject key identifier:   BB:27:A8:CB:13:9B:C5:AF:FF:7E:90:A2:BC:6A:D5:55:42:DC:69:FB
Certificate issuer:       /CN=e8fb249d4f9466e3a1a3e886e27e824279d45530
Certificate serial:       060191
Authority key identifier: 0E:08:35:B8:43:89:E5:7E:56:5B:87:9F:46:02:15:46:A7:18:54:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fb249d4f9466e3a1a3e886e27e824279d45530.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/8096b563ab139a862f8a9562bf8c66a13c299f17.roa
Signing time:             Tue 03 May 2022 14:48:42 +0000
ROA not before:           Tue 03 May 2022 03:00:00 +0000
ROA not after:            Fri 03 May 2024 03:00:00 +0000
asID:                     264850
IP address blocks:        2803:6180::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393617 (0x60191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8fb249d4f9466e3a1a3e886e27e824279d45530
        Validity
            Not Before: May  3 03:00:00 2022 GMT
            Not After : May  3 03:00:00 2024 GMT
        Subject: CN=8096b563ab139a862f8a9562bf8c66a13c299f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:51:33:63:a7:22:f3:80:e4:59:07:ed:53:0b:
                    d4:3a:57:f8:5d:83:d7:7e:43:90:64:ee:c1:41:37:
                    33:bc:97:04:1d:73:c1:84:d7:5c:62:08:7e:25:b3:
                    98:1e:aa:4c:de:1d:79:a5:6f:22:d4:5d:89:a6:82:
                    5a:1f:d8:ea:cc:b7:1c:98:8a:35:cc:09:67:31:b5:
                    79:e9:be:b9:1e:23:01:45:e3:88:71:c6:4b:38:2e:
                    68:66:8e:37:c6:de:10:f0:57:da:fa:f9:11:2b:6f:
                    f1:38:55:a2:f6:b5:36:60:29:0f:e0:f1:32:89:b5:
                    bb:47:fe:47:6a:20:0e:e3:a7:05:f7:63:6a:8a:3b:
                    8a:0e:88:7b:d0:b0:6e:b2:81:94:22:13:ba:d4:e6:
                    d6:86:b1:17:75:16:0e:04:35:75:bc:31:b1:50:45:
                    18:1b:04:0f:f6:c9:b0:36:c5:28:98:21:08:73:93:
                    fb:89:45:9c:f9:39:b3:82:34:0e:8c:2b:a2:6e:7c:
                    b7:6e:d5:0c:49:93:c9:75:78:6e:ae:7a:c4:8c:eb:
                    c3:a0:da:90:8e:ff:c4:5c:84:95:d0:3b:fd:13:d0:
                    1e:a6:b0:2e:6e:f0:51:8f:66:ff:45:ad:b5:3b:9f:
                    d9:fa:75:49:45:57:10:fd:86:eb:9a:86:9c:ef:e0:
                    b1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:27:A8:CB:13:9B:C5:AF:FF:7E:90:A2:BC:6A:D5:55:42:DC:69:FB
            X509v3 Authority Key Identifier:
                keyid:0E:08:35:B8:43:89:E5:7E:56:5B:87:9F:46:02:15:46:A7:18:54:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fb249d4f9466e3a1a3e886e27e824279d45530.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/8096b563ab139a862f8a9562bf8c66a13c299f17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/e8fb249d4f9466e3a1a3e886e27e824279d45530.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6180::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:a1:3c:46:4a:64:28:62:d8:8f:a5:c0:b8:91:7e:d3:12:09:
         0d:cd:1f:69:1e:7d:11:fb:d0:14:5f:1b:61:9b:f8:39:a8:0c:
         b8:d0:d4:dd:26:a5:04:64:5f:5e:6c:c6:68:70:7b:03:92:4d:
         3c:42:ed:86:33:11:02:64:7d:d1:07:3c:82:d1:a0:f3:42:0d:
         71:1e:6f:d7:b7:96:68:55:96:de:c1:92:b3:4a:0b:45:99:a2:
         a2:2e:41:df:af:09:bf:e0:0b:19:3d:b9:4b:e4:75:75:3d:d8:
         62:18:e1:08:99:82:77:10:5c:05:3d:95:2a:b4:82:07:22:da:
         8b:f9:e8:56:40:eb:c8:96:52:bc:96:4e:5e:f9:98:7a:5c:1f:
         1e:ff:89:83:24:1f:d6:a9:84:94:6f:fb:67:81:9b:bb:0a:2a:
         ff:4d:0b:39:27:bb:a3:5d:7e:02:92:b1:92:af:d9:37:e5:2f:
         86:8e:f2:68:a4:35:2c:09:24:b0:d1:e4:1f:1f:7f:ae:29:0e:
         bd:ab:c3:74:d2:d6:43:ea:3f:d4:47:17:44:aa:3d:45:8e:fe:
         cf:da:3f:b8:7a:50:1a:69:54:35:7a:c0:b8:a7:46:63:00:90:
         7e:d2:fa:d0:90:3f:c8:a6:4e:df:b6:f2:91:42:1c:57:9d:9b:
         4a:5f:0b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----