Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/4f869c127b510dae90c2eb20f373765604ec0cb1.roa
File:                     4f869c127b510dae90c2eb20f373765604ec0cb1.roa (raw, json)
Hash identifier:          jchgoKKSe71fKSscFySzZDoqWpTgV/VVrsn7WLhANks=
Subject key identifier:   51:F8:F2:DB:59:00:A0:CE:24:02:BF:AB:13:D5:B8:50:55:0C:94:AD
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       1EEEEC
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/4f869c127b510dae90c2eb20f373765604ec0cb1.roa
Signing time:             Fri 20 Jan 2023 15:32:29 +0000
ROA not before:           Thu 19 Jan 2023 15:30:38 +0000
ROA not after:            Mon 20 Jan 2025 15:30:38 +0000
asID:                     28075
IP address blocks:        2803:6604:e000::/35 maxlen: 56

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2027244 (0x1eeeec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: Jan 19 15:30:38 2023 GMT
            Not After : Jan 20 15:30:38 2025 GMT
        Subject: CN=4f869c127b510dae90c2eb20f373765604ec0cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:31:65:75:07:e6:47:2e:e9:45:39:6c:58:42:
                    ae:20:29:84:70:e8:9c:13:d2:5a:01:c1:60:47:0d:
                    9c:a9:2a:b8:23:b2:11:b7:c7:b1:e6:4e:a9:14:18:
                    26:15:3e:6f:71:b4:e0:2c:eb:e9:b8:fb:d2:55:f0:
                    94:38:60:fa:fa:3e:1e:49:25:aa:f6:07:b4:7d:3b:
                    8e:2e:19:b2:85:a8:4a:0e:1e:45:3b:15:d2:4c:f0:
                    89:6d:b6:44:f7:e6:a8:01:ba:e7:28:f6:13:2e:1a:
                    cc:a9:03:c5:af:39:43:43:f0:2a:99:00:da:a2:e7:
                    c4:d3:7f:0d:0a:d3:8e:72:0b:59:09:69:6c:99:08:
                    ae:25:73:08:21:1d:dd:5a:95:4a:de:f1:c8:e8:8c:
                    4b:dc:3b:50:f6:ee:8f:5b:6b:40:ec:6d:41:0f:4d:
                    db:71:0b:ae:ec:af:48:ad:02:b0:a8:34:65:cc:ea:
                    6c:b4:80:ba:3d:b3:67:6c:b1:04:5e:0e:cf:d2:61:
                    9a:e2:67:e0:3d:a2:43:6e:ee:fe:51:47:97:5b:bf:
                    09:9b:5c:31:68:14:06:89:b8:9d:ba:90:d9:c5:fa:
                    2c:98:7b:b2:cc:9b:35:b7:1f:16:02:55:22:ae:36:
                    d4:61:9f:a2:af:a9:60:e8:e7:c0:a3:d4:e8:64:78:
                    ed:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F8:F2:DB:59:00:A0:CE:24:02:BF:AB:13:D5:B8:50:55:0C:94:AD
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/4f869c127b510dae90c2eb20f373765604ec0cb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6604:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         6b:12:86:c4:05:a9:60:f2:56:6d:02:9e:53:e0:df:9f:4c:8e:
         71:eb:57:f1:cf:c4:c9:0b:21:40:9c:4d:a6:85:6e:02:88:fa:
         74:c9:8b:e8:85:fc:ad:1a:92:2e:3d:85:29:65:90:75:69:08:
         b2:f6:ca:27:fc:58:84:13:0a:4f:c5:59:55:b4:c9:b5:f2:57:
         fe:1b:4d:29:ac:33:e9:8e:1d:e5:23:dc:d4:64:38:6f:47:3b:
         11:75:19:fb:15:6d:11:c4:fa:a2:bf:14:48:78:9e:c6:50:c1:
         a3:ab:9c:4d:7d:d8:51:98:aa:63:80:7f:ed:d3:99:df:77:cc:
         aa:9b:16:d6:a4:4d:27:bc:60:ae:7c:94:54:02:9c:5c:be:2c:
         25:d2:61:9a:1a:46:aa:e1:fb:c5:49:c1:b0:95:c4:d1:80:aa:
         60:90:26:7e:63:20:98:2c:04:4c:27:e0:7d:5d:a4:61:7a:de:
         ce:d3:4f:b7:da:74:b7:a9:85:fe:e7:94:49:b5:0c:81:48:62:
         1c:26:7d:15:39:1e:d3:84:43:2a:49:63:62:dd:b9:d6:ac:d1:
         91:3e:cb:12:67:54:12:6e:c3:d1:9b:4a:b4:c6:04:9a:07:60:
         d0:05:2f:1b:e7:18:4f:69:d0:63:8f:2a:ed:aa:d4:04:8d:6e:
         23:5f:5d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----