Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f35fbebe-ccb3-4c00-bde9-3957500e1f6a/b097a645edbbb8f30c5b063c260f397487a816b4.roa
File:                     b097a645edbbb8f30c5b063c260f397487a816b4.roa (raw, json)
Hash identifier:          biCDfH3XVhlQ2HAZfAPjiBh0qbmq8J9c0qiqWTnvQXk=
Subject key identifier:   23:27:ED:BB:38:B7:7B:F3:0E:F3:23:37:04:71:53:4C:18:54:24:4C
Certificate issuer:       /CN=8f78ced5e1440862c8f27e301ae2006bffa9884c
Certificate serial:       74A7
Authority key identifier: 43:97:A0:3B:DD:2B:B0:68:1E:99:B3:C6:17:E8:BE:78:6C:78:BE:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f78ced5e1440862c8f27e301ae2006bffa9884c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f35fbebe-ccb3-4c00-bde9-3957500e1f6a/b097a645edbbb8f30c5b063c260f397487a816b4.roa
Signing time:             Mon 05 Jun 2023 20:22:20 +0000
ROA not before:           Sun 04 Jun 2023 20:22:20 +0000
ROA not after:            Thu 05 Jun 2025 20:22:20 +0000
asID:                     272936
IP address blocks:        2803:d190::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29863 (0x74a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f78ced5e1440862c8f27e301ae2006bffa9884c
        Validity
            Not Before: Jun  4 20:22:20 2023 GMT
            Not After : Jun  5 20:22:20 2025 GMT
        Subject: CN=b097a645edbbb8f30c5b063c260f397487a816b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7b:28:8d:b1:b7:32:ab:a2:22:01:68:d7:1a:
                    9a:e2:50:6b:84:f7:22:53:df:1a:63:88:c0:20:8c:
                    bd:1e:70:a9:a4:76:d5:89:6f:68:ef:ce:16:29:a0:
                    5a:27:f6:3b:73:69:b9:04:27:4a:81:5b:b6:b8:04:
                    88:cb:b9:b4:c3:a5:1f:71:0a:25:f7:28:2b:cc:1f:
                    8a:a1:60:39:42:11:e0:12:bc:95:17:08:ac:f8:2d:
                    b2:3e:a7:ca:1c:92:78:50:74:cb:a4:1d:ee:d2:1a:
                    88:03:93:3f:17:7b:9c:88:71:02:45:64:6b:92:38:
                    79:9b:6a:6d:9d:15:4f:e6:0a:05:f8:e7:81:5a:e2:
                    1d:a0:87:ed:48:e3:e9:06:b5:ba:68:06:bb:28:a8:
                    cf:7f:e7:dd:06:40:80:f1:fa:1a:af:9e:a5:b0:41:
                    37:1d:a8:7f:37:f5:fc:82:8c:87:77:09:80:19:a1:
                    40:97:48:73:4c:87:b3:fd:df:18:90:4f:dd:db:d0:
                    56:f5:f6:dc:43:a6:c6:3b:f2:a5:2a:2b:9a:bf:61:
                    e2:20:cf:b0:ea:f4:78:7a:62:04:89:18:5e:f6:93:
                    46:d0:a7:13:a4:ba:fc:93:a9:b6:76:22:9e:ab:cf:
                    9f:eb:45:59:a0:29:82:86:9c:52:6c:45:59:c1:b7:
                    35:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:27:ED:BB:38:B7:7B:F3:0E:F3:23:37:04:71:53:4C:18:54:24:4C
            X509v3 Authority Key Identifier:
                keyid:43:97:A0:3B:DD:2B:B0:68:1E:99:B3:C6:17:E8:BE:78:6C:78:BE:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f78ced5e1440862c8f27e301ae2006bffa9884c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f35fbebe-ccb3-4c00-bde9-3957500e1f6a/b097a645edbbb8f30c5b063c260f397487a816b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f35fbebe-ccb3-4c00-bde9-3957500e1f6a/8f78ced5e1440862c8f27e301ae2006bffa9884c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d190::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:47:ad:ea:22:f7:9b:90:28:04:fd:d7:5a:8a:2c:c4:3d:a0:
         93:db:c7:23:9e:d4:a3:79:75:b9:1e:f2:7b:98:2a:5a:6d:14:
         42:45:9d:9e:af:40:d7:d6:f2:14:68:60:e0:d8:23:80:4f:98:
         fd:13:73:0c:cb:26:6f:15:4e:6b:9a:67:9b:6d:19:b2:7c:e3:
         27:a8:9a:9f:fa:d3:8a:78:10:ed:9f:27:f4:3a:58:03:30:91:
         02:a7:c8:46:4c:8c:cb:4c:e8:cb:0a:e9:2c:2b:e0:34:6b:6a:
         2f:3c:d5:63:40:bf:ac:ce:30:c1:d1:56:02:1c:ad:50:2c:8d:
         2e:ee:dd:e3:0e:86:09:c2:1f:ef:d3:91:44:15:bf:39:f8:0e:
         6b:b0:12:82:f7:84:0f:7e:6b:90:0d:38:35:b9:89:d5:5a:a2:
         0a:59:e9:b5:b4:01:dc:f2:94:4d:29:3a:60:72:3d:6e:d3:6f:
         dc:9c:51:7c:b1:cc:33:1d:16:02:ae:fe:f2:8a:1f:ae:ae:9b:
         10:72:07:07:8d:5a:be:be:0f:81:15:5f:0f:69:0e:b6:44:3c:
         dd:b4:30:f6:ef:c0:3e:e0:2c:82:e3:90:9c:30:aa:a3:aa:06:
         bf:d7:18:11:a7:6f:0a:c8:96:15:31:01:92:e7:45:6e:be:3c:
         2d:15:45:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----