Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3b886181-22f5-4068-b06e-1fbe606c5224/9b6153d02e6c999622bd1e558c2a9db01f8fc6ba.roa
File:                     9b6153d02e6c999622bd1e558c2a9db01f8fc6ba.roa (raw, json)
Hash identifier:          6SjKIHxjbKBh7dpgMWzyzv76V6Rvg/gNQDChc0TMG7g=
Subject key identifier:   E3:00:4A:FD:4D:68:8F:86:CD:18:A3:B0:85:F7:F3:43:FA:D2:4E:C3
Certificate issuer:       /CN=1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0
Certificate serial:       054F
Authority key identifier: 74:C0:3B:0A:A0:C8:09:2F:21:03:C5:F0:BD:82:24:8C:34:22:E8:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3b886181-22f5-4068-b06e-1fbe606c5224/9b6153d02e6c999622bd1e558c2a9db01f8fc6ba.roa
Signing time:             Wed 02 Feb 2022 15:05:25 +0000
ROA not before:           Wed 02 Feb 2022 03:00:00 +0000
ROA not after:            Fri 02 Feb 2024 03:00:00 +0000
asID:                     1239
IP address blocks:        2800:3e0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1359 (0x54f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0
        Validity
            Not Before: Feb  2 03:00:00 2022 GMT
            Not After : Feb  2 03:00:00 2024 GMT
        Subject: CN=9b6153d02e6c999622bd1e558c2a9db01f8fc6ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:83:1a:0b:f8:29:01:76:17:50:03:c4:8b:ef:
                    64:d9:4f:5d:31:73:26:ec:68:e4:e3:f7:1a:de:7f:
                    d6:02:14:1a:c9:2b:69:c9:78:92:d7:e0:c3:2e:30:
                    4a:00:bc:a2:07:ee:88:55:af:51:05:25:a0:1e:3b:
                    6f:c9:29:4d:2f:fe:f8:14:b6:8e:eb:0f:ee:e3:7b:
                    c9:aa:1e:5e:35:ac:26:fd:8c:04:ce:51:00:cd:81:
                    53:3c:84:ea:ae:1b:21:7f:cd:7d:85:62:db:86:7b:
                    d0:cb:19:9c:78:46:a5:8d:78:3a:53:44:13:8e:7e:
                    18:82:e4:3b:d7:22:a8:02:32:d1:9b:cd:be:8c:7e:
                    67:d3:67:35:19:b1:45:15:b0:6e:38:3e:b9:3f:06:
                    48:36:ff:bd:71:b0:37:48:4d:ed:c9:d3:ab:a5:51:
                    03:b4:c0:dd:fe:33:c3:12:a2:a1:8c:2d:c1:86:ee:
                    f1:73:b1:56:5e:8c:c4:a5:a2:86:11:ee:ba:e8:7d:
                    3f:0a:76:21:bf:fa:4b:94:93:8f:e6:d1:fe:9a:f4:
                    2e:6d:5e:95:e1:58:30:06:cd:8d:3b:ff:c7:60:42:
                    d2:a5:ec:ae:81:d7:36:0b:7e:5a:a2:79:35:4e:34:
                    1b:6f:4c:be:f4:cd:c0:05:07:fd:fa:b5:f2:6d:4b:
                    3e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:00:4A:FD:4D:68:8F:86:CD:18:A3:B0:85:F7:F3:43:FA:D2:4E:C3
            X509v3 Authority Key Identifier:
                keyid:74:C0:3B:0A:A0:C8:09:2F:21:03:C5:F0:BD:82:24:8C:34:22:E8:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3b886181-22f5-4068-b06e-1fbe606c5224/9b6153d02e6c999622bd1e558c2a9db01f8fc6ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3b886181-22f5-4068-b06e-1fbe606c5224/1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:91:16:9e:06:a4:41:f1:21:b2:da:a9:a0:23:f8:15:e5:f0:
         95:3e:c9:4b:49:f3:a4:20:14:67:04:f6:9e:ef:16:b4:6e:cd:
         4f:7f:1c:09:39:30:9a:90:49:e7:c9:87:d4:8b:b4:19:e7:2d:
         ac:e5:ee:94:e5:d2:f9:f8:35:7c:76:d6:17:40:30:58:1f:bb:
         5a:cb:c0:94:a7:c2:bf:5e:5d:d5:23:d0:5a:33:bb:fd:18:c3:
         d9:3d:5b:ca:1f:2c:07:ff:45:ba:3c:6b:05:ff:bf:96:52:d6:
         c1:cb:cd:81:16:26:34:e5:3e:dc:4d:dc:37:f0:1a:84:15:5e:
         d7:1c:18:05:54:c1:67:a9:2d:6e:a4:28:48:95:c5:49:9a:f8:
         73:ff:01:48:32:04:d2:62:86:77:46:eb:c7:67:93:bb:16:b2:
         b0:41:9c:97:53:81:cc:f3:4f:fb:f8:b4:e1:40:ff:be:a5:86:
         60:89:b6:7c:50:a2:71:33:50:ce:2c:c8:6a:b4:12:7e:21:40:
         4b:9a:f6:65:74:9f:11:a9:2f:53:c7:11:ba:02:90:6e:87:08:
         35:a0:e3:d9:d9:a5:40:14:8b:77:3c:c6:3e:0d:9a:35:29:9e:
         67:ce:90:89:39:05:5e:8d:7c:d3:aa:26:a8:01:22:d6:fc:40:
         77:84:9f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----