Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/850b6e3f6ddf31cd7558bf0801f33e5d1a06fb0a.roa
File:                     850b6e3f6ddf31cd7558bf0801f33e5d1a06fb0a.roa (raw, json)
Hash identifier:          d2ShntnAvuPc74j37299EUuNPLNkMfsrstT5bLu35TI=
Subject key identifier:   F0:BE:9E:A9:EF:1F:70:A0:75:5B:3F:5C:02:9D:8C:72:61:BD:36:B9
Certificate issuer:       /CN=30855b14b9a043ea2127093be7f867b091f60231
Certificate serial:       209AAC
Authority key identifier: 2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/850b6e3f6ddf31cd7558bf0801f33e5d1a06fb0a.roa
Signing time:             Fri 19 May 2023 12:44:48 +0000
ROA not before:           Thu 18 May 2023 12:44:47 +0000
ROA not after:            Mon 19 May 2025 12:44:47 +0000
asID:                     266737
IP address blocks:        2803:1780::/64 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2136748 (0x209aac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30855b14b9a043ea2127093be7f867b091f60231
        Validity
            Not Before: May 18 12:44:47 2023 GMT
            Not After : May 19 12:44:47 2025 GMT
        Subject: CN=850b6e3f6ddf31cd7558bf0801f33e5d1a06fb0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:26:3f:21:83:72:8f:f6:c6:5c:5c:8a:69:c1:
                    ff:69:24:a3:39:bd:78:67:d0:2f:b4:83:56:ad:cf:
                    da:bd:80:7a:fd:cc:f9:6e:f1:77:98:ec:e0:64:d8:
                    21:ef:7e:d0:63:c7:b7:be:1b:63:89:f8:51:16:90:
                    1e:b4:28:fb:06:a4:3e:59:04:ae:cb:cc:59:9b:78:
                    0e:b1:50:5a:e4:c2:2a:cd:82:c8:77:f9:b0:e7:76:
                    bb:ec:a5:62:0b:7a:26:1e:5f:3c:da:03:a1:13:8c:
                    85:c8:37:04:e7:a1:b6:d9:e5:15:bc:d8:75:86:60:
                    de:f6:11:c8:10:41:62:3f:2c:91:24:84:12:6e:d8:
                    b5:c2:40:2f:d1:a6:68:fa:fa:ec:12:75:a4:d3:45:
                    96:9e:de:04:36:ad:1a:85:53:5a:7d:f2:b3:8c:1b:
                    cc:48:2f:fc:c2:26:87:53:34:a5:98:8d:b6:d2:3f:
                    fd:43:d5:bc:0f:12:58:f2:cc:64:4e:ec:6f:a2:e3:
                    39:ec:ab:a7:34:5d:f5:0f:07:42:7f:ac:9f:72:24:
                    cf:01:72:9b:01:90:20:79:fb:f7:e3:56:ad:95:20:
                    3a:85:17:53:78:45:06:81:cf:c0:67:75:35:10:a5:
                    6b:00:9e:2b:4c:da:33:c3:96:2f:08:09:eb:15:dd:
                    06:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BE:9E:A9:EF:1F:70:A0:75:5B:3F:5C:02:9D:8C:72:61:BD:36:B9
            X509v3 Authority Key Identifier:
                keyid:2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/850b6e3f6ddf31cd7558bf0801f33e5d1a06fb0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/30855b14b9a043ea2127093be7f867b091f60231.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1780::/64

    Signature Algorithm: sha256WithRSAEncryption
         31:da:d9:a9:cd:30:4a:45:fe:31:40:8d:7f:68:73:2d:3e:77:
         23:92:f5:1e:79:bd:39:12:17:cc:9a:eb:4b:9f:d0:35:29:82:
         cc:28:27:c3:ae:ae:d6:01:1a:84:f1:27:7b:84:de:e2:be:de:
         55:9d:f1:84:3b:d1:7a:b5:70:75:df:b9:71:ed:f2:a1:ea:2b:
         82:12:ba:d7:e9:3e:c6:9e:a9:2f:7b:de:62:24:93:f6:15:19:
         24:4d:58:a0:06:42:a8:9e:47:73:2f:25:91:f0:7d:a9:3c:e4:
         99:dd:07:c3:e4:fc:75:5e:99:92:f4:4c:d8:83:20:81:24:08:
         12:84:8b:45:f7:18:c7:78:66:d2:44:73:17:d1:57:4b:5f:ab:
         b5:ba:52:2e:1b:bb:d4:de:b0:a5:c7:c7:36:4c:db:34:07:3d:
         b6:74:41:d4:d0:ce:d6:c8:aa:48:43:30:72:a4:1a:e5:df:df:
         27:c1:4a:24:44:e9:87:2f:a9:c1:98:43:b7:13:d7:a5:62:79:
         25:65:14:e6:3d:c0:93:e2:46:fc:94:19:d1:8f:c7:90:f4:d4:
         40:68:c2:22:95:6f:20:6e:c4:68:84:61:00:77:8a:b4:88:31:
         64:71:4c:84:6a:65:a4:9c:70:9d:2d:69:68:32:77:e4:e7:40:
         e8:c7:8f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----