Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/b7390929abbf3077c85d66980262e8217c736ba4.roa
File:                     b7390929abbf3077c85d66980262e8217c736ba4.roa (raw, json)
Hash identifier:          HR+yh62O1Mq/f1IpN0HYJlQIfD2nyRQOndeX0jhTo/s=
Subject key identifier:   43:B2:C9:4E:CF:E6:4A:B6:EC:76:FC:4B:A1:EF:20:05:01:35:04:C5
Certificate issuer:       /CN=88d44f0918975636ffb95bc864d2ead8021849e5
Certificate serial:       1376E0
Authority key identifier: 60:5D:91:FC:06:B0:3E:4C:60:D5:39:0D:5E:08:E0:2A:64:C2:A8:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d44f0918975636ffb95bc864d2ead8021849e5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/b7390929abbf3077c85d66980262e8217c736ba4.roa
Signing time:             Thu 02 Dec 2021 17:35:12 +0000
ROA not before:           Wed 01 Dec 2021 03:00:00 +0000
ROA not after:            Fri 01 Dec 2023 03:00:00 +0000
asID:                     262202
IP address blocks:        2803:b800::/32 maxlen: 64
                          2803:b800:c000::/34 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1275616 (0x1376e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d44f0918975636ffb95bc864d2ead8021849e5
        Validity
            Not Before: Dec  1 03:00:00 2021 GMT
            Not After : Dec  1 03:00:00 2023 GMT
        Subject: CN=b7390929abbf3077c85d66980262e8217c736ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:71:fc:7d:ec:37:21:b9:94:f7:59:31:d8:09:
                    36:fc:62:36:12:90:bf:2d:2c:66:90:a2:5b:d1:ed:
                    41:48:bd:5b:b7:64:93:33:39:aa:91:43:47:dd:24:
                    e6:0c:a4:55:c8:a3:f4:ca:27:19:6d:57:4e:c7:6b:
                    6d:ed:0d:e5:38:03:8f:be:d9:dd:05:3c:f0:c2:2b:
                    57:48:55:b0:1a:70:9d:e3:4a:e0:51:47:e8:4f:83:
                    a8:6e:98:05:7b:61:19:c8:eb:7e:d6:f4:a9:63:53:
                    8d:e4:a4:55:b0:1d:b6:66:c8:eb:5b:78:be:9b:8f:
                    a2:a9:14:9d:a0:ef:2e:c3:f0:ca:d0:57:1d:96:da:
                    29:45:90:97:b5:b2:f5:51:b8:f3:41:93:31:8f:c2:
                    30:79:45:68:f9:a9:f7:c4:cc:f0:1e:2e:e4:1a:76:
                    ba:87:2b:3e:0b:25:38:90:3b:ca:ce:09:58:2b:f6:
                    59:aa:7b:bc:c2:44:29:8a:da:23:05:d4:ae:f1:a4:
                    5f:28:45:3b:ee:66:5b:db:26:68:7e:21:04:83:f4:
                    da:a6:79:25:b6:34:e2:b5:f8:4d:02:e0:81:79:ca:
                    a3:f5:f5:8a:d5:0f:48:48:71:96:8d:ca:0f:64:06:
                    16:f8:92:0b:a3:c4:ef:50:f7:95:75:3b:3b:79:23:
                    08:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B2:C9:4E:CF:E6:4A:B6:EC:76:FC:4B:A1:EF:20:05:01:35:04:C5
            X509v3 Authority Key Identifier:
                keyid:60:5D:91:FC:06:B0:3E:4C:60:D5:39:0D:5E:08:E0:2A:64:C2:A8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d44f0918975636ffb95bc864d2ead8021849e5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/b7390929abbf3077c85d66980262e8217c736ba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/88d44f0918975636ffb95bc864d2ead8021849e5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b800::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:25:9b:58:c8:f9:2b:8c:48:8e:b0:b7:6a:fb:98:30:66:41:
         e2:ae:0f:d4:b7:65:be:2b:ff:cf:99:89:f1:aa:c5:c4:f3:95:
         ff:eb:a3:4a:5c:06:f6:8d:d2:a0:1d:cb:18:28:39:cf:8e:fd:
         1a:fb:5a:92:da:2a:f2:e8:d8:a5:45:4d:5e:31:2b:c8:93:a1:
         c0:81:2d:0c:56:76:b4:54:80:c5:19:b5:2c:b3:a3:ba:41:a8:
         00:6c:0f:dc:1f:df:8f:f3:72:8e:26:7a:38:5e:06:71:d5:80:
         45:55:6d:8a:cd:7b:cf:be:52:b9:3c:0f:44:dd:ea:75:de:a2:
         d8:5a:57:6d:3a:1b:8e:9a:f3:7e:50:9d:1a:0b:46:5c:e5:df:
         a7:e9:5e:b9:d1:1d:4f:84:db:20:2c:9e:8f:76:1a:0d:c5:a8:
         59:ce:5a:7e:1c:fd:dd:42:aa:3b:3a:e5:1e:e3:6b:54:a5:06:
         98:58:3d:ab:73:bf:05:26:e5:1f:3d:f1:34:4d:4f:83:9e:31:
         7a:d1:ec:f1:38:79:b8:67:f4:63:05:4d:04:4d:e2:44:4d:37:
         2b:1b:23:b7:da:f4:4f:0d:27:ce:fc:85:30:ce:33:4e:b2:10:
         a0:c5:12:13:2a:34:c2:da:74:32:b7:87:c2:39:14:54:82:47:
         38:7c:cb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----