Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/f9925c67bae59afc98b9684eed8e5c0ce9f5046f.roa
File:                     f9925c67bae59afc98b9684eed8e5c0ce9f5046f.roa (raw, json)
Hash identifier:          u3Run1a5CSMgV/9tQSyFbSMYvknZIwzNK3nMzeuJCWc=
Subject key identifier:   6C:29:E4:BC:45:F3:E2:FE:26:18:FE:50:49:4F:64:73:32:22:A1:9D
Certificate issuer:       /CN=904a59874ab57a97e46cd1d939a2312a85fe9c71
Certificate serial:       0FC319
Authority key identifier: 4E:23:5A:F0:59:C4:DE:77:9B:DA:BA:DA:4D:17:2F:37:34:F3:E2:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/904a59874ab57a97e46cd1d939a2312a85fe9c71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/f9925c67bae59afc98b9684eed8e5c0ce9f5046f.roa
Signing time:             Mon 28 Jun 2021 21:26:33 +0000
ROA not before:           Mon 28 Jun 2021 03:00:00 +0000
ROA not after:            Wed 28 Jun 2023 03:00:00 +0000
asID:                     271923
IP address blocks:        2803:87c0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1032985 (0xfc319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=904a59874ab57a97e46cd1d939a2312a85fe9c71
        Validity
            Not Before: Jun 28 03:00:00 2021 GMT
            Not After : Jun 28 03:00:00 2023 GMT
        Subject: CN=f9925c67bae59afc98b9684eed8e5c0ce9f5046f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:12:5d:32:c4:60:6f:ba:8e:46:f9:63:0d:6e:
                    94:d2:35:9f:68:4a:20:09:4c:cc:f7:a6:74:f6:86:
                    b6:d0:b5:ba:5b:e9:91:de:91:2a:9d:5e:25:89:ed:
                    ad:40:9f:d5:cd:53:f3:d4:07:2e:ab:43:cf:05:14:
                    ee:20:18:07:cf:30:0d:97:be:76:d9:3e:21:a3:d4:
                    18:29:72:f0:c5:b3:ea:a1:55:8a:d6:f6:d5:93:38:
                    96:3e:72:8a:ee:64:e6:ec:54:34:78:86:a5:75:7a:
                    b7:bd:38:92:8b:f5:0c:92:9b:cf:a2:70:5c:f5:11:
                    6b:1a:40:b0:e0:0b:21:1d:84:d6:68:a6:68:9b:57:
                    3f:16:25:4b:58:8e:62:24:e8:72:af:a7:54:42:bc:
                    dd:6e:d9:1d:b0:df:d5:a6:52:5c:b4:b9:d6:e2:10:
                    eb:4a:8f:c4:9a:5b:ba:44:f2:71:58:a2:ac:c9:3e:
                    b6:ff:f2:e1:fd:3e:94:38:fc:44:ca:9c:6f:1b:bc:
                    45:2d:3f:48:d6:fe:59:a8:f2:d1:38:4c:8d:c0:6e:
                    5e:a3:40:8a:d2:0f:b5:10:75:39:35:57:ea:78:f7:
                    0b:6e:51:d7:ff:a3:8c:3a:d6:a2:cf:ca:bb:f7:10:
                    7d:79:be:b3:e0:a8:ba:bf:5d:3f:b8:32:f4:7a:07:
                    51:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:29:E4:BC:45:F3:E2:FE:26:18:FE:50:49:4F:64:73:32:22:A1:9D
            X509v3 Authority Key Identifier:
                keyid:4E:23:5A:F0:59:C4:DE:77:9B:DA:BA:DA:4D:17:2F:37:34:F3:E2:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/904a59874ab57a97e46cd1d939a2312a85fe9c71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/f9925c67bae59afc98b9684eed8e5c0ce9f5046f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/904a59874ab57a97e46cd1d939a2312a85fe9c71.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:87c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:96:f2:bf:21:b1:f9:76:d0:27:4e:f4:37:d5:b6:21:98:37:
         3a:1a:78:c1:af:a1:f8:2f:d6:72:55:63:60:aa:50:8a:d4:b2:
         54:06:59:49:0b:44:ad:df:2c:5a:d6:96:1c:04:06:9c:b8:38:
         6c:de:80:ab:ee:b6:a9:35:6c:25:4d:24:e0:6b:08:70:0d:2d:
         fd:51:35:43:ac:95:be:33:dc:17:66:08:18:97:3e:ca:01:f7:
         dd:1e:e3:24:ff:2d:e9:9e:c2:78:5d:37:e1:80:49:10:b0:0f:
         ef:92:22:16:3f:1c:a7:e8:a7:b4:55:9c:fd:1b:09:f1:66:7e:
         bf:77:2a:72:c4:a5:fa:48:f5:54:e2:ed:11:b4:85:8f:c0:2a:
         b1:f3:bb:ec:2d:4f:be:3a:74:98:b6:14:b3:59:26:c9:97:ed:
         3b:9b:1c:be:20:4b:f8:b3:a9:23:53:43:ee:e8:13:d1:3a:8e:
         be:b3:e5:0b:d0:e7:5e:0a:41:84:08:0c:26:59:17:05:92:e2:
         1f:18:13:c5:3b:56:05:56:d5:68:04:2a:3f:ab:b7:9d:5d:76:
         56:90:8c:c7:ac:1e:9d:85:91:4f:65:3f:95:d9:38:cb:d1:5c:
         bd:08:bc:98:ac:5c:af:42:0d:23:29:d9:7c:07:14:fe:6b:ab:
         22:82:07:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----