Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6bbf8508-8d2a-4f10-bf9e-617dad58d162/0e70f7a8fc7de247ef35f915e557903a03e53307.roa
File:                     0e70f7a8fc7de247ef35f915e557903a03e53307.roa (raw, json)
Hash identifier:          7SSPx0rWoOebfhBR+oFyS+0BxRQsU/6M872+aKP2t4o=
Subject key identifier:   E4:5B:49:B9:DA:14:98:51:B9:0C:14:17:81:1D:36:79:BC:9F:3C:5E
Certificate issuer:       /CN=ad988e339348da7ed75d92d210f8584b6870fcc7
Certificate serial:       0B53
Authority key identifier: A5:73:31:A6:B5:21:63:96:82:22:80:70:F3:AA:5F:D5:8D:D8:56:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad988e339348da7ed75d92d210f8584b6870fcc7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6bbf8508-8d2a-4f10-bf9e-617dad58d162/0e70f7a8fc7de247ef35f915e557903a03e53307.roa
Signing time:             Thu 14 Jul 2022 18:29:32 +0000
ROA not before:           Thu 14 Jul 2022 03:00:00 +0000
ROA not after:            Sun 14 Jul 2024 03:00:00 +0000
asID:                     271967
IP address blocks:        2803:ce10::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2899 (0xb53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad988e339348da7ed75d92d210f8584b6870fcc7
        Validity
            Not Before: Jul 14 03:00:00 2022 GMT
            Not After : Jul 14 03:00:00 2024 GMT
        Subject: CN=0e70f7a8fc7de247ef35f915e557903a03e53307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:50:5e:42:40:55:e2:4d:1f:eb:1a:e8:79:
                    78:4e:34:23:1b:4f:e2:56:ee:23:0b:1f:3d:28:5d:
                    5a:95:dd:a0:be:ca:b3:1e:31:48:cb:28:82:dc:2a:
                    2e:ff:2b:c7:eb:ab:db:09:1e:c3:80:ab:67:cf:83:
                    b2:04:64:bb:00:c5:2c:f5:b2:f9:42:53:15:5b:6b:
                    94:f9:e4:80:23:21:bf:ef:a0:1a:74:21:af:9e:94:
                    a5:0c:46:fe:0c:3e:aa:1b:87:a7:7d:c9:3f:85:ad:
                    d1:61:6b:ee:1f:bd:f7:49:1e:67:6d:ec:fe:86:5b:
                    a8:39:1d:86:d6:bb:da:2e:de:45:ed:3d:1d:7b:14:
                    62:ab:73:38:ee:25:a0:77:71:f8:72:75:51:79:87:
                    ae:7b:04:e2:4b:d7:92:07:b6:a5:31:2a:24:69:b6:
                    3a:14:ce:f7:c7:9a:50:04:b7:0c:a8:e6:f8:89:88:
                    50:98:d3:d0:3f:53:f6:e9:9d:3a:9c:7b:86:c0:24:
                    a0:cb:b7:b2:35:0b:46:05:65:d0:b4:a7:3b:0b:84:
                    15:79:c5:2d:e9:49:51:d3:50:b8:82:6c:3c:94:4a:
                    1a:cf:fe:75:58:42:fa:a7:fb:9b:38:77:b0:6f:92:
                    d8:67:14:17:1a:80:88:82:bf:14:8f:1f:1c:4c:72:
                    d2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5B:49:B9:DA:14:98:51:B9:0C:14:17:81:1D:36:79:BC:9F:3C:5E
            X509v3 Authority Key Identifier:
                keyid:A5:73:31:A6:B5:21:63:96:82:22:80:70:F3:AA:5F:D5:8D:D8:56:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad988e339348da7ed75d92d210f8584b6870fcc7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6bbf8508-8d2a-4f10-bf9e-617dad58d162/0e70f7a8fc7de247ef35f915e557903a03e53307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6bbf8508-8d2a-4f10-bf9e-617dad58d162/ad988e339348da7ed75d92d210f8584b6870fcc7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ce10::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:77:ec:0e:95:6c:68:6c:a6:4c:66:5f:61:f9:63:43:c0:99:
         03:54:d4:c3:33:95:7d:ac:c4:c0:f4:fd:77:cf:c9:6c:82:1e:
         82:7e:57:b7:41:b8:3e:7a:3a:8d:66:da:ce:6a:de:34:fa:bb:
         8a:d7:5f:f7:96:5a:82:fa:88:14:f5:52:2b:8d:e6:a3:70:4d:
         e2:76:3c:d2:fb:c4:14:1a:7d:71:a6:a2:67:37:0b:a7:b7:15:
         f1:4f:cc:0e:db:3c:20:c5:65:33:23:93:1c:f2:19:ad:ed:59:
         1d:80:71:90:2f:b1:38:df:9c:41:05:89:91:66:6d:21:c0:73:
         05:c4:13:3c:b0:6d:03:11:72:4e:65:f9:b6:85:09:a3:d4:49:
         ed:5d:5b:d5:c7:c2:95:f2:68:f7:bd:c9:cd:00:68:b5:15:67:
         de:eb:d1:23:6e:db:f2:cf:c2:b7:96:90:59:30:7c:55:b9:01:
         cf:75:5d:da:04:ae:06:33:fb:a6:4a:42:06:b2:bd:ca:38:3a:
         82:4b:8e:05:73:48:67:2a:c3:50:50:16:04:d7:e7:f1:99:f6:
         56:43:c3:9e:2e:96:68:59:3c:fc:ef:ab:87:6c:c4:77:87:12:
         1e:e0:4d:f7:26:58:d1:33:be:24:86:e9:55:94:c8:03:f2:e6:
         ca:66:32:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----