Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d7366476-c137-47fa-b5f8-704deaa397ff/7917feeffc75d87eb2c44a518db818a86b7d018d.roa
File:                     7917feeffc75d87eb2c44a518db818a86b7d018d.roa (raw, json)
Hash identifier:          0rfEunLfcJfXU6xwiM2N9MTlemmdbcG8ArgxEX4C5Kw=
Subject key identifier:   B6:E8:62:36:5A:47:5A:0B:33:26:C7:ED:F7:61:BD:57:E7:80:61:DB
Certificate issuer:       /CN=734d48b8ac986ac396d20b61f218f6d07558ab25
Certificate serial:       103C29
Authority key identifier: 4E:AD:86:2E:3C:44:EA:A1:CD:E0:84:7C:0D:A0:5E:8B:EB:6E:BE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/734d48b8ac986ac396d20b61f218f6d07558ab25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d7366476-c137-47fa-b5f8-704deaa397ff/7917feeffc75d87eb2c44a518db818a86b7d018d.roa
Signing time:             Sat 20 Nov 2021 16:18:00 +0000
ROA not before:           Fri 10 Sep 2021 03:00:00 +0000
ROA not after:            Sun 10 Sep 2023 03:00:00 +0000
asID:                     269809
IP address blocks:        2803:c4e0::/36 maxlen: 36
                          2803:c4e0:1000::/36 maxlen: 36
                          2803:c4e0:2000::/36 maxlen: 36
                          2803:c4e0:3000::/36 maxlen: 36
                          2803:c4e0:4000::/36 maxlen: 36
                          2803:c4e0:5000::/36 maxlen: 36
                          2803:c4e0:6000::/36 maxlen: 36
                          2803:c4e0:7000::/36 maxlen: 36
                          2803:c4e0:8000::/36 maxlen: 36
                          2803:c4e0:9000::/36 maxlen: 36
                          2803:c4e0:a000::/36 maxlen: 36
                          2803:c4e0:b000::/36 maxlen: 36
                          2803:c4e0:c000::/36 maxlen: 36
                          2803:c4e0:d000::/36 maxlen: 36
                          2803:c4e0:e000::/36 maxlen: 36
                          2803:c4e0:f000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1063977 (0x103c29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734d48b8ac986ac396d20b61f218f6d07558ab25
        Validity
            Not Before: Sep 10 03:00:00 2021 GMT
            Not After : Sep 10 03:00:00 2023 GMT
        Subject: CN=7917feeffc75d87eb2c44a518db818a86b7d018d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f7:d2:c1:ed:7d:fc:c2:3a:5d:19:24:d1:dd:
                    80:0a:68:a0:af:e7:32:0a:5d:91:fb:9a:f3:71:06:
                    40:59:84:66:4f:41:cf:8a:6a:24:fc:bd:e0:20:60:
                    d4:99:e3:a0:e4:84:2e:de:f1:3f:ee:a5:77:ef:e8:
                    d6:5e:6e:e5:e2:96:d5:4a:6b:8e:c8:41:a1:ec:d3:
                    d1:b8:03:ce:99:47:4c:44:05:2b:d3:c4:a4:99:41:
                    38:14:5c:1b:00:71:71:e5:9a:c0:13:7e:94:18:30:
                    51:24:22:de:ee:05:27:fe:3d:ba:ea:1f:59:e8:63:
                    39:5d:66:e1:17:b8:ba:21:d4:48:4a:33:1b:2f:74:
                    89:ad:a7:d5:a6:d7:89:46:1d:9c:af:12:68:ce:1c:
                    6c:cb:82:70:2f:6a:ab:ff:c6:a2:9d:16:d1:23:2f:
                    ca:72:d7:da:b0:ee:25:40:18:37:b6:98:d8:20:39:
                    3d:bd:f9:51:28:8b:a2:01:5a:e7:6c:fe:33:99:f0:
                    c4:a2:b2:e4:dc:1c:1b:10:ff:95:96:82:78:a7:5b:
                    73:7b:ec:b2:b2:cd:a8:c2:95:fb:3f:2a:61:e5:27:
                    53:70:f0:e6:49:7b:39:e1:a7:45:5d:d8:c2:83:c4:
                    2d:7b:7b:ad:c3:fa:92:6e:56:6b:43:06:b2:4b:42:
                    91:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E8:62:36:5A:47:5A:0B:33:26:C7:ED:F7:61:BD:57:E7:80:61:DB
            X509v3 Authority Key Identifier:
                keyid:4E:AD:86:2E:3C:44:EA:A1:CD:E0:84:7C:0D:A0:5E:8B:EB:6E:BE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/734d48b8ac986ac396d20b61f218f6d07558ab25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d7366476-c137-47fa-b5f8-704deaa397ff/7917feeffc75d87eb2c44a518db818a86b7d018d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d7366476-c137-47fa-b5f8-704deaa397ff/734d48b8ac986ac396d20b61f218f6d07558ab25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:f7:6e:16:2a:ec:77:35:77:aa:0a:3f:eb:63:73:35:cd:b9:
         a3:77:c9:c0:89:dc:64:09:cf:66:bd:f0:b2:61:7e:29:77:47:
         0a:69:a4:55:9d:4c:28:76:35:a7:f3:06:4a:91:44:bf:6e:a6:
         f7:40:c3:4e:00:c7:e6:66:67:2e:d5:2f:86:fe:5b:d8:01:2e:
         91:cb:7b:c4:7b:96:2d:5d:ff:66:35:60:18:3d:b7:2a:f9:0e:
         2a:11:ad:c8:a8:85:17:d1:3e:52:bf:fc:9c:b3:8a:9c:02:e3:
         f9:bf:57:e7:1c:54:35:f5:6a:49:ea:fb:c8:72:3c:71:cb:03:
         eb:df:a8:eb:6e:60:2d:7b:0b:cd:da:8c:ac:56:fe:36:d9:e3:
         d3:e6:26:4b:7c:3d:6a:b3:70:e3:90:ac:11:76:c6:32:0c:4b:
         a6:80:08:cd:42:fa:c8:da:d9:2b:fd:43:5e:1c:56:6b:25:68:
         7c:73:38:32:82:9a:a4:0b:58:c3:31:71:26:4a:1f:20:d2:c0:
         db:49:73:f4:a6:46:ac:5b:74:b8:4e:fb:45:bc:d4:69:c2:38:
         a4:bc:58:21:08:85:68:dd:99:6a:a3:73:65:20:7e:41:1a:e9:
         fd:ed:39:99:40:93:5c:69:c4:62:f2:22:0d:d1:fd:f5:de:c3:
         dc:57:86:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----