Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/df749c20265afc0b4cf371e6436b0909047e1d24.roa
File:                     df749c20265afc0b4cf371e6436b0909047e1d24.roa (raw, json)
Hash identifier:          eOFN/w2J1nxaR0Wcef0/fFoY897xvvLgQj6fAxU/6Rs=
Subject key identifier:   71:12:DD:7E:0C:31:A5:94:2E:D4:96:53:C4:71:83:A1:2D:43:2B:BD
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       1D0186
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/df749c20265afc0b4cf371e6436b0909047e1d24.roa
Signing time:             Thu 01 Dec 2022 16:54:47 +0000
ROA not before:           Sun 23 Oct 2022 22:15:02 +0000
ROA not after:            Wed 27 Oct 2027 22:15:02 +0000
asID:                     272121
IP address blocks:        2803:2220::/33 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1900934 (0x1d0186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Oct 23 22:15:02 2022 GMT
            Not After : Oct 27 22:15:02 2027 GMT
        Subject: CN=df749c20265afc0b4cf371e6436b0909047e1d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:03:b6:86:7e:26:68:ad:6d:7a:5d:e3:4e:70:
                    57:bd:b1:9a:b9:a4:c7:00:3a:fe:22:08:d3:ca:76:
                    1f:8a:3e:a6:a9:2d:58:e9:1d:4a:7f:93:12:94:8e:
                    4e:7f:39:57:4a:84:81:48:b2:54:e1:b6:35:cf:0a:
                    2c:60:c1:08:63:2b:ca:e0:4c:20:b6:b2:87:c6:a3:
                    6c:94:8d:be:f4:82:97:13:78:33:98:2d:3c:8d:d3:
                    5d:1f:89:5c:e1:a6:38:70:44:43:f7:71:31:87:02:
                    66:66:74:00:65:37:27:77:c4:92:12:05:64:b9:10:
                    6f:fe:e2:87:f6:87:0f:1b:e6:2b:0c:79:b8:9f:88:
                    40:42:d6:b7:12:54:85:b6:13:c1:93:69:e5:ec:85:
                    92:40:d6:86:9c:cf:d9:dd:78:18:ae:5d:77:42:3b:
                    d7:77:91:21:07:e9:81:0d:5c:2d:e9:94:f4:28:2a:
                    89:14:bb:42:08:ef:cf:1b:6b:1a:4a:59:7c:60:e4:
                    d2:53:42:ae:96:d0:78:d0:78:f8:09:b6:69:67:25:
                    8d:37:df:61:65:40:6b:f1:b3:41:3f:cf:33:57:a0:
                    4a:d5:fa:78:da:87:c3:71:91:35:3c:eb:4c:81:f3:
                    a2:fa:de:91:bf:af:ae:ec:e6:ef:c8:a1:a8:37:41:
                    e1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:12:DD:7E:0C:31:A5:94:2E:D4:96:53:C4:71:83:A1:2D:43:2B:BD
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/df749c20265afc0b4cf371e6436b0909047e1d24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2220::/33

    Signature Algorithm: sha256WithRSAEncryption
         11:bf:fd:94:fc:8e:ec:b3:52:85:4f:b5:39:3a:eb:9a:d0:a7:
         4a:50:4f:7a:91:2d:40:25:79:05:f5:5e:db:6a:41:7f:31:de:
         11:52:92:d7:b0:68:d5:16:b2:a8:e5:5d:d2:01:cd:66:cd:06:
         2e:89:62:27:e4:1b:24:67:4a:54:e5:49:94:0b:f7:50:08:0c:
         83:1e:a6:c2:b5:dd:c3:77:35:28:40:42:a5:e8:0b:88:9d:72:
         51:27:4b:96:81:ed:ae:ad:d9:0f:57:f9:b2:34:61:4c:5a:72:
         80:6e:45:0e:ae:d2:f5:a6:2c:52:8d:18:10:03:cf:ed:98:06:
         af:2e:d8:04:8d:77:29:07:e8:42:25:81:e2:7e:7e:a9:48:f1:
         84:25:f4:32:24:64:12:1f:f1:8a:32:01:77:fd:12:bc:b4:46:
         09:3c:52:e8:ec:b4:ff:c3:a4:49:4d:b3:1d:24:81:dd:54:87:
         24:a2:5c:5e:88:bc:72:57:38:cf:c1:7a:55:8b:28:72:be:96:
         44:e4:77:54:4d:95:1c:3e:49:c6:58:ce:e3:0f:c7:8c:f5:23:
         8d:55:9b:51:2a:e9:16:15:36:63:4f:62:d4:a4:0b:25:b6:da:
         3d:ae:cb:95:cf:1c:76:7b:7b:c1:bd:8b:6d:fa:80:ac:7c:86:
         91:b0:41:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----