Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ea4125e9-8dcd-4a52-9d05-dbf603623346/293bdc7183b9b28498ae997211533823946533a6.roa
File:                     293bdc7183b9b28498ae997211533823946533a6.roa (raw, json)
Hash identifier:          mykUf1NaFJf+av3yb3HWcBRDibqhpCteX3XU6kL4cAQ=
Subject key identifier:   3F:F9:85:11:5A:1B:11:EE:6C:27:B6:32:D4:5E:29:D4:E0:14:38:C5
Certificate issuer:       /CN=8e4c3ee07149aed63c2b3f3d9b54dcf020c26262
Certificate serial:       0127
Authority key identifier: 27:E3:88:63:2E:D5:E8:EF:F2:C8:59:22:8D:F2:94:65:47:35:35:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e4c3ee07149aed63c2b3f3d9b54dcf020c26262.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ea4125e9-8dcd-4a52-9d05-dbf603623346/293bdc7183b9b28498ae997211533823946533a6.roa
Signing time:             Sun 07 Aug 2022 21:57:30 +0000
ROA not before:           Sun 07 Aug 2022 21:49:43 +0000
ROA not after:            Wed 07 Aug 2024 21:49:43 +0000
asID:                     272822
IP address blocks:        2803:1490::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e4c3ee07149aed63c2b3f3d9b54dcf020c26262
        Validity
            Not Before: Aug  7 21:49:43 2022 GMT
            Not After : Aug  7 21:49:43 2024 GMT
        Subject: CN=293bdc7183b9b28498ae997211533823946533a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:99:69:f6:e3:d3:1b:18:f3:95:e0:8c:b4:fe:
                    e6:0f:18:86:04:59:5b:8d:4d:c0:c0:a0:aa:b0:0c:
                    18:48:10:f2:cc:d9:33:6a:9d:c4:a8:8e:c1:56:b7:
                    11:44:5c:54:62:7b:b6:c7:51:8e:af:3c:1a:5e:8d:
                    4c:a7:ca:e6:46:78:a2:06:c8:05:b8:18:67:26:3f:
                    6c:50:16:5b:de:80:75:ab:06:22:6a:99:e3:74:41:
                    e3:2c:c6:c9:53:c5:ff:39:c4:0a:92:db:6f:4d:3b:
                    65:05:cc:8a:5d:1e:7c:d0:d5:3a:b2:4a:fb:06:57:
                    26:e7:23:3f:d6:2a:a8:80:b5:17:99:cc:e8:d1:05:
                    ef:a1:92:45:f5:4e:4f:80:40:ed:dd:e2:07:d2:71:
                    9d:d1:a6:f2:dd:74:8c:00:8c:c7:29:ef:97:7b:c9:
                    cb:9a:17:f4:7f:27:f9:51:28:19:ce:10:af:36:bb:
                    1d:5d:7e:04:48:97:e7:41:27:d1:15:7f:8b:76:b4:
                    cb:96:2a:92:da:9e:3b:df:b5:02:0b:87:d6:f5:4b:
                    68:89:d3:d6:2a:ee:6e:f2:27:09:ea:8d:ea:59:8e:
                    e0:cc:a9:f4:30:7e:a9:eb:d7:77:d7:08:0a:0a:3f:
                    ec:46:5a:93:36:60:c8:43:53:30:91:30:f6:b3:3a:
                    77:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F9:85:11:5A:1B:11:EE:6C:27:B6:32:D4:5E:29:D4:E0:14:38:C5
            X509v3 Authority Key Identifier:
                keyid:27:E3:88:63:2E:D5:E8:EF:F2:C8:59:22:8D:F2:94:65:47:35:35:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e4c3ee07149aed63c2b3f3d9b54dcf020c26262.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ea4125e9-8dcd-4a52-9d05-dbf603623346/293bdc7183b9b28498ae997211533823946533a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ea4125e9-8dcd-4a52-9d05-dbf603623346/8e4c3ee07149aed63c2b3f3d9b54dcf020c26262.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1490::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:f1:49:9b:d9:2b:44:10:f8:de:b7:33:f6:12:d2:40:72:d0:
         f1:f1:58:ce:07:d5:80:8f:f3:3b:e4:0f:83:74:25:7e:5f:22:
         5a:7c:62:02:7f:0e:5d:9e:4f:16:d0:84:db:0e:0d:01:82:48:
         85:34:71:a0:3c:d7:d1:ff:ae:0a:bd:26:f8:63:ff:44:d5:21:
         ce:bf:c3:d7:ab:4f:fc:63:80:e7:f8:07:17:c7:fa:28:cd:1d:
         33:a0:b9:11:9e:94:80:6d:7a:de:4a:8b:47:9e:48:d6:e4:5a:
         61:c6:8a:c8:e6:48:48:37:02:3b:04:36:50:7f:60:d2:e8:94:
         41:8c:84:a7:87:08:3e:b1:d9:f7:7a:c4:82:ba:ce:16:14:6b:
         e4:49:04:4a:a4:e5:33:90:18:fb:26:69:e9:ec:94:2a:8b:b7:
         e3:16:dd:95:e7:43:ed:4a:23:cf:58:ab:23:af:bf:2e:16:b7:
         30:ad:20:bb:60:21:2f:ec:e3:a8:0a:1e:f7:79:b8:14:6b:b4:
         84:93:f1:b2:9a:cc:13:e9:75:9c:72:24:f5:62:c7:ee:a8:0a:
         75:58:5f:f1:9d:e3:96:27:46:c5:80:d4:c5:0f:f4:4b:b9:62:
         9a:8a:f5:e2:b2:00:ac:83:a4:c7:b9:9e:e8:10:99:b5:a1:2c:
         47:49:df:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----