Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/f153e134d10b2b1fb0ce99f54eda439aef601c93.roa
File:                     f153e134d10b2b1fb0ce99f54eda439aef601c93.roa (raw, json)
Hash identifier:          TVp91/EuQqFgzrkEXBpX6mbDGORrYGAJxGGuUemYqJU=
Subject key identifier:   62:7C:B0:BB:D6:45:C8:EE:DA:27:9F:82:9F:2D:90:6D:32:99:8D:77
Certificate issuer:       /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial:       201730
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/f153e134d10b2b1fb0ce99f54eda439aef601c93.roa
Signing time:             Tue 25 Apr 2023 02:32:40 +0000
ROA not before:           Mon 24 Apr 2023 02:32:40 +0000
ROA not after:            Fri 25 Apr 2025 02:32:40 +0000
asID:                     3549
IP address blocks:        2803:dd80::/32 maxlen: 128

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2103088 (0x201730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
        Validity
            Not Before: Apr 24 02:32:40 2023 GMT
            Not After : Apr 25 02:32:40 2025 GMT
        Subject: CN=f153e134d10b2b1fb0ce99f54eda439aef601c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:6d:37:33:6b:a6:0a:32:74:7c:0a:bb:76:
                    f8:c0:a5:d2:92:5b:8b:cf:78:24:86:74:37:72:c8:
                    77:7c:de:dd:9f:51:6e:7e:c4:01:4c:e7:ae:72:4d:
                    10:72:ac:0a:51:bd:ee:b9:d8:eb:be:9e:5e:9a:4b:
                    13:61:86:05:32:54:a0:46:f9:87:53:6d:42:4b:99:
                    5c:6f:e2:6e:55:74:8b:db:a9:18:43:d6:c3:0b:a5:
                    23:9c:8c:c7:d1:9c:c5:25:b8:6a:68:7b:c0:f9:a7:
                    56:42:16:b6:4e:af:79:6d:36:23:96:5e:a8:34:ce:
                    c6:2f:b2:07:20:a7:e8:57:6e:f2:e3:22:71:2e:cc:
                    e5:0e:ab:47:9e:3e:a9:f2:7c:95:04:d0:23:f2:4b:
                    c2:13:53:82:32:0c:aa:88:fe:ab:2f:72:eb:90:de:
                    11:43:5c:84:bf:9c:5b:a2:aa:12:29:94:7a:d3:80:
                    29:0c:6f:3e:37:e6:57:e2:73:1f:b9:9a:85:d9:d5:
                    47:f1:b5:cc:33:38:f6:c3:ae:b5:79:1b:e6:a6:29:
                    78:81:3e:e8:04:f0:cd:69:89:bc:3a:a8:ac:a4:27:
                    5e:d2:80:b9:ff:29:a2:49:55:d6:17:7a:43:28:8c:
                    4a:e0:51:7f:fa:d9:28:32:30:6a:d8:1d:48:8f:8e:
                    29:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7C:B0:BB:D6:45:C8:EE:DA:27:9F:82:9F:2D:90:6D:32:99:8D:77
            X509v3 Authority Key Identifier:
                keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/f153e134d10b2b1fb0ce99f54eda439aef601c93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:70:2c:6a:c0:d6:dc:0e:29:8b:6c:f7:8f:6e:2b:2c:b4:c5:
         b5:ab:9b:41:fb:17:7b:d6:08:32:71:dc:f3:f7:65:46:8e:b6:
         31:2d:5f:eb:59:a5:5c:d1:57:10:f2:ed:7a:13:bd:f5:1a:05:
         e0:ac:a4:d2:e7:7b:54:f7:a0:5a:ff:db:1a:a8:96:85:9b:49:
         17:15:91:11:04:5d:f0:f0:35:ca:68:b7:59:97:9f:28:ab:f7:
         05:2c:05:44:9f:47:38:3d:4c:99:80:4e:65:36:d7:bd:70:b9:
         45:86:fe:a2:9d:2a:1d:8b:cf:e5:a8:b0:0b:76:ea:e5:ce:2f:
         04:b0:2a:09:35:57:79:1f:8c:12:d9:dd:dd:4c:7f:84:ed:02:
         20:94:91:50:d5:4b:8f:29:6c:f2:0f:48:e8:5a:1f:5a:bc:41:
         cd:14:10:c3:67:97:a9:46:21:4d:5a:06:d2:d3:be:60:ba:2a:
         ec:6e:7d:79:c7:c3:3f:2a:c4:db:2c:4a:35:c9:27:6a:ce:95:
         42:4f:7e:7c:4e:3c:c8:89:0a:26:32:25:99:fd:5d:0d:02:b0:
         de:7e:5b:0b:5d:bf:bc:e8:d0:53:9e:80:83:6b:84:a7:28:26:
         45:ce:2f:4b:31:ea:90:af:38:97:4a:ed:a8:d5:87:79:81:c1:
         e5:56:7d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----