Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/e20e04761e573c77ab4eb48af3d9a4e984ceb810.roa
File:                     e20e04761e573c77ab4eb48af3d9a4e984ceb810.roa (raw, json)
Hash identifier:          Cgi5TXewIRtt6r7iNRxlAHYG4HLvemiykyoJ5XL24h0=
Subject key identifier:   32:AA:6D:0C:0A:BD:81:34:9D:E9:AD:90:19:9B:E5:42:A1:16:73:BD
Certificate issuer:       /CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
Certificate serial:       1886FD
Authority key identifier: 5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/e20e04761e573c77ab4eb48af3d9a4e984ceb810.roa
Signing time:             Tue 12 Jul 2022 14:47:38 +0000
ROA not before:           Tue 30 Mar 2021 03:00:00 +0000
ROA not after:            Tue 30 Mar 2060 03:00:00 +0000
asID:                     26611
IP address blocks:        2800:800:960::/48 maxlen: 48
                          2800:800:940::/48 maxlen: 48
                          2800:800:950::/48 maxlen: 48
                          2800:800:970::/48 maxlen: 48
                          2800:800:930::/48 maxlen: 48
                          2800:800:960::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1607421 (0x1886fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
        Validity
            Not Before: Mar 30 03:00:00 2021 GMT
            Not After : Mar 30 03:00:00 2060 GMT
        Subject: CN=e20e04761e573c77ab4eb48af3d9a4e984ceb810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e6:d0:9d:da:c0:f2:a6:00:c8:d3:b2:39:48:
                    a6:fd:6f:10:16:7e:a8:a3:db:98:3e:30:da:60:e6:
                    9a:da:af:b9:1e:75:36:6d:ff:cb:e3:5c:ce:3d:b7:
                    2e:4b:0e:33:35:1b:49:19:26:51:0f:89:0f:df:14:
                    33:f0:54:cb:b9:e7:47:0c:02:6f:5f:bf:9c:93:34:
                    5a:b5:5b:01:94:33:04:f1:1d:d6:10:fd:02:38:e1:
                    bb:53:04:d5:95:e0:13:5a:e8:0a:62:9b:5f:4a:ef:
                    b1:cc:f0:3e:69:cf:db:37:22:c9:2e:69:f6:6b:8b:
                    5d:5f:85:55:72:f1:29:ae:69:35:6a:31:13:e1:d2:
                    f7:66:c8:39:9f:07:d8:7c:c4:96:46:08:19:8d:55:
                    8a:78:cf:2a:c9:e4:7f:ca:9d:7d:ae:2b:1c:a1:09:
                    9f:6b:3e:b1:fd:c6:fc:cc:12:36:88:e7:f0:e9:11:
                    df:55:44:a9:ee:f5:fc:e3:85:ee:d2:29:f9:41:fe:
                    ac:23:fc:08:5b:d5:e4:20:72:ab:0e:e2:4c:de:d0:
                    4d:f1:14:7a:4a:af:a8:f0:41:7f:22:c4:72:1c:45:
                    d2:46:d1:f4:38:74:19:48:9e:9c:3f:44:6d:a8:be:
                    fc:8f:3a:bb:42:55:1d:e7:1c:bf:09:d4:6d:b6:0e:
                    94:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AA:6D:0C:0A:BD:81:34:9D:E9:AD:90:19:9B:E5:42:A1:16:73:BD
            X509v3 Authority Key Identifier:
                keyid:5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/e20e04761e573c77ab4eb48af3d9a4e984ceb810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:800:930::/48
                  2800:800:940::/48
                  2800:800:950::/48
                  2800:800:960::/48
                  2800:800:970::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:fb:00:1e:3b:ea:cf:d8:6e:98:fd:c4:15:3d:df:ca:40:0b:
         54:4a:3c:26:18:53:99:91:8f:73:c4:41:1e:1f:f3:eb:67:38:
         24:da:42:2a:c1:4b:72:cd:66:ed:66:f2:e5:6e:46:3e:f4:c1:
         51:b5:42:09:71:a2:3c:04:20:03:ce:80:14:cb:95:de:d2:e6:
         6b:8d:7c:57:45:81:0c:4c:fc:16:59:e0:19:ff:50:be:bf:3a:
         ab:17:1f:f2:fd:64:8e:d3:ad:58:a2:c4:38:0c:33:fa:38:8f:
         ec:8f:7b:e9:d8:73:7c:d0:30:5c:0f:11:af:67:a0:72:e7:ba:
         c1:f7:25:b3:95:db:79:77:77:7b:21:b1:28:6d:71:39:82:dc:
         3a:7e:c2:bf:56:99:36:72:25:15:c6:5c:52:0e:6e:73:9c:21:
         2c:1f:37:ed:e4:14:ad:6c:9e:d9:40:e5:d6:aa:12:ed:d8:2e:
         54:4b:c9:da:f0:07:25:00:dc:ad:bf:21:89:0d:ed:54:41:aa:
         a1:e5:8a:b8:ab:1c:c7:0c:6d:f0:4b:81:36:49:ac:ca:01:33:
         2b:a4:6e:7e:a3:43:67:42:a7:6f:b2:48:26:18:bf:6f:b4:bd:
         eb:c5:68:ba:9f:c6:c6:1a:33:a0:05:16:44:04:9f:03:b1:41:
         88:88:69:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----