Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/cd4cd5238ea110231b725ef72bcc17582b73d381.roa
File:                     cd4cd5238ea110231b725ef72bcc17582b73d381.roa (raw, json)
Hash identifier:          wPyYQ9KNz1Yyk2KvclkbeYEy1SsZ1xmepNg12lRm+h8=
Subject key identifier:   DD:2D:C0:C8:58:8F:D0:A6:D8:BE:21:45:4E:1F:93:98:D0:08:93:C4
Certificate issuer:       /CN=2d287d9bace0aaa89c8a18b31d258122387e847f
Certificate serial:       0520AE
Authority key identifier: 80:34:D5:7F:00:0A:74:D4:3B:7E:88:9A:12:19:8C:87:E6:5D:00:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d287d9bace0aaa89c8a18b31d258122387e847f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/cd4cd5238ea110231b725ef72bcc17582b73d381.roa
Signing time:             Sat 03 Dec 2022 04:47:48 +0000
ROA not before:           Tue 09 Aug 2022 04:38:18 +0000
ROA not after:            Thu 15 Aug 2024 04:38:18 +0000
asID:                     272137
IP address blocks:        2803:6090::/32 maxlen: 32
                          2803:6090::/48 maxlen: 48
                          2803:6090:1::/48 maxlen: 48
                          2803:6090:2::/48 maxlen: 48
                          2803:6090:3::/48 maxlen: 48
                          2803:6090:4::/48 maxlen: 48
                          2803:6090:5::/48 maxlen: 48
                          2803:6090:6::/48 maxlen: 48
                          2803:6090:7::/48 maxlen: 48
                          2803:6090:8::/48 maxlen: 48
                          2803:6090:9::/48 maxlen: 48
                          2803:6090:a::/48 maxlen: 48
                          2803:6090:b::/48 maxlen: 48
                          2803:6090:c::/48 maxlen: 48
                          2803:6090:d::/48 maxlen: 48
                          2803:6090:e::/48 maxlen: 48
                          2803:6090:f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336046 (0x520ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d287d9bace0aaa89c8a18b31d258122387e847f
        Validity
            Not Before: Aug  9 04:38:18 2022 GMT
            Not After : Aug 15 04:38:18 2024 GMT
        Subject: CN=cd4cd5238ea110231b725ef72bcc17582b73d381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:18:f3:ea:ba:3b:89:a0:42:54:91:8f:6f:a3:
                    4a:2c:24:3c:73:2b:07:87:f3:ed:6d:bd:37:d9:92:
                    7d:75:e3:64:b9:6a:40:8b:b0:c7:f0:0b:77:20:f3:
                    09:c2:7b:1c:9f:55:be:d3:03:b7:05:dc:cf:4a:e8:
                    cb:79:7a:fc:6b:c7:f6:23:9c:07:4b:d9:3e:c9:32:
                    77:d0:77:1e:66:aa:4e:98:77:a1:11:21:19:5a:cd:
                    58:2d:e8:25:bb:c2:d6:b8:ba:ed:cc:fd:e3:a4:0b:
                    21:9e:ad:0d:15:d7:7b:4a:2a:6f:0d:bc:0e:39:94:
                    bd:a9:20:f9:f0:71:f0:58:18:36:ac:c8:15:aa:bb:
                    13:fe:df:10:b1:11:58:6a:40:22:14:94:6e:a5:74:
                    f5:57:4e:23:af:dc:d0:47:bb:be:0f:57:38:09:df:
                    31:c2:76:45:e5:82:09:29:fc:0d:50:37:61:19:e5:
                    1d:dc:91:83:36:04:ff:51:4f:8f:ca:c4:77:12:75:
                    1e:bb:77:9b:29:02:bf:c4:a9:51:01:d3:81:37:64:
                    60:29:c8:25:56:f8:2a:31:9c:ad:82:92:90:0f:d5:
                    17:65:20:18:94:97:e5:e7:9c:39:43:a5:6a:7e:58:
                    51:5a:cb:a9:d8:ff:85:3a:07:2d:2d:82:e4:34:ae:
                    1f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2D:C0:C8:58:8F:D0:A6:D8:BE:21:45:4E:1F:93:98:D0:08:93:C4
            X509v3 Authority Key Identifier:
                keyid:80:34:D5:7F:00:0A:74:D4:3B:7E:88:9A:12:19:8C:87:E6:5D:00:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d287d9bace0aaa89c8a18b31d258122387e847f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/cd4cd5238ea110231b725ef72bcc17582b73d381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/2d287d9bace0aaa89c8a18b31d258122387e847f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6090::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:f3:61:b4:46:62:4b:c5:f7:46:6b:a7:24:a9:26:45:93:18:
         25:93:24:8b:a0:40:2c:ac:b3:ad:1c:d0:85:45:00:8c:98:0a:
         78:a4:47:db:19:35:ee:e7:95:b8:44:17:8e:77:f9:88:83:0b:
         40:0a:17:94:99:25:d3:f7:79:7f:ae:01:5a:82:57:3a:6c:ea:
         fb:36:65:de:d4:ad:f3:36:ac:1e:54:14:f9:6d:e4:cc:34:32:
         51:e1:07:9b:63:b1:d1:ab:8b:d5:76:d8:df:b6:31:27:20:d3:
         38:dd:a5:6b:61:7b:98:b0:50:41:15:73:8c:71:d8:51:60:46:
         1a:da:e3:6d:fe:22:ac:32:83:0e:23:5a:8f:7e:b4:fc:a7:18:
         06:09:57:f8:a6:c9:b0:be:1b:8b:ae:43:78:59:86:a4:b9:f3:
         cd:30:5d:a5:38:f0:92:91:af:16:38:1c:87:d3:3c:3c:04:30:
         4d:5d:08:af:75:ac:14:14:75:78:9b:ce:29:51:2a:55:b5:8e:
         9c:2a:63:8d:f0:91:bd:d7:04:c3:25:7d:8c:0d:c6:0d:a1:8b:
         e2:1b:db:0c:f7:fa:08:4f:db:a6:9b:cb:1f:96:64:81:90:dc:
         96:dd:e5:98:f1:56:b7:ec:5f:ab:b4:f2:d7:62:52:a2:4a:cd:
         65:d5:95:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----