Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/40fee8fc7f2efd3c7dd94ecb89c698ac485d895b.roa
File:                     40fee8fc7f2efd3c7dd94ecb89c698ac485d895b.roa (raw, json)
Hash identifier:          jecKR2k2LF2UPWrk0ykWSOqi57XH/qHVaBEw7FssPQk=
Subject key identifier:   2A:F6:7F:4D:25:B7:E0:91:18:3B:EF:BD:14:05:13:85:2A:13:30:BC
Certificate issuer:       /CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
Certificate serial:       0E1470
Authority key identifier: C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/40fee8fc7f2efd3c7dd94ecb89c698ac485d895b.roa
Signing time:             Fri 11 Nov 2022 02:57:13 +0000
ROA not before:           Thu 10 Nov 2022 02:55:11 +0000
ROA not after:            Mon 11 Nov 2024 02:55:11 +0000
asID:                     271903
IP address blocks:        2803:5be0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 922736 (0xe1470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
        Validity
            Not Before: Nov 10 02:55:11 2022 GMT
            Not After : Nov 11 02:55:11 2024 GMT
        Subject: CN=40fee8fc7f2efd3c7dd94ecb89c698ac485d895b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0c:6e:53:30:90:58:f6:89:46:3e:0a:99:3d:
                    27:a3:95:86:34:a1:ab:67:c7:4e:73:a7:db:d7:e0:
                    8d:c6:eb:7a:de:df:dd:9d:e7:5e:72:69:40:52:56:
                    63:40:0f:14:ee:f1:e4:2f:14:23:22:53:1f:8c:0c:
                    d1:df:e7:fc:27:5f:94:08:d3:29:6d:3c:28:34:5f:
                    c9:cc:29:2c:71:bc:2e:8d:11:f9:36:3a:6c:20:1a:
                    68:70:9a:72:80:b3:59:c8:7b:98:28:12:40:02:0f:
                    4f:62:43:74:1a:a2:dc:6b:ca:47:73:96:a8:83:f6:
                    24:76:b1:9c:17:20:e4:00:c8:16:ec:22:f4:66:1a:
                    27:24:a5:30:e0:fa:4d:4b:35:3b:f4:6e:8c:03:2f:
                    e4:2e:c0:6f:1d:01:c7:ce:89:d4:5d:e1:af:a9:75:
                    b2:be:95:24:40:ca:ef:81:db:01:cc:36:ce:9e:91:
                    37:95:3d:8e:2c:d4:06:4b:2d:b4:07:23:9c:bf:6b:
                    54:a0:c0:17:1b:2f:f7:ca:86:a8:7e:25:71:bb:e4:
                    0b:5f:63:63:8c:4a:2b:62:6b:37:2f:01:c5:12:a8:
                    42:e7:0e:69:41:e4:01:4e:6e:26:18:08:9e:a2:7b:
                    48:ca:e6:7b:15:d3:69:4f:76:0a:fb:a3:85:05:53:
                    60:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F6:7F:4D:25:B7:E0:91:18:3B:EF:BD:14:05:13:85:2A:13:30:BC
            X509v3 Authority Key Identifier:
                keyid:C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/40fee8fc7f2efd3c7dd94ecb89c698ac485d895b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/9358379d5e8a0ab2bac598f60260856dfdc7b034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:bd:63:45:36:da:5b:14:58:b0:c1:67:eb:e4:55:45:6b:2a:
         7d:7d:22:50:96:a6:92:3b:74:30:97:b1:a1:40:c7:a0:ec:3b:
         45:4f:69:c9:9d:42:62:b9:84:28:d6:f6:01:6d:8d:d8:8a:eb:
         b0:09:fa:2a:16:ca:b6:24:bc:43:bd:56:ab:39:3f:df:0f:5c:
         cc:10:57:a6:bd:fd:3a:de:34:df:c5:73:56:b8:1b:03:31:2e:
         1b:5a:56:a6:a9:07:e3:b6:d9:52:0f:80:88:ff:01:52:71:34:
         5e:b1:e2:6e:39:31:51:ad:70:36:8e:e7:8d:8c:75:c5:81:7e:
         2a:5e:b1:57:d0:f0:a3:79:8f:ae:39:93:e2:d5:26:f2:f9:96:
         a5:a1:ef:2c:e2:9d:a8:16:cd:ff:f1:14:75:4d:6f:57:00:f0:
         9f:76:31:63:f6:95:68:ae:94:db:8a:18:fd:59:9b:25:42:98:
         b6:27:dc:fa:51:2d:ad:65:d2:51:0c:a7:26:be:2c:5d:e8:6c:
         c5:fa:e8:59:cf:f8:81:2b:e6:c3:be:52:7e:24:42:73:be:bd:
         6d:f6:92:a8:3d:9a:78:3a:a9:ed:20:72:8c:dd:53:8d:37:17:
         71:32:5d:28:f5:71:7e:46:05:e2:60:d8:dd:f0:d3:f7:31:b4:
         7f:cb:2e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----