Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/e1da68ddec7316fd56f89a0d4d945506b99bda28.roa
File:                     e1da68ddec7316fd56f89a0d4d945506b99bda28.roa (raw, json)
Hash identifier:          NNchTr//ZkNBduxKAN/DfzqTurfsepS051Yp1YMVOHM=
Subject key identifier:   45:D5:BA:CD:41:DD:49:81:1D:E5:8E:8B:EF:F5:DF:3A:C6:5F:3C:E0
Certificate issuer:       /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial:       200657
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/e1da68ddec7316fd56f89a0d4d945506b99bda28.roa
Signing time:             Tue 25 Apr 2023 02:29:57 +0000
ROA not before:           Mon 24 Apr 2023 02:29:57 +0000
ROA not after:            Fri 25 Apr 2025 02:29:57 +0000
asID:                     400317
IP address blocks:        2803:dd80::/32 maxlen: 128

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2098775 (0x200657)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
        Validity
            Not Before: Apr 24 02:29:57 2023 GMT
            Not After : Apr 25 02:29:57 2025 GMT
        Subject: CN=e1da68ddec7316fd56f89a0d4d945506b99bda28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:08:62:e2:0e:b2:32:08:0e:5b:80:25:42:cd:
                    95:93:ee:ce:a3:29:bf:65:44:b6:58:bd:85:d3:14:
                    a0:6c:bc:11:5f:df:5a:40:64:b1:3e:0f:5a:36:f5:
                    be:7f:f4:2b:c4:80:b0:c6:2c:f2:28:d1:9e:60:1e:
                    29:60:16:8a:db:46:43:a3:aa:4a:9b:47:de:5f:d6:
                    ba:bb:76:b5:80:0d:a0:ab:00:c5:20:a2:1f:52:25:
                    0a:80:2b:80:ee:d0:b8:17:12:96:c5:c8:a3:56:7d:
                    0a:26:f7:34:6d:fd:fe:bb:e7:de:be:30:92:5d:97:
                    2a:33:4c:8d:24:cb:11:46:b8:c4:91:59:18:41:f2:
                    96:f6:f1:0d:5d:80:91:c2:58:e2:f3:f9:62:25:eb:
                    96:e3:00:3e:a9:c1:ee:d1:5f:f8:6d:45:31:c3:31:
                    11:1c:b8:3f:36:95:23:14:e5:0d:d1:67:8a:82:df:
                    99:55:47:6c:1c:29:3b:ed:48:01:94:d2:60:82:57:
                    0d:f3:ea:1f:de:8b:a3:c0:91:96:33:bc:ae:1a:9b:
                    1d:7b:e4:18:89:51:c3:0c:ef:d3:3b:7d:3f:1b:c0:
                    ef:7d:1e:51:43:e5:b1:dd:74:86:5d:d2:5e:03:cc:
                    5b:65:b7:4e:b4:41:66:e3:11:8b:86:67:5d:6f:8d:
                    36:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D5:BA:CD:41:DD:49:81:1D:E5:8E:8B:EF:F5:DF:3A:C6:5F:3C:E0
            X509v3 Authority Key Identifier:
                keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/e1da68ddec7316fd56f89a0d4d945506b99bda28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:9e:85:06:8f:45:a5:58:23:ad:fe:db:c2:e1:b8:91:85:3d:
         b8:00:79:99:68:1c:da:4b:25:0c:b3:20:87:b0:e4:48:7c:1b:
         99:aa:0d:ae:ec:6c:f3:1e:42:8a:4a:74:ed:77:76:f3:56:88:
         6f:0e:99:d1:e2:12:6d:cf:49:ce:5f:96:ef:38:8c:0e:a2:30:
         80:a8:5f:eb:30:75:6e:e1:d3:89:96:95:33:7e:41:6a:3e:85:
         de:eb:9d:5a:44:f4:29:02:72:65:02:08:94:94:4a:8c:b2:6d:
         e2:36:a0:6d:31:d8:e0:f6:ea:6f:94:39:2b:d6:80:db:85:fc:
         5f:2e:07:ff:7b:b0:51:a6:e9:e7:27:65:04:31:40:2c:58:7c:
         df:3d:89:5a:91:d1:65:0c:b8:14:3d:4e:3e:da:0d:c6:11:6d:
         a9:0e:02:3d:5e:4b:86:37:6c:d3:b1:35:b8:af:02:bf:5c:75:
         dc:11:12:e3:1f:0f:e3:bf:51:32:29:16:b3:d4:5e:cc:3c:2b:
         11:fe:60:f2:d5:1a:76:f1:31:bf:25:f2:ed:b0:14:3e:cd:ce:
         93:86:db:73:f4:70:d0:b8:a9:fd:51:98:5a:69:34:51:a4:c0:
         b4:fc:d5:e9:c2:3a:8c:6d:49:b3:d0:5c:02:87:df:60:9b:6d:
         d3:7d:eb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----