Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7bb3c6ad-7cb1-44d5-8474-f7867315deb5/5d6cad39167dea196dd970fc760bc6a29edee3fd.roa
File:                     5d6cad39167dea196dd970fc760bc6a29edee3fd.roa (raw, json)
Hash identifier:          87Vmmz13UqwMC1is46iE5oTGFXG5u+mrcfz2acHOKfo=
Subject key identifier:   00:4F:22:2A:EB:C0:57:AC:5D:C2:D6:BE:2C:4A:42:6E:43:98:4B:97
Certificate issuer:       /CN=fb91a939f380a4cfa7deb774f44592574b792555
Certificate serial:       06D4F8
Authority key identifier: A9:BB:59:61:15:0D:04:00:18:E7:36:D1:71:7A:66:A3:02:79:05:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb91a939f380a4cfa7deb774f44592574b792555.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7bb3c6ad-7cb1-44d5-8474-f7867315deb5/5d6cad39167dea196dd970fc760bc6a29edee3fd.roa
Signing time:             Thu 10 Aug 2023 14:57:14 +0000
ROA not before:           Wed 09 Aug 2023 14:57:14 +0000
ROA not after:            Sun 10 Aug 2025 14:57:14 +0000
asID:                     272890
IP address blocks:        2803:4690::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447736 (0x6d4f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb91a939f380a4cfa7deb774f44592574b792555
        Validity
            Not Before: Aug  9 14:57:14 2023 GMT
            Not After : Aug 10 14:57:14 2025 GMT
        Subject: CN=5d6cad39167dea196dd970fc760bc6a29edee3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b4:4a:eb:19:65:c4:5e:d1:2a:5f:5c:4b:c4:
                    13:7d:23:41:97:21:5b:b2:02:eb:4e:2b:17:06:dd:
                    bf:a5:ea:6e:79:2d:5a:0c:39:68:e9:fa:bc:e7:cd:
                    53:b8:b8:f0:bf:33:35:9a:f1:2a:2a:35:b6:10:fd:
                    1e:8b:8a:aa:d3:e9:b5:9f:da:f9:01:56:9a:6f:0f:
                    77:9f:26:52:3f:0b:1c:08:4c:00:2c:f7:9b:b0:9b:
                    08:06:54:7c:42:f5:21:41:20:58:e0:d2:7b:f3:ba:
                    73:2e:0f:c8:ae:ee:ff:62:5f:c2:24:61:dc:b9:41:
                    fe:58:f1:91:31:72:6b:9c:a4:7b:b2:88:7d:bc:2a:
                    82:68:20:cc:e1:80:29:3f:23:e0:40:5e:1d:21:3b:
                    87:e5:85:30:3d:39:04:53:e2:c1:70:cf:45:16:5d:
                    77:62:47:9b:ff:8c:4c:7f:10:f8:9f:c5:e0:bc:3b:
                    66:65:e2:16:0d:5f:7f:2d:55:f4:6c:20:98:89:95:
                    0a:c1:fc:7e:c0:49:4f:cc:4a:c5:eb:8a:23:38:f3:
                    93:66:b8:d9:e5:f1:f1:23:ad:d7:25:1f:cb:3c:6c:
                    5c:8c:6a:fc:17:01:cf:f9:11:3c:34:7b:96:3a:7c:
                    7d:c4:e1:01:21:5d:2d:c5:65:0a:9d:73:0b:84:0e:
                    8f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4F:22:2A:EB:C0:57:AC:5D:C2:D6:BE:2C:4A:42:6E:43:98:4B:97
            X509v3 Authority Key Identifier:
                keyid:A9:BB:59:61:15:0D:04:00:18:E7:36:D1:71:7A:66:A3:02:79:05:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb91a939f380a4cfa7deb774f44592574b792555.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7bb3c6ad-7cb1-44d5-8474-f7867315deb5/5d6cad39167dea196dd970fc760bc6a29edee3fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7bb3c6ad-7cb1-44d5-8474-f7867315deb5/fb91a939f380a4cfa7deb774f44592574b792555.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4690::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:d7:00:b3:2f:c8:eb:12:e9:51:bb:2d:2d:fe:9e:2f:ca:53:
         10:e8:eb:b9:ec:ea:03:0a:1d:f0:f3:e4:06:2a:1d:2b:7b:94:
         37:2b:86:36:38:8e:8e:85:90:89:5f:15:8d:16:43:83:55:ad:
         e1:bc:38:29:ea:06:8f:cf:d5:ed:7d:28:de:1e:f5:1c:ac:6a:
         d0:77:41:15:bc:9f:06:52:47:be:75:ed:85:f2:99:7f:30:15:
         17:8f:28:b1:a7:6d:28:99:de:9c:27:8b:d7:0e:b4:ab:4d:ee:
         db:6d:4e:fc:66:99:82:42:46:87:63:d7:cd:1a:03:c2:53:1a:
         7e:d0:07:52:a1:56:aa:5f:fd:f6:6c:e0:be:62:18:14:0f:d5:
         20:40:d9:85:1a:f5:3b:62:8d:4c:89:6e:f6:f7:6c:8b:24:e3:
         2b:46:b0:32:e0:5f:86:ba:a6:49:a6:9f:d7:e9:17:42:f6:b9:
         54:c1:82:e8:34:6b:fd:b3:b6:66:76:f1:a0:04:03:7c:07:44:
         a1:af:af:cc:e8:6b:ad:19:e9:53:ca:a7:22:5e:be:39:f6:b1:
         40:5f:c0:ec:b7:32:be:08:3f:fd:8a:d9:2a:ac:06:d8:91:f8:
         7b:6b:03:b9:af:e9:9e:61:1f:62:2c:7c:28:21:6d:2d:b0:4a:
         61:54:13:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----