Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/67b76e2f4a33e1d9adda6b40865184ab4bf72f43.roa
File:                     67b76e2f4a33e1d9adda6b40865184ab4bf72f43.roa (raw, json)
Hash identifier:          cGBismRfGHJTOQu6l16MbXl8hFk8lf6vFGhSUpXzij8=
Subject key identifier:   B5:45:E8:22:58:4C:2C:81:58:CF:99:2D:1D:9D:EB:00:A6:7A:C4:54
Certificate issuer:       /CN=30855b14b9a043ea2127093be7f867b091f60231
Certificate serial:       1ED000
Authority key identifier: 2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/67b76e2f4a33e1d9adda6b40865184ab4bf72f43.roa
Signing time:             Tue 14 Mar 2023 21:45:17 +0000
ROA not before:           Sun 12 Mar 2023 21:44:01 +0000
ROA not after:            Fri 14 Mar 2025 21:44:01 +0000
asID:                     264646
IP address blocks:        2803:1780:6::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2019328 (0x1ed000)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30855b14b9a043ea2127093be7f867b091f60231
        Validity
            Not Before: Mar 12 21:44:01 2023 GMT
            Not After : Mar 14 21:44:01 2025 GMT
        Subject: CN=67b76e2f4a33e1d9adda6b40865184ab4bf72f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:af:13:57:2b:5b:55:f8:e6:3c:ee:f0:a4:8f:
                    b6:62:62:47:15:35:0c:f8:c6:1b:6c:ab:fb:57:a2:
                    78:15:30:27:92:5e:d7:e9:a6:5b:39:ca:a1:c6:de:
                    20:96:ee:53:fe:df:c4:a1:78:1d:a4:3e:ff:12:b3:
                    e6:57:4d:40:98:2e:fa:a8:da:0e:dd:d5:02:09:96:
                    9e:e0:b6:e8:d8:e2:33:9b:d4:12:7f:05:18:01:2b:
                    8a:0c:cd:dd:d9:a1:88:27:d4:2e:c8:ea:63:eb:86:
                    a0:8e:f4:05:97:f7:c6:59:67:f9:d2:90:53:ef:1b:
                    68:ea:0b:ad:34:62:0b:d3:c4:e6:73:ed:d6:77:60:
                    a4:ed:02:80:2f:d1:4e:61:75:af:11:d1:0e:62:00:
                    08:33:f6:41:65:13:1e:ef:38:f5:bd:a9:a8:99:a8:
                    e1:2a:f1:2c:3a:17:5d:7e:53:73:2f:26:2e:ce:8c:
                    f1:41:2d:52:b4:59:16:b6:87:4e:66:a3:11:44:30:
                    79:ed:06:12:c4:86:55:0e:d6:29:19:49:4a:c2:80:
                    dc:ad:ba:a4:d3:32:fc:24:5a:91:ba:9a:16:88:42:
                    0e:cb:7c:77:ad:1d:b1:8a:d3:62:53:f4:1e:d3:6e:
                    c6:bb:38:37:b4:b3:0d:f4:03:59:f4:ce:2c:cd:00:
                    27:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:45:E8:22:58:4C:2C:81:58:CF:99:2D:1D:9D:EB:00:A6:7A:C4:54
            X509v3 Authority Key Identifier:
                keyid:2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/67b76e2f4a33e1d9adda6b40865184ab4bf72f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/30855b14b9a043ea2127093be7f867b091f60231.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1780:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:a9:f3:55:ca:74:f2:0f:0f:40:b6:38:a8:6e:b5:3f:4e:37:
         18:e0:f0:b3:02:ee:90:c3:22:6e:75:4a:c4:2a:29:29:65:03:
         b0:21:a8:6a:6b:5f:a2:83:d0:2b:3e:bb:f3:8a:13:1e:9b:fb:
         2f:0a:ce:e6:16:06:ce:a5:86:08:35:09:5c:9a:ed:06:b2:1a:
         8c:51:38:19:5d:3b:3c:a8:1a:2e:45:90:11:db:8e:3c:60:4f:
         95:64:03:62:5c:43:6d:13:dc:6b:b7:84:2d:b9:8a:c2:1c:ee:
         34:da:31:04:5c:1d:fb:c7:31:85:d0:1e:33:61:f3:95:56:2c:
         17:64:53:9b:e8:35:ea:10:4c:eb:9b:ff:38:50:39:e9:9b:f0:
         50:16:0b:89:19:e6:d2:1b:7a:bb:8c:87:67:64:1f:cf:ea:cc:
         ba:6f:14:00:b3:f8:c8:b4:46:80:2f:7e:6c:c0:4c:9a:7f:12:
         5f:b0:f5:2f:66:13:25:78:9b:7f:e7:8f:94:ed:be:02:8d:22:
         b5:1f:e2:26:97:ad:92:4e:d2:be:85:45:34:bf:da:98:ab:a4:
         74:09:09:2e:82:a3:99:78:18:92:59:64:69:c4:5f:da:9a:79:
         60:99:db:3f:8a:ea:df:ed:5c:2f:ba:d2:d3:cd:13:75:bc:56:
         ae:36:10:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----