Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/901eb55c-e24b-4030-b7b8-fa4b8e3a6a30/af840c389794fc388cc280a954ece824aa6306de.roa
File:                     af840c389794fc388cc280a954ece824aa6306de.roa (raw, json)
Hash identifier:          QzjK7cFFZb5mhRSN4+pMJhi/lqU/XoqP1Qmn6UpDfcM=
Subject key identifier:   15:93:4B:8C:C3:77:43:C7:15:00:54:86:82:8F:24:3D:E5:00:A7:BF
Certificate issuer:       /CN=0ce734ab5bcb4d2ab5fe5de4290e5746296d58b7
Certificate serial:       0BE2BF
Authority key identifier: 0D:FB:6E:FB:13:28:1B:AA:C1:19:FD:C7:C9:50:91:48:87:0C:02:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ce734ab5bcb4d2ab5fe5de4290e5746296d58b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/901eb55c-e24b-4030-b7b8-fa4b8e3a6a30/af840c389794fc388cc280a954ece824aa6306de.roa
Signing time:             Wed 24 Mar 2021 14:48:02 +0000
ROA not before:           Wed 24 Mar 2021 14:48:02 +0000
ROA not after:            Tue 24 Mar 2026 14:48:02 +0000
asID:                     269749
IP address blocks:        2803:f960::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778943 (0xbe2bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce734ab5bcb4d2ab5fe5de4290e5746296d58b7
        Validity
            Not Before: Mar 24 14:48:02 2021 GMT
            Not After : Mar 24 14:48:02 2026 GMT
        Subject: CN=af840c389794fc388cc280a954ece824aa6306de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:89:f0:3f:46:54:84:56:2d:58:e9:55:96:4a:
                    93:ce:6a:46:1d:d2:6a:ec:06:6d:42:b9:e7:58:3d:
                    5b:b4:bf:14:69:e3:9f:b2:35:bc:44:b0:28:95:a8:
                    cc:58:75:80:9a:89:f7:3a:a9:06:92:18:9e:d4:d6:
                    8a:2d:1b:53:35:8d:e8:e6:a8:9a:2a:f5:a6:84:51:
                    e8:69:cb:5e:ec:e2:5b:ed:42:4b:40:ee:1b:1c:a2:
                    3c:78:0b:16:7f:aa:e7:76:9a:b1:0b:c6:38:c0:4b:
                    35:ce:dd:73:f9:05:f0:44:83:70:9c:9c:40:7e:3a:
                    10:cd:4c:11:82:f3:38:31:5b:fb:7a:b8:a3:6c:9c:
                    f6:de:6b:fe:36:d1:a5:22:a3:63:22:1e:cb:18:7c:
                    68:93:db:be:e5:bb:2e:66:46:d4:79:30:2f:db:e8:
                    7e:a7:5c:7e:77:5b:99:60:27:25:97:ec:be:e6:55:
                    5c:ba:2b:c7:aa:64:7d:f4:49:2d:27:cf:90:61:91:
                    8f:20:54:92:28:1c:86:78:ff:21:bc:8c:24:db:20:
                    61:4a:f5:5a:9a:d0:1f:3f:26:dc:7d:28:b0:91:d8:
                    b0:36:68:90:26:c2:37:90:d8:40:57:9b:d5:b4:69:
                    16:6d:8a:b5:ee:49:79:62:d9:54:04:89:e4:0b:1d:
                    d2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:93:4B:8C:C3:77:43:C7:15:00:54:86:82:8F:24:3D:E5:00:A7:BF
            X509v3 Authority Key Identifier:
                keyid:0D:FB:6E:FB:13:28:1B:AA:C1:19:FD:C7:C9:50:91:48:87:0C:02:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ce734ab5bcb4d2ab5fe5de4290e5746296d58b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/901eb55c-e24b-4030-b7b8-fa4b8e3a6a30/af840c389794fc388cc280a954ece824aa6306de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/901eb55c-e24b-4030-b7b8-fa4b8e3a6a30/0ce734ab5bcb4d2ab5fe5de4290e5746296d58b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f960::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:dc:ad:76:e9:ed:3e:8d:a0:3d:be:5e:28:09:82:ee:58:9f:
         aa:df:1c:14:11:df:be:fd:ba:ef:f8:0a:af:51:ad:0f:ce:fc:
         4e:70:f8:87:de:fe:cc:c1:37:88:11:19:e1:0e:b9:47:6c:68:
         3f:1c:27:a9:01:26:98:c8:8b:65:61:e4:7f:54:c5:8b:48:cd:
         3c:36:60:63:14:2c:77:e2:83:62:f2:24:3a:d4:8c:7f:bb:3d:
         be:49:a7:4b:35:29:85:87:14:55:9c:47:8c:6c:61:06:37:98:
         a1:50:ec:a3:22:ca:03:32:51:b5:7d:c3:8b:ef:b1:5c:50:f6:
         46:32:6c:b7:1c:c5:a7:d9:e6:24:32:69:91:18:c3:a5:7a:c5:
         7e:8c:8c:1a:e4:28:20:70:51:8e:55:9b:7b:85:72:31:60:61:
         7b:2a:26:84:3b:ed:a5:ab:c3:21:c3:da:ae:4d:1c:31:ea:45:
         52:e3:32:5f:26:ff:7b:19:b7:f5:ba:0c:3c:58:13:da:49:ff:
         50:db:9f:f2:f0:89:56:fb:54:2a:56:a4:3b:ba:ed:7c:fa:fc:
         24:ce:23:20:e1:5f:54:0f:75:c0:28:b7:09:b5:1f:c5:2b:ce:
         f8:c3:fc:b8:24:db:97:33:da:55:12:e0:29:a5:19:a4:c4:c4:
         b0:42:b2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----