Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/723a33339b62ffe38064f10279ef31ddf307f4d6.roa
File:                     723a33339b62ffe38064f10279ef31ddf307f4d6.roa (raw, json)
Hash identifier:          X10yKr1FnmJzlostA/WOzMmsgPOyStTUxLTnG+Ck+f8=
Subject key identifier:   B6:FF:75:1D:E8:37:A6:42:35:27:07:C6:2B:B0:78:07:A7:28:78:01
Certificate issuer:       /CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
Certificate serial:       1AC452
Authority key identifier: 95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/723a33339b62ffe38064f10279ef31ddf307f4d6.roa
Signing time:             Mon 12 Dec 2022 22:01:02 +0000
ROA not before:           Sat 10 Dec 2022 16:56:55 +0000
ROA not after:            Thu 12 Dec 2024 16:56:55 +0000
asID:                     267799
IP address blocks:        2803:bfa0:ff00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1754194 (0x1ac452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
        Validity
            Not Before: Dec 10 16:56:55 2022 GMT
            Not After : Dec 12 16:56:55 2024 GMT
        Subject: CN=723a33339b62ffe38064f10279ef31ddf307f4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:db:62:fd:ed:f8:e2:74:8d:a4:a3:3a:40:32:
                    63:eb:eb:e7:d3:85:c0:25:63:cc:e6:b9:3a:8a:a8:
                    5a:f2:2f:6c:c5:74:4a:6a:b4:3d:3c:56:38:f1:b6:
                    a5:30:e9:83:38:9f:a3:7a:3f:d6:fd:76:97:ed:25:
                    f2:89:97:4e:24:98:01:41:db:ad:f2:c5:12:70:54:
                    df:40:f9:c0:4e:7a:1d:91:26:9e:b8:ed:21:4e:34:
                    d3:b3:bd:bc:f0:c4:9b:74:bb:d7:c2:6f:8f:79:5a:
                    48:0a:f0:9e:85:96:04:5c:7f:dd:05:50:24:55:e5:
                    f6:41:64:16:e1:fd:bd:30:bc:d4:53:77:ed:c2:07:
                    52:f5:1a:09:a4:cf:e4:02:df:56:3d:f9:cf:74:8d:
                    0b:28:8a:5a:1e:86:42:37:01:5a:4f:bd:c9:8a:0d:
                    81:97:79:df:dc:9a:e7:3d:c8:19:96:08:e8:ed:35:
                    59:6f:ef:20:9f:31:12:6e:2b:ab:4f:80:f0:15:b3:
                    7a:f6:ed:f4:25:0e:3d:4b:80:d8:0d:89:09:48:ad:
                    bf:ed:d7:fd:68:17:16:c8:7a:29:bf:26:20:3a:cb:
                    b8:b3:98:bb:43:0d:a1:ee:70:f4:6e:05:17:4c:b4:
                    99:1b:bf:b3:be:40:b8:bc:3d:45:e7:8e:4d:75:44:
                    c5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FF:75:1D:E8:37:A6:42:35:27:07:C6:2B:B0:78:07:A7:28:78:01
            X509v3 Authority Key Identifier:
                keyid:95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/723a33339b62ffe38064f10279ef31ddf307f4d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bfa0:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:a5:04:c0:03:c3:02:06:e7:34:c1:db:7a:3a:cd:cc:c5:4f:
         cd:4d:c9:2e:d7:c2:d2:be:66:46:15:5b:76:e3:d1:ce:cb:a0:
         6d:a7:d8:23:c6:d7:e0:a9:55:3b:c4:fd:41:fc:f1:1d:92:cc:
         fd:a3:25:cf:97:2c:04:46:3d:e4:8f:0f:24:8c:8f:49:2a:05:
         af:e8:ad:f5:95:2a:c5:57:94:d0:9a:4e:1c:16:9b:c3:25:2c:
         e3:7c:e0:75:82:e4:c3:cf:1e:8e:de:f9:35:22:55:0b:13:bc:
         2d:21:b8:1e:4b:21:54:f0:a4:f9:88:3a:c5:2e:62:74:17:2b:
         17:73:89:42:8c:c0:82:ac:02:36:d9:91:00:7b:1a:8d:8f:e4:
         71:89:09:c6:c4:09:4c:98:84:3c:14:4b:58:f5:4c:38:1e:89:
         25:d8:2b:7b:71:67:5a:cb:e4:47:c7:c4:e8:d3:95:cf:7b:56:
         ca:26:a0:ad:bf:21:d1:af:bc:15:49:3f:e3:3b:31:41:b0:51:
         60:a5:7d:09:15:5f:60:3d:02:f3:d0:6e:2c:35:8b:f7:98:89:
         e9:a6:8c:e0:e7:99:26:4f:b3:30:58:11:db:73:82:c8:59:1a:
         c2:ae:82:b9:64:51:7a:b9:0c:c6:da:f1:f4:65:42:31:12:3f:
         4a:8e:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----