Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/143d75db9b74cf2dff325f784aab9be5ffe418d6.roa
File:                     143d75db9b74cf2dff325f784aab9be5ffe418d6.roa (raw, json)
Hash identifier:          GOnO3LV8LKfKHD8k5gB/zswd9VaLMRmuUn64kz3fb40=
Subject key identifier:   BD:02:C2:1C:E8:C6:7E:CF:3B:9D:D5:81:53:0C:67:60:C7:D4:25:AA
Certificate issuer:       /CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
Certificate serial:       0D60A6
Authority key identifier: AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/143d75db9b74cf2dff325f784aab9be5ffe418d6.roa
Signing time:             Wed 24 Mar 2021 22:50:56 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     52458
IP address blocks:        2803:480:1::/48 maxlen: 48
                          2803:480:2::/48 maxlen: 48
                          2803:480:3::/48 maxlen: 48
                          2803:480:4::/48 maxlen: 48
                          2803:480:5::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876710 (0xd60a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=143d75db9b74cf2dff325f784aab9be5ffe418d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:57:e8:b4:7c:26:8c:75:fe:c4:e0:dc:8a:5d:
                    2e:09:4c:47:44:4c:06:48:b1:b2:00:4a:2e:57:e8:
                    cf:69:44:f2:6d:24:5e:db:cf:16:06:ef:30:3b:f1:
                    50:5a:7f:89:48:ed:3f:f5:26:7b:7b:97:98:d4:1e:
                    54:48:a9:23:a0:4c:52:40:7f:d2:5f:50:4e:33:f4:
                    b9:91:e4:19:07:76:a1:f3:1d:db:e0:78:3a:81:7e:
                    8e:0a:a3:94:6f:3c:60:94:aa:a5:64:f9:15:17:e6:
                    03:c2:5e:7f:fa:4f:7c:9d:34:6d:4b:65:24:82:68:
                    9e:ef:8c:da:56:a7:9b:f7:fa:54:9e:0d:6d:a2:db:
                    9e:2f:88:0a:11:d4:49:89:82:a1:b3:ce:2d:35:a8:
                    be:31:97:14:6e:6b:15:8e:5b:97:af:97:fd:93:d1:
                    34:5c:8e:3c:2e:3c:bf:56:87:95:de:d0:9c:e7:ed:
                    44:46:eb:8b:8c:73:6e:39:d8:40:6a:0b:c2:b2:5d:
                    9c:47:ae:69:50:7a:29:72:5e:cf:1b:07:c1:65:a1:
                    74:7b:99:2a:f9:f6:2c:97:f7:f5:62:8f:b9:ca:b7:
                    4e:d7:fd:0e:8e:bc:07:50:90:08:0f:9d:bf:e9:ae:
                    b2:6f:c1:5a:e0:8e:27:47:39:af:28:a6:2f:ed:e6:
                    bd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:02:C2:1C:E8:C6:7E:CF:3B:9D:D5:81:53:0C:67:60:C7:D4:25:AA
            X509v3 Authority Key Identifier:
                keyid:AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/143d75db9b74cf2dff325f784aab9be5ffe418d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/cebcc65db675ffc3185449c18bd433794ea8ca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:1::-2803:480:5:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         41:fa:b4:76:b7:fd:5f:52:4e:d1:8d:bd:3f:78:46:56:84:26:
         9c:f8:65:81:0a:e0:b4:a8:44:05:59:24:1b:d4:f1:00:48:50:
         d1:82:45:6e:9d:ba:d0:5b:a4:ea:ac:72:fb:43:bd:b8:b6:72:
         ce:f4:6e:c2:6a:f7:9b:63:db:d2:8d:e7:5f:b6:4d:49:7c:1f:
         6e:6a:fe:5d:e7:5c:cb:91:32:67:b8:7a:f9:2b:f5:cc:8d:1f:
         20:4d:b1:b7:34:07:d6:8b:42:c0:08:27:86:64:0b:b9:b5:30:
         38:85:e9:9e:b2:21:92:15:37:79:0d:81:61:3e:c5:a3:b4:e0:
         e5:e6:78:d6:7c:86:e7:5d:0e:12:b7:30:a0:f3:f4:c4:e1:ad:
         48:19:62:6f:94:f1:c4:17:9e:f6:e7:00:b9:a4:d5:3c:36:d5:
         a3:14:66:95:53:5e:79:e9:06:a6:17:cd:2b:33:53:61:bd:e8:
         6d:36:22:5d:4f:7b:c2:2a:2c:f8:71:ad:f0:36:11:a1:9f:95:
         cb:5f:52:2f:87:bc:6c:fa:5a:91:31:91:c9:5c:b6:61:af:61:
         02:be:c6:0d:b5:e0:55:af:ba:53:43:bd:0e:ff:b9:ab:0f:5b:
         96:23:b0:70:44:1c:9f:f0:ae:2d:85:68:d9:b6:84:67:ef:a5:
         f2:6c:fb:a6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDDWCmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
YmNjNjVkYjY3NWZmYzMxODU0NDljMThiZDQzMzc5NGVhOGNhNWEwHhcNMjEwMzI0
MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEygxNDNkNzVkYjliNzRj
ZjJkZmYzMjVmNzg0YWFiOWJlNWZmZTQxOGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjVfotHwmjHX+xODcil0uCUxHREwGSLGyAEouV+jPaUTybSRe
288WBu8wO/FQWn+JSO0/9SZ7e5eY1B5USKkjoExSQH/SX1BOM/S5keQZB3ah8x3b
4Hg6gX6OCqOUbzxglKqlZPkVF+YDwl5/+k98nTRtS2Ukgmie74zaVqeb9/pUng1t
otueL4gKEdRJiYKhs84tNai+MZcUbmsVjluXr5f9k9E0XI48Ljy/VoeV3tCc5+1E
RuuLjHNuOdhAagvCsl2cR65pUHopcl7PGwfBZaF0e5kq+fYsl/f1Yo+5yrdO1/0O
jrwHUJAID52/6a6yb8Fa4I4nRzmvKKYv7ea9RQIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFL0Cwhzoxn7PO53VgVMMZ2DH1CWqMB8GA1UdIwQYMBaAFKt2GDAsMjVTVynb
ciWrLHZclf4cMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ViY2M2
NWRiNjc1ZmZjMzE4NTQ0OWMxOGJkNDMzNzk0ZWE4Y2E1YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjdkYzU4Y2ItMTg0ZC00NTgwLWI4NTAtMGQ4ZjFm
M2I4NzI4LzE0M2Q3NWRiOWI3NGNmMmRmZjMyNWY3ODRhYWI5YmU1ZmZlNDE4ZDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82N2RjNThjYi0xODRkLTQ1ODAtYjg1MC0wZDhm
MWYzYjg3MjgvY2ViY2M2NWRiNjc1ZmZjMzE4NTQ0OWMxOGJkNDMzNzk0ZWE4Y2E1
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwGgQCAAIwFDASAwcAKAMEgAABAwcBKAMEgAAEMA0GCSqGSIb3DQEBCwUAA4IB
AQBB+rR2t/1fUk7Rjb0/eEZWhCac+GWBCuC0qEQFWSQb1PEASFDRgkVunbrQW6Tq
rHL7Q724tnLO9G7CavebY9vSjedftk1JfB9uav5d51zLkTJnuHr5K/XMjR8gTbG3
NAfWi0LACCeGZAu5tTA4hemesiGSFTd5DYFhPsWjtODl5njWfIbnXQ4StzCg8/TE
4a1IGWJvlPHEF5725wC5pNU8NtWjFGaVU1556QamF80rM1NhvehtNiJdT3vCKiz4
ca3wNhGhn5XLX1Ivh7xs+lqRMZHJXLZhr2ECvsYNteBVr7pTQ70O/7mrD1uWI7Bw
RByf8K4thWjZtoRn76XybPum
-----END CERTIFICATE-----