Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/135f3f295cf7405ad39ad66563a524531d2042bf.roa
File:                     135f3f295cf7405ad39ad66563a524531d2042bf.roa (raw, json)
Hash identifier:          q2pm0RVRWWWl0tzjTUQyW+y3f1yjIwNRK7voG4xqUrg=
Subject key identifier:   34:C7:5F:B4:B9:5C:87:7F:E1:13:7D:AA:74:C8:0C:86:03:44:4A:CD
Certificate issuer:       /CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
Certificate serial:       1A91AE
Authority key identifier: 95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/135f3f295cf7405ad39ad66563a524531d2042bf.roa
Signing time:             Tue 06 Dec 2022 21:08:19 +0000
ROA not before:           Mon 05 Dec 2022 21:02:26 +0000
ROA not after:            Fri 06 Dec 2024 21:02:26 +0000
asID:                     14080
IP address blocks:        2803:bfa0:ff00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1741230 (0x1a91ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
        Validity
            Not Before: Dec  5 21:02:26 2022 GMT
            Not After : Dec  6 21:02:26 2024 GMT
        Subject: CN=135f3f295cf7405ad39ad66563a524531d2042bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3a:70:f2:d1:43:14:c2:61:53:83:e6:f5:a1:
                    6f:8c:85:03:88:bd:45:1e:89:62:6b:17:50:da:7b:
                    e6:76:7d:d0:3c:48:be:18:fc:6f:c0:1f:de:d2:fa:
                    ed:4c:c7:d7:c6:c4:ea:29:08:a8:d3:8c:8d:fd:5c:
                    70:b4:57:b6:48:e3:0d:d4:3f:3b:b5:96:da:ee:ae:
                    a9:49:29:3b:25:23:ec:5e:59:d9:fd:2e:fc:85:86:
                    87:dc:32:13:d0:ac:31:f9:0d:29:45:ae:f7:17:6d:
                    34:3c:55:b9:84:e9:1c:9c:9c:21:86:77:54:01:7a:
                    cf:21:3f:6f:47:11:82:4a:85:d7:2a:38:5a:8c:df:
                    36:75:12:1d:8b:25:83:1d:b0:85:8d:cc:78:a5:0a:
                    6e:a2:d5:03:6c:8f:cc:eb:ab:b2:91:e9:58:13:7c:
                    26:d5:e6:1c:0c:15:34:57:ef:bb:e4:0b:7d:64:cd:
                    fd:45:a9:26:e7:80:0a:2d:9b:0c:61:41:6b:de:f4:
                    e2:51:ad:10:b9:4f:6d:e6:ad:d4:46:3a:2b:76:bc:
                    36:41:c9:63:a2:fe:ea:0d:a7:f7:f1:96:b5:b8:3a:
                    d8:39:25:50:b4:18:48:50:4a:9b:f4:c5:02:28:53:
                    64:78:6d:b4:8f:db:53:6c:fd:4d:e8:64:d6:83:c8:
                    90:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C7:5F:B4:B9:5C:87:7F:E1:13:7D:AA:74:C8:0C:86:03:44:4A:CD
            X509v3 Authority Key Identifier:
                keyid:95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/135f3f295cf7405ad39ad66563a524531d2042bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bfa0:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:bf:26:ba:4b:da:dc:7a:61:a2:55:75:c6:84:27:01:5b:b7:
         49:ff:72:52:71:09:37:f7:5d:2a:41:b5:52:ca:b5:52:ad:d9:
         26:7b:6f:2a:3e:4c:6d:ca:ca:f7:88:ed:dc:ff:81:5a:a8:4f:
         da:a7:ad:84:78:b7:71:a7:3b:8f:ad:0f:e0:94:3e:fc:ee:d4:
         bd:18:73:51:af:10:9a:11:06:06:dd:49:76:e6:90:ec:ba:d5:
         57:c7:b7:49:0e:00:a9:0d:37:46:df:67:91:51:d1:29:a4:e7:
         d8:35:8e:5b:1f:a7:24:15:f5:96:5a:48:59:94:a1:63:23:6f:
         e3:bd:d7:81:40:e0:cd:97:3b:36:d1:83:3d:67:9b:f3:d4:73:
         47:0c:1c:cb:42:6f:be:26:f9:dc:88:92:f7:61:1e:24:3a:1f:
         13:b0:8d:cc:3b:45:a6:a2:2a:05:10:76:03:44:0e:b7:8c:0c:
         ea:03:e7:08:c7:4b:a2:5c:5f:c4:f6:c1:64:3f:b1:cc:43:34:
         00:57:3e:3e:ec:76:0d:ce:94:11:36:94:e3:f4:49:68:31:b3:
         28:31:9a:a3:59:cb:30:80:ed:48:b6:39:b0:79:f1:da:b8:64:
         ff:75:6a:26:06:f1:f6:af:8c:1d:13:98:32:07:35:5a:ee:1b:
         3b:97:f0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----