Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c69b47ad-ec13-43a2-942f-440814cce3b2/93d2e10b7dfae6fb819819d2892927313515cca6.roa
File:                     93d2e10b7dfae6fb819819d2892927313515cca6.roa (raw, json)
Hash identifier:          OLCyYp5OoLuI1jhhAefIs89oN2lSMS5zrczP1A4WiNw=
Subject key identifier:   DF:B6:57:15:2B:31:33:83:15:F7:9D:CE:C6:A8:E4:00:C7:8F:D0:28
Certificate issuer:       /CN=4de74a75ea4e5b0519dd505dc0655dddc3ec7bba
Certificate serial:       0226
Authority key identifier: F3:44:B9:00:05:CC:73:6D:A5:FC:7C:D3:2C:45:CB:CC:F2:1E:4F:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4de74a75ea4e5b0519dd505dc0655dddc3ec7bba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c69b47ad-ec13-43a2-942f-440814cce3b2/93d2e10b7dfae6fb819819d2892927313515cca6.roa
Signing time:             Tue 14 Mar 2023 17:17:34 +0000
ROA not before:           Mon 13 Mar 2023 17:17:00 +0000
ROA not after:            Fri 14 Mar 2025 17:17:00 +0000
asID:                     272075
IP address blocks:        2803:2b10::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de74a75ea4e5b0519dd505dc0655dddc3ec7bba
        Validity
            Not Before: Mar 13 17:17:00 2023 GMT
            Not After : Mar 14 17:17:00 2025 GMT
        Subject: CN=93d2e10b7dfae6fb819819d2892927313515cca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:67:87:8a:e9:2a:18:43:46:ae:f0:7a:cb:7e:
                    ec:13:48:bd:8c:53:e4:26:5e:fc:24:54:32:fe:f9:
                    1c:74:5a:a5:78:70:47:16:fb:7b:83:14:4d:d7:f0:
                    a5:7a:d1:ba:31:8c:71:4c:79:02:26:c9:df:9a:16:
                    75:dd:54:5e:fa:47:04:48:91:62:91:0f:d8:6e:4e:
                    3e:a1:4c:b8:b3:d8:08:e1:1f:24:b4:13:78:0c:9f:
                    b3:f2:ff:d6:e6:44:b3:cd:22:e1:6c:08:23:97:8f:
                    f8:c3:0b:ac:45:d7:31:3e:3f:fc:3a:cb:72:d2:5f:
                    cc:9c:c8:62:4f:1c:d3:88:20:ed:36:36:8e:1b:3c:
                    e4:ef:24:db:b8:53:16:fa:97:25:e0:14:a9:2e:e3:
                    ba:86:bb:14:a4:5c:76:3a:8d:d7:d7:6e:fa:ee:f4:
                    54:1c:8d:48:7c:fc:71:47:80:b4:9b:bf:fa:ab:54:
                    71:a5:65:62:3a:6d:fa:32:5d:ab:73:2f:2e:97:88:
                    23:fd:49:5e:3b:0a:9d:d6:90:0d:40:b4:2d:99:c2:
                    12:4e:11:a5:d6:95:08:4d:4d:93:e8:6c:cb:68:e5:
                    77:4c:ca:2c:a0:2e:b6:87:b2:c7:81:7d:36:3b:f5:
                    75:3a:2b:66:39:83:f2:7d:20:a1:13:51:57:82:d9:
                    15:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B6:57:15:2B:31:33:83:15:F7:9D:CE:C6:A8:E4:00:C7:8F:D0:28
            X509v3 Authority Key Identifier:
                keyid:F3:44:B9:00:05:CC:73:6D:A5:FC:7C:D3:2C:45:CB:CC:F2:1E:4F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4de74a75ea4e5b0519dd505dc0655dddc3ec7bba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c69b47ad-ec13-43a2-942f-440814cce3b2/93d2e10b7dfae6fb819819d2892927313515cca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c69b47ad-ec13-43a2-942f-440814cce3b2/4de74a75ea4e5b0519dd505dc0655dddc3ec7bba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:21:df:26:45:7e:b5:b6:17:a9:0d:5a:05:30:56:d7:7b:6e:
         4b:65:ce:d9:93:54:ea:13:a0:c3:86:30:20:85:89:7c:58:10:
         35:19:f7:21:4d:71:0a:22:c4:b0:7b:c3:ef:b1:e8:bb:5d:ce:
         73:cb:ec:d9:6d:2b:ec:af:79:be:5d:b0:6f:f9:e0:23:73:d2:
         f5:c7:79:39:67:01:37:2a:90:7c:d7:38:61:ce:a1:cf:22:96:
         f6:eb:b7:b0:69:28:14:8c:4a:f1:4b:81:bc:63:60:6e:78:34:
         b1:0d:df:35:9d:5e:04:97:44:32:34:04:b3:62:38:73:fb:28:
         f2:30:3e:03:53:e7:d2:3c:1d:86:ac:7d:a9:a2:3b:a1:11:81:
         94:f6:dc:25:3a:cd:7b:01:0e:16:7d:0b:01:92:cb:48:03:0a:
         f1:f7:49:7c:a1:48:b3:3f:4d:c2:51:45:3c:d7:2a:c9:c1:5b:
         69:37:49:85:f0:00:94:43:db:1d:77:ff:f4:7b:b8:80:06:fd:
         64:16:4e:1f:5c:4f:e4:46:82:d1:ea:ec:f8:a3:d5:29:1f:34:
         90:e7:f3:e9:f0:8d:9f:af:da:e7:25:89:04:84:3b:6f:00:87:
         3f:ff:5d:74:c4:e4:71:0a:5c:f1:95:b5:dc:be:cd:ca:5a:eb:
         9d:7f:2c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----