Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/4dc83e177a9e0368b97e18240acc44c777f76f1e.roa
File:                     4dc83e177a9e0368b97e18240acc44c777f76f1e.roa (raw, json)
Hash identifier:          ppragAnnwbGylbnTXHeZxc0A9BqwYViLRH/9qArO8T8=
Subject key identifier:   CC:D5:C3:0F:D1:B3:32:9C:4A:ED:AD:D5:CC:E6:EA:99:7E:0A:4B:10
Certificate issuer:       /CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
Certificate serial:       1AA2B5
Authority key identifier: AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/4dc83e177a9e0368b97e18240acc44c777f76f1e.roa
Signing time:             Fri 16 Sep 2022 15:38:12 +0000
ROA not before:           Fri 16 Sep 2022 15:37:40 +0000
ROA not after:            Mon 16 Sep 2024 15:37:40 +0000
asID:                     52458
IP address blocks:        2803:480::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1745589 (0x1aa2b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
        Validity
            Not Before: Sep 16 15:37:40 2022 GMT
            Not After : Sep 16 15:37:40 2024 GMT
        Subject: CN=4dc83e177a9e0368b97e18240acc44c777f76f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:95:e5:82:b2:53:e6:25:ef:3c:6d:67:d9:85:
                    d5:46:47:41:43:8a:62:ff:f0:a1:00:80:7a:41:8e:
                    74:bc:05:29:90:3f:a5:14:20:07:6f:70:f2:ac:c9:
                    fb:74:0b:bd:71:8b:c5:a6:c8:45:c9:70:f8:7e:cb:
                    dd:60:10:0d:5a:86:fe:5c:ca:9b:15:51:3f:1a:44:
                    62:ae:0d:cf:20:74:aa:05:0f:9b:e8:38:1b:44:c8:
                    60:8f:c3:80:28:18:ea:7a:7f:88:16:00:dc:34:90:
                    5b:71:3a:26:35:47:1a:c2:b9:60:ac:c2:df:91:03:
                    2e:73:0d:75:7a:91:2e:eb:ad:c5:0e:04:bd:a3:ac:
                    b6:9c:c7:fd:6c:2b:89:97:05:38:48:74:ea:cf:2f:
                    05:51:42:36:76:95:d0:8f:73:90:d6:33:07:bc:90:
                    13:6e:25:f8:b8:ce:fa:e7:9d:8a:4e:1e:81:8b:62:
                    3f:0f:4a:29:6a:96:e5:0c:e0:45:55:bb:b9:7f:07:
                    fd:79:82:98:4c:64:ba:1d:8c:4a:2b:d2:1b:c3:52:
                    78:98:e2:8f:74:8d:11:35:3d:f3:1f:b8:a9:a0:fd:
                    92:b1:c8:29:d0:3e:14:19:84:b5:73:0c:b7:3e:9c:
                    ae:bd:9d:90:3a:b9:a7:19:e6:15:56:63:35:25:f6:
                    60:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D5:C3:0F:D1:B3:32:9C:4A:ED:AD:D5:CC:E6:EA:99:7E:0A:4B:10
            X509v3 Authority Key Identifier:
                keyid:AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/4dc83e177a9e0368b97e18240acc44c777f76f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/cebcc65db675ffc3185449c18bd433794ea8ca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:06:ed:27:4a:7c:c5:24:98:02:33:85:07:08:13:db:b7:4c:
         23:6d:5d:4f:83:99:67:dc:34:94:5d:24:da:f2:cb:f2:2e:0c:
         d2:ac:57:c2:b8:1a:7b:25:b3:22:a6:80:88:b0:50:b3:ff:02:
         34:27:6f:00:9a:2b:a1:94:7f:48:36:3c:93:a1:bd:22:7a:eb:
         91:4d:ee:96:05:ee:6a:2f:f9:a2:5c:b1:2e:f1:8d:11:9f:a3:
         bb:64:59:56:41:9d:6a:17:bc:b6:52:32:a4:d9:06:86:f0:fa:
         fb:93:ec:b5:da:51:db:38:28:17:81:c3:22:d1:09:45:27:36:
         08:f4:aa:ed:ca:2e:d3:9d:43:a1:a3:12:10:9e:2e:14:c7:c4:
         db:67:e5:4e:62:5d:93:fe:06:d8:8b:93:cc:e1:3f:37:2e:68:
         de:ca:cc:a1:5b:d5:1e:6c:d4:8e:40:a9:19:8a:98:7b:f7:62:
         c3:54:57:4c:d4:87:e6:9a:e4:90:cf:df:de:a8:82:0a:5f:bc:
         2c:24:4b:00:2e:12:0e:c9:06:c7:9e:54:91:d7:fe:66:d6:49:
         7a:c8:f9:2e:a4:2c:00:ff:53:ed:c3:b0:15:84:e4:19:9d:2f:
         94:2c:1e:67:37:72:48:a1:d2:ff:52:99:74:99:a0:0a:e5:8b:
         de:8e:9d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----