Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8af8fc2c-3d2a-49ff-b358-4985e24e2d26/dbfae44b210788aee393f26a22190222c27d01d4.roa
File:                     dbfae44b210788aee393f26a22190222c27d01d4.roa (raw, json)
Hash identifier:          k2rK4y2cD8U0vSjPClx7f9RjzTypQXbsfkBuoN2T7TI=
Subject key identifier:   B5:57:D4:6D:F3:ED:B9:56:4C:5E:CC:FE:46:A5:25:DD:64:3E:0B:10
Certificate issuer:       /CN=0cbb85e42b2f4026a791ab4ac115547607eff761
Certificate serial:       0C37DC
Authority key identifier: 5B:2D:1F:5E:C9:03:F4:28:A4:62:05:39:64:15:F3:AB:42:CC:05:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cbb85e42b2f4026a791ab4ac115547607eff761.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8af8fc2c-3d2a-49ff-b358-4985e24e2d26/dbfae44b210788aee393f26a22190222c27d01d4.roa
Signing time:             Fri 31 Mar 2023 01:38:10 +0000
ROA not before:           Sun 28 Nov 2021 03:00:00 +0000
ROA not after:            Thu 30 Nov 2023 03:00:00 +0000
asID:                     272013
IP address blocks:        2803:b910::/32 maxlen: 42

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800732 (0xc37dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cbb85e42b2f4026a791ab4ac115547607eff761
        Validity
            Not Before: Nov 28 03:00:00 2021 GMT
            Not After : Nov 30 03:00:00 2023 GMT
        Subject: CN=dbfae44b210788aee393f26a22190222c27d01d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:58:12:a3:24:7e:0c:6f:03:1b:91:09:4e:d2:
                    f1:7b:4c:01:19:82:1c:b2:44:2c:c2:79:c4:c5:00:
                    96:fd:98:e6:99:33:c9:90:17:b1:9b:2f:47:bb:65:
                    a0:82:d2:d3:78:6e:ca:b1:08:42:a5:47:58:9f:8d:
                    fb:bc:80:c7:46:61:d8:b3:ed:dd:ce:ac:88:82:09:
                    70:8b:e9:31:36:dc:c2:2c:ca:96:b2:f8:7d:20:c5:
                    89:7a:9a:d5:73:24:b8:3a:fb:41:ad:1e:fc:ee:f6:
                    3c:60:2b:fe:e1:33:bb:7c:bc:85:6a:47:48:21:ba:
                    98:5d:57:b8:76:b6:61:de:9d:fe:d3:78:48:b1:f3:
                    33:44:b9:8f:21:0f:19:22:c8:ca:58:8b:da:c8:81:
                    89:fb:dd:00:20:26:b6:2a:d8:8d:00:7b:2e:4c:4f:
                    50:7a:9b:eb:25:52:02:75:6e:a1:fb:f1:c1:41:93:
                    28:87:ca:d2:51:df:2f:08:9e:70:01:30:46:3e:99:
                    fe:ac:dc:28:7c:2e:3a:85:89:a7:0f:b4:2c:60:c5:
                    1b:3f:a7:0d:d9:29:e2:9f:53:59:ab:c5:78:73:3b:
                    b3:47:71:3c:dd:3d:fd:56:07:67:bf:0b:54:b5:a3:
                    22:e3:4f:ab:90:86:95:f2:07:ea:87:51:92:12:f5:
                    ef:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:57:D4:6D:F3:ED:B9:56:4C:5E:CC:FE:46:A5:25:DD:64:3E:0B:10
            X509v3 Authority Key Identifier:
                keyid:5B:2D:1F:5E:C9:03:F4:28:A4:62:05:39:64:15:F3:AB:42:CC:05:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cbb85e42b2f4026a791ab4ac115547607eff761.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8af8fc2c-3d2a-49ff-b358-4985e24e2d26/dbfae44b210788aee393f26a22190222c27d01d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8af8fc2c-3d2a-49ff-b358-4985e24e2d26/0cbb85e42b2f4026a791ab4ac115547607eff761.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b910::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:ba:7c:47:ed:e6:79:c1:e5:29:0a:f3:64:7b:f9:7a:c6:44:
         4d:9e:42:22:75:0d:ff:dc:da:8f:bd:b2:db:23:ae:59:f1:fc:
         f2:33:3d:9c:fa:28:92:e3:40:12:97:80:8e:62:80:41:15:b3:
         de:99:cb:a9:d5:e2:78:8d:a9:3f:31:f6:b5:7f:b0:fd:4e:a2:
         54:5d:4e:8d:68:ba:e8:65:37:4e:dc:6d:85:2b:56:0c:31:c4:
         37:8f:e5:d9:71:c1:29:72:71:8a:06:81:a7:10:be:e7:4e:9e:
         9a:0f:d5:13:eb:c5:f6:04:f2:f5:1c:30:77:16:38:ae:d9:19:
         00:fe:4c:cd:91:bc:34:d7:68:e3:11:31:e0:12:8e:bb:b1:dc:
         22:87:b4:05:75:42:69:f0:49:d4:09:ca:68:b1:53:ac:19:93:
         19:21:5b:9c:14:ca:88:1e:b2:4d:94:68:62:3d:83:0a:5a:c9:
         19:6f:bf:f9:ce:77:4d:8f:8c:9e:90:55:7d:22:08:4a:87:55:
         b3:80:57:a5:0a:0f:4d:08:f8:79:2c:ae:03:4d:e4:2e:ae:38:
         bf:09:1f:f2:ac:a4:01:78:cd:79:9d:33:3d:20:b1:b6:1b:e8:
         66:ae:8f:99:ed:a6:21:3a:f9:d8:87:f4:ff:83:c1:39:12:72:
         59:82:db:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----