Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/466c9bfe2ab9efd8bf6c81564efefc5bd386a939.roa
File:                     466c9bfe2ab9efd8bf6c81564efefc5bd386a939.roa (raw, json)
Hash identifier:          GlxSDSOScq7ChaJ+eHGhdJNLCqafEbyKoqT7uDcdZ28=
Subject key identifier:   9E:ED:0F:62:76:71:83:D1:6E:DB:19:E4:19:A0:12:2E:47:97:6C:6E
Certificate issuer:       /CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
Certificate serial:       1EA6FC
Authority key identifier: AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/466c9bfe2ab9efd8bf6c81564efefc5bd386a939.roa
Signing time:             Thu 02 Mar 2023 22:23:48 +0000
ROA not before:           Wed 01 Mar 2023 22:21:25 +0000
ROA not after:            Sun 02 Mar 2025 22:21:25 +0000
asID:                     52458
IP address blocks:        2803:480:16::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2008828 (0x1ea6fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
        Validity
            Not Before: Mar  1 22:21:25 2023 GMT
            Not After : Mar  2 22:21:25 2025 GMT
        Subject: CN=466c9bfe2ab9efd8bf6c81564efefc5bd386a939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7a:70:45:e0:bf:90:a2:4f:78:cc:fc:b5:40:
                    41:fe:d5:4b:fc:b8:9f:dc:ee:81:7b:69:8d:51:2b:
                    28:7b:76:3c:c8:1e:6e:07:6e:d5:8b:79:8e:3e:32:
                    20:fa:04:61:04:5b:53:9d:80:60:b5:48:30:5a:89:
                    a3:ef:77:17:c4:2f:f6:b0:f1:d2:47:c1:aa:19:e5:
                    2b:35:96:7b:a3:78:27:f5:9f:b1:80:1c:84:8d:71:
                    6e:75:41:77:64:0c:a7:7c:95:8c:f6:6a:f1:5b:2d:
                    6e:b8:f6:8a:d6:27:7d:da:47:11:05:8f:25:f4:0a:
                    25:a5:ba:c4:47:2e:0f:44:2e:1d:ad:4b:75:d1:f5:
                    54:fa:3d:8d:95:93:da:d1:56:e9:2b:2b:e8:d6:30:
                    42:11:73:9b:19:16:3d:1f:07:05:28:38:8b:6f:c9:
                    79:57:ae:e4:9b:9e:9e:a5:51:c0:ba:dc:cd:a2:90:
                    c3:99:c5:ce:ee:37:ab:4b:f9:de:62:2a:6e:ae:4e:
                    64:c5:b5:d8:ee:0a:d3:67:76:b8:4e:c4:8b:80:d0:
                    0e:64:89:cc:90:ff:2a:38:2b:7b:2e:cc:86:98:19:
                    4d:18:9b:13:4d:50:9e:aa:8b:94:0e:97:56:56:c8:
                    69:ac:67:23:88:c6:a8:75:06:f5:ff:01:d8:82:96:
                    a7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:ED:0F:62:76:71:83:D1:6E:DB:19:E4:19:A0:12:2E:47:97:6C:6E
            X509v3 Authority Key Identifier:
                keyid:AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/466c9bfe2ab9efd8bf6c81564efefc5bd386a939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/cebcc65db675ffc3185449c18bd433794ea8ca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:16::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:71:f1:e6:8b:7c:2b:d5:f7:39:49:e3:65:6c:20:13:74:eb:
         72:45:8f:d9:70:82:38:4e:14:4f:0b:67:05:25:fb:2e:4a:d4:
         99:00:bd:ea:44:f9:9a:07:3f:e6:8a:12:3c:50:9b:7a:6e:69:
         1c:0c:ff:be:9b:e8:ac:98:71:25:de:95:1d:40:ca:d2:77:87:
         48:ae:24:8b:6f:bc:e2:8e:3c:04:c1:d5:fc:14:06:2b:e2:78:
         aa:7b:d6:fb:49:c4:bf:4a:e8:aa:06:12:ab:74:df:26:b2:47:
         f2:96:75:c9:2a:7f:6e:35:59:df:8b:e7:dc:3c:46:66:3a:39:
         bd:66:b6:29:5c:9b:05:43:43:b7:f0:8d:e1:a1:99:94:11:28:
         57:3b:3b:a8:ff:35:51:cd:7f:40:c4:1d:5c:b2:f0:0a:f1:74:
         5d:a8:8d:55:5b:90:50:ea:76:bb:13:99:8a:af:d4:41:74:5a:
         9e:1c:77:99:46:db:04:c4:e5:c8:33:3b:f2:5c:e4:0c:a7:ed:
         14:14:f6:10:68:24:d4:75:b7:db:04:fa:c9:c7:bb:23:eb:75:
         54:a2:68:40:67:ea:33:8e:77:fe:4c:bb:28:de:4b:30:ce:98:
         2b:c2:53:67:c7:86:7c:d1:e8:b6:66:74:b6:7d:db:10:92:ea:
         de:aa:18:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----