Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/f1aa3af1b0a16eb0ed03a1b780efccc6dae666c1.roa
File:                     f1aa3af1b0a16eb0ed03a1b780efccc6dae666c1.roa (raw, json)
Hash identifier:          SF9v7+xg3FXdpS+f14lsyE14M3huyFEdPHdXHEj64cQ=
Subject key identifier:   08:8A:B7:39:1B:99:F1:12:91:B6:89:29:54:7B:92:C0:36:50:DE:EA
Certificate issuer:       /CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
Certificate serial:       10F18C
Authority key identifier: C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/f1aa3af1b0a16eb0ed03a1b780efccc6dae666c1.roa
Signing time:             Thu 02 Mar 2023 00:31:49 +0000
ROA not before:           Wed 25 Jan 2023 20:05:49 +0000
ROA not after:            Mon 27 Jan 2025 20:05:49 +0000
asID:                     270903
IP address blocks:        2803:5be0::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1110412 (0x10f18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
        Validity
            Not Before: Jan 25 20:05:49 2023 GMT
            Not After : Jan 27 20:05:49 2025 GMT
        Subject: CN=f1aa3af1b0a16eb0ed03a1b780efccc6dae666c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:57:8f:c1:4e:5e:58:6f:04:c9:ca:98:04:1a:
                    51:b1:44:d9:a7:87:71:73:81:51:ce:1f:68:e6:82:
                    a8:e7:22:dc:4b:33:3a:bd:73:62:f3:05:13:ab:c1:
                    a3:98:e4:81:48:78:95:b9:a8:bc:f5:25:16:52:e0:
                    99:9a:09:b1:9e:0a:b2:f4:1f:d9:5d:2d:9a:b0:66:
                    53:17:89:b1:6f:35:30:3a:20:a6:4d:c3:a6:ea:c3:
                    d3:b6:62:78:1e:25:ce:ec:d1:1d:2e:7b:0d:8f:52:
                    8f:e7:5f:20:1b:12:07:b9:4a:8b:90:af:74:ad:74:
                    21:87:7b:c1:31:2f:85:af:e7:ce:2a:7b:74:57:14:
                    ba:b4:91:d8:1c:58:9f:b2:8a:a6:f4:74:c9:a6:0f:
                    47:75:dd:b4:6b:e0:2d:b5:b3:e9:94:2e:f8:d2:08:
                    0e:dd:35:12:73:9a:59:5e:81:d5:20:6f:94:8b:b7:
                    d2:ca:32:23:10:1b:24:13:24:68:50:a8:f2:6f:7a:
                    a1:ce:cb:62:58:f5:07:66:d4:23:d7:64:0f:4e:e2:
                    fa:0f:c0:2e:a3:46:50:f4:92:b1:ad:2a:c6:cf:cd:
                    3a:00:a9:2f:39:4b:bb:e8:44:27:ba:4c:26:91:ec:
                    91:43:af:d1:78:a9:c6:54:2d:fb:81:05:b9:fe:17:
                    4b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8A:B7:39:1B:99:F1:12:91:B6:89:29:54:7B:92:C0:36:50:DE:EA
            X509v3 Authority Key Identifier:
                keyid:C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/f1aa3af1b0a16eb0ed03a1b780efccc6dae666c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/9358379d5e8a0ab2bac598f60260856dfdc7b034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5be0::/40

    Signature Algorithm: sha256WithRSAEncryption
         80:47:18:44:9b:55:ef:e3:3d:c5:b8:12:04:3c:d1:a3:bd:c4:
         7b:d0:28:3b:e0:8e:fd:b2:e9:77:6b:a7:2e:ba:e0:14:b7:02:
         19:ea:b8:fb:e2:45:1f:ca:87:76:92:b5:ac:59:12:4f:cd:6a:
         b1:48:6e:da:b4:27:a6:03:bd:d2:0a:c2:96:4f:32:de:db:76:
         5f:b6:16:69:ea:f1:01:da:96:f0:1f:44:f3:c4:88:74:f4:9d:
         40:7f:91:a3:31:70:ab:ae:72:f2:f4:85:99:03:ea:0e:a4:76:
         c7:08:1c:39:f3:df:a1:50:49:18:9e:87:09:9e:6a:99:11:7b:
         76:c1:9c:5a:e3:72:38:fb:62:88:8c:ba:0e:93:8a:9d:7d:56:
         e3:7d:11:3e:22:55:2f:ae:96:cb:22:db:89:9b:77:46:79:c1:
         66:69:43:2d:41:e5:7d:dc:2d:9c:31:8f:6a:1a:b5:06:24:54:
         0d:01:f4:22:75:ab:da:88:91:cb:13:42:b1:09:05:69:09:d2:
         46:e6:a4:9c:b4:71:07:49:11:a6:89:95:4d:cb:11:8f:3c:c8:
         25:35:4a:7e:3e:82:10:8a:18:56:43:0f:47:b8:de:86:64:ec:
         5b:09:15:ad:27:fd:9c:58:ff:4f:02:e1:4d:f3:a7:3c:d8:26:
         6c:86:74:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----