Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/31621eb3-667d-4863-af6c-aabaad1702ae/a7f1e35a5618b73316baebb0b26d8732d805c1da.roa
File:                     a7f1e35a5618b73316baebb0b26d8732d805c1da.roa (raw, json)
Hash identifier:          KA0k2eEZYp3xB3gobdafuy3WZVDkF5ALdWI4fJICkWk=
Subject key identifier:   40:28:D7:DD:FE:D2:B9:35:2D:FA:D9:7F:B5:15:69:46:E4:A2:CA:C6
Certificate issuer:       /CN=19a6770642a7f62438844f2150c23549fbf147d6
Certificate serial:       07CF7D
Authority key identifier: A4:81:BE:9F:46:5E:E7:A9:C4:F9:E6:88:1C:FB:5B:9E:2B:9F:46:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19a6770642a7f62438844f2150c23549fbf147d6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/31621eb3-667d-4863-af6c-aabaad1702ae/a7f1e35a5618b73316baebb0b26d8732d805c1da.roa
Signing time:             Wed 24 Mar 2021 14:30:38 +0000
ROA not before:           Wed 24 Mar 2021 14:30:38 +0000
ROA not after:            Tue 24 Mar 2026 14:30:38 +0000
asID:                     15169
IP address blocks:        2800:3f0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511869 (0x7cf7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19a6770642a7f62438844f2150c23549fbf147d6
        Validity
            Not Before: Mar 24 14:30:38 2021 GMT
            Not After : Mar 24 14:30:38 2026 GMT
        Subject: CN=a7f1e35a5618b73316baebb0b26d8732d805c1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4c:6e:c4:4b:e0:6e:63:b1:19:0e:5b:0f:cd:
                    0b:a0:46:32:49:c7:65:7d:ca:67:61:36:99:5d:fe:
                    a1:0c:f7:ce:62:70:d1:94:1d:63:8e:bc:ab:f3:14:
                    00:a7:0a:c1:cb:d9:38:db:1a:44:e5:c6:08:da:77:
                    33:05:d6:7b:75:5c:9e:ef:e8:66:06:72:41:8e:26:
                    cc:c5:0a:11:9d:92:e8:b7:dc:68:f2:1b:c5:ea:86:
                    58:45:f9:fd:32:47:0d:5e:12:d5:c9:5a:60:f0:dd:
                    46:6b:aa:04:3c:f3:c7:6f:1d:02:11:53:97:07:bd:
                    23:f5:ff:97:df:de:0f:14:0e:76:87:5a:58:54:aa:
                    9c:44:c7:d5:41:84:f6:46:94:f2:0f:b4:92:a2:c8:
                    34:e4:c4:fe:f2:0a:9f:a9:62:83:6e:23:08:c1:18:
                    11:0e:68:54:a5:28:79:17:f4:8d:63:13:64:44:a7:
                    e4:71:d4:62:cd:89:ec:4b:22:ed:4a:a7:dd:0a:eb:
                    71:cb:54:15:ef:60:0b:8a:8b:bc:98:b8:78:ed:be:
                    27:01:13:37:eb:3f:65:3b:10:08:27:fb:ba:ff:4d:
                    ee:4f:50:7a:a0:5b:44:91:5c:b1:58:75:cf:b6:15:
                    18:26:47:e2:f8:be:4d:e5:3a:01:9b:b2:87:c3:0e:
                    f2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:28:D7:DD:FE:D2:B9:35:2D:FA:D9:7F:B5:15:69:46:E4:A2:CA:C6
            X509v3 Authority Key Identifier:
                keyid:A4:81:BE:9F:46:5E:E7:A9:C4:F9:E6:88:1C:FB:5B:9E:2B:9F:46:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19a6770642a7f62438844f2150c23549fbf147d6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/31621eb3-667d-4863-af6c-aabaad1702ae/a7f1e35a5618b73316baebb0b26d8732d805c1da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/31621eb3-667d-4863-af6c-aabaad1702ae/19a6770642a7f62438844f2150c23549fbf147d6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:03:71:98:fb:36:d9:48:c8:94:9b:d8:7a:22:fc:d2:4d:a6:
         ef:5d:90:58:e4:2f:32:29:dc:68:b4:bf:05:47:8b:63:f2:f1:
         c4:1b:d8:47:f3:b7:f8:dc:9e:85:b7:70:e4:f4:ad:f6:93:35:
         ed:e6:af:c0:ab:b0:49:0d:fa:d1:e3:c8:a9:e9:15:c9:98:fe:
         46:98:77:6b:77:58:8b:72:01:47:2b:2e:1c:0c:ac:cb:27:70:
         e8:27:e3:57:78:65:6a:9b:37:87:5c:28:de:9e:5b:d2:d1:9a:
         ec:35:78:de:28:65:41:37:27:6a:a7:e6:65:58:04:42:ee:0a:
         49:88:14:a2:c4:16:b4:ab:11:7c:97:e1:03:90:61:06:4e:54:
         22:f3:b4:7f:50:00:31:4f:40:e3:12:2e:a3:a6:2f:85:f8:db:
         d7:9f:fd:15:d3:72:9c:6a:4d:dd:54:48:2c:b2:8b:a2:2e:2c:
         ea:4c:68:48:86:ef:85:c7:98:5a:85:b3:09:2e:4e:64:f7:b0:
         6d:bb:03:19:06:9d:26:89:cb:f1:55:f3:40:99:a8:0b:39:ea:
         32:5c:31:db:2a:d1:93:5e:c9:be:74:9c:68:80:e6:06:a1:89:
         9d:f7:c4:0a:5e:c7:48:39:1f:60:23:e1:92:f5:76:4e:60:1f:
         5b:22:1f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----