Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/fa4cb63ff7310ce57b44d0b45cda9d6e900dd8e9.roa
File:                     fa4cb63ff7310ce57b44d0b45cda9d6e900dd8e9.roa (raw, json)
Hash identifier:          2aYDaheGspwpmh43ApYgVLo6wSZlBOV4R9jgCRxPrzk=
Subject key identifier:   4D:FD:92:6F:0E:FD:CC:49:0E:EF:72:BE:4A:2E:04:75:A0:5B:4E:A9
Certificate issuer:       /CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
Certificate serial:       100E93
Authority key identifier: C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/fa4cb63ff7310ce57b44d0b45cda9d6e900dd8e9.roa
Signing time:             Fri 27 Jan 2023 20:10:18 +0000
ROA not before:           Thu 26 Jan 2023 20:05:49 +0000
ROA not after:            Mon 27 Jan 2025 20:05:49 +0000
asID:                     270903
IP address blocks:        2803:5be0::/32 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1052307 (0x100e93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
        Validity
            Not Before: Jan 26 20:05:49 2023 GMT
            Not After : Jan 27 20:05:49 2025 GMT
        Subject: CN=fa4cb63ff7310ce57b44d0b45cda9d6e900dd8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:90:f1:96:92:81:35:4f:9f:5e:83:7e:6c:c6:
                    45:b2:fb:42:95:d1:13:d2:20:7d:bc:7d:e3:6c:d2:
                    18:07:d3:51:eb:62:2b:e1:28:d8:a7:b7:e3:33:18:
                    92:66:fc:33:8a:ad:01:6c:de:84:00:da:6e:04:eb:
                    a3:31:02:87:8f:13:c6:66:c1:14:b3:8d:44:34:06:
                    5c:f3:b2:f8:30:b2:13:b7:8a:b9:d3:02:ac:62:f0:
                    35:32:51:81:b1:ed:9d:e4:32:8a:6d:cb:63:e3:55:
                    31:ef:6b:eb:75:d3:a5:fe:bb:4e:7f:b2:96:c2:12:
                    1b:c2:03:7b:9d:62:58:fc:8d:63:18:b3:5d:0f:e2:
                    d6:5b:1b:44:99:85:2b:c6:24:b6:70:b0:0f:d2:b2:
                    b4:b9:ec:01:c7:7d:f4:92:12:64:66:33:49:ab:81:
                    ad:8c:12:2e:b7:e5:e4:bb:6f:cc:99:6b:76:e6:84:
                    bd:90:b0:0b:04:92:3d:87:00:58:ac:61:e0:b6:5c:
                    96:1c:a2:82:dc:39:15:ab:ce:c6:a0:69:9f:da:d9:
                    6f:76:17:fe:f9:6b:40:dd:4d:32:30:20:ba:9c:65:
                    6b:92:8d:66:a2:02:73:31:6d:54:fb:96:05:63:9d:
                    da:de:15:ea:77:55:7f:5f:db:9d:93:96:f9:9c:b1:
                    57:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:FD:92:6F:0E:FD:CC:49:0E:EF:72:BE:4A:2E:04:75:A0:5B:4E:A9
            X509v3 Authority Key Identifier:
                keyid:C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/fa4cb63ff7310ce57b44d0b45cda9d6e900dd8e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/9358379d5e8a0ab2bac598f60260856dfdc7b034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:3f:b1:df:57:96:31:a4:b0:29:81:72:f8:60:53:4c:4a:b4:
         fa:37:e0:d2:6a:fb:96:08:9f:52:57:11:de:f2:5c:0f:25:b6:
         d6:14:ae:e7:b9:88:01:5a:7d:2d:79:21:d6:ab:73:c1:a6:0c:
         c2:6f:32:28:60:c6:87:10:10:9c:22:ae:d0:35:0d:a1:50:0c:
         e1:80:c4:f0:f0:f8:c8:db:79:1c:86:cf:95:a9:5e:3d:97:29:
         72:57:d9:27:fa:d3:dc:7e:34:fd:04:70:a9:e1:e9:c6:b8:ff:
         c2:fc:45:80:e8:af:b8:4a:48:a7:de:59:61:12:82:ea:2b:d9:
         76:9f:6d:78:8d:22:ec:93:4d:b3:66:18:a5:e7:99:7b:52:aa:
         30:99:4a:fb:c0:f7:e0:09:86:3c:e0:cb:28:50:2a:8a:f2:53:
         0f:1e:a9:76:0d:92:0a:1f:a2:b7:49:31:4e:81:d9:bc:7d:79:
         9a:47:35:46:64:bb:b0:e1:a3:b7:4d:14:f2:3b:10:e7:19:aa:
         af:ad:4d:f0:46:a8:71:3a:fd:a1:b4:4f:40:f1:ed:c2:b9:50:
         24:28:ed:ee:e3:1c:f2:32:3b:ff:1e:4c:9e:34:d5:a2:b0:60:
         40:57:f6:a6:2f:b7:65:07:cd:07:04:5b:fc:86:ce:e8:4a:a0:
         4e:ee:28:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----