Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/1c0d301bc19c53d4e7ef102d0435f6874e05fdd6.roa
File:                     1c0d301bc19c53d4e7ef102d0435f6874e05fdd6.roa (raw, json)
Hash identifier:          sgUNJCLy474A4zerhMHEPMsQTizt5Dx5EQJjSPgXRN8=
Subject key identifier:   75:76:03:BE:5A:CF:28:47:80:CE:72:0B:BF:E0:AC:FC:BF:D7:28:E4
Certificate issuer:       /CN=513674dcb37b91021affeddf80ef34c924423627
Certificate serial:       1EE43E
Authority key identifier: 9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/1c0d301bc19c53d4e7ef102d0435f6874e05fdd6.roa
Signing time:             Wed 05 Apr 2023 04:44:17 +0000
ROA not before:           Tue 04 Apr 2023 04:37:04 +0000
ROA not after:            Sat 05 Apr 2025 04:37:04 +0000
asID:                     52392
IP address blocks:        2803:b100::/48 maxlen: 48
                          2803:b100:1::/48 maxlen: 48
                          2803:b100:2::/48 maxlen: 48
                          2803:b100:3::/48 maxlen: 48
                          2803:b100:4::/48 maxlen: 48
                          2803:b100:5::/48 maxlen: 48
                          2803:b100:6::/48 maxlen: 48
                          2803:b100:7::/48 maxlen: 48
                          2803:b100:8::/48 maxlen: 48
                          2803:b100:9::/48 maxlen: 48
                          2803:b100:a::/48 maxlen: 48
                          2803:b100:b::/48 maxlen: 48
                          2803:b100:c::/48 maxlen: 48
                          2803:b100:d::/48 maxlen: 48
                          2803:b100:e::/48 maxlen: 48
                          2803:b100:f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2024510 (0x1ee43e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513674dcb37b91021affeddf80ef34c924423627
        Validity
            Not Before: Apr  4 04:37:04 2023 GMT
            Not After : Apr  5 04:37:04 2025 GMT
        Subject: CN=1c0d301bc19c53d4e7ef102d0435f6874e05fdd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fb:46:d4:1b:03:0d:fc:a3:04:e1:a6:8e:c9:
                    8f:f5:e4:15:33:8f:af:88:9c:a6:3e:96:8c:f3:5d:
                    5a:ea:03:98:8a:7d:0e:9f:95:b9:81:ad:af:14:4f:
                    e0:d6:c2:45:00:66:2f:cf:fe:2a:4e:6f:e0:a8:f2:
                    20:64:4d:b7:38:89:73:af:5d:fa:9f:e3:f8:54:9d:
                    98:ec:2e:ab:b6:1f:c1:4d:93:de:90:db:35:74:20:
                    cb:67:48:2a:eb:de:d3:cc:09:cb:10:93:e9:5e:5e:
                    96:36:4f:83:1e:54:2b:e7:fd:d4:47:e7:5e:29:2b:
                    7c:21:97:ec:bc:01:e1:37:bd:48:e6:bf:66:40:f1:
                    77:8c:b8:46:31:99:17:6a:c8:55:34:5c:50:af:88:
                    c3:58:85:23:b3:7c:15:05:5f:fe:19:ba:a5:50:b6:
                    76:c2:88:45:eb:ea:b5:32:d5:7a:8c:cc:ec:f1:4a:
                    25:71:93:3f:08:b4:78:a9:25:e1:67:c4:e3:46:3a:
                    af:5a:2a:d1:89:97:53:83:51:af:09:cd:be:44:1e:
                    c9:cb:4a:e2:95:6a:6e:6d:bd:d6:f3:76:9d:de:f2:
                    27:6d:2c:cd:e0:47:db:55:d5:dd:e6:aa:97:86:a9:
                    9b:11:88:b4:87:6a:f3:4a:ae:b9:76:18:42:4f:0f:
                    01:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:76:03:BE:5A:CF:28:47:80:CE:72:0B:BF:E0:AC:FC:BF:D7:28:E4
            X509v3 Authority Key Identifier:
                keyid:9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/1c0d301bc19c53d4e7ef102d0435f6874e05fdd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/513674dcb37b91021affeddf80ef34c924423627.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b100::/44

    Signature Algorithm: sha256WithRSAEncryption
         5b:78:60:04:b8:6e:8f:ce:8e:72:0f:45:55:be:0c:3f:b6:b7:
         4c:4f:84:6a:63:ae:f1:08:dc:12:5c:7c:5f:d3:0b:4d:90:bd:
         94:33:20:5a:9d:94:ac:eb:41:57:ec:a8:eb:f1:b3:22:a0:c3:
         77:f9:25:30:6b:a7:8f:ef:df:3d:db:c9:ea:0e:d3:da:56:9e:
         89:ad:69:d4:67:da:60:83:a8:b2:5b:ca:64:7c:96:67:b8:6c:
         95:bf:07:34:cc:5f:7c:38:b3:dc:e6:d9:9f:09:0b:09:3c:eb:
         08:f6:10:c3:11:63:e4:5f:8f:f2:de:69:45:74:6d:74:c7:b7:
         32:26:3b:e9:4b:ed:cd:45:c4:6b:38:fc:b2:fb:0f:94:3b:7e:
         c6:b2:e8:58:a0:72:92:4f:78:3d:19:a9:4c:d6:cc:10:cb:f9:
         b0:f3:4f:e8:e1:b3:b3:3f:a2:9b:d7:39:6b:0d:38:c5:b9:93:
         10:a4:27:11:25:06:c5:c4:43:b6:26:a5:37:db:a9:21:4e:79:
         cf:9f:49:4e:f8:80:6b:89:b6:a1:ed:69:4a:b3:bb:b3:d0:12:
         cd:5d:60:8f:37:06:f6:42:f3:2a:17:27:48:f7:45:a6:b5:fb:
         eb:ec:02:6c:00:e0:82:43:41:d0:24:00:d9:9f:61:ed:8c:e1:
         e9:8c:33:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----