Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e64ec4a-cca6-4e2e-adc6-17fa33c60a78/80be10d138dd5f5636cd6490370adceaaa0fde97.roa
File:                     80be10d138dd5f5636cd6490370adceaaa0fde97.roa (raw, json)
Hash identifier:          Vpw2g1jv6F/7ViZc12iN5kW5jZv8YsWzIVIjb5a2jUY=
Subject key identifier:   0E:0F:BB:C9:4F:80:1F:28:32:5C:CB:AD:84:AA:73:4F:15:29:74:9C
Certificate issuer:       /CN=6bb82b6c2e596f94faec529073ab86707bc06fb6
Certificate serial:       03DB
Authority key identifier: 57:E9:CC:0A:4D:35:6B:0F:39:35:7E:5D:AB:75:29:C0:1B:4A:E4:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6bb82b6c2e596f94faec529073ab86707bc06fb6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e64ec4a-cca6-4e2e-adc6-17fa33c60a78/80be10d138dd5f5636cd6490370adceaaa0fde97.roa
Signing time:             Fri 06 May 2022 00:55:16 +0000
ROA not before:           Thu 05 May 2022 03:00:00 +0000
ROA not after:            Sun 05 May 2024 03:00:00 +0000
asID:                     272102
IP address blocks:        2803:e710::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 26 Mar 2024 20:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987 (0x3db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb82b6c2e596f94faec529073ab86707bc06fb6
        Validity
            Not Before: May  5 03:00:00 2022 GMT
            Not After : May  5 03:00:00 2024 GMT
        Subject: CN=80be10d138dd5f5636cd6490370adceaaa0fde97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:58:9a:ed:47:a9:e4:be:c0:0a:33:f0:0e:
                    7f:54:7d:dd:64:00:8c:52:dc:93:8c:12:5e:8d:9e:
                    ae:5b:e1:ed:28:02:23:e3:a6:ca:71:af:4b:f9:55:
                    4f:60:05:8c:0b:aa:03:f1:98:29:9f:7f:b9:bd:2b:
                    19:67:bf:dc:8e:3f:db:a6:39:ea:5d:dc:c5:60:02:
                    77:31:f8:ef:95:97:4f:51:81:ea:3f:ce:1d:31:1b:
                    96:00:63:9d:5a:ea:3d:14:1a:d6:12:50:d1:13:b9:
                    cb:4b:30:8d:a6:f9:e4:e4:98:64:a8:ab:39:5b:54:
                    db:93:d7:85:d0:2f:73:f5:10:35:8b:78:ad:38:64:
                    fa:06:9c:16:e4:6b:99:20:18:d5:7e:75:66:87:97:
                    3a:d7:fd:62:c1:1c:ac:38:73:e9:f7:7b:a1:c1:43:
                    96:16:7f:c2:ac:bc:d6:57:1c:3a:cb:80:33:73:65:
                    57:f4:5a:2d:a5:b5:c3:76:54:a0:e6:01:64:89:d8:
                    09:ca:6e:49:0a:30:2a:6a:46:72:01:46:e9:e2:23:
                    ef:3d:fc:94:b3:87:d0:e7:8c:27:c3:cb:ce:19:0a:
                    64:96:c3:ee:ec:7b:e5:ca:ee:5b:89:23:cd:e6:75:
                    4d:be:09:c9:c4:73:59:66:d8:3f:e2:45:de:c5:af:
                    da:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0F:BB:C9:4F:80:1F:28:32:5C:CB:AD:84:AA:73:4F:15:29:74:9C
            X509v3 Authority Key Identifier:
                keyid:57:E9:CC:0A:4D:35:6B:0F:39:35:7E:5D:AB:75:29:C0:1B:4A:E4:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6bb82b6c2e596f94faec529073ab86707bc06fb6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e64ec4a-cca6-4e2e-adc6-17fa33c60a78/80be10d138dd5f5636cd6490370adceaaa0fde97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e64ec4a-cca6-4e2e-adc6-17fa33c60a78/6bb82b6c2e596f94faec529073ab86707bc06fb6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e710::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:8c:f8:e1:1f:69:f8:ff:86:48:c4:ec:20:8c:40:13:85:ae:
         fa:b6:23:b0:6d:98:ba:42:9d:54:0a:1a:6d:1a:a0:2a:1c:4c:
         56:a8:d7:ad:01:81:8f:2f:80:8e:99:6e:0d:3c:06:2f:35:86:
         86:80:84:0b:e1:b4:0f:1b:4a:24:5a:a5:b0:a1:4d:0d:be:6a:
         2e:19:5c:fb:cd:04:89:3e:85:6c:22:4d:b0:d8:94:af:f9:ce:
         93:ec:0a:b7:a7:d8:94:55:a9:b3:13:8f:df:0a:e7:1a:dd:a6:
         88:fa:7e:a8:2a:b9:1d:a9:34:84:59:b1:34:f8:a7:96:fa:de:
         b7:10:32:64:c9:c1:ba:4d:be:27:8e:72:2d:be:ec:a5:3e:6c:
         18:bf:97:56:0c:eb:18:44:20:f6:4f:82:5e:e6:ae:e8:78:0e:
         07:8c:3e:a0:58:4b:24:1d:66:7c:ff:aa:e2:60:93:c8:11:50:
         21:03:96:1e:d1:de:38:f1:89:e5:42:5e:f6:f3:0c:77:d1:f8:
         80:90:d6:c8:36:bb:9f:ea:62:8f:32:cb:03:f5:0e:d0:c2:b1:
         a2:40:31:94:74:5e:3c:37:e9:8f:45:63:fb:a8:0c:73:71:09:
         f8:95:8a:f7:aa:0e:95:39:26:ca:c1:a7:58:29:29:ed:df:0e:
         f7:b5:d8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----