Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6bbf8508-8d2a-4f10-bf9e-617dad58d162/ff83f8489304190b9f630fb4a3ffcca9f45cf7c1.roa
File:                     ff83f8489304190b9f630fb4a3ffcca9f45cf7c1.roa (raw, json)
Hash identifier:          H5adPJSgkFCXIwt2+xDZigYblybPXle3/fQ/hO/LtTg=
Subject key identifier:   F7:C4:23:37:AC:52:AB:34:B5:B4:FA:E8:4B:5B:31:D6:13:A6:6A:6A
Certificate issuer:       /CN=ad988e339348da7ed75d92d210f8584b6870fcc7
Certificate serial:       0E02
Authority key identifier: A5:73:31:A6:B5:21:63:96:82:22:80:70:F3:AA:5F:D5:8D:D8:56:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad988e339348da7ed75d92d210f8584b6870fcc7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6bbf8508-8d2a-4f10-bf9e-617dad58d162/ff83f8489304190b9f630fb4a3ffcca9f45cf7c1.roa
Signing time:             Thu 14 Jul 2022 18:30:57 +0000
ROA not before:           Thu 14 Jul 2022 03:00:00 +0000
ROA not after:            Sun 14 Jul 2024 03:00:00 +0000
asID:                     271967
IP address blocks:        2803:ce10::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3586 (0xe02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad988e339348da7ed75d92d210f8584b6870fcc7
        Validity
            Not Before: Jul 14 03:00:00 2022 GMT
            Not After : Jul 14 03:00:00 2024 GMT
        Subject: CN=ff83f8489304190b9f630fb4a3ffcca9f45cf7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:77:69:30:3b:7e:8d:90:fb:9d:40:84:35:90:
                    4f:c4:24:2c:e1:03:71:c5:f7:55:07:6e:90:0a:b1:
                    84:c2:24:e7:68:1d:b7:13:10:fb:76:98:a4:65:b9:
                    75:e5:98:77:88:a6:b5:59:0c:61:4b:67:9d:30:7b:
                    25:c0:80:62:b5:4a:38:f3:6b:62:f3:f1:9b:31:03:
                    b5:69:70:79:78:a7:49:d5:cc:a0:d4:23:29:0e:40:
                    63:25:72:d6:22:53:a6:60:19:e5:01:1e:58:d4:83:
                    47:f2:1d:c6:41:22:65:77:2e:07:ee:c9:15:84:54:
                    db:66:63:62:c6:2a:b2:16:67:6c:0c:d8:0c:cd:95:
                    e3:e1:d0:cd:7d:36:55:19:4a:cc:58:62:77:6e:e4:
                    6a:11:ce:53:15:58:05:7a:cf:dd:6b:8b:13:45:58:
                    05:bf:1b:44:9e:7f:96:2b:5b:3d:56:c9:ad:38:3e:
                    af:a2:2a:23:70:5b:ca:78:2d:1f:da:e4:c4:82:bf:
                    3e:6c:66:87:5b:71:a5:a5:c2:4d:89:e1:0f:32:9d:
                    62:aa:3e:1a:32:1c:c3:29:dd:eb:de:f8:36:bb:68:
                    38:69:ab:8b:c3:ab:90:05:29:bb:ca:01:c3:db:af:
                    00:00:46:8f:ff:b0:d7:ea:70:40:9c:49:32:9b:d0:
                    3d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C4:23:37:AC:52:AB:34:B5:B4:FA:E8:4B:5B:31:D6:13:A6:6A:6A
            X509v3 Authority Key Identifier:
                keyid:A5:73:31:A6:B5:21:63:96:82:22:80:70:F3:AA:5F:D5:8D:D8:56:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad988e339348da7ed75d92d210f8584b6870fcc7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6bbf8508-8d2a-4f10-bf9e-617dad58d162/ff83f8489304190b9f630fb4a3ffcca9f45cf7c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6bbf8508-8d2a-4f10-bf9e-617dad58d162/ad988e339348da7ed75d92d210f8584b6870fcc7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ce10::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:c2:4e:21:ab:e5:6e:7f:19:a3:fd:f2:81:ba:eb:ff:82:c2:
         33:74:78:4f:d1:3c:67:e0:6c:47:a2:b6:99:95:68:7e:82:21:
         a4:32:1f:5a:54:4f:08:17:b1:1a:84:2f:c0:64:4b:d1:ba:9c:
         02:5c:37:af:ce:8d:13:af:62:14:5e:89:3b:60:cb:f0:11:84:
         ad:18:18:2a:ab:e5:91:4c:6b:76:89:7e:06:d7:95:06:4f:7d:
         f7:f2:e8:3b:b2:6a:43:fd:96:e7:85:42:11:de:2e:a1:4d:46:
         e6:51:bc:d3:b2:3f:27:72:0b:16:6d:a0:7a:0b:cf:89:ab:de:
         89:a2:fb:60:c9:ff:3b:34:b9:ce:3f:85:15:16:74:da:aa:0b:
         82:3e:c4:5f:fb:b7:d6:4b:7e:2a:b3:11:a5:a1:e5:12:d7:a4:
         d6:1d:99:99:0c:0b:df:63:37:82:cc:f6:87:ff:b4:4d:bf:75:
         5e:bc:cd:d9:76:38:83:a0:f2:5f:5a:25:47:73:a0:e6:fe:89:
         eb:90:23:41:26:e8:f5:35:b2:94:45:36:a1:b3:ec:1e:0e:3e:
         13:f0:63:cb:f7:53:9c:3f:b9:1b:1b:15:53:9a:87:b4:88:38:
         25:6f:a2:a6:57:a3:ba:6d:92:29:0e:9b:17:ac:6f:5b:10:51:
         75:f4:e3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----