Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/1d3af8568e6d9d63332150718a7b2de97907a5a4.roa
File:                     1d3af8568e6d9d63332150718a7b2de97907a5a4.roa (raw, json)
Hash identifier:          Qm+Rl3C2mcUkG2TCaydn2GFw4FD0fzltu5aHxCMB7YU=
Subject key identifier:   7F:B9:5C:45:7B:7D:FE:28:7A:56:9A:BC:BA:F9:D3:C3:42:8E:C3:59
Certificate issuer:       /CN=0617fe284eadaecc300caf805a55753001bc6052
Certificate serial:       7D61
Authority key identifier: 23:11:AC:04:68:03:80:BD:6D:72:01:7E:23:B2:26:48:24:56:3C:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0617fe284eadaecc300caf805a55753001bc6052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/1d3af8568e6d9d63332150718a7b2de97907a5a4.roa
Signing time:             Sat 12 Nov 2022 17:17:09 +0000
ROA not before:           Sun 30 Oct 2022 00:13:10 +0000
ROA not after:            Sat 02 Nov 2024 00:13:10 +0000
asID:                     270141
IP address blocks:        2806:3dc::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32097 (0x7d61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0617fe284eadaecc300caf805a55753001bc6052
        Validity
            Not Before: Oct 30 00:13:10 2022 GMT
            Not After : Nov  2 00:13:10 2024 GMT
        Subject: CN=1d3af8568e6d9d63332150718a7b2de97907a5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:84:38:be:aa:d9:61:f3:be:e4:79:f4:8b:58:
                    7e:1e:0c:0c:52:b3:cc:32:58:16:5e:36:7d:59:a2:
                    5e:3a:b6:56:8b:ca:e0:7d:ca:80:14:48:62:a2:3e:
                    5b:45:88:5c:9b:da:3e:db:a1:50:e9:11:a0:87:1f:
                    3e:ff:2d:99:da:ee:a6:ad:c1:6a:5b:4c:54:bb:33:
                    54:fb:d2:f9:e0:78:ee:5e:66:1e:63:e2:16:75:e6:
                    ba:b5:8f:57:0d:9b:91:83:2c:57:7e:d9:75:ed:ce:
                    84:11:18:bd:ec:15:eb:1d:60:0a:bf:fe:12:13:2c:
                    c5:45:25:71:03:27:6a:9a:e4:d2:ba:24:26:88:0e:
                    bc:de:38:69:f1:58:8e:eb:53:95:bb:59:d0:72:30:
                    45:bb:ac:6f:6f:39:d7:74:9d:25:84:7d:a3:0b:f8:
                    8e:e8:0b:cd:c5:25:84:86:fa:05:8b:31:35:b5:56:
                    20:12:e4:04:d3:8a:a1:c8:c7:cb:0d:56:17:47:6f:
                    d1:20:cd:f7:b5:dc:89:3b:aa:97:7e:a6:a7:fa:82:
                    94:1a:08:da:9c:c0:e3:f3:c7:28:86:12:5b:46:98:
                    cd:dc:94:ae:85:0f:fd:54:7e:7c:dc:37:2c:5e:8f:
                    3c:7c:12:14:b2:49:21:99:f3:96:14:a6:8b:d7:f0:
                    b6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B9:5C:45:7B:7D:FE:28:7A:56:9A:BC:BA:F9:D3:C3:42:8E:C3:59
            X509v3 Authority Key Identifier:
                keyid:23:11:AC:04:68:03:80:BD:6D:72:01:7E:23:B2:26:48:24:56:3C:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0617fe284eadaecc300caf805a55753001bc6052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/1d3af8568e6d9d63332150718a7b2de97907a5a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/0617fe284eadaecc300caf805a55753001bc6052.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:c0:ad:5f:52:c0:29:5b:8c:d5:34:e8:9a:05:a9:7d:9b:92:
         34:c5:50:9b:44:bc:29:8f:5b:33:3d:7c:7c:26:f9:88:b2:47:
         7b:2b:09:9b:f6:26:c3:43:50:41:95:16:be:36:d3:ef:c6:cc:
         83:9f:d3:4b:a9:d4:83:4a:c7:be:7f:79:4f:ce:68:63:73:c1:
         d2:9a:b0:ff:66:55:0d:f3:19:13:e4:a5:cf:82:94:34:29:32:
         8b:de:6a:62:12:1e:8f:5e:7a:18:7e:c3:36:4a:3e:93:e7:07:
         d4:45:44:36:54:df:6a:b1:ea:13:f0:5d:df:c9:e2:14:43:6a:
         cb:e3:df:b7:e7:8b:a6:8c:d0:d7:76:b0:cb:64:e7:ef:8e:16:
         e7:c6:de:5c:c5:6d:de:30:c8:12:bd:61:00:bb:d2:47:59:08:
         27:4d:99:85:50:86:17:eb:ee:9c:fa:eb:92:89:a7:e2:9d:0d:
         e8:91:a2:6e:56:71:c1:ac:9c:67:30:e5:42:c4:60:6a:65:91:
         e4:b2:60:35:2d:6e:04:fa:95:56:d9:52:41:7e:d6:3a:50:37:
         7a:7f:ee:b4:75:59:fe:96:35:64:a4:05:0a:b0:c2:ab:11:54:
         1e:a3:03:ec:7c:2f:b3:e3:42:df:15:2d:75:9c:8b:1f:3e:f1:
         5e:de:5c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----