Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/b2b978652eaf72076724b03b7175fcb2516754e6.roa
File:                     b2b978652eaf72076724b03b7175fcb2516754e6.roa (raw, json)
Hash identifier:          AxiEt+3PLReZnY51sQLWDVKnMQqyDAjtTv/dtloBN3E=
Subject key identifier:   24:ED:71:F9:A9:A8:0A:20:34:FB:3F:66:C9:49:FC:9E:52:12:AD:EB
Certificate issuer:       /CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
Certificate serial:       1EA95B
Authority key identifier: AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/b2b978652eaf72076724b03b7175fcb2516754e6.roa
Signing time:             Thu 02 Mar 2023 23:26:32 +0000
ROA not before:           Thu 15 Sep 2022 15:31:45 +0000
ROA not after:            Mon 16 Sep 2024 15:31:45 +0000
asID:                     52458
IP address blocks:        2803:480:6::/48 maxlen: 48
                          2803:480:7::/48 maxlen: 48
                          2803:480:8::/48 maxlen: 48
                          2803:480:9::/48 maxlen: 48
                          2803:480:10::/48 maxlen: 48
                          2803:480:11::/48 maxlen: 48
                          2803:480:12::/48 maxlen: 48
                          2803:480:13::/48 maxlen: 48
                          2803:480:14::/48 maxlen: 48
                          2803:480:15::/48 maxlen: 48
                          2803:480:16::/64 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2009435 (0x1ea95b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
        Validity
            Not Before: Sep 15 15:31:45 2022 GMT
            Not After : Sep 16 15:31:45 2024 GMT
        Subject: CN=b2b978652eaf72076724b03b7175fcb2516754e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d7:8b:2a:77:d1:67:97:28:ff:1d:6e:06:82:
                    d1:5e:9b:76:7d:da:f0:65:86:f3:0b:82:a5:22:e9:
                    c0:48:2f:ef:5c:ec:6c:20:6d:bf:41:9e:ab:bb:7f:
                    f2:7e:39:68:93:48:80:8e:10:b7:d4:d3:54:70:01:
                    00:f9:d7:82:6c:16:ac:5c:9c:10:b5:d6:7b:c1:b3:
                    d6:fa:c9:aa:47:e5:a4:cd:7e:79:f6:8d:f5:56:05:
                    a2:a1:cd:0a:3c:c1:8c:5c:e6:64:29:dc:15:18:e3:
                    43:20:2b:d9:f2:85:6a:c2:03:2c:5d:0b:a9:60:6c:
                    62:24:39:d7:38:6b:70:11:91:ae:3f:52:1d:bb:53:
                    ce:ff:fd:97:9b:c5:b8:61:82:8f:6e:f2:1b:85:3b:
                    f8:7b:2a:8d:cb:28:94:b3:80:03:68:c7:dc:1d:b8:
                    02:1a:fd:09:e3:03:0d:d4:6d:ee:22:d8:64:dc:85:
                    da:d6:5a:73:b8:3f:b9:a6:61:7a:03:91:57:2e:ea:
                    5a:bd:4e:5b:44:b6:21:31:ac:27:d6:00:81:1b:ee:
                    71:d7:6b:70:da:42:7b:7a:23:5a:f7:4f:23:40:93:
                    e8:05:29:75:89:6f:fc:12:dc:86:05:6d:67:22:2e:
                    dc:34:87:e1:73:b2:67:56:3a:cb:a8:ac:7c:dd:ea:
                    2f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:ED:71:F9:A9:A8:0A:20:34:FB:3F:66:C9:49:FC:9E:52:12:AD:EB
            X509v3 Authority Key Identifier:
                keyid:AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/b2b978652eaf72076724b03b7175fcb2516754e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/cebcc65db675ffc3185449c18bd433794ea8ca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:6::-2803:480:9:ffff:ffff:ffff:ffff:ffff
                  2803:480:10::-2803:480:16:0:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         0c:f6:6f:02:d9:74:e7:9f:30:05:37:5c:0a:48:d4:d4:66:b9:
         3f:09:97:8c:60:99:22:6b:e7:43:06:69:c1:cd:5c:14:b9:53:
         c5:2c:eb:ea:ea:17:a0:97:5f:3f:e7:63:d5:c0:b3:85:0d:6e:
         ae:97:19:22:63:b4:90:f5:ac:a9:34:9b:c9:bb:ec:f5:6d:1f:
         43:bf:d0:53:61:a4:bf:83:33:8d:48:9b:87:84:eb:13:87:a5:
         46:eb:49:54:da:7a:c4:c8:b9:d3:be:f2:c4:57:bd:14:5c:43:
         c8:72:b0:31:b2:76:ed:5a:2c:74:0a:54:7f:dc:f6:b7:e7:cd:
         c2:1f:45:02:a0:91:1f:33:60:c0:4d:13:8e:e4:ab:5b:05:88:
         fc:c2:f0:3f:b5:fa:3a:1e:fb:0b:4f:4d:82:a3:4b:0e:54:e9:
         c1:61:af:2c:a2:02:62:12:60:56:5f:e3:bd:ef:03:6c:c9:16:
         b6:c8:9b:0b:d5:b1:5d:02:da:c2:f0:28:1c:60:a3:a2:f3:a5:
         4c:cb:eb:06:96:ab:18:29:4e:e0:b1:95:73:a3:63:b4:da:6b:
         57:cb:7e:1f:c0:37:74:b4:10:14:ca:75:ac:be:64:9f:84:fe:
         62:17:eb:7f:94:d4:63:dc:2c:86:3f:5c:5f:85:cd:bf:2f:4d:
         88:3c:ce:0a
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgIDHqlbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
YmNjNjVkYjY3NWZmYzMxODU0NDljMThiZDQzMzc5NGVhOGNhNWEwHhcNMjIwOTE1
MTUzMTQ1WhcNMjQwOTE2MTUzMTQ1WjAzMTEwLwYDVQQDEyhiMmI5Nzg2NTJlYWY3
MjA3NjcyNGIwM2I3MTc1ZmNiMjUxNjc1NGU2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAldeLKnfRZ5co/x1uBoLRXpt2fdrwZYbzC4KlIunASC/vXOxs
IG2/QZ6ru3/yfjlok0iAjhC31NNUcAEA+deCbBasXJwQtdZ7wbPW+smqR+WkzX55
9o31VgWioc0KPMGMXOZkKdwVGONDICvZ8oVqwgMsXQupYGxiJDnXOGtwEZGuP1Id
u1PO//2Xm8W4YYKPbvIbhTv4eyqNyyiUs4ADaMfcHbgCGv0J4wMN1G3uIthk3IXa
1lpzuD+5pmF6A5FXLupavU5bRLYhMawn1gCBG+5x12tw2kJ7eiNa908jQJPoBSl1
iW/8EtyGBW1nIi7cNIfhc7JnVjrLqKx83eovmQIDAQABo4ICfzCCAnswHQYDVR0O
BBYEFCTtcfmpqAogNPs/ZslJ/J5SEq3rMB8GA1UdIwQYMBaAFKt2GDAsMjVTVynb
ciWrLHZclf4cMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ViY2M2
NWRiNjc1ZmZjMzE4NTQ0OWMxOGJkNDMzNzk0ZWE4Y2E1YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjdkYzU4Y2ItMTg0ZC00NTgwLWI4NTAtMGQ4ZjFm
M2I4NzI4L2IyYjk3ODY1MmVhZjcyMDc2NzI0YjAzYjcxNzVmY2IyNTE2NzU0ZTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82N2RjNThjYi0xODRkLTQ1ODAtYjg1MC0wZDhm
MWYzYjg3MjgvY2ViY2M2NWRiNjc1ZmZjMzE4NTQ0OWMxOGJkNDMzNzk0ZWE4Y2E1
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBDBggrBgEFBQcBBwEB/wQ0
MDIwMAQCAAIwKjASAwcBKAMEgAAGAwcBKAMEgAAIMBQDBwQoAwSAABADCQAoAwSA
ABYAADANBgkqhkiG9w0BAQsFAAOCAQEADPZvAtl0558wBTdcCkjU1Ga5PwmXjGCZ
ImvnQwZpwc1cFLlTxSzr6uoXoJdfP+dj1cCzhQ1urpcZImO0kPWsqTSbybvs9W0f
Q7/QU2Gkv4MzjUibh4TrE4elRutJVNp6xMi5077yxFe9FFxDyHKwMbJ27VosdApU
f9z2t+fNwh9FAqCRHzNgwE0TjuSrWwWI/MLwP7X6Oh77C09NgqNLDlTpwWGvLKIC
YhJgVl/jve8DbMkWtsibC9WxXQLawvAoHGCjovOlTMvrBparGClO4LGVc6NjtNpr
V8t+H8A3dLQQFMp1rL5kn4T+Yhfrf5TUY9wshj9cX4XNvy9NiDzOCg==
-----END CERTIFICATE-----