Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b00223ce-d9ed-49a0-917d-bb2dace1babc/e6d0a0bb1d82b9fce07557d4977fa60db486ba0f.roa
File:                     e6d0a0bb1d82b9fce07557d4977fa60db486ba0f.roa (raw, json)
Hash identifier:          wjYU/4krqhvlAfQXEm5tp+io9tC8RGhU0zay7E/uO+g=
Subject key identifier:   F7:8F:63:87:CE:BF:9C:81:76:87:1D:EA:48:99:E8:85:02:81:29:B4
Certificate issuer:       /CN=655371e03a64f4f954d669acecde10436df6bf26
Certificate serial:       0413
Authority key identifier: 40:5C:75:C7:62:78:1B:06:5A:4E:6F:9D:8C:0E:FB:7C:EC:1D:3C:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/655371e03a64f4f954d669acecde10436df6bf26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b00223ce-d9ed-49a0-917d-bb2dace1babc/e6d0a0bb1d82b9fce07557d4977fa60db486ba0f.roa
Signing time:             Wed 08 Mar 2023 16:37:42 +0000
ROA not before:           Tue 07 Mar 2023 16:36:09 +0000
ROA not after:            Sat 08 Mar 2025 16:36:09 +0000
asID:                     272841
IP address blocks:        2803:3990::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1043 (0x413)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=655371e03a64f4f954d669acecde10436df6bf26
        Validity
            Not Before: Mar  7 16:36:09 2023 GMT
            Not After : Mar  8 16:36:09 2025 GMT
        Subject: CN=e6d0a0bb1d82b9fce07557d4977fa60db486ba0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9a:31:2b:f6:ad:f0:ef:a9:a3:cf:ce:6c:2b:
                    08:f9:1b:a4:6c:dd:cf:cd:67:a7:fe:b4:13:ca:b4:
                    c6:c0:83:d7:94:62:f8:50:89:8f:f1:29:74:a3:9a:
                    31:2d:39:2a:2f:04:25:2a:e8:90:48:03:fb:d1:fa:
                    9d:7b:d5:69:48:3d:a6:e4:58:69:b7:ea:8a:de:cf:
                    2c:92:6b:5c:b9:4b:25:ca:58:cb:14:39:09:a5:e4:
                    2f:88:c1:b0:87:d0:35:91:f9:0e:c8:52:96:99:80:
                    a2:2f:31:fc:b3:3e:50:6b:4c:a0:04:ae:0d:f3:73:
                    f4:1d:ec:70:af:13:5c:ab:da:ad:42:af:cb:64:34:
                    0e:9d:17:c6:44:84:8a:69:ff:8f:27:15:4b:9d:f8:
                    52:6c:94:75:8e:10:1f:63:d7:85:46:b3:db:3e:22:
                    84:d4:a1:2d:77:79:92:d5:02:21:c1:52:22:14:91:
                    8a:24:21:f8:12:ee:e9:7c:57:ae:25:c2:f5:01:70:
                    90:e0:be:66:6c:b8:80:f1:3b:5a:01:b4:6d:95:3b:
                    04:72:01:0a:a4:58:17:2f:51:1e:49:12:f2:3e:77:
                    45:2f:40:3f:48:7f:35:69:ed:fa:7a:95:9a:51:d1:
                    17:58:e0:72:04:bf:18:07:07:03:08:6b:b2:6d:05:
                    8d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8F:63:87:CE:BF:9C:81:76:87:1D:EA:48:99:E8:85:02:81:29:B4
            X509v3 Authority Key Identifier:
                keyid:40:5C:75:C7:62:78:1B:06:5A:4E:6F:9D:8C:0E:FB:7C:EC:1D:3C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/655371e03a64f4f954d669acecde10436df6bf26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b00223ce-d9ed-49a0-917d-bb2dace1babc/e6d0a0bb1d82b9fce07557d4977fa60db486ba0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b00223ce-d9ed-49a0-917d-bb2dace1babc/655371e03a64f4f954d669acecde10436df6bf26.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3990::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:ce:e9:ac:e7:8b:9c:b4:49:80:95:97:0a:d4:82:4c:37:b8:
         65:cb:6f:ca:5d:87:a6:eb:39:3a:28:6e:62:8c:c5:95:db:17:
         78:e7:80:a0:51:ee:6d:9a:01:42:00:41:96:ce:ae:cf:86:bb:
         e6:f5:5a:d2:84:87:5d:c3:80:26:31:79:7b:6c:bc:c8:1e:28:
         ec:f9:6a:b4:e9:c8:53:fe:94:03:38:88:20:04:59:ed:36:11:
         8d:f6:d9:1a:3f:0a:51:8c:fb:de:5d:a9:9c:9d:4c:cd:81:20:
         61:b1:13:43:ef:01:cb:5c:80:74:2e:fb:e9:44:78:00:13:7a:
         17:4f:ae:90:63:f6:31:b4:d6:a7:d4:76:19:12:9a:13:25:4a:
         69:c4:ad:96:e5:ba:80:5f:56:c1:23:7f:76:f2:e7:d9:f5:f3:
         e8:b9:5b:d4:1c:e7:cd:c5:16:d4:06:bd:ef:87:3b:26:28:c6:
         19:9f:b5:43:03:c9:2c:bf:2b:45:5c:cd:d4:2b:01:c7:c2:37:
         6a:49:a0:44:a9:b2:02:27:93:5c:df:9f:59:a0:ce:64:5e:1b:
         47:be:e1:56:ab:62:36:f9:8a:9b:32:68:44:91:f8:c1:df:3e:
         02:cc:fc:12:fc:4a:5f:0f:36:e9:0d:c3:0c:89:5e:9a:b0:32:
         77:20:c6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----