Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02687a4b-2ac2-4d3f-9d0b-96286a0b6a4b/3362034d85ccb6d8e3df220916670a54d3a5f55c.roa
File:                     3362034d85ccb6d8e3df220916670a54d3a5f55c.roa (raw, json)
Hash identifier:          VHz0sTYvAPvolpCzYq8pfx74/wkOsbvp1WOhjCBez5s=
Subject key identifier:   AF:16:2B:06:FB:65:24:8D:22:48:48:4A:49:D6:4E:C9:B8:88:FF:09
Certificate issuer:       /CN=4f17752f3d0b4b3bb5cf630e65f8e199604e5f75
Certificate serial:       071479
Authority key identifier: 37:F3:58:E7:A7:C1:E7:AC:EA:05:0A:F6:8E:17:FB:3C:2E:57:85:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02687a4b-2ac2-4d3f-9d0b-96286a0b6a4b/3362034d85ccb6d8e3df220916670a54d3a5f55c.roa
Signing time:             Wed 24 Mar 2021 22:51:19 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     52438
IP address blocks:        2803:bc00:100::/40 maxlen: 128
                          2803:bc00:200::/40 maxlen: 128

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463993 (0x71479)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f17752f3d0b4b3bb5cf630e65f8e199604e5f75
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=3362034d85ccb6d8e3df220916670a54d3a5f55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:64:e9:2f:3e:d2:53:8c:4c:ce:90:f4:dc:51:
                    09:c3:4b:1e:ff:a1:ba:45:7a:f3:97:12:47:fd:55:
                    54:bb:04:41:57:8b:b4:12:a0:c3:44:95:10:c9:2b:
                    6f:75:7f:ad:2d:92:e3:f0:fc:3b:61:71:f8:4b:da:
                    40:6a:88:16:e3:f6:e1:46:a5:f8:dd:79:29:42:f0:
                    59:60:c3:a4:ba:a3:6a:c1:43:1d:54:1b:02:5b:68:
                    1e:81:5a:06:bd:8d:e9:a1:2d:d7:73:5e:5d:6e:50:
                    41:1a:a8:fc:15:72:db:18:d7:31:0d:61:7b:15:4c:
                    a7:09:8c:3f:28:2c:72:a8:31:db:28:5b:e7:eb:ea:
                    84:b5:23:1e:e7:b6:2f:b5:67:75:c2:e1:ed:d8:c1:
                    3d:a4:73:ff:10:ac:6f:bb:ff:fc:80:30:42:b8:0b:
                    57:e6:9c:53:50:af:ea:95:0c:d6:f8:73:4d:33:ae:
                    2a:71:db:8e:08:be:d4:d2:e8:aa:78:b1:22:a4:7c:
                    25:91:d1:25:d5:21:92:49:a3:07:bb:74:1e:ab:26:
                    b9:7b:e3:44:e3:25:9c:4d:e6:5d:b2:0c:4b:50:f5:
                    20:75:54:a5:7c:18:0c:c2:8d:08:a6:a2:10:de:00:
                    c6:f4:3a:2a:38:66:9f:1f:75:84:20:3b:f0:02:5f:
                    a6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:16:2B:06:FB:65:24:8D:22:48:48:4A:49:D6:4E:C9:B8:88:FF:09
            X509v3 Authority Key Identifier:
                keyid:37:F3:58:E7:A7:C1:E7:AC:EA:05:0A:F6:8E:17:FB:3C:2E:57:85:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02687a4b-2ac2-4d3f-9d0b-96286a0b6a4b/3362034d85ccb6d8e3df220916670a54d3a5f55c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02687a4b-2ac2-4d3f-9d0b-96286a0b6a4b/4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bc00:100::-2803:bc00:2ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         7b:97:f8:3d:94:b4:74:b7:45:e7:86:05:45:1c:a5:dd:a5:bb:
         39:8f:a3:e8:73:55:7d:63:0e:16:17:a4:f3:39:e7:87:d2:09:
         d3:04:e4:fd:61:4f:16:79:56:1e:dd:4c:29:65:ac:11:71:8f:
         49:1c:c1:63:08:c0:96:fb:d8:ce:30:b7:0f:be:39:c2:08:a7:
         cd:40:ae:ab:cd:05:9f:ed:04:2b:e1:4e:0f:89:03:7c:b7:2c:
         18:bf:bf:47:f9:ef:d6:0b:8a:0f:a3:9d:e2:fc:dd:77:f4:86:
         19:ef:da:41:0d:3a:a8:9d:66:9f:ac:25:f3:5d:4b:dc:d7:3a:
         ca:5c:1b:e9:47:5c:87:fc:23:9d:b9:4d:0d:32:9e:89:42:dd:
         1d:d7:e5:bb:08:34:eb:11:3c:3e:2b:35:85:de:2c:fc:6f:72:
         19:34:53:d5:5e:66:1a:d4:ea:de:63:15:4c:37:98:15:96:b1:
         2d:d8:44:74:29:1c:54:b9:4d:2b:02:f8:be:61:c3:0e:18:01:
         2b:12:ef:9f:47:c6:4a:57:d6:ab:53:fa:7e:91:26:90:3a:23:
         80:94:d0:ce:e1:32:03:96:1c:46:b2:d3:34:42:01:3c:4a:a5:
         1a:44:07:46:77:46:7a:4e:0e:b9:2f:fb:39:aa:18:30:c1:03:
         ce:c6:95:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----