Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/fdddfc64f2fe3621168a0863d3aec67c8732dd55.roa
File:                     fdddfc64f2fe3621168a0863d3aec67c8732dd55.roa (raw, json)
Hash identifier:          THbU28L3FWR23yixYyxUeueIR/kXADV4zl0FAtt8O78=
Subject key identifier:   7C:5E:48:EE:37:8F:34:84:CE:6B:46:51:5D:97:19:9D:91:32:22:F7
Certificate issuer:       /CN=d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6
Certificate serial:       17ED9E
Authority key identifier: 22:50:E4:A6:69:36:41:5B:4C:FC:C1:F1:75:8D:DA:B9:44:09:99:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/fdddfc64f2fe3621168a0863d3aec67c8732dd55.roa
Signing time:             Tue 14 Feb 2023 20:06:26 +0000
ROA not before:           Mon 13 Feb 2023 20:05:55 +0000
ROA not after:            Fri 14 Feb 2025 20:05:55 +0000
asID:                     270051
IP address blocks:        2803:4de0::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1568158 (0x17ed9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6
        Validity
            Not Before: Feb 13 20:05:55 2023 GMT
            Not After : Feb 14 20:05:55 2025 GMT
        Subject: CN=fdddfc64f2fe3621168a0863d3aec67c8732dd55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c8:89:c1:ff:a4:10:06:e4:88:cf:92:9c:b2:
                    0a:8a:7a:f3:8d:fb:3a:10:fb:cc:c7:e8:b7:c2:74:
                    a8:e3:0a:6f:91:da:8c:d5:b4:d4:fb:d7:49:81:ab:
                    0e:4f:ce:7b:f6:bb:99:ca:29:5f:00:f2:b9:4e:de:
                    3b:fb:33:cb:a6:ff:08:b8:13:93:61:b1:cb:0c:b9:
                    4c:61:2d:8b:00:e6:f2:00:3c:f9:d6:48:d7:d7:38:
                    f1:06:46:db:5c:a2:5b:d9:b3:7b:8a:3c:fe:8d:86:
                    73:f3:40:72:c7:09:02:43:b1:f7:f3:43:b5:1c:ae:
                    b1:31:57:94:f2:9b:82:c0:b5:95:c0:6e:19:4f:70:
                    9a:ea:17:46:84:c3:b8:f5:23:65:14:25:4b:6b:40:
                    b1:87:d3:7a:1f:61:b5:59:b4:82:df:27:aa:6f:9d:
                    16:2f:bf:1d:ca:08:ea:af:ee:67:dc:84:5d:35:ec:
                    28:c2:e6:7a:08:b1:1e:07:2a:72:dd:5d:df:a5:21:
                    ab:8b:d5:6f:34:f0:a3:e2:6f:23:1f:29:d6:5d:77:
                    3f:93:c9:d9:78:46:24:8c:8f:57:65:8d:05:64:a2:
                    b4:e7:8d:95:bd:3c:06:97:0c:4f:41:d8:22:8b:82:
                    5f:cc:7f:47:e0:ef:0e:ad:ae:95:86:ef:eb:73:dc:
                    db:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5E:48:EE:37:8F:34:84:CE:6B:46:51:5D:97:19:9D:91:32:22:F7
            X509v3 Authority Key Identifier:
                keyid:22:50:E4:A6:69:36:41:5B:4C:FC:C1:F1:75:8D:DA:B9:44:09:99:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/fdddfc64f2fe3621168a0863d3aec67c8732dd55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:e6:40:ae:38:bd:12:aa:67:43:f5:3e:84:f5:1b:fc:0b:62:
         e1:30:20:79:6b:47:be:c1:3a:90:3b:c8:e4:b0:25:be:7f:52:
         72:ef:89:e2:25:c3:af:66:5c:1e:c6:dd:37:8f:08:30:dc:50:
         c1:42:1b:03:16:e9:a1:a0:47:b2:8d:c6:74:37:2c:5c:27:33:
         ef:6f:a8:7c:dc:66:16:4b:97:95:ec:1c:80:f8:1b:0d:7a:f2:
         3b:57:d6:66:a5:e3:5c:14:81:38:b2:86:6c:9b:b8:9e:de:1a:
         17:42:b8:07:21:4b:e6:a8:3e:2d:c4:0d:4a:66:00:61:54:cf:
         f3:a4:5f:45:eb:33:36:27:fa:17:07:7d:62:77:36:e0:bb:61:
         38:79:67:44:5f:f2:a7:b5:fb:12:49:0b:5c:4d:fa:86:cb:d4:
         fe:ac:5a:ea:75:a4:ef:0f:de:cc:65:fc:b8:f3:8c:28:33:a6:
         8b:50:68:c9:95:96:c2:24:8d:84:55:66:05:ff:76:28:cc:e7:
         f2:fb:ad:eb:11:37:9c:7a:4d:46:02:cf:4f:2e:72:41:1a:51:
         2c:87:37:ce:f4:a5:9f:2d:b8:29:5f:68:07:cc:28:8d:b7:80:
         1e:a6:9e:86:e0:41:58:44:0c:40:08:24:09:74:04:b7:5d:cb:
         8b:f4:a3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----