Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/66950f46cdbc171d2c8b3bf8e3f8f4f7694da71f.roa
File:                     66950f46cdbc171d2c8b3bf8e3f8f4f7694da71f.roa (raw, json)
Hash identifier:          V/M9asdpP6MjbR7GBpoycYwTG4a9wEbQ920z+tm6k2Q=
Subject key identifier:   D5:63:FB:40:C7:E3:73:47:28:9C:99:35:58:BD:CF:B9:FF:61:03:C5
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       11697F
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/66950f46cdbc171d2c8b3bf8e3f8f4f7694da71f.roa
Signing time:             Mon 18 Jul 2022 07:16:13 +0000
ROA not before:           Mon 18 Jul 2022 03:00:00 +0000
ROA not after:            Thu 18 Jul 2024 03:00:00 +0000
asID:                     272799
IP address blocks:        2803:5ce0:b00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1141119 (0x11697f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Jul 18 03:00:00 2022 GMT
            Not After : Jul 18 03:00:00 2024 GMT
        Subject: CN=66950f46cdbc171d2c8b3bf8e3f8f4f7694da71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ed:6f:46:2a:6e:3b:30:99:8f:dc:54:82:6e:
                    10:79:f7:a7:cd:cf:f1:55:5d:27:85:2e:93:16:77:
                    8b:e8:16:e1:b7:7e:38:a5:7c:b8:30:b8:72:29:ec:
                    f1:48:ff:22:7f:64:03:e7:1b:80:cb:2b:20:bc:45:
                    94:14:fd:9f:0d:82:1e:9d:09:95:2e:b0:d0:9b:64:
                    fb:7d:2a:e7:c8:c0:91:38:02:37:ee:0e:71:bb:d4:
                    a7:0c:63:77:60:51:4a:c1:de:26:1f:d3:7c:48:22:
                    e3:14:34:ed:b9:16:04:ce:c6:11:56:92:50:52:1a:
                    f8:cf:07:36:67:8c:d8:ad:60:31:d6:37:40:f6:05:
                    f0:78:fb:f7:14:25:a0:dd:a8:ca:05:12:85:7c:1a:
                    98:2c:fc:a5:a1:ff:f7:d6:55:fd:1f:58:cf:bc:b9:
                    53:b9:2f:11:cc:0f:a7:d7:62:6e:95:dd:be:46:9f:
                    c7:50:d7:42:2b:ca:cc:e5:9c:30:d5:f8:44:d0:1c:
                    fc:75:4c:14:ba:4f:d4:ad:c6:94:3e:98:e3:42:5e:
                    f9:d1:c1:bd:98:8a:3d:01:cf:ae:3f:12:d3:e4:ca:
                    03:5a:89:6c:fe:20:be:33:58:75:98:62:b7:82:a7:
                    00:c5:6d:25:2e:bd:2a:e1:a5:6c:eb:13:4f:57:c0:
                    61:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:63:FB:40:C7:E3:73:47:28:9C:99:35:58:BD:CF:B9:FF:61:03:C5
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/66950f46cdbc171d2c8b3bf8e3f8f4f7694da71f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a0:79:d7:3c:33:50:2c:93:d9:d7:d8:b7:a1:aa:91:99:3b:a1:
         b3:ab:5f:48:05:bb:a3:22:f0:18:10:fc:d8:89:d9:a3:06:c9:
         90:f7:bf:db:92:83:13:ab:06:ed:a0:b1:2d:5a:eb:00:7e:64:
         84:dc:61:9f:dc:0e:ca:ec:1e:24:2e:64:44:93:e8:8d:91:da:
         8f:b2:f4:f6:87:00:b2:61:10:e9:98:53:54:3b:8a:5c:0d:c9:
         30:b5:0b:c9:e7:30:f3:6c:df:db:33:e6:9c:da:67:8d:f8:17:
         7a:f7:a2:8b:95:97:d4:e9:09:ab:c0:38:d8:35:54:f0:4b:24:
         6e:00:bd:0c:f4:71:91:9c:29:9f:39:74:bf:f4:2e:53:d2:9e:
         9b:dd:cd:f4:fb:df:eb:54:1f:7b:b4:8b:3f:00:06:2b:9b:e8:
         7a:a5:34:b3:8e:c7:99:21:1f:42:63:0c:c4:49:16:96:62:da:
         fb:4a:bc:68:10:41:01:25:3f:ea:ff:ce:56:f6:e1:37:28:73:
         2e:15:9e:a3:05:0c:14:69:82:ff:0f:67:e7:e0:3f:05:98:ed:
         b7:a4:75:42:2f:86:f7:ff:68:d6:e9:9d:fe:42:1c:9e:08:1d:
         ff:cb:5a:e9:39:12:47:04:79:d3:79:a1:82:a0:c2:de:8a:75:
         71:e4:c3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----