Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/053ec72dae869df0a6fdabfc57240ff0791bbb93.roa
File:                     053ec72dae869df0a6fdabfc57240ff0791bbb93.roa (raw, json)
Hash identifier:          FBRPsXU5QpeJuExbo38gyODzi2mGnDD9/H0NbpzKEQ4=
Subject key identifier:   DD:3B:5C:FC:6B:3A:63:4D:1B:C8:0C:5F:FF:62:AF:A5:0D:BE:47:B4
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       0D8D51
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/053ec72dae869df0a6fdabfc57240ff0791bbb93.roa
Signing time:             Wed 24 Mar 2021 22:52:25 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     10697
IP address blocks:        2800:820:1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888145 (0xd8d51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=053ec72dae869df0a6fdabfc57240ff0791bbb93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cb:cf:72:0c:c8:c6:da:8a:43:49:b0:11:12:
                    b2:b0:72:14:94:e7:f3:db:d2:85:b4:49:0f:cb:72:
                    26:25:bd:b3:dc:dd:22:79:b2:17:7f:d6:2e:da:13:
                    7e:ae:be:31:88:2f:73:9d:15:05:b6:b3:20:7f:57:
                    aa:82:ad:2c:66:57:94:a7:b6:8a:23:7d:df:9f:dc:
                    c9:67:90:e2:14:d2:6d:1a:f1:fc:ac:b6:ea:3d:f8:
                    53:7a:35:f9:a4:52:25:64:1c:da:0b:0d:21:bc:f9:
                    85:59:dd:6c:82:9d:01:f4:79:d7:c6:8a:a7:13:a6:
                    50:9d:38:74:f7:13:d2:d7:c4:22:f7:11:9c:57:7c:
                    bd:28:5e:7f:b4:c6:c8:91:6d:f1:d6:06:e9:75:c1:
                    7b:6f:e3:c8:84:ac:11:9c:50:8c:bd:6e:46:16:6e:
                    fe:f9:9a:31:48:9d:b8:82:00:30:5e:54:76:6c:1b:
                    78:a0:ef:66:af:69:68:69:a5:2e:3d:8a:65:f9:fb:
                    ea:53:2c:1a:43:14:5e:98:47:a4:ee:f8:1a:d9:b5:
                    f2:02:d4:2f:63:85:ee:83:8c:4e:58:e6:22:6d:44:
                    86:ee:f3:bd:b2:63:55:38:c7:db:ca:e5:ad:8c:ad:
                    91:c5:33:c6:41:9a:31:40:0d:30:ce:4a:f7:a8:e2:
                    0b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3B:5C:FC:6B:3A:63:4D:1B:C8:0C:5F:FF:62:AF:A5:0D:BE:47:B4
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/053ec72dae869df0a6fdabfc57240ff0791bbb93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:820:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:28:cb:13:46:d3:b6:02:0c:f5:46:a9:07:a5:32:9b:14:3d:
         8e:76:aa:4f:6c:7e:aa:e5:8d:cf:55:03:62:10:dc:28:49:be:
         c6:21:8d:f7:5e:67:5a:83:a6:19:74:7f:92:d4:08:1e:6b:a1:
         f4:c8:1e:04:c6:9c:c2:5f:78:73:c5:c6:2f:f4:3b:4d:dc:16:
         80:30:61:2b:04:2e:2c:8c:72:66:b3:63:17:5a:5b:fa:00:21:
         ef:7b:29:3f:57:47:da:2f:9e:84:3d:f0:fd:eb:d4:a8:89:06:
         53:a9:31:68:33:2f:ae:23:ea:fe:b2:b1:e1:a1:a7:60:19:92:
         d2:b5:6d:8b:2c:7f:dc:72:e6:a8:d1:b5:2d:a6:3f:c0:af:62:
         a6:87:e0:4e:4c:46:6f:24:9f:ce:a8:eb:57:e0:93:06:b9:73:
         bd:fb:eb:a4:7c:48:2d:f4:78:7d:35:c1:e7:40:f7:68:93:a0:
         60:41:f2:d4:49:8c:e9:b7:ef:a5:f0:4c:b9:fb:01:b0:e5:88:
         a3:2f:63:61:4f:0e:b6:f8:34:d0:6a:d0:9e:c9:43:36:57:5e:
         29:2a:28:79:57:c6:6e:68:c3:a4:4b:cb:9e:6d:a4:23:5c:e6:
         ee:0f:ec:0b:90:93:72:80:9e:58:88:66:20:90:c6:36:77:19:
         98:1b:8e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----