Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/79645b07014a67de83963c63d04be0b1474a1d02.roa
File:                     79645b07014a67de83963c63d04be0b1474a1d02.roa (raw, json)
Hash identifier:          /B/+UMxjlivm279C14DPj5szFzWme2D5CLXnIdq4+c8=
Subject key identifier:   73:0D:C9:B5:BD:D4:28:05:0D:72:0C:BB:AE:E8:2F:DB:89:A7:8A:3D
Certificate issuer:       /CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
Certificate serial:       1F70F1
Authority key identifier: AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/79645b07014a67de83963c63d04be0b1474a1d02.roa
Signing time:             Tue 04 Apr 2023 22:51:16 +0000
ROA not before:           Wed 14 Sep 2022 15:31:45 +0000
ROA not after:            Mon 16 Sep 2024 15:31:45 +0000
asID:                     52458
IP address blocks:        2803:480:6::/48 maxlen: 48
                          2803:480:7::/48 maxlen: 48
                          2803:480:8::/48 maxlen: 48
                          2803:480:9::/48 maxlen: 48
                          2803:480:10::/48 maxlen: 48
                          2803:480:11::/48 maxlen: 48
                          2803:480:12::/48 maxlen: 48
                          2803:480:13::/48 maxlen: 48
                          2803:480:14::/48 maxlen: 48
                          2803:480:15::/48 maxlen: 48
                          2803:480:16::/64 maxlen: 64
                          2803:480:17::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2060529 (0x1f70f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
        Validity
            Not Before: Sep 14 15:31:45 2022 GMT
            Not After : Sep 16 15:31:45 2024 GMT
        Subject: CN=79645b07014a67de83963c63d04be0b1474a1d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:a0:4a:27:07:f0:9c:0b:48:b9:e6:2d:f4:
                    eb:c4:4c:7e:25:84:43:c3:14:06:90:03:59:f8:b0:
                    6b:95:fe:e9:40:c7:0d:0a:34:cc:44:e9:89:f8:0e:
                    59:fb:a2:05:e4:95:82:67:f8:3e:9e:6d:d1:32:d1:
                    d8:28:88:ea:5c:6c:e0:56:ef:a0:1a:1c:53:af:e6:
                    19:14:5c:58:5b:62:ec:cf:0d:fd:d4:5b:e5:19:38:
                    99:38:12:a0:78:32:2b:b6:27:4f:af:1a:74:63:74:
                    2d:a3:83:c2:a1:20:9a:87:c9:3e:27:0e:e5:0d:53:
                    4e:41:88:08:3e:a0:ad:59:ba:48:75:58:c4:81:39:
                    2e:2c:58:46:21:da:c5:e9:19:22:a2:93:ac:cf:09:
                    e1:c2:f0:9d:af:93:90:3e:8d:76:94:37:cc:a0:a0:
                    c0:41:88:0b:42:e1:b6:dd:1f:47:e3:0c:d4:ea:70:
                    0c:e1:e5:87:c6:53:9d:2a:cf:26:cc:42:29:40:b9:
                    d6:1a:4b:a6:a4:db:dc:c0:f6:22:65:af:42:bb:db:
                    bc:eb:73:79:89:99:70:4e:62:bf:44:5f:03:35:be:
                    8b:98:2c:5c:b9:d2:5a:64:b8:24:20:bf:82:0a:c6:
                    06:5d:57:8d:97:c3:7f:36:91:63:58:7d:94:d5:cc:
                    5e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0D:C9:B5:BD:D4:28:05:0D:72:0C:BB:AE:E8:2F:DB:89:A7:8A:3D
            X509v3 Authority Key Identifier:
                keyid:AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/79645b07014a67de83963c63d04be0b1474a1d02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/cebcc65db675ffc3185449c18bd433794ea8ca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:6::-2803:480:9:ffff:ffff:ffff:ffff:ffff
                  2803:480:10::-2803:480:16:0:ffff:ffff:ffff:ffff
                  2803:480:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:01:80:49:82:00:1f:e7:96:ea:31:d7:93:8e:a4:95:b2:92:
         7c:10:76:5b:87:c7:4f:17:b5:4d:c2:88:d9:5b:c6:1c:14:f7:
         3f:b7:d1:7d:55:76:63:f5:a4:56:1e:a1:75:da:62:ff:a3:7d:
         85:be:b8:a4:42:3a:5e:ed:a1:d2:23:c3:e4:5e:ce:31:78:2f:
         87:33:46:7c:6d:99:7c:63:02:24:b4:b9:e2:e7:a4:be:df:34:
         94:9e:96:12:ed:7d:41:9f:5a:db:9c:01:20:c6:f6:45:9e:83:
         67:71:7f:4a:6c:bf:9b:2f:24:4f:cb:a4:a5:08:1f:15:49:f0:
         69:e7:e4:c2:fd:2a:9c:62:05:5d:b7:96:02:ff:ee:05:8b:d9:
         40:f7:82:d5:4b:3a:9a:21:fb:95:95:3f:f9:fa:06:f8:76:8e:
         b8:c6:6c:16:68:97:6f:84:94:15:d5:90:55:8b:35:8b:af:98:
         b2:9d:af:1c:65:f9:ad:8b:26:08:88:67:85:0e:24:21:b8:f9:
         f4:e4:38:6a:e5:88:a8:34:cb:06:ed:87:72:5a:0e:fa:73:b0:
         4d:86:9f:8a:67:f7:20:18:7c:11:43:c1:6c:5d:f1:db:6e:1a:
         5f:4e:84:1b:4c:78:55:c5:da:68:19:ae:c6:55:67:99:4e:e2:
         4d:f4:50:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----