Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/720b9315-b0e3-4784-ba1a-3e05cb203f43/f21cd69b52fdee5559a9257e19d5578b1aab2121.roa
File:                     f21cd69b52fdee5559a9257e19d5578b1aab2121.roa (raw, json)
Hash identifier:          mXlfpExUjO8tkVAOfGEBqlVXOb7HIeJgPjxi99ia7PI=
Subject key identifier:   81:EE:70:44:0D:45:BC:70:20:63:FD:2E:FA:F2:63:10:A0:8A:75:13
Certificate issuer:       /CN=f00801f94fdeddd1b23dc04ebf80c4c73327e19a
Certificate serial:       02F1FF
Authority key identifier: CB:FF:54:EA:F9:24:D9:F2:50:5A:80:C6:E0:9A:FA:66:54:2D:69:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f00801f94fdeddd1b23dc04ebf80c4c73327e19a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/720b9315-b0e3-4784-ba1a-3e05cb203f43/f21cd69b52fdee5559a9257e19d5578b1aab2121.roa
Signing time:             Mon 02 Jan 2023 23:04:06 +0000
ROA not before:           Sun 01 Jan 2023 23:03:21 +0000
ROA not after:            Thu 02 Jan 2025 23:03:21 +0000
asID:                     272129
IP address blocks:        2803:7f10::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193023 (0x2f1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f00801f94fdeddd1b23dc04ebf80c4c73327e19a
        Validity
            Not Before: Jan  1 23:03:21 2023 GMT
            Not After : Jan  2 23:03:21 2025 GMT
        Subject: CN=f21cd69b52fdee5559a9257e19d5578b1aab2121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:33:70:8a:f2:66:aa:e3:50:c9:de:4f:59:
                    06:f1:7a:ec:d2:8f:9e:89:b8:d4:f5:61:15:6d:8b:
                    a2:de:02:62:82:3d:18:62:9f:4f:fa:47:78:b2:08:
                    c7:9d:94:ea:47:02:5a:94:1c:cb:ab:94:31:04:07:
                    e9:d5:76:e4:cc:8b:c0:6c:1f:c2:94:2b:35:fc:04:
                    54:9d:ec:ae:9c:c2:2f:09:d2:00:87:4f:8f:11:4d:
                    1f:96:60:ea:dc:1b:db:cd:24:94:23:10:56:97:7a:
                    1c:18:5e:14:7e:3e:86:19:bf:30:c2:48:c9:c5:0a:
                    21:45:2c:f1:ec:75:55:7e:6a:07:10:8a:d4:df:ea:
                    1d:d4:81:a3:7e:58:f3:c9:cb:99:8e:36:22:bc:a7:
                    85:7c:ea:f0:4a:74:79:81:fd:bd:25:f1:d0:38:1e:
                    ce:85:ef:75:87:d3:95:54:2f:4d:ce:a5:d0:2a:88:
                    8c:2e:1d:74:29:51:df:a9:2f:b4:52:ac:20:9c:a8:
                    5b:32:18:01:49:67:e6:f0:97:15:7e:be:da:9f:85:
                    33:f8:03:2e:5c:4e:14:38:04:55:1c:7b:7b:fa:2b:
                    61:a1:6b:64:c2:64:6c:58:dc:3b:40:2d:6a:77:9e:
                    a9:da:58:0d:58:0d:e1:b8:e7:af:25:94:08:22:15:
                    d0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EE:70:44:0D:45:BC:70:20:63:FD:2E:FA:F2:63:10:A0:8A:75:13
            X509v3 Authority Key Identifier:
                keyid:CB:FF:54:EA:F9:24:D9:F2:50:5A:80:C6:E0:9A:FA:66:54:2D:69:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f00801f94fdeddd1b23dc04ebf80c4c73327e19a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/720b9315-b0e3-4784-ba1a-3e05cb203f43/f21cd69b52fdee5559a9257e19d5578b1aab2121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/720b9315-b0e3-4784-ba1a-3e05cb203f43/f00801f94fdeddd1b23dc04ebf80c4c73327e19a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:99:b4:d3:40:63:01:1b:20:69:23:2f:8e:f2:12:99:8c:9c:
         20:43:c1:c3:f5:d6:64:f3:38:a5:d9:96:c0:ed:41:31:6c:ee:
         2d:36:14:13:1d:77:31:f2:3b:cb:db:7b:74:1d:eb:6b:33:ed:
         18:ab:63:3b:cc:68:cc:4f:00:1c:89:1a:57:23:f5:8a:80:a5:
         10:ec:f6:fb:0e:98:a7:68:03:bc:7d:35:59:21:df:66:8d:ca:
         45:35:45:87:06:1c:7e:cf:1c:88:a6:56:44:44:47:b9:91:91:
         36:26:30:2b:f9:45:f9:68:c2:ab:13:7b:6a:5b:74:94:52:49:
         a1:41:c0:3f:7a:98:f8:cc:55:9f:1f:f7:aa:b0:82:9a:73:1d:
         5d:c9:c5:67:59:fb:60:a5:94:cc:1d:c5:95:ec:42:57:33:d9:
         d7:4c:88:19:7f:55:15:07:be:aa:18:0a:b1:59:6d:13:e5:28:
         da:21:92:bf:a7:5c:34:26:32:30:4e:43:9a:66:48:cc:a0:c7:
         be:7f:51:c6:3d:cf:e0:cd:44:56:81:8e:ef:88:90:c3:fc:5e:
         80:08:9b:20:63:b9:16:60:cc:db:81:8d:fb:40:41:dd:93:d2:
         ce:f2:35:d8:05:2d:86:46:ad:43:8d:5f:65:d0:f4:d2:0c:3e:
         b2:39:79:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----