Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/212795c07bba197dc9927a69d6794b55a7c277f4.roa
File:                     212795c07bba197dc9927a69d6794b55a7c277f4.roa (raw, json)
Hash identifier:          C1dUOuZdRawA/e7sVlDsHJV9JomQMsXGKtmg0PhKax4=
Subject key identifier:   B4:D3:86:C0:3C:AF:98:25:EE:4D:54:6C:A9:87:BF:A4:8A:C7:95:E0
Certificate issuer:       /CN=6ff75e9cde86b5c490d171a8993267e23270787a
Certificate serial:       1401
Authority key identifier: 95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/212795c07bba197dc9927a69d6794b55a7c277f4.roa
Signing time:             Thu 08 Apr 2021 16:54:02 +0000
ROA not before:           Wed 07 Apr 2021 03:00:00 +0000
ROA not after:            Sun 08 Apr 2029 03:00:00 +0000
asID:                     36492
IP address blocks:        2803:9810::/35 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5121 (0x1401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ff75e9cde86b5c490d171a8993267e23270787a
        Validity
            Not Before: Apr  7 03:00:00 2021 GMT
            Not After : Apr  8 03:00:00 2029 GMT
        Subject: CN=212795c07bba197dc9927a69d6794b55a7c277f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:aa:36:5b:27:9f:a7:5d:1c:60:d7:f5:ae:
                    6e:76:92:49:27:07:44:b8:e8:df:34:d7:ec:b2:71:
                    17:08:09:ef:61:f9:8f:fe:67:94:cd:20:43:f5:ba:
                    0a:b4:6b:5d:c6:3d:6a:2e:8f:3e:48:9f:fa:3f:e4:
                    a8:a8:08:4f:5c:0e:a6:ca:d6:83:d5:63:f8:0e:2f:
                    eb:36:ca:97:2f:1f:b4:15:37:ab:1b:d4:fd:ad:99:
                    36:79:20:ff:17:b0:e1:e8:68:c7:c4:d8:0c:cf:38:
                    ad:4f:3f:60:ea:22:ca:8a:bc:8a:05:11:d8:b6:06:
                    b5:f7:54:f2:22:9c:96:aa:fe:81:cb:c7:1f:9b:06:
                    c5:1b:81:5d:29:9e:8b:27:85:a4:90:79:8a:c3:92:
                    cd:de:46:a7:91:3e:85:fc:a1:39:84:8a:3c:18:82:
                    10:41:70:61:0e:7b:8a:e0:dc:56:14:b9:d3:04:8c:
                    83:75:70:83:d0:b6:9b:7e:61:5f:11:0b:22:cd:1b:
                    e4:17:d4:c6:ef:06:7c:73:77:73:5c:c7:af:ce:9c:
                    78:76:71:30:9a:08:db:fb:41:4b:c2:4e:13:61:2a:
                    00:bd:1f:1a:53:30:94:cf:4d:06:b5:af:31:b9:9c:
                    e8:df:0a:93:eb:35:0f:32:b2:65:53:37:23:56:0b:
                    70:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D3:86:C0:3C:AF:98:25:EE:4D:54:6C:A9:87:BF:A4:8A:C7:95:E0
            X509v3 Authority Key Identifier:
                keyid:95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/212795c07bba197dc9927a69d6794b55a7c277f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/6ff75e9cde86b5c490d171a8993267e23270787a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9810::/35

    Signature Algorithm: sha256WithRSAEncryption
         65:33:9a:c5:b2:85:98:81:a0:f6:f5:3a:2d:0a:52:67:85:ca:
         04:f0:86:6f:28:59:72:3d:95:08:27:31:56:21:02:dc:eb:63:
         9f:24:d4:20:2c:48:fc:e3:08:c7:a5:14:fe:2d:c0:ab:fb:ac:
         4c:3b:c6:81:3c:64:45:82:a7:68:df:0c:04:7f:68:ba:15:de:
         ae:0e:05:cc:3c:be:cb:53:4d:9c:02:42:b1:fd:66:8f:ba:62:
         83:73:8a:80:a3:60:2e:b0:66:02:5a:2b:97:be:20:57:2a:53:
         6b:14:b5:dc:fe:d8:e8:3e:b3:4c:47:a7:a1:1a:ad:ca:2a:08:
         ef:e7:53:26:ca:72:bb:13:67:09:c6:8d:30:3d:ae:b6:03:bb:
         0c:89:6e:9b:5d:2c:cd:46:c6:a6:07:21:e2:ca:c2:a3:a7:c9:
         d5:6c:0e:9e:0f:db:35:75:c9:e3:b9:88:09:14:5b:f9:bc:48:
         87:b7:a5:91:5a:83:6e:a2:cd:dc:20:1c:8b:ed:24:a8:c2:bf:
         0d:ef:9f:50:64:48:85:0d:19:dc:4e:28:1f:8d:0b:9f:68:eb:
         e1:75:f9:53:6f:fe:f2:05:18:75:0d:ee:1a:68:4d:86:08:84:
         9e:a2:aa:48:e9:6a:4e:1d:b6:31:cb:59:78:6e:aa:60:30:8c:
         1d:a9:e1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----