Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f6aebf960fb94dff271612911c6a5b2c44a48869.roa
File:                     f6aebf960fb94dff271612911c6a5b2c44a48869.roa (raw, json)
Hash identifier:          uSPKi3uLzx/oTAUE9eiMsGcp8qAguHfhKeBzKp8SLCA=
Subject key identifier:   E4:61:B6:88:67:EE:A6:64:4B:82:56:99:FC:FC:A4:FC:5B:9F:61:C0
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       0E3933
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f6aebf960fb94dff271612911c6a5b2c44a48869.roa
Signing time:             Wed 24 Mar 2021 14:30:55 +0000
ROA not before:           Wed 24 Mar 2021 14:30:53 +0000
ROA not after:            Tue 24 Mar 2026 14:30:53 +0000
asID:                     23031
IP address blocks:        2001:13b0:d002::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932147 (0xe3933)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Mar 24 14:30:53 2021 GMT
            Not After : Mar 24 14:30:53 2026 GMT
        Subject: CN=f6aebf960fb94dff271612911c6a5b2c44a48869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:a6:61:ad:8c:d7:07:cf:ac:9d:b3:f5:93:4e:
                    56:99:bb:59:bc:6d:f3:81:97:a8:55:4f:c4:a4:75:
                    3a:6e:3d:08:48:7e:08:36:18:11:42:48:84:b4:e9:
                    2f:ab:bf:7d:98:37:11:14:56:a1:d6:fd:b9:e2:bc:
                    2e:52:53:0d:b4:fc:1b:01:eb:0a:42:b0:16:1b:00:
                    e4:fc:fa:a2:ed:75:4a:bf:44:5b:df:18:da:a0:14:
                    a2:26:d7:a6:5a:a9:9b:52:12:cb:33:38:1a:24:91:
                    40:e3:d2:8a:86:db:7b:b6:10:17:45:d9:0c:13:96:
                    54:3b:a8:c5:4a:38:07:d4:10:b5:2b:fe:2b:58:ae:
                    d9:14:34:f1:4d:66:51:9d:c0:8e:b0:f4:08:98:b7:
                    9b:1b:23:97:92:a4:19:98:52:99:09:62:d4:c2:e7:
                    9b:68:43:20:ad:4b:63:10:74:3a:5a:74:cd:a2:00:
                    d0:b8:75:3a:11:57:f4:db:65:44:72:d4:1e:2a:84:
                    13:48:a7:37:30:85:29:63:27:30:39:ea:56:19:40:
                    38:b3:02:d7:a4:48:4d:45:54:6f:6c:43:bf:e0:df:
                    c2:85:64:7f:6a:7c:c8:63:d6:7d:08:70:84:25:d7:
                    bb:3e:cb:38:7c:e7:df:e6:0e:e9:b7:62:f1:01:39:
                    b9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:61:B6:88:67:EE:A6:64:4B:82:56:99:FC:FC:A4:FC:5B:9F:61:C0
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f6aebf960fb94dff271612911c6a5b2c44a48869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13b0:d002::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:e2:5f:bf:90:cb:88:80:c3:95:7c:39:05:8c:6e:21:27:bc:
         d6:87:7f:56:f6:8f:2c:1b:d8:20:1f:32:d5:5e:83:2e:ab:51:
         76:33:ef:5a:56:73:e6:1a:8c:f8:af:c4:55:9f:97:b3:58:88:
         20:e9:56:5f:5a:86:20:b8:ef:51:90:92:e1:f9:16:a5:93:9b:
         40:5c:11:6d:f0:4c:89:ed:c9:91:c9:6e:e1:c5:4f:f9:29:32:
         3f:f0:be:34:c9:e5:cb:a9:e4:03:31:cf:40:39:76:f7:1e:0c:
         b0:18:f8:bd:e4:63:ac:6a:3d:b2:ac:0c:09:92:ea:ee:47:7d:
         f7:77:03:91:4f:9d:11:ce:69:d5:89:47:eb:b4:56:ac:95:e9:
         c7:8e:6e:45:a5:ea:00:da:c3:fa:ce:23:80:48:be:c3:e4:45:
         c7:83:1b:bf:70:75:a2:99:6f:76:31:df:97:c6:fb:e1:53:20:
         38:ed:62:39:50:43:2a:c8:6e:8c:38:5b:f4:f3:5f:bb:29:67:
         b7:fe:51:b6:89:10:db:7c:8b:61:bf:9f:7f:9c:d6:9d:a0:2f:
         40:f3:6b:f9:9e:4c:c5:fb:4d:76:24:01:02:c2:e9:6e:50:ec:
         2d:5c:92:6c:c0:56:23:8f:cd:04:9b:ac:c5:f7:90:f9:ab:8b:
         1a:ba:35:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----