Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/56e85a72e77cdd453885fdcc85263a45cb3998e8.roa
File:                     56e85a72e77cdd453885fdcc85263a45cb3998e8.roa (raw, json)
Hash identifier:          s25+aSyfUYbKHwBZB7a126Pk7WvAD/KXGm3Ty7D0qzY=
Subject key identifier:   A5:EC:A2:4C:87:1F:A0:0D:94:B2:F9:B6:3D:83:D4:0F:E8:23:0C:F1
Certificate issuer:       /CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
Certificate serial:       1AC271
Authority key identifier: 95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/56e85a72e77cdd453885fdcc85263a45cb3998e8.roa
Signing time:             Mon 12 Dec 2022 16:57:01 +0000
ROA not before:           Sun 11 Dec 2022 16:56:55 +0000
ROA not after:            Thu 12 Dec 2024 16:56:55 +0000
asID:                     267799
IP address blocks:        2803:bfa0:fe00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1753713 (0x1ac271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
        Validity
            Not Before: Dec 11 16:56:55 2022 GMT
            Not After : Dec 12 16:56:55 2024 GMT
        Subject: CN=56e85a72e77cdd453885fdcc85263a45cb3998e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a2:46:4d:54:ae:3e:39:09:4b:32:6a:63:ae:
                    2b:30:ad:9c:71:89:e7:15:0d:20:59:91:76:5e:98:
                    22:8b:ee:8c:49:a2:d0:90:dc:02:ba:a4:b4:14:80:
                    0d:91:44:5e:a3:50:c0:d3:f6:15:69:7a:4a:4b:78:
                    cd:5a:b9:a0:9e:99:13:3e:2b:4f:89:0d:f6:2b:24:
                    26:3e:65:ca:3d:89:e9:ed:6b:cc:7b:1d:f1:ce:36:
                    38:37:b7:29:8c:32:6a:4b:2b:f0:e8:c3:41:e1:b0:
                    48:4a:2b:5f:ff:69:07:cf:84:76:e5:fe:12:a1:9d:
                    72:c4:b7:e2:72:23:f9:45:aa:2a:df:10:dd:86:c3:
                    c0:ef:01:b2:26:dd:64:a1:e1:a0:56:e5:1d:96:c1:
                    a6:e0:7e:65:38:72:9d:76:4b:6a:73:27:1a:ec:34:
                    64:d9:dc:07:52:cd:20:d5:ff:ad:42:84:87:84:1c:
                    72:91:ef:0e:32:30:c0:d4:48:c5:a9:58:15:92:b1:
                    32:73:e2:36:06:ce:54:97:ab:77:b3:77:9b:e0:cb:
                    e7:43:c5:03:64:a6:fa:99:13:ce:21:92:4d:31:c6:
                    08:23:c7:5e:bf:08:8f:b3:76:00:af:5c:de:4c:8f:
                    bd:cf:45:c6:9c:d3:03:f4:65:5b:7e:ea:5d:db:13:
                    fb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EC:A2:4C:87:1F:A0:0D:94:B2:F9:B6:3D:83:D4:0F:E8:23:0C:F1
            X509v3 Authority Key Identifier:
                keyid:95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/56e85a72e77cdd453885fdcc85263a45cb3998e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bfa0:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:f5:09:0b:51:05:58:a9:22:45:1b:2b:f3:45:35:30:16:99:
         3f:9f:8d:46:08:a6:c8:fa:e3:95:84:33:91:e7:ef:69:6c:fd:
         8a:a9:bb:60:36:8b:c6:70:52:18:96:74:fd:ef:fa:df:e9:fd:
         12:ae:08:5f:a9:64:5d:b6:af:3b:8d:e0:c5:89:0b:e0:c7:d7:
         3b:38:08:54:1a:ef:12:d9:88:80:47:cb:05:82:9c:58:72:cb:
         04:da:8a:66:e2:63:95:57:67:93:e6:13:25:a2:b4:f6:1c:9c:
         7d:0e:76:b4:4a:b4:43:9a:63:7b:12:89:b2:93:02:c5:66:10:
         35:df:6a:62:60:b1:74:c5:07:83:b2:8f:55:f3:ef:ae:cb:d6:
         31:6e:af:a6:9f:ae:39:e8:3a:51:76:f3:9d:d6:fd:88:ca:62:
         d2:aa:43:ac:c4:27:07:e7:54:5f:ad:b0:22:aa:08:fa:dd:d0:
         aa:26:9a:83:84:ed:2a:6d:03:a8:ef:27:b0:9a:99:6f:c0:fc:
         39:a0:17:76:7a:79:4b:31:21:48:34:77:11:4b:0b:f5:52:8c:
         7d:b6:71:74:60:96:89:c9:2f:68:e1:ce:69:bc:d7:6f:e3:ae:
         ed:a6:eb:a2:3e:f0:49:e8:12:a9:4c:28:c7:95:c8:4d:21:dd:
         db:6c:0a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----