Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/34a6627e32d759af5237fffe394ea5d8711dfa5b.roa
File:                     34a6627e32d759af5237fffe394ea5d8711dfa5b.roa (raw, json)
Hash identifier:          hs9XcIkITKIF6OFca0nmPQERXaz7wirGsEuCSxREwEI=
Subject key identifier:   6A:BD:A1:24:78:29:E3:E1:F3:45:E3:FF:63:5C:2C:C6:83:A6:8D:17
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       1E3F89
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/34a6627e32d759af5237fffe394ea5d8711dfa5b.roa
Signing time:             Thu 05 Jan 2023 22:13:54 +0000
ROA not before:           Tue 27 Dec 2022 15:07:53 +0000
ROA not after:            Wed 29 Dec 2027 15:07:53 +0000
asID:                     272121
IP address blocks:        2803:2220::/33 maxlen: 33
                          2803:2220:800::/37 maxlen: 37
                          2803:2220:1000::/37 maxlen: 37
                          2803:2220:1800::/37 maxlen: 37
                          2803:2220:2000::/37 maxlen: 37
                          2803:2220:2800::/37 maxlen: 37
                          2803:2220:3000::/37 maxlen: 37
                          2803:2220:3800::/37 maxlen: 37
                          2803:2220:4000::/37 maxlen: 37

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1982345 (0x1e3f89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Dec 27 15:07:53 2022 GMT
            Not After : Dec 29 15:07:53 2027 GMT
        Subject: CN=34a6627e32d759af5237fffe394ea5d8711dfa5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c8:e1:c2:5f:7a:41:e8:bb:e7:bc:91:9f:11:
                    41:dc:66:15:af:b8:2b:f6:c9:6d:0a:b8:08:ad:69:
                    45:9f:d2:61:76:54:35:28:73:8b:90:bf:06:7a:97:
                    49:dc:05:45:7c:bc:64:2f:cd:b4:24:5c:55:98:6a:
                    da:3b:8c:ac:21:7a:f0:86:9f:c9:aa:5b:a3:ef:ce:
                    af:4b:40:5d:95:d9:36:53:c7:ac:a8:84:9c:0c:40:
                    35:9b:02:41:f9:55:c1:fb:3c:21:7e:2f:8a:da:19:
                    2a:c8:63:90:17:62:9a:09:87:e5:2f:85:83:44:29:
                    e6:53:4e:91:e0:db:92:9b:42:3b:cb:4f:1c:ba:b2:
                    16:50:3f:10:3a:9a:2e:cb:c4:0e:94:fd:9c:30:44:
                    5a:c6:f4:e4:15:0e:e4:6f:85:92:c9:96:a9:3e:6f:
                    b7:91:44:30:c1:94:96:e0:32:65:14:66:90:cc:77:
                    4e:d7:df:d7:a1:82:cf:91:0c:17:69:8d:7c:bf:4c:
                    2b:15:5c:eb:ff:95:e1:78:c4:c4:ed:36:e1:01:10:
                    38:75:84:b9:31:20:26:7a:c2:f0:85:93:b8:8c:21:
                    62:c9:b6:c5:69:aa:bc:3a:e2:5b:2c:e5:0d:e9:0d:
                    97:5e:2d:fa:bf:be:8f:a4:5e:44:12:97:0f:cf:3c:
                    7f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BD:A1:24:78:29:E3:E1:F3:45:E3:FF:63:5C:2C:C6:83:A6:8D:17
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/34a6627e32d759af5237fffe394ea5d8711dfa5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2220::/33

    Signature Algorithm: sha256WithRSAEncryption
         5a:40:1f:e7:0e:7b:52:fa:9d:da:9b:33:17:a0:06:6b:4c:ee:
         9d:b3:91:0d:88:74:3c:2c:76:09:38:92:fe:7a:b0:93:98:d3:
         2e:c5:a6:5f:e9:3c:29:b0:af:cc:47:78:c9:ce:55:aa:f3:dc:
         9b:9b:48:c6:ec:cc:be:c9:6d:22:8f:24:c8:7d:b2:76:1c:c9:
         18:d4:9a:69:44:bc:3d:44:14:c7:5b:7d:0a:9f:3f:df:f6:7f:
         a4:a2:87:3d:ca:98:3d:c5:06:e1:41:67:a6:a3:4c:db:71:8e:
         c9:fa:fd:01:5e:e2:e5:c8:3c:4b:6e:27:14:b6:c9:31:f4:05:
         67:ec:1e:5d:5f:a5:2a:c1:ad:dc:f3:e5:cf:9f:cb:81:09:5f:
         f6:e1:32:ce:49:65:cf:87:4b:be:5f:45:80:18:d1:6f:50:a8:
         c4:22:f2:62:c3:f4:62:18:6e:53:86:fd:57:7c:8f:20:95:8e:
         46:d4:29:49:a9:aa:a4:9d:6e:28:6a:75:5e:c0:30:9f:8e:96:
         23:95:30:0f:8b:b8:09:82:0e:2e:63:0b:8d:99:ba:f0:cf:8d:
         1e:24:82:8c:89:2d:f8:e8:6f:ff:e9:71:78:d8:81:29:8a:78:
         62:67:79:59:73:d7:b4:be:02:27:02:61:35:e0:9b:77:48:ba:
         f3:58:7c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----