Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/468256fa85765c7a69d0aed8c2c1cdba74e04b6f.roa
File:                     468256fa85765c7a69d0aed8c2c1cdba74e04b6f.roa (raw, json)
Hash identifier:          rnSbqNCmW5MUceDhL5XHsDR6uYi+kzK/lP/4AKJt2eg=
Subject key identifier:   83:B3:5A:99:4A:4D:B4:E6:67:18:49:62:6B:C7:23:D3:C8:44:E9:C2
Certificate issuer:       /CN=d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6
Certificate serial:       1B26EB
Authority key identifier: 22:50:E4:A6:69:36:41:5B:4C:FC:C1:F1:75:8D:DA:B9:44:09:99:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/468256fa85765c7a69d0aed8c2c1cdba74e04b6f.roa
Signing time:             Wed 28 Jun 2023 13:59:00 +0000
ROA not before:           Tue 27 Jun 2023 13:59:00 +0000
ROA not after:            Sat 28 Jun 2025 13:59:00 +0000
asID:                     270051
IP address blocks:        2803:4de0:1::/48 maxlen: 64
                          2803:4de0:2::/48 maxlen: 64
                          2803:4de0:3::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1779435 (0x1b26eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6
        Validity
            Not Before: Jun 27 13:59:00 2023 GMT
            Not After : Jun 28 13:59:00 2025 GMT
        Subject: CN=468256fa85765c7a69d0aed8c2c1cdba74e04b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:56:26:bb:eb:f1:63:75:dd:69:17:82:8c:
                    73:5a:cf:0e:f9:d1:6f:22:20:58:63:48:a0:b6:2c:
                    c6:a1:eb:e7:10:8b:8b:a2:eb:5e:d9:d3:81:dc:0c:
                    80:c6:c8:4e:63:bf:35:a3:38:1c:ae:44:25:6f:32:
                    f9:2e:55:f0:09:ab:f1:55:07:c0:af:ae:b8:40:79:
                    8c:36:89:63:17:f4:b1:da:55:2e:e1:47:47:d8:13:
                    23:08:45:f1:89:2f:95:a7:ad:8a:0e:2e:3a:06:26:
                    82:b7:c3:b1:a3:78:59:83:54:8d:c7:61:f2:4c:83:
                    6d:79:37:a7:22:1b:73:70:9e:c0:73:6a:6e:2e:9b:
                    f9:52:cd:53:68:71:18:04:f0:cf:de:8e:f8:b0:3d:
                    62:71:7f:9e:73:68:4e:1c:53:ce:fc:dc:40:9e:20:
                    8c:20:23:51:f7:cf:a1:72:d8:3c:2f:c3:35:18:51:
                    0b:47:07:00:16:9c:95:4f:a6:a3:f5:00:9e:c1:93:
                    05:55:e8:c5:0b:3e:a3:61:a3:28:e1:34:82:da:61:
                    e0:8e:13:77:6b:f1:3d:c6:99:66:49:42:da:93:d4:
                    21:ae:8d:1a:e4:5d:61:f1:ec:18:89:d4:dc:70:10:
                    29:6f:2d:4a:30:d5:0a:7f:09:5f:06:3e:d2:70:9a:
                    5e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B3:5A:99:4A:4D:B4:E6:67:18:49:62:6B:C7:23:D3:C8:44:E9:C2
            X509v3 Authority Key Identifier:
                keyid:22:50:E4:A6:69:36:41:5B:4C:FC:C1:F1:75:8D:DA:B9:44:09:99:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/468256fa85765c7a69d0aed8c2c1cdba74e04b6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4de0:1::-2803:4de0:3:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         05:cc:b0:81:f9:06:35:f0:b9:83:d4:5d:a6:a3:84:b0:09:91:
         89:b2:6f:14:f5:2a:ce:9a:e1:33:01:1f:a5:1f:2d:d8:3e:3c:
         04:f4:c8:f6:7e:d1:a0:5d:5f:70:f5:0c:29:5e:fb:c3:f1:23:
         59:de:c3:24:65:25:9c:b5:fa:14:25:d5:f3:a8:0f:4a:69:0c:
         97:f0:79:34:ec:14:a1:49:93:23:05:1d:e0:5e:a2:2e:a4:ea:
         9c:00:b2:46:12:c2:65:42:7c:58:43:8b:b0:59:c0:51:c0:8b:
         0b:88:83:06:13:18:f5:22:90:a9:6d:fb:6a:34:e7:eb:1d:b6:
         c3:2c:80:17:90:ff:b9:b5:33:e7:95:65:c8:32:50:17:13:d4:
         ac:e8:f5:19:42:8e:01:6b:b9:bf:25:fa:82:aa:9c:0d:52:34:
         86:21:72:ea:06:d9:56:05:41:5a:2f:eb:a4:4c:fa:8d:5e:4e:
         81:90:36:3a:5b:0c:a8:83:07:2a:e5:ff:80:f6:1c:3c:70:52:
         ce:07:ab:ca:f0:43:77:cf:38:fb:07:da:fe:32:9a:81:2e:d2:
         3d:61:54:b9:01:d5:e6:8f:26:e0:09:74:81:0d:3a:28:95:c7:
         91:78:fd:c1:e8:a0:ef:b3:75:6f:79:fd:61:86:d5:f4:e7:8d:
         87:77:46:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----