Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/1939c897e89df69a4bb34848b2860fd28d315e6d.roa
File:                     1939c897e89df69a4bb34848b2860fd28d315e6d.roa (raw, json)
Hash identifier:          9DwYc0PQncu37KnLa+zMGci2Z2xILkSiN0wEfJmDDBw=
Subject key identifier:   64:A1:B5:6F:03:6B:A9:1C:D2:7D:62:8D:86:A9:17:D0:34:53:BD:98
Certificate issuer:       /CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
Certificate serial:       131762
Authority key identifier: C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/1939c897e89df69a4bb34848b2860fd28d315e6d.roa
Signing time:             Fri 19 May 2023 01:50:55 +0000
ROA not before:           Thu 18 May 2023 01:50:55 +0000
ROA not after:            Mon 19 May 2025 01:50:55 +0000
asID:                     270903
IP address blocks:        2803:5be0::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1251170 (0x131762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
        Validity
            Not Before: May 18 01:50:55 2023 GMT
            Not After : May 19 01:50:55 2025 GMT
        Subject: CN=1939c897e89df69a4bb34848b2860fd28d315e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e2:af:ac:35:b8:91:2d:f5:53:34:d8:ec:d2:
                    63:e7:e4:1e:9c:07:96:74:a0:71:2e:bf:bf:68:c0:
                    8c:af:ac:3c:46:6c:c5:fd:1d:82:2c:14:89:9f:4d:
                    15:04:ca:4d:16:6b:5e:72:37:b6:d8:c3:d7:ba:82:
                    7b:69:3a:c2:85:1e:a9:2d:5b:be:9b:f8:9f:81:f1:
                    c8:58:78:a8:d8:44:0c:de:f5:a2:ed:e6:f3:cd:cb:
                    37:2c:32:47:a4:5b:93:b9:c4:35:6c:48:0f:3a:80:
                    71:78:e2:fe:1c:56:53:53:ac:fd:d9:14:3d:48:3a:
                    5f:78:f9:3e:dc:05:ae:a5:ca:48:01:95:29:59:e5:
                    c9:80:7f:f3:63:01:a2:ee:2a:98:a5:56:d8:4b:76:
                    e3:ef:d5:14:bf:a3:2b:5d:41:b1:86:8c:73:7b:cc:
                    5f:0d:88:a2:87:cb:43:4a:0a:2c:b0:52:71:c5:ee:
                    65:11:a7:a9:1b:90:68:05:3c:2b:45:53:ca:83:e6:
                    67:db:cd:7a:2b:f6:a4:b0:60:61:81:43:e5:61:13:
                    e0:48:0d:12:e2:e6:63:9a:6f:0c:d6:78:f8:d3:13:
                    2e:3b:06:d3:95:20:ed:f3:d7:6a:b7:ed:7c:58:02:
                    e7:70:5e:1c:0c:7b:ce:54:4e:1e:e1:5e:55:be:3f:
                    20:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A1:B5:6F:03:6B:A9:1C:D2:7D:62:8D:86:A9:17:D0:34:53:BD:98
            X509v3 Authority Key Identifier:
                keyid:C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/1939c897e89df69a4bb34848b2860fd28d315e6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/9358379d5e8a0ab2bac598f60260856dfdc7b034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5be0::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:cf:67:5c:03:2b:ad:ac:f6:28:3b:cb:c1:0d:76:ae:92:44:
         be:a3:fa:5b:8e:e8:f8:87:39:e7:ff:c1:19:ac:b2:24:21:46:
         65:b8:4a:d4:4d:c1:d7:54:0d:54:4a:ff:bb:aa:e6:46:0e:1c:
         49:60:ec:90:56:13:d1:d2:25:bb:15:b5:90:cf:90:7b:68:0b:
         34:4f:8e:26:cc:57:f7:62:6f:ba:16:da:a9:7f:89:76:5c:8e:
         f2:98:99:6b:cf:f3:84:43:8a:42:10:1d:e7:a8:94:1b:c8:1e:
         91:a7:40:fc:a2:84:20:3a:71:7b:35:60:76:60:29:6e:29:4b:
         c7:c4:ed:e5:a3:30:f6:22:ac:27:79:b9:2f:59:64:ce:9f:ca:
         2e:9f:eb:f6:66:96:97:87:98:d8:ce:23:d9:8a:e5:e0:42:d5:
         06:62:a0:b3:e7:d2:d2:e1:dc:1f:d6:5a:1e:b8:1f:69:44:6b:
         97:ba:48:19:d7:97:4f:25:40:0b:f7:73:73:fc:e0:59:03:a2:
         f6:31:b9:2f:e8:00:69:a3:d8:66:cb:02:8e:9c:ec:c3:97:71:
         28:c4:57:56:6d:c3:6e:7b:3a:e6:e0:3f:5f:e0:96:a1:06:50:
         9f:77:47:4a:b4:79:fe:16:bc:b3:e7:df:40:d3:ad:ae:93:31:
         e3:d5:95:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----