Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/bf36b6bad2618ff8234ca1d04b46a301707a16f6.roa
File:                     bf36b6bad2618ff8234ca1d04b46a301707a16f6.roa (raw, json)
Hash identifier:          vbtUdT9nFFgHmCoeThVSdDGzYde4xBrYmD5S9LaKghM=
Subject key identifier:   C6:5E:62:65:95:77:20:1D:E9:E0:42:95:D3:62:61:42:FF:03:9D:6C
Certificate issuer:       /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial:       1AB3CC
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/bf36b6bad2618ff8234ca1d04b46a301707a16f6.roa
Signing time:             Wed 28 Sep 2022 16:51:49 +0000
ROA not before:           Wed 24 Mar 2021 14:46:05 +0000
ROA not after:            Tue 24 Mar 2026 14:46:05 +0000
asID:                     64120
IP address blocks:        2803:f080::/35 maxlen: 35

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1749964 (0x1ab3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
        Validity
            Not Before: Mar 24 14:46:05 2021 GMT
            Not After : Mar 24 14:46:05 2026 GMT
        Subject: CN=bf36b6bad2618ff8234ca1d04b46a301707a16f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:62:37:38:69:92:4f:58:41:d1:06:b4:2e:70:
                    a9:a1:f8:90:c5:e8:06:e9:fa:86:a8:b3:58:60:03:
                    7b:da:1a:cf:ad:ea:cc:a3:b3:12:06:1d:84:10:3e:
                    3e:72:a2:d1:6d:95:61:c5:e2:77:30:4d:ab:f9:5a:
                    71:a8:ca:be:ec:02:10:6f:05:29:51:46:ab:66:f2:
                    05:44:e1:71:5a:57:1d:08:db:ed:95:8f:89:12:2a:
                    1f:d4:fb:af:05:c5:e6:4a:8d:e6:a9:59:9c:9a:18:
                    2a:51:f9:ad:66:c5:88:93:b8:d8:57:8d:8f:55:b2:
                    9f:a1:ea:6e:e1:9a:f8:ae:22:45:b8:9d:b6:b2:8a:
                    04:a5:b9:2d:c1:0c:e8:c5:9b:8a:8b:cb:52:b9:97:
                    9e:ce:92:95:63:90:d8:e3:6c:45:e7:09:7e:64:62:
                    91:6f:7b:51:40:42:ef:5c:1e:9c:96:f5:c2:e2:e3:
                    51:50:c1:88:13:dc:8e:b2:cb:2e:8d:c8:7d:42:0e:
                    6f:d9:ae:cc:88:87:51:5e:3e:37:0d:7b:1d:64:f5:
                    ce:86:fb:dc:04:ae:20:50:12:cc:c7:31:ad:06:69:
                    78:f6:60:89:3b:bd:2f:2b:bc:43:3b:e4:7c:c6:72:
                    14:53:10:8f:a5:82:aa:fc:6f:74:04:a1:c3:26:59:
                    70:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5E:62:65:95:77:20:1D:E9:E0:42:95:D3:62:61:42:FF:03:9D:6C
            X509v3 Authority Key Identifier:
                keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/bf36b6bad2618ff8234ca1d04b46a301707a16f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080::/35

    Signature Algorithm: sha256WithRSAEncryption
         88:b5:fb:fe:66:71:81:ac:09:c9:06:4c:ab:1e:f4:21:0a:bd:
         0f:4c:d7:e0:93:c2:c5:5d:2c:b5:b3:a8:12:5c:cd:1e:fc:0d:
         ec:5a:f4:26:58:e8:c3:1e:f1:3e:7f:40:dc:a9:85:24:71:e9:
         6d:fa:c7:06:e3:c1:9b:12:8d:f4:23:df:8c:0e:65:54:3a:8b:
         79:dc:5a:a7:d4:62:5d:51:83:d8:e6:fa:f3:12:2d:7c:8a:49:
         04:11:fd:a2:a0:91:27:6d:a8:b1:2a:2d:cf:aa:0c:08:a2:19:
         94:6a:59:4f:76:d1:04:0e:1a:4c:42:bd:5c:7c:4e:99:c9:88:
         ef:d9:e6:78:e2:0f:06:2b:1d:d7:56:fd:e2:0e:1d:c5:a8:4d:
         18:6f:78:b9:20:82:d3:d6:9f:c9:d9:75:6d:26:60:c3:35:4f:
         73:1d:8d:ca:13:13:b5:66:c4:fd:e8:cd:21:28:2d:76:e5:31:
         fc:38:45:ab:3c:a3:46:25:dc:5e:87:b4:a0:9e:c3:6a:42:e5:
         f4:7c:79:0e:6e:0f:fb:9c:91:62:f6:30:f7:dc:eb:ed:da:61:
         45:e1:cf:53:e5:93:da:30:2a:56:72:d2:bf:71:c0:35:49:8f:
         9c:6c:ac:7b:5b:23:82:63:93:09:3c:43:73:ee:f3:bd:73:e5:
         c7:cf:f0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----