Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/dcad6d5807a371d446f07a84c977882fbe5f3b39.roa
File:                     dcad6d5807a371d446f07a84c977882fbe5f3b39.roa (raw, json)
Hash identifier:          8Pn0YJxjNLpct4vnml14Zs5W2gEIlwxNa3xegqXQ2l0=
Subject key identifier:   99:FB:FE:35:C2:A7:8C:0A:FC:BF:35:32:7D:88:FC:E5:A4:CD:DB:F1
Certificate issuer:       /CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
Certificate serial:       10121A
Authority key identifier: C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/dcad6d5807a371d446f07a84c977882fbe5f3b39.roa
Signing time:             Fri 27 Jan 2023 20:11:42 +0000
ROA not before:           Thu 26 Jan 2023 20:10:19 +0000
ROA not after:            Mon 27 Jan 2025 20:10:19 +0000
asID:                     270903
IP address blocks:        2803:5be0::/32 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1053210 (0x10121a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
        Validity
            Not Before: Jan 26 20:10:19 2023 GMT
            Not After : Jan 27 20:10:19 2025 GMT
        Subject: CN=dcad6d5807a371d446f07a84c977882fbe5f3b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3a:79:90:00:b8:c2:ab:c3:6b:4c:21:5e:27:
                    d5:18:54:2a:bb:0d:e2:e3:12:16:93:60:2c:a4:4e:
                    51:4c:6b:4a:90:cb:ef:1c:23:f6:00:8a:c2:54:a3:
                    11:23:93:fe:e0:7d:fd:c0:88:03:1e:5c:65:30:f2:
                    3d:86:49:6c:0e:e0:b4:ac:8e:3c:61:f4:c9:f1:1b:
                    89:b0:1c:22:b7:4b:b2:47:1f:0c:d2:09:46:c8:1a:
                    73:02:01:7c:32:ef:f0:31:e4:a7:47:de:b9:da:5b:
                    83:12:74:1a:a5:b4:9c:bf:ba:c5:8d:96:05:dd:0a:
                    a0:e1:42:14:81:e8:10:c4:7f:e3:1f:e1:85:7f:23:
                    b0:bd:17:69:4c:9e:d1:70:d1:88:a8:0e:79:12:94:
                    c0:56:1c:15:c0:f7:0a:9d:cf:97:6a:d4:34:07:7b:
                    42:3c:02:e0:3a:ac:5d:f2:dd:c1:a1:30:a4:f2:ce:
                    eb:ec:8e:a0:0f:a1:ae:69:f5:6a:37:ab:e6:aa:3b:
                    12:68:2e:36:9f:12:2f:4e:32:95:bf:ee:88:c8:ab:
                    0f:6b:92:b0:75:8c:6a:a8:1c:14:f6:c8:1a:fb:0d:
                    a1:ad:3f:09:bf:24:0a:fd:a2:e8:49:bf:b1:af:73:
                    ab:ba:2d:e5:e9:3c:28:c2:7e:f7:c0:d7:2c:2c:e9:
                    d8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FB:FE:35:C2:A7:8C:0A:FC:BF:35:32:7D:88:FC:E5:A4:CD:DB:F1
            X509v3 Authority Key Identifier:
                keyid:C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/dcad6d5807a371d446f07a84c977882fbe5f3b39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/9358379d5e8a0ab2bac598f60260856dfdc7b034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:b8:e1:d0:93:ce:19:a7:6c:d1:7f:65:b2:f4:c0:2a:4a:b9:
         c6:b2:b8:1c:d0:24:8d:4c:74:f4:aa:ae:ae:df:77:66:02:5d:
         d4:2a:58:54:ce:c7:a7:9f:d1:92:80:f0:b5:8e:7b:91:5e:30:
         b1:d4:1f:bd:db:25:77:51:1f:c5:91:58:42:c6:c3:53:aa:f2:
         e8:04:78:5e:87:91:bf:8c:75:f9:7b:4d:25:78:80:53:1b:07:
         39:d7:88:0e:e4:f3:3e:1e:af:50:a0:81:cf:5c:6b:fd:78:20:
         75:cd:a9:c1:81:de:9c:88:16:a4:8b:21:f9:8e:5e:84:ab:f2:
         e9:d2:2b:c7:c3:a5:78:5d:2f:b4:c1:53:71:ca:72:b1:47:eb:
         f6:1f:df:30:fb:39:a7:01:db:a9:bb:6c:13:13:0f:a9:e8:75:
         df:9e:df:5f:73:bd:39:6e:5a:00:b5:1d:da:6a:0b:9a:4f:64:
         df:d9:32:74:02:fa:f4:ff:42:7a:fe:c9:07:73:6e:ce:ac:ec:
         34:10:fb:2c:83:ba:cf:6c:ae:d2:15:23:66:e1:df:47:99:bc:
         2c:31:c2:51:7d:19:e0:10:4d:ac:46:3a:89:19:00:8a:ab:12:
         a1:39:75:61:d2:a6:82:2b:5f:56:e8:b2:31:55:5b:b2:d7:e8:
         40:92:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----