Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/c28b32cae4c2f4662158600b4176f8c4f2b22a00.roa
File:                     c28b32cae4c2f4662158600b4176f8c4f2b22a00.roa (raw, json)
Hash identifier:          srQ/i1qjtJ4SGZbb1rG3LT96FBxcMrG6HZ7i3J06tNQ=
Subject key identifier:   44:1F:2C:1D:FD:B5:A9:7C:E9:99:06:F3:BE:07:7C:1F:96:E6:3E:A7
Certificate issuer:       /CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
Certificate serial:       1A9CF3
Authority key identifier: AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/c28b32cae4c2f4662158600b4176f8c4f2b22a00.roa
Signing time:             Fri 16 Sep 2022 15:23:05 +0000
ROA not before:           Fri 16 Sep 2022 15:16:17 +0000
ROA not after:            Mon 16 Sep 2024 15:16:17 +0000
asID:                     52458
IP address blocks:        2803:480:6::/64 maxlen: 64
                          2803:480:7::/64 maxlen: 64
                          2803:480:8::/64 maxlen: 64
                          2803:480:9::/64 maxlen: 64
                          2803:480:10::/64 maxlen: 64
                          2803:480:11::/64 maxlen: 64
                          2803:480:12::/64 maxlen: 64
                          2803:480:13::/64 maxlen: 64
                          2803:480:14::/64 maxlen: 64
                          2803:480:15::/64 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1744115 (0x1a9cf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
        Validity
            Not Before: Sep 16 15:16:17 2022 GMT
            Not After : Sep 16 15:16:17 2024 GMT
        Subject: CN=c28b32cae4c2f4662158600b4176f8c4f2b22a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e9:b7:b2:cc:07:a7:6b:db:40:f3:10:2d:a9:
                    62:e1:34:21:07:71:af:09:a8:92:13:3b:d2:83:4c:
                    1a:d1:aa:b5:a9:f3:23:e6:8e:c1:11:27:5f:b5:55:
                    8b:a3:16:60:2c:89:c5:de:69:23:ed:43:68:f4:f9:
                    e5:b4:7a:ec:81:3b:36:ed:2a:cf:6a:58:f1:6a:38:
                    3d:47:59:06:e2:bc:e5:b5:f1:0b:ee:f2:5f:4c:e7:
                    3e:4c:d0:4f:e4:72:9f:ff:64:b1:55:d3:1b:94:7f:
                    75:dc:65:a1:be:2c:1d:5f:8d:5f:2e:95:8f:f1:59:
                    7b:8e:86:de:89:84:1b:b9:7d:d2:e1:68:fe:6a:e6:
                    14:ee:6b:f7:ec:15:2e:76:66:40:ba:c1:fe:12:d2:
                    64:d2:e2:a7:d7:85:e2:28:0d:9a:0d:c9:d8:c2:bd:
                    53:68:aa:df:44:9d:06:e8:42:72:27:17:8e:03:5b:
                    79:53:97:56:ae:f3:6a:f0:48:a3:ff:df:8f:7d:b2:
                    19:2b:c9:14:05:bf:04:91:c3:cd:58:f6:27:35:46:
                    7f:c1:da:35:fc:07:4d:74:05:9b:c6:95:9c:44:bc:
                    78:f9:77:f1:42:0b:93:e7:ac:45:df:17:2b:2e:8c:
                    35:85:59:fd:47:4c:1e:e4:4a:37:5f:ad:0d:5c:f1:
                    67:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1F:2C:1D:FD:B5:A9:7C:E9:99:06:F3:BE:07:7C:1F:96:E6:3E:A7
            X509v3 Authority Key Identifier:
                keyid:AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/c28b32cae4c2f4662158600b4176f8c4f2b22a00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/cebcc65db675ffc3185449c18bd433794ea8ca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:6::/64
                  2803:480:7::/64
                  2803:480:8::/64
                  2803:480:9::/64
                  2803:480:10::/64
                  2803:480:11::/64
                  2803:480:12::/64
                  2803:480:13::/64
                  2803:480:14::/64
                  2803:480:15::/64

    Signature Algorithm: sha256WithRSAEncryption
         4e:82:05:0b:45:c0:ab:76:2d:d4:f8:78:b2:7e:78:f3:ef:f8:
         28:e6:3b:62:c1:5e:ba:cc:cf:e9:39:ea:2d:43:36:9a:1f:31:
         05:27:24:28:83:75:6f:d1:dd:6f:57:9c:14:2a:bd:75:a3:2f:
         65:a6:7a:b5:b9:f1:9f:91:0d:c5:00:43:7c:3f:7f:ca:1f:2c:
         76:21:8b:c6:8e:72:fa:6d:a9:9d:a1:a4:bd:96:19:b5:8a:48:
         76:2c:c3:79:1b:a4:97:ce:a7:aa:e3:3b:d8:af:db:11:2c:2d:
         1e:4f:86:26:58:dd:05:51:bd:dd:2d:51:3c:22:68:1d:45:d2:
         2d:4b:0b:0a:b5:1f:9a:a4:1d:54:8d:2b:4d:34:87:ff:14:ee:
         ca:e0:58:f3:9c:b1:17:98:84:bc:72:50:99:49:a3:50:6b:8c:
         33:3f:78:15:03:8d:74:24:1f:9f:d0:89:dd:87:1b:4c:cf:04:
         c9:48:9c:7f:75:e2:17:2b:9e:d0:b5:6c:77:9b:c0:3c:ae:79:
         17:89:54:e3:70:d0:aa:e9:9b:10:b7:26:04:c5:54:04:84:91:
         ec:ef:5b:d0:d0:53:75:8d:c8:3b:97:70:30:da:5e:7b:4c:dd:
         be:8d:49:64:da:56:df:8e:53:a1:e4:71:c5:ed:7d:b2:e4:f0:
         1b:36:85:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----