Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/7a9e8ac54d505b5c41f40d0baf48105043622fd2.roa
File:                     7a9e8ac54d505b5c41f40d0baf48105043622fd2.roa (raw, json)
Hash identifier:          tGxRhuOeHhpUf+Wahq0PV8+lJZoK4/71C/JBz8ehx0g=
Subject key identifier:   04:E7:D9:BB:3C:29:96:28:24:1E:C1:AD:0A:73:C5:31:2E:AB:6B:2D
Certificate issuer:       /CN=a0ece5cb3349a401474499eb301920b68090f2ce
Certificate serial:       120F78
Authority key identifier: 94:52:6C:1C:EE:97:CC:0E:93:E7:50:7E:90:7F:EB:BE:B5:E2:99:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ece5cb3349a401474499eb301920b68090f2ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/7a9e8ac54d505b5c41f40d0baf48105043622fd2.roa
Signing time:             Thu 16 Sep 2021 14:00:05 +0000
ROA not before:           Thu 16 Sep 2021 03:00:00 +0000
ROA not after:            Sat 16 Sep 2023 03:00:00 +0000
asID:                     266664
IP address blocks:        2803:efc0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1183608 (0x120f78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0ece5cb3349a401474499eb301920b68090f2ce
        Validity
            Not Before: Sep 16 03:00:00 2021 GMT
            Not After : Sep 16 03:00:00 2023 GMT
        Subject: CN=7a9e8ac54d505b5c41f40d0baf48105043622fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5d:19:06:bf:7f:c7:e4:2c:c0:ac:ba:14:70:
                    f4:99:db:53:af:db:3e:77:36:b9:4d:bf:94:32:7a:
                    29:d2:e6:9c:49:45:36:12:60:53:dc:77:be:51:69:
                    a7:40:cb:9d:cb:2e:76:f1:6d:38:8a:42:89:24:fc:
                    41:05:e0:e3:c7:c1:b4:aa:c5:71:f5:1d:dd:d1:95:
                    dc:be:04:20:34:4c:11:81:e9:f3:c9:c2:d2:8c:16:
                    ee:ca:b1:f0:39:d6:10:e5:ef:f9:19:46:f3:6a:88:
                    07:0b:02:ae:30:a8:7a:c8:8f:ec:ed:f6:57:c7:4c:
                    95:4d:ee:83:2c:9d:8a:b1:09:3a:1b:d5:90:aa:80:
                    f7:5c:41:10:0b:cd:52:03:45:14:94:71:d3:6a:bd:
                    57:29:5c:d4:b5:e5:5c:91:d4:e2:44:3d:3a:85:2c:
                    40:63:b6:a7:87:91:f1:d3:f5:8e:53:6c:6d:e0:30:
                    47:a5:70:df:ae:4f:d0:6e:99:93:66:5a:a5:57:d9:
                    29:aa:09:93:59:eb:6d:98:36:a0:cf:d4:30:91:48:
                    12:b5:20:ed:5c:3e:1c:b1:22:25:a8:94:6f:e9:b4:
                    f1:c3:3c:da:ad:85:e7:ec:8d:c6:26:2c:91:cc:0a:
                    97:1c:27:45:cb:c9:2f:95:5b:ad:bd:d0:9f:01:34:
                    e7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E7:D9:BB:3C:29:96:28:24:1E:C1:AD:0A:73:C5:31:2E:AB:6B:2D
            X509v3 Authority Key Identifier:
                keyid:94:52:6C:1C:EE:97:CC:0E:93:E7:50:7E:90:7F:EB:BE:B5:E2:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ece5cb3349a401474499eb301920b68090f2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/7a9e8ac54d505b5c41f40d0baf48105043622fd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/a0ece5cb3349a401474499eb301920b68090f2ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:efc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:53:bf:c3:3e:71:72:12:31:14:67:2e:b7:7d:d1:06:8a:52:
         24:75:89:11:2a:24:2e:ba:14:e1:43:56:19:43:c2:cf:0c:67:
         31:0d:2f:a7:4c:e9:d9:9a:17:c6:b8:16:da:b3:13:d7:8b:f0:
         c2:ab:db:f6:4b:dc:96:ba:aa:5d:ee:24:3f:3b:81:dc:ec:24:
         18:fc:1f:e7:97:cd:9c:d8:dd:11:5d:f7:de:1d:9c:e1:a6:82:
         4d:59:d4:d3:16:53:41:41:97:e3:c1:36:91:19:85:76:0f:e5:
         bd:4c:22:12:5a:6d:ef:1c:95:81:8b:07:54:64:b1:20:14:15:
         31:f2:38:51:80:8c:7a:2c:2b:3f:4a:36:8a:ab:ba:bf:51:20:
         11:d0:4e:04:30:c7:6e:61:f2:c2:45:22:39:60:a4:1a:18:7f:
         f8:f8:d0:89:42:fd:8f:70:2a:a0:b8:dc:72:f8:3b:05:a7:04:
         18:36:f8:0b:98:85:c3:6f:58:45:11:c0:e7:e2:e9:23:2c:aa:
         bb:82:cd:a6:82:69:18:b4:b6:82:24:57:f4:af:64:27:a3:8c:
         57:18:88:14:e4:da:13:23:ac:1e:29:26:8b:ef:21:9c:85:4c:
         b9:20:2b:43:1d:87:9c:70:b8:74:91:81:04:62:5f:e5:1f:8d:
         5a:ff:ed:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----