Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/139a5a0cec2d3d15a0f31046aa77dc42e3381d2a.roa
File:                     139a5a0cec2d3d15a0f31046aa77dc42e3381d2a.roa (raw, json)
Hash identifier:          DsBjvXP3WLMvzBCDIf7HjccV24F0SIEbKbs33nFgee4=
Subject key identifier:   E1:A1:E8:45:6B:E5:B3:72:C6:E3:18:C9:9F:6B:38:97:60:4C:EC:C8
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       0FF1CF
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/139a5a0cec2d3d15a0f31046aa77dc42e3381d2a.roa
Signing time:             Fri 11 Jun 2021 19:48:46 +0000
ROA not before:           Mon 19 Apr 2021 03:00:00 +0000
ROA not after:            Sun 19 Apr 2026 03:00:00 +0000
asID:                     14080
IP address blocks:        2800:484::/32 maxlen: 48
                          2800:485::/32 maxlen: 48
                          2800:480::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1044943 (0xff1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Apr 19 03:00:00 2021 GMT
            Not After : Apr 19 03:00:00 2026 GMT
        Subject: CN=139a5a0cec2d3d15a0f31046aa77dc42e3381d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6e:b7:44:89:27:9f:89:5e:72:f9:22:ef:88:
                    60:32:b8:56:6d:99:4e:fb:a5:13:08:2f:63:8b:24:
                    b6:9a:c0:de:08:ef:dd:f4:93:e8:d5:b2:fc:f8:81:
                    1c:c7:a0:dc:c3:11:0f:7d:2f:f5:27:cd:45:03:89:
                    a1:37:6b:c9:c5:31:2b:88:0e:b0:2e:54:a6:5e:43:
                    f4:9a:26:6b:c5:68:97:eb:9e:91:6d:a6:b2:f0:6d:
                    00:6c:c5:a4:5c:22:9d:06:9b:31:d9:ec:18:23:91:
                    7a:dd:98:96:87:1c:fd:3d:83:b8:04:f3:1b:74:e2:
                    58:4d:69:2d:1c:96:56:02:57:22:a8:59:58:b6:88:
                    26:4c:64:81:09:6e:df:6b:48:71:89:21:8f:c4:0e:
                    e9:19:51:2b:bc:8e:f4:fa:4e:39:8a:f6:03:c8:e2:
                    b8:ee:a7:c4:c8:45:48:7c:60:ec:10:ea:68:22:c7:
                    64:bb:28:66:3b:7d:63:e5:31:9a:0f:25:de:ee:90:
                    75:50:72:d8:b4:3e:ce:4f:ab:54:00:eb:d0:37:b0:
                    6b:06:f1:9a:fe:b5:2d:ba:fd:79:f8:d0:5d:d9:47:
                    45:20:cd:3e:24:ca:c6:0d:80:2d:fd:f2:c9:7c:7d:
                    25:aa:d1:9b:92:1a:3a:e2:3f:1a:67:15:53:51:46:
                    f3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A1:E8:45:6B:E5:B3:72:C6:E3:18:C9:9F:6B:38:97:60:4C:EC:C8
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/139a5a0cec2d3d15a0f31046aa77dc42e3381d2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:480::/32
                  2800:484::/31

    Signature Algorithm: sha256WithRSAEncryption
         5c:36:7f:ff:c4:39:58:3d:fb:9d:c6:ae:4b:85:8b:7c:97:a4:
         a8:9e:7b:fb:6a:9f:30:18:a2:d9:db:92:ab:dd:41:48:6c:09:
         a9:bd:45:36:8e:ff:92:74:b4:97:6e:d9:21:20:8d:e0:b1:5e:
         2c:7e:55:b3:57:54:76:b6:a8:87:15:41:41:58:e1:8f:9e:2e:
         8c:03:90:e1:8c:9a:6d:ac:b1:49:55:cd:13:25:01:19:67:f3:
         d0:36:8f:26:7f:3b:28:e1:e6:27:50:1f:f9:fa:8c:20:af:a9:
         8d:5d:79:b3:b4:e9:c7:f6:c4:e2:6e:21:ae:e3:71:31:00:cb:
         e8:0e:55:1f:3a:e4:e6:c4:9d:a8:a7:71:cf:8e:4f:eb:86:f6:
         fc:54:49:11:5a:c0:8c:4c:4a:4d:4d:98:f6:67:57:4b:aa:1c:
         d2:4d:ce:8b:bc:a6:8d:14:c0:e6:24:8b:da:29:aa:59:45:d8:
         20:8d:f3:45:48:4d:4a:6b:be:2e:dc:5b:d5:13:c4:3c:a2:b9:
         88:10:43:56:98:f5:cb:44:da:98:52:60:65:e0:b4:ea:b5:78:
         05:ec:ad:8e:9e:f1:0a:8c:53:1c:01:f7:4e:af:a2:47:17:e4:
         02:1d:21:2b:9a:56:b1:ef:11:c2:64:45:dc:f7:40:a0:56:2c:
         a5:19:9d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----