Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d1638494-0b44-45d1-a0b4-f4cc475cb184/297a261279b553ada7896c976056b1e0567a1cd4.roa
File:                     297a261279b553ada7896c976056b1e0567a1cd4.roa (raw, json)
Hash identifier:          3TwKH5AUaKlqk2HWQLaSGnNvzQcNXQFcFVi0qlve0Bo=
Subject key identifier:   E1:F5:D2:F2:B8:C5:B5:1C:14:6A:C1:74:ED:5B:D4:79:B4:B6:FB:12
Certificate issuer:       /CN=bcde2a88e5908b9d297ac64848a8a9e438dc5fcb
Certificate serial:       01E69A
Authority key identifier: 7C:E5:84:0E:13:2C:31:86:BD:04:D6:C7:CE:BC:C5:1A:1D:EC:2D:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcde2a88e5908b9d297ac64848a8a9e438dc5fcb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d1638494-0b44-45d1-a0b4-f4cc475cb184/297a261279b553ada7896c976056b1e0567a1cd4.roa
Signing time:             Tue 22 Aug 2023 22:58:35 +0000
ROA not before:           Mon 21 Aug 2023 22:58:34 +0000
ROA not after:            Fri 22 Aug 2025 22:58:34 +0000
asID:                     267724
IP address blocks:        2803:85a0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124570 (0x1e69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcde2a88e5908b9d297ac64848a8a9e438dc5fcb
        Validity
            Not Before: Aug 21 22:58:34 2023 GMT
            Not After : Aug 22 22:58:34 2025 GMT
        Subject: CN=297a261279b553ada7896c976056b1e0567a1cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:33:3f:3d:28:75:4c:47:60:3e:33:03:10:52:
                    87:be:d8:3a:5f:b6:3a:46:b9:58:fc:d5:8f:de:fe:
                    6f:7a:25:b0:d9:05:80:21:ab:24:09:7d:f6:10:d8:
                    eb:27:ed:22:3f:a0:2f:b5:13:c4:0c:cb:9c:0f:b0:
                    c0:01:72:df:e7:0a:55:be:1a:f4:28:b3:c6:f4:db:
                    43:ac:ed:45:79:76:8b:23:b2:92:90:5c:4e:79:43:
                    a1:ac:d8:41:f5:46:c4:a1:b1:49:d2:2b:58:bd:a5:
                    59:02:e6:53:18:54:5f:f1:5e:13:22:c0:c6:77:ef:
                    3a:1c:6f:b4:82:52:3d:71:b6:ba:08:6d:c6:8e:66:
                    04:8c:64:d4:58:ac:6f:73:f0:16:1e:ae:b6:5f:42:
                    78:07:20:3e:9c:6e:df:b6:3d:62:d8:66:71:28:fb:
                    86:f8:7c:d8:a0:c4:35:ed:6c:2e:81:ca:6f:d2:d8:
                    16:19:1d:1a:aa:c3:c6:38:70:32:b1:c1:65:0e:df:
                    1c:10:87:27:66:3e:a9:e2:ff:ab:ce:c0:f0:24:5e:
                    bf:4e:0e:35:aa:e3:fb:93:92:c4:9e:64:65:b4:26:
                    1a:70:ce:46:f1:a2:4a:ca:ee:e2:b4:fa:c9:5c:13:
                    62:d1:06:52:67:84:40:7f:fa:81:be:80:32:7e:0d:
                    df:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F5:D2:F2:B8:C5:B5:1C:14:6A:C1:74:ED:5B:D4:79:B4:B6:FB:12
            X509v3 Authority Key Identifier:
                keyid:7C:E5:84:0E:13:2C:31:86:BD:04:D6:C7:CE:BC:C5:1A:1D:EC:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcde2a88e5908b9d297ac64848a8a9e438dc5fcb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d1638494-0b44-45d1-a0b4-f4cc475cb184/297a261279b553ada7896c976056b1e0567a1cd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d1638494-0b44-45d1-a0b4-f4cc475cb184/bcde2a88e5908b9d297ac64848a8a9e438dc5fcb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:85a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:37:c1:b1:3f:19:be:3a:46:bd:10:4f:3f:9c:af:c6:d4:35:
         36:9c:d9:42:36:52:f2:80:76:38:8b:d7:05:59:fe:31:9c:67:
         ce:94:2b:c6:bd:e0:7a:0b:58:88:5c:80:81:f0:74:8f:ee:53:
         36:f2:89:a1:11:b9:26:e6:99:c7:46:eb:8b:87:18:ad:b3:ca:
         d6:3f:e3:ca:20:d1:05:63:7e:38:9f:f1:60:c1:e2:b9:df:0a:
         df:ee:61:e9:79:b7:e8:1b:1b:5c:04:75:d3:8e:c3:64:7e:6e:
         fd:be:94:20:a5:32:2a:51:ea:3c:1c:b7:f6:ca:6c:34:65:8a:
         43:27:5c:cd:e7:bb:9f:f0:eb:a1:79:b2:09:59:e3:50:49:05:
         96:d3:86:29:25:c0:bc:4f:7d:3d:ca:4f:4b:e3:32:16:d8:90:
         94:d6:44:fb:5c:f2:56:87:c6:e0:f7:56:67:f4:2e:4b:9a:12:
         12:a3:5f:79:b6:3f:6c:1a:76:99:75:43:2a:b1:54:47:04:87:
         93:fb:38:30:f9:83:f4:50:52:2f:8f:af:43:03:e3:18:b3:04:
         26:3c:18:a5:da:9c:cb:7f:7c:7a:96:78:5b:8c:d7:30:fd:43:
         66:c0:da:65:50:5b:d8:64:f4:73:5a:8e:06:c3:b5:1d:35:83:
         4e:3e:d1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----