Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c854cbf0-2f63-41ef-aca7-548b22bc0b72/a76741e543cb0771ddc6ae9816493a9a3c673609.roa
File:                     a76741e543cb0771ddc6ae9816493a9a3c673609.roa (raw, json)
Hash identifier:          D0WoKgxnYgLn/jdlAWR8V3ccLkfVJ6rJiXFr1Sg11y4=
Subject key identifier:   40:0B:00:F8:3D:70:8D:10:B1:D0:C4:B5:6B:8A:50:F3:33:AC:97:64
Certificate issuer:       /CN=c30a806d41d84ec3e49524fa586db653ea1cd745
Certificate serial:       02AC56
Authority key identifier: F9:13:75:6A:9F:70:6C:CC:EA:09:46:66:9D:FA:B3:C3:86:67:DC:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c30a806d41d84ec3e49524fa586db653ea1cd745.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c854cbf0-2f63-41ef-aca7-548b22bc0b72/a76741e543cb0771ddc6ae9816493a9a3c673609.roa
Signing time:             Fri 04 Aug 2023 16:10:47 +0000
ROA not before:           Thu 03 Aug 2023 16:10:47 +0000
ROA not after:            Mon 04 Aug 2025 16:10:47 +0000
asID:                     265844
IP address blocks:        2803:b220::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175190 (0x2ac56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c30a806d41d84ec3e49524fa586db653ea1cd745
        Validity
            Not Before: Aug  3 16:10:47 2023 GMT
            Not After : Aug  4 16:10:47 2025 GMT
        Subject: CN=a76741e543cb0771ddc6ae9816493a9a3c673609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ba:f0:43:07:7d:db:48:2e:65:a7:49:b2:ad:
                    dc:c8:a1:2d:65:ec:6b:de:e6:e1:49:f0:f6:9a:7a:
                    d5:bf:80:c0:f6:1c:50:10:40:6e:22:20:d5:65:24:
                    7c:77:50:4c:fe:a8:f0:a8:6b:0a:a6:70:e9:2a:8f:
                    90:1c:d3:67:af:c3:51:c6:5a:dc:b3:7f:1b:7a:ee:
                    da:5a:f5:14:46:cb:52:d4:84:3e:a1:f3:a4:9b:18:
                    01:85:00:00:0b:08:77:00:15:24:19:44:0b:8e:23:
                    c9:62:35:9a:f5:74:6a:2d:88:61:43:6a:b4:70:28:
                    c7:63:3e:40:ce:34:9c:58:1f:40:73:c2:1a:bc:f9:
                    aa:1a:3e:3e:d0:4d:5d:a5:28:11:6b:b9:13:72:8c:
                    49:39:14:21:68:28:36:69:46:3c:5d:bf:bf:b3:7d:
                    ab:13:ae:c1:cf:0f:90:1b:a0:f7:b7:dc:d1:36:67:
                    1c:6c:e8:d6:2c:76:32:59:73:d6:e9:e0:43:44:d6:
                    32:50:06:c7:eb:ec:16:8a:2a:96:bd:c8:14:2d:41:
                    27:3c:0c:18:8a:7d:c5:d0:6a:ea:01:1d:fb:d4:26:
                    16:22:25:1a:bd:76:93:67:57:c7:de:4b:61:2f:e9:
                    91:f5:29:07:1e:b7:d4:d5:11:bc:25:58:52:a0:ab:
                    5b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0B:00:F8:3D:70:8D:10:B1:D0:C4:B5:6B:8A:50:F3:33:AC:97:64
            X509v3 Authority Key Identifier:
                keyid:F9:13:75:6A:9F:70:6C:CC:EA:09:46:66:9D:FA:B3:C3:86:67:DC:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c30a806d41d84ec3e49524fa586db653ea1cd745.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c854cbf0-2f63-41ef-aca7-548b22bc0b72/a76741e543cb0771ddc6ae9816493a9a3c673609.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c854cbf0-2f63-41ef-aca7-548b22bc0b72/c30a806d41d84ec3e49524fa586db653ea1cd745.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b220::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:07:06:e0:56:b6:b8:c9:02:ae:75:90:21:ca:be:f4:80:5c:
         b8:9c:d5:e6:89:12:06:24:1d:7a:c3:30:5d:b1:c6:75:1f:0e:
         1e:e3:f4:84:3b:88:7f:d7:a2:83:68:8d:7f:7d:5c:81:9b:40:
         c8:18:9c:af:9f:e6:0a:8e:73:8b:e1:38:1d:a5:4c:f2:09:39:
         6c:2d:d8:0c:43:c4:fd:05:5a:e1:64:fd:4b:e9:a2:ec:39:15:
         52:78:7d:28:8a:31:1c:1a:78:a7:f8:a0:65:06:de:54:d6:b1:
         92:d5:20:cb:8f:67:e2:69:ea:01:92:f5:ed:85:ce:5e:f1:51:
         fc:c3:68:27:a6:97:02:bb:77:25:56:1e:44:85:84:e7:28:0e:
         7e:c7:da:97:8a:5d:0a:f0:b4:35:78:68:f6:63:51:5f:db:7c:
         f4:78:69:8c:76:89:70:63:c9:c4:43:ac:8f:2b:c3:63:be:72:
         d4:34:80:3c:cc:bf:90:cd:0f:f9:66:1f:d4:61:05:38:70:a5:
         2a:7a:9e:98:f4:ad:db:16:84:a2:ce:af:49:ca:12:45:e8:4c:
         19:0a:6e:c1:11:20:bc:1b:c8:65:bc:1d:b6:02:ef:27:81:41:
         48:29:c8:53:d4:0e:76:4d:6f:60:53:27:58:78:0c:01:0a:dd:
         48:77:87:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----