Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/31621eb3-667d-4863-af6c-aabaad1702ae/03708821cbd0713283f675a21b6fc2ead0bc8377.roa
File:                     03708821cbd0713283f675a21b6fc2ead0bc8377.roa (raw, json)
Hash identifier:          MrJvD+zMVp42XWs2EpmwWbERwKCtPraJwPzrOSdbdkA=
Subject key identifier:   DD:0D:B9:0A:6B:BE:E7:E4:5F:6E:EC:7A:F5:1E:0E:96:2E:36:85:80
Certificate issuer:       /CN=19a6770642a7f62438844f2150c23549fbf147d6
Certificate serial:       07D304
Authority key identifier: A4:81:BE:9F:46:5E:E7:A9:C4:F9:E6:88:1C:FB:5B:9E:2B:9F:46:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19a6770642a7f62438844f2150c23549fbf147d6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/31621eb3-667d-4863-af6c-aabaad1702ae/03708821cbd0713283f675a21b6fc2ead0bc8377.roa
Signing time:             Wed 24 Mar 2021 14:30:38 +0000
ROA not before:           Wed 24 Mar 2021 14:30:38 +0000
ROA not after:            Tue 24 Mar 2026 14:30:38 +0000
asID:                     15169
IP address blocks:        2800:3f0:4001::/48 maxlen: 48
                          2800:3f0:4002::/48 maxlen: 48
                          2800:3f0:4003::/48 maxlen: 48
                          2800:3f0:4004::/48 maxlen: 48
                          2800:3f0:4005::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512772 (0x7d304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19a6770642a7f62438844f2150c23549fbf147d6
        Validity
            Not Before: Mar 24 14:30:38 2021 GMT
            Not After : Mar 24 14:30:38 2026 GMT
        Subject: CN=03708821cbd0713283f675a21b6fc2ead0bc8377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d9:d5:91:67:ec:24:f5:fc:94:ae:3e:39:83:
                    c1:97:4e:d7:72:54:0a:72:60:fb:98:9f:d6:f0:f5:
                    47:9b:ec:82:81:a9:5e:10:95:ef:36:6c:4e:fc:0c:
                    17:f3:48:78:ea:93:83:39:89:89:d4:35:13:7d:68:
                    4f:a3:0d:26:a8:a0:10:02:10:d0:05:82:2d:b3:1f:
                    5c:e8:b6:2d:5f:0d:3c:be:d0:d9:03:12:89:4c:03:
                    48:9e:4f:5e:5e:b9:bf:94:c2:85:d1:a7:ee:f2:ef:
                    85:07:35:10:88:1d:1d:01:b5:9b:bc:44:50:83:e4:
                    80:08:16:ee:8b:a0:ac:89:47:c4:4f:bf:d7:5f:ec:
                    35:42:6d:a9:ab:10:c4:69:5c:86:3f:5b:86:29:a3:
                    09:8e:22:55:8c:8b:53:cd:b9:80:d3:c2:47:9c:dc:
                    4f:f1:88:67:74:db:7a:b5:de:13:46:4e:c3:35:fe:
                    3a:26:4a:1c:5e:f6:56:bc:05:f7:3e:d2:0a:d2:15:
                    55:f8:a1:30:36:c7:cc:8c:ea:b7:88:00:c9:b7:12:
                    40:00:86:7a:6e:bb:90:f6:3e:58:5d:07:2b:8f:3e:
                    46:07:ca:03:64:62:53:f6:9f:d2:54:c0:08:da:7c:
                    23:dd:bf:e0:1c:5e:5f:a9:81:11:fe:33:29:f7:b8:
                    91:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0D:B9:0A:6B:BE:E7:E4:5F:6E:EC:7A:F5:1E:0E:96:2E:36:85:80
            X509v3 Authority Key Identifier:
                keyid:A4:81:BE:9F:46:5E:E7:A9:C4:F9:E6:88:1C:FB:5B:9E:2B:9F:46:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19a6770642a7f62438844f2150c23549fbf147d6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/31621eb3-667d-4863-af6c-aabaad1702ae/03708821cbd0713283f675a21b6fc2ead0bc8377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/31621eb3-667d-4863-af6c-aabaad1702ae/19a6770642a7f62438844f2150c23549fbf147d6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3f0:4001::-2800:3f0:4005:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         93:2a:66:59:16:85:48:69:e8:87:9c:39:27:06:7d:92:a8:bb:
         31:e3:75:87:df:7b:12:2f:9a:6e:78:bc:95:e5:3c:e8:d5:e5:
         9b:3f:49:e6:11:4f:18:c6:54:4f:bb:79:7f:de:fa:24:03:a5:
         6a:4a:07:dd:38:12:15:a6:d6:87:e9:93:80:17:a8:b9:ec:6e:
         eb:a2:d6:a0:29:1a:2c:70:8d:e8:c0:18:03:3b:4f:24:0d:7a:
         79:7d:4d:da:aa:22:bc:12:4e:f7:e7:4e:c5:e0:07:9c:49:3b:
         8e:1c:b8:69:cd:b7:bd:e1:61:3e:ba:07:a1:de:36:65:72:f7:
         21:6a:47:a0:a0:57:a9:a9:f4:03:36:02:09:87:d1:d6:24:f2:
         12:00:fc:70:c0:28:83:5d:ec:ac:fe:5c:5b:c2:a0:e6:31:8a:
         6d:2b:42:f0:88:eb:39:c0:70:8d:1d:53:23:d7:c9:10:e4:b9:
         15:7c:38:14:ee:c3:5c:c5:7a:b9:06:2f:f4:f0:b0:eb:a0:60:
         bb:a2:68:1c:5c:01:81:0c:75:49:b8:c8:69:69:8b:b3:8a:22:
         51:b1:e6:25:c7:54:d1:dd:2a:d5:d3:5f:e9:7f:a7:e9:37:3c:
         e2:b3:97:9d:c1:68:34:b5:dc:15:89:6e:d6:5f:98:13:f8:48:
         68:0a:65:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----