Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/b12067a06e9204b7ee5a05c11a561d904c6b522c.roa
File:                     b12067a06e9204b7ee5a05c11a561d904c6b522c.roa (raw, json)
Hash identifier:          yonS/lyqH2tCEW1rk3djcq4AgNkRXIbnkxiy3BWYhk4=
Subject key identifier:   38:C0:EA:16:83:DA:CE:73:A2:77:DC:49:D6:3F:34:55:5B:10:6A:43
Certificate issuer:       /CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
Certificate serial:       1A80A3
Authority key identifier: 95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/b12067a06e9204b7ee5a05c11a561d904c6b522c.roa
Signing time:             Tue 06 Dec 2022 15:26:44 +0000
ROA not before:           Tue 29 Nov 2022 21:00:48 +0000
ROA not after:            Sun 01 Dec 2024 21:00:48 +0000
asID:                     262589
IP address blocks:        2803:bfa0:fe00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1736867 (0x1a80a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
        Validity
            Not Before: Nov 29 21:00:48 2022 GMT
            Not After : Dec  1 21:00:48 2024 GMT
        Subject: CN=b12067a06e9204b7ee5a05c11a561d904c6b522c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:8c:35:b4:5c:a3:59:c4:61:86:40:39:2d:
                    32:6a:11:a5:0c:1e:c5:aa:0f:eb:b4:d1:54:c0:5f:
                    c2:44:85:98:8a:00:af:41:df:22:f0:a6:46:48:b2:
                    60:10:18:dc:0e:14:94:9e:38:5c:11:7f:9a:6b:4c:
                    f1:d1:ac:08:bb:56:f9:eb:14:23:4a:58:33:a7:13:
                    cf:c5:42:a8:48:d5:fb:27:da:69:1f:22:0f:12:4b:
                    74:06:29:09:3c:c3:c6:28:71:c2:fa:6d:fb:d4:e0:
                    68:a3:c7:ee:b7:8d:cf:8f:c6:d2:db:c1:ad:0f:1a:
                    07:82:f9:ae:aa:c8:a2:c6:c9:33:44:73:39:1b:62:
                    cb:f2:f6:83:a8:61:9a:4d:ba:cc:8a:ff:41:15:a8:
                    06:ad:3a:57:33:7a:59:bf:0b:45:dc:3f:95:07:39:
                    5d:4a:48:b6:dc:6e:e3:9f:5d:0c:d2:3f:ef:05:2c:
                    79:67:fe:b6:4b:32:bf:27:d0:a5:11:2f:2e:e6:84:
                    07:fc:46:7e:2d:18:83:3c:9d:fd:29:85:ba:aa:a1:
                    e8:b4:c1:f0:46:3c:12:58:16:97:de:41:71:75:7a:
                    0e:8a:59:6e:38:b5:6a:29:de:85:c3:97:e8:f8:52:
                    23:7a:26:b8:b5:e8:bc:d9:d8:ee:68:fb:5c:17:6e:
                    0e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C0:EA:16:83:DA:CE:73:A2:77:DC:49:D6:3F:34:55:5B:10:6A:43
            X509v3 Authority Key Identifier:
                keyid:95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/b12067a06e9204b7ee5a05c11a561d904c6b522c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bfa0:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:67:cf:08:74:8a:19:b5:5f:e0:a0:75:aa:73:b6:4b:4f:5f:
         66:86:44:e9:24:59:c8:a3:94:ff:a9:07:47:9a:57:72:af:43:
         fa:82:e9:9f:47:fd:d5:58:a4:27:e4:ae:b8:17:db:fb:64:2f:
         86:e3:6c:2a:51:c4:44:ea:4e:59:a4:81:85:74:12:d3:26:8e:
         6a:44:9c:a3:77:91:e4:a3:98:88:1b:6d:1f:54:c5:23:61:6e:
         34:9e:4b:8e:c6:8e:21:8d:c5:e2:97:b4:c8:c3:fb:07:29:d6:
         52:b9:95:15:a7:52:48:28:33:33:ff:d4:e4:86:bb:d2:64:cf:
         48:1e:34:f4:cb:dc:ed:ce:19:38:fb:08:c5:a9:31:04:fd:4a:
         5f:a2:05:6e:93:36:7c:ab:2b:dd:d2:92:92:ef:29:67:63:71:
         9d:75:f4:d0:5a:fc:f0:5e:66:d5:72:ef:4c:1e:40:d5:fa:97:
         90:24:1a:10:96:ed:1b:70:54:23:4e:32:32:b7:e4:ac:86:67:
         7a:1c:ce:dc:c0:ee:73:ae:2c:f1:49:36:ac:a6:5d:06:bd:d5:
         05:a9:89:fc:75:59:9a:41:9b:cd:14:c0:74:6f:4f:b3:72:43:
         7a:b9:3e:da:fe:15:99:7e:13:2b:50:1a:85:26:34:29:3c:60:
         3c:69:68:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----