Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/8db3670a08af95e8af0f8b1f33c0d616e1d040b6.roa
File:                     8db3670a08af95e8af0f8b1f33c0d616e1d040b6.roa (raw, json)
Hash identifier:          Jm3eWoZdDljk2iMzTkvkwoNNhp+xduG1Sp6UBMt9hBw=
Subject key identifier:   0E:A4:25:B1:23:30:09:44:3F:7F:9F:5A:26:EC:C7:AB:CC:69:86:81
Certificate issuer:       /CN=e54bc3956d81b33eb49bda17274b51fc9913ebd7
Certificate serial:       1845
Authority key identifier: 67:B4:8A:CD:94:C0:43:ED:CE:84:A5:BE:6E:74:16:77:1C:6A:3A:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e54bc3956d81b33eb49bda17274b51fc9913ebd7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/8db3670a08af95e8af0f8b1f33c0d616e1d040b6.roa
Signing time:             Mon 28 Mar 2022 14:39:55 +0000
ROA not before:           Sat 26 Mar 2022 03:00:00 +0000
ROA not after:            Tue 26 Mar 2024 03:00:00 +0000
asID:                     264776
IP address blocks:        2803:c8c0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 08:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6213 (0x1845)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54bc3956d81b33eb49bda17274b51fc9913ebd7
        Validity
            Not Before: Mar 26 03:00:00 2022 GMT
            Not After : Mar 26 03:00:00 2024 GMT
        Subject: CN=8db3670a08af95e8af0f8b1f33c0d616e1d040b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:49:36:d4:a3:f4:94:6c:aa:0d:de:19:47:ec:
                    6e:f8:c5:69:0f:bb:e5:e5:60:12:41:57:a2:bb:ac:
                    b0:ac:22:a7:9e:4d:5f:c2:18:8b:96:2e:0e:3d:4e:
                    ba:d8:fa:d4:01:4a:f7:36:b0:02:c4:6d:e8:2d:11:
                    af:f3:8a:52:ca:11:66:0a:ed:b8:50:d3:66:58:b3:
                    cb:39:76:66:60:08:99:bc:84:73:14:e6:cb:0d:f3:
                    4e:ba:fa:be:e5:24:7c:b3:6d:fe:42:4b:ac:83:d5:
                    65:72:2b:19:98:af:7d:94:ab:5f:c9:2a:ad:4d:47:
                    3c:46:ba:35:20:4f:cb:1c:93:17:9a:7d:f7:a9:18:
                    49:bc:c8:36:4e:13:22:23:6d:28:ef:3b:69:6b:a1:
                    64:8f:74:e0:44:b9:9e:03:5e:76:e4:48:8f:f6:04:
                    b1:88:80:8d:1b:fa:54:50:63:f5:bc:b5:f4:98:33:
                    a5:87:58:dc:4e:18:64:40:93:56:d7:a5:96:de:cb:
                    36:d9:ab:bf:ef:d6:9f:98:d9:62:d3:d6:00:f1:b4:
                    98:e0:47:16:c3:bf:7b:97:56:99:69:dc:62:55:44:
                    56:82:7d:d0:01:3d:60:ac:e2:19:b4:f2:da:d3:0f:
                    8e:cb:a3:57:1a:59:1e:f9:6f:44:92:12:0e:fb:ae:
                    b8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A4:25:B1:23:30:09:44:3F:7F:9F:5A:26:EC:C7:AB:CC:69:86:81
            X509v3 Authority Key Identifier:
                keyid:67:B4:8A:CD:94:C0:43:ED:CE:84:A5:BE:6E:74:16:77:1C:6A:3A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e54bc3956d81b33eb49bda17274b51fc9913ebd7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/8db3670a08af95e8af0f8b1f33c0d616e1d040b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/e54bc3956d81b33eb49bda17274b51fc9913ebd7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:47:48:ff:f3:b8:41:47:fc:0f:f3:00:15:65:a9:36:df:65:
         e2:46:38:31:00:1c:3a:bb:17:ad:19:21:ef:39:80:70:b2:f2:
         18:ec:23:56:42:f8:07:f3:f1:51:c1:6a:3a:b0:b0:66:92:67:
         1d:5e:6e:fc:2b:d4:9a:56:69:92:37:a6:22:a3:45:8a:d4:4c:
         b8:69:f4:4c:74:d7:66:f3:6e:85:00:eb:c5:19:39:cc:a9:53:
         3f:62:08:3d:32:df:62:0b:26:5e:4d:34:89:63:77:63:5f:9b:
         64:70:af:cb:2e:e1:0e:26:7b:3c:d5:23:ac:69:7f:7f:d1:0c:
         9a:08:59:4b:79:78:05:03:62:87:42:b9:35:b3:d9:a2:6d:8f:
         03:86:c3:66:c9:a5:db:23:da:13:91:d1:f2:50:1a:72:92:2f:
         89:06:2c:25:1f:1f:76:73:b8:00:01:78:54:88:db:52:4f:15:
         e3:f5:f5:40:bd:fc:a7:f7:e6:60:6e:e3:ab:d1:c1:c3:12:3e:
         f5:60:f1:75:1f:3e:6b:02:6f:fd:4c:b5:61:5a:1f:27:ea:0c:
         0a:b8:62:d0:96:f9:ab:1f:7c:06:68:e0:c7:86:33:68:b6:5d:
         bd:d3:c0:3b:89:6b:7b:2d:5e:d7:ec:5e:a6:70:5f:28:6a:b9:
         d3:0a:5f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----