Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/fb579517d8a02d7c2e9113c71d9da206657e2fa2.roa
File:                     fb579517d8a02d7c2e9113c71d9da206657e2fa2.roa (raw, json)
Hash identifier:          BspPwZURgLyEWu/wU96fj5gRJFZj7Zn+faQyahN3AhA=
Subject key identifier:   FD:D5:64:56:99:D9:0F:56:F0:2C:9D:5E:A2:30:3C:2C:E1:9D:71:3A
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       1D3918
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/fb579517d8a02d7c2e9113c71d9da206657e2fa2.roa
Signing time:             Sun 04 Dec 2022 22:13:28 +0000
ROA not before:           Thu 01 Dec 2022 22:11:53 +0000
ROA not after:            Wed 04 Dec 2024 22:11:53 +0000
asID:                     272121
IP address blocks:        2803:2220:8800::/37 maxlen: 37

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1915160 (0x1d3918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Dec  1 22:11:53 2022 GMT
            Not After : Dec  4 22:11:53 2024 GMT
        Subject: CN=fb579517d8a02d7c2e9113c71d9da206657e2fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3c:98:a5:64:5b:6a:08:82:38:91:fa:41:45:
                    ae:bd:8f:df:5a:d0:07:d0:d4:56:3e:ec:15:56:41:
                    53:e3:47:6e:fc:83:d7:5b:e7:bf:df:dd:b5:39:de:
                    ad:c5:b0:6f:76:a9:06:50:dd:da:b6:cc:31:08:fe:
                    b1:59:fe:cc:7f:59:5a:98:53:86:3b:b7:61:3a:1e:
                    8d:f4:c3:03:a6:71:29:d1:7a:24:c8:bc:67:3d:89:
                    9a:b4:22:75:51:e9:db:f9:cd:7d:21:57:b8:3a:74:
                    72:ed:d7:d9:0f:be:be:2a:79:08:03:1a:bd:b6:e8:
                    79:63:a3:5b:0b:8f:c3:88:91:ab:c8:c6:ca:96:f9:
                    8a:24:2d:33:e3:31:74:5e:6c:de:f9:5c:0a:59:5e:
                    7e:b8:0b:45:9d:29:e7:a3:ff:c1:ad:28:8b:01:83:
                    75:fe:37:c0:48:45:96:8b:8f:5b:6a:14:ab:0a:8c:
                    10:f7:bf:d5:0b:36:94:90:85:50:7c:38:de:5a:84:
                    66:d1:0b:c1:07:e0:cf:d4:79:71:c9:16:82:42:f9:
                    c5:21:e7:04:f9:74:41:93:63:4b:bf:b7:b2:24:21:
                    36:68:ba:eb:aa:57:1f:97:3d:d9:55:2a:7f:bd:1d:
                    99:45:50:d7:f5:79:c0:3b:ac:74:9b:08:67:ae:5b:
                    5f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D5:64:56:99:D9:0F:56:F0:2C:9D:5E:A2:30:3C:2C:E1:9D:71:3A
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/fb579517d8a02d7c2e9113c71d9da206657e2fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2220:8800::/37

    Signature Algorithm: sha256WithRSAEncryption
         96:9f:b6:6c:af:c9:62:f0:17:96:45:4a:e3:30:41:64:78:3d:
         7b:c2:9c:01:78:5d:3a:8a:cd:3c:3a:79:23:b6:2d:a9:46:ba:
         dc:f4:93:a4:f6:a2:cc:13:91:ff:7a:eb:58:0a:ed:f8:7a:f5:
         e4:c7:fa:a5:08:c8:cc:c6:6a:74:6d:c4:71:af:37:ce:d0:3a:
         65:c2:b0:a7:93:d4:e7:77:c6:4f:3b:b8:57:4b:8e:e5:1b:fd:
         88:42:80:26:78:69:32:26:56:98:cf:59:6f:a3:7b:a0:fc:e5:
         ca:b0:e0:62:34:8b:a1:ec:d3:70:8e:74:50:7a:50:31:82:36:
         6f:fa:ea:28:db:29:d8:95:05:6d:21:ae:ef:a7:80:72:d5:4b:
         a0:a0:16:8d:c4:bf:f0:65:af:46:ef:31:e5:e5:35:b5:b1:b4:
         a3:e4:97:3a:52:92:50:e1:7f:58:92:0f:2d:16:81:35:da:69:
         2a:a3:93:6d:2e:f5:c9:3f:f9:f9:4d:5d:47:c9:60:11:e6:f5:
         c8:fa:32:31:65:fa:76:76:c4:cf:f2:6e:75:b7:ee:2a:64:3c:
         c6:52:20:1e:94:f5:84:09:fd:b5:fa:16:92:43:1a:77:ae:28:
         61:8c:bf:19:4c:59:86:ed:5d:05:79:14:cb:e5:ba:4c:07:59:
         a4:38:b6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----