Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/3d1ad7cd90721ed0a043a4e23740dd0103b164a3.roa
File:                     3d1ad7cd90721ed0a043a4e23740dd0103b164a3.roa (raw, json)
Hash identifier:          xQHAxgD35/K0n30EGzyIMUSFdGi3mDU8RVAUVXbWaIM=
Subject key identifier:   3B:C7:56:46:A6:4B:5A:5F:48:A8:71:42:A3:1C:2C:6C:9E:22:DB:99
Certificate issuer:       /CN=bd9e7183ffaa02803fe68e22a1e77851adb2eb28
Certificate serial:       0D46A2
Authority key identifier: EA:6A:E3:33:73:C2:63:42:3A:F7:72:55:2C:65:79:D6:C9:B2:02:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/3d1ad7cd90721ed0a043a4e23740dd0103b164a3.roa
Signing time:             Wed 24 Mar 2021 14:46:14 +0000
ROA not before:           Wed 24 Mar 2021 14:46:13 +0000
ROA not after:            Tue 24 Mar 2026 14:46:13 +0000
asID:                     266784
IP address blocks:        2803:a0:1000::/36 maxlen: 36
                          2803:a0:2000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870050 (0xd46a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd9e7183ffaa02803fe68e22a1e77851adb2eb28
        Validity
            Not Before: Mar 24 14:46:13 2021 GMT
            Not After : Mar 24 14:46:13 2026 GMT
        Subject: CN=3d1ad7cd90721ed0a043a4e23740dd0103b164a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:d5:44:7c:96:d2:4b:d4:05:a5:a2:82:5b:
                    8a:fc:12:3e:76:53:e9:67:4f:66:93:c8:f2:c5:a5:
                    ff:d2:39:71:8c:d4:a2:21:48:6b:a3:7d:c2:90:aa:
                    40:6d:f3:87:36:52:6b:ea:78:66:a8:f2:94:46:00:
                    28:fe:66:d4:00:78:39:5a:cd:4e:86:cb:b5:85:f3:
                    13:40:3f:11:5f:a5:04:fe:68:cf:9b:d9:f7:e8:05:
                    7e:42:d8:a4:8a:4e:e2:e1:80:c7:aa:39:58:5f:f4:
                    af:36:59:bc:c3:5f:d3:a5:54:d9:2e:03:c6:ca:92:
                    6d:11:8f:4c:06:a9:65:ef:a0:9f:67:2c:55:f3:59:
                    5b:c4:58:dd:73:93:3f:8d:88:b5:cf:87:36:02:49:
                    f3:b3:57:99:52:61:7a:46:64:38:25:78:c3:1a:71:
                    29:0a:35:2a:3f:0f:3a:5b:ed:7e:83:05:70:75:87:
                    05:08:6d:23:44:9a:76:05:54:39:df:68:bd:c2:f1:
                    2d:e8:fc:89:4e:10:fc:cf:53:18:ad:8d:67:13:2d:
                    31:f8:7a:fc:8d:e1:e7:59:cd:79:3a:d3:20:1a:26:
                    25:54:53:d5:c3:e9:15:f7:ae:6e:cc:96:78:38:12:
                    07:8f:5b:67:81:52:58:f5:41:4a:07:a3:a9:ab:cf:
                    c2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C7:56:46:A6:4B:5A:5F:48:A8:71:42:A3:1C:2C:6C:9E:22:DB:99
            X509v3 Authority Key Identifier:
                keyid:EA:6A:E3:33:73:C2:63:42:3A:F7:72:55:2C:65:79:D6:C9:B2:02:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/3d1ad7cd90721ed0a043a4e23740dd0103b164a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a0:1000::-2803:a0:2fff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         1e:e4:1c:f3:7e:7b:70:d8:f5:be:d0:f1:9d:b0:41:65:56:39:
         02:db:7e:95:fc:69:4d:f5:81:6a:c4:77:9c:88:ca:66:b6:6e:
         6d:cf:7b:95:3a:48:5b:fa:3c:92:79:da:6c:ff:b1:cb:b9:69:
         95:dc:e2:08:a9:eb:45:9e:5e:a5:36:5c:df:18:80:5f:d2:83:
         ca:57:0a:3d:49:e0:6b:72:1d:c8:ca:7a:21:62:a9:2d:4a:4e:
         34:45:97:6a:2b:f0:cc:45:68:fb:f6:70:ae:6d:38:cd:aa:a9:
         6d:6d:50:39:9d:71:c2:1f:ba:b2:7a:85:9f:1e:6e:f0:d9:af:
         09:42:93:6e:8e:de:21:71:3f:cc:5c:59:36:da:5a:ad:50:11:
         45:7a:d8:7b:4b:8f:2b:fb:d3:59:b5:f8:88:40:72:0d:c2:8d:
         63:13:79:c7:0a:b1:be:e9:af:9f:59:b7:a9:9e:c2:39:f1:f1:
         5f:df:f1:06:d5:c9:4e:c4:6c:18:81:b4:22:17:20:78:eb:dc:
         9f:6e:6e:1d:77:c0:3f:dc:46:66:aa:02:e6:67:43:d1:1c:d6:
         3d:1d:75:9c:a6:de:cb:a4:7c:77:42:c6:e0:7a:cc:ed:58:10:
         44:b5:ff:df:88:6a:56:52:4d:40:2f:b1:1b:23:4f:56:ae:0b:
         84:7b:50:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----