Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3dd161a7-6dca-445c-bdcf-55fb64e474f3/8569a231173a7840f78f0a8d03cdd7847f180122.roa
File:                     8569a231173a7840f78f0a8d03cdd7847f180122.roa (raw, json)
Hash identifier:          t2hiRVzwYkFt8Z7ctIaKnm+NbzvKlKS11UlJBw3U9ko=
Subject key identifier:   BC:A6:5D:A9:2A:66:2A:4D:6D:2B:50:7E:7E:F5:17:1C:85:C2:EB:03
Certificate issuer:       /CN=6b5d884a539dc194148028738ffe2577e3a345c2
Certificate serial:       0D8A
Authority key identifier: FD:7E:40:C9:CB:F3:AD:08:C5:E6:2F:80:E8:AC:7B:32:B7:F3:7E:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b5d884a539dc194148028738ffe2577e3a345c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3dd161a7-6dca-445c-bdcf-55fb64e474f3/8569a231173a7840f78f0a8d03cdd7847f180122.roa
Signing time:             Mon 19 Apr 2021 14:20:21 +0000
ROA not before:           Mon 19 Apr 2021 03:00:00 +0000
ROA not after:            Wed 19 Apr 2023 03:00:00 +0000
asID:                     271901
IP address blocks:        2801:1de:4::/46 maxlen: 46

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3466 (0xd8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5d884a539dc194148028738ffe2577e3a345c2
        Validity
            Not Before: Apr 19 03:00:00 2021 GMT
            Not After : Apr 19 03:00:00 2023 GMT
        Subject: CN=8569a231173a7840f78f0a8d03cdd7847f180122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:99:c3:fb:33:bf:70:33:1b:10:08:0f:88:50:
                    24:99:ca:75:bb:ab:83:a2:4f:32:62:b8:90:b8:1c:
                    a0:ca:bd:ca:e3:89:a0:37:52:c8:88:6c:11:26:52:
                    b2:ad:9b:09:67:28:8b:7c:ed:b8:bb:71:90:1e:a2:
                    5c:31:99:f7:90:05:89:e3:78:08:8a:47:2e:26:0d:
                    98:ad:0f:07:98:2c:cb:85:40:5c:7b:87:b5:ae:d8:
                    17:91:c6:1b:f1:b0:fe:c2:0d:fb:39:00:65:d5:9a:
                    95:01:bf:c2:8d:3d:73:65:56:ea:10:38:0f:c3:7e:
                    e8:f1:61:59:68:c4:14:c3:4f:5f:e5:3c:6c:18:19:
                    ce:e9:9a:5a:fe:d4:7d:ea:1e:88:c5:b0:24:43:38:
                    91:f5:07:f9:c4:bc:15:47:57:21:ee:c1:65:fe:1a:
                    75:ea:c3:26:b3:52:d0:bb:07:26:cb:dc:d0:1a:90:
                    32:4b:77:3e:cc:ec:55:60:f4:01:c1:5e:10:35:58:
                    d0:80:e6:28:80:0b:3e:1a:de:2f:48:5f:32:7f:61:
                    f3:bf:27:ab:e3:29:bd:fd:c4:de:49:cf:a5:ab:4b:
                    06:39:d5:0e:12:e7:b0:2c:d9:bb:1c:30:d6:c0:7c:
                    f4:a8:ef:c0:68:2b:58:80:b4:dc:05:ee:86:15:f5:
                    c2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A6:5D:A9:2A:66:2A:4D:6D:2B:50:7E:7E:F5:17:1C:85:C2:EB:03
            X509v3 Authority Key Identifier:
                keyid:FD:7E:40:C9:CB:F3:AD:08:C5:E6:2F:80:E8:AC:7B:32:B7:F3:7E:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b5d884a539dc194148028738ffe2577e3a345c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3dd161a7-6dca-445c-bdcf-55fb64e474f3/8569a231173a7840f78f0a8d03cdd7847f180122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3dd161a7-6dca-445c-bdcf-55fb64e474f3/6b5d884a539dc194148028738ffe2577e3a345c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1de:4::/46

    Signature Algorithm: sha256WithRSAEncryption
         50:29:c6:92:b8:1e:49:04:41:0d:f4:95:83:86:77:78:39:90:
         48:8b:e4:5f:7c:c7:a8:f8:34:3b:e7:30:0c:19:10:61:15:6c:
         03:b4:c5:b9:0c:8f:74:66:38:ef:29:c2:2a:d1:8d:e1:97:e2:
         0b:35:50:5a:62:96:9e:9b:b6:e9:cd:a3:c4:3e:8c:2f:2a:39:
         1c:25:e5:b6:58:59:76:41:5c:2d:a3:7c:b8:7b:9c:d7:8e:54:
         54:fb:3e:15:37:60:83:93:74:75:96:22:8a:29:ee:54:40:94:
         50:ad:10:3f:a7:29:7f:90:ab:e2:ac:ae:ee:9f:65:51:93:fd:
         2f:91:1f:8b:d3:8d:70:76:3b:e6:e6:a5:65:5e:9e:1d:91:e8:
         65:b8:d2:99:e8:f1:11:9a:9b:4b:3e:c5:0e:b0:2f:c8:24:27:
         db:79:5e:93:c4:c5:22:b5:59:b9:35:ea:e9:ab:1b:b8:d6:f9:
         5f:7a:37:a0:0c:ea:53:47:89:20:88:df:94:ae:be:bb:1a:bb:
         d3:9b:3c:f5:7b:80:6f:b6:11:ea:7c:a3:f3:f5:bc:2b:d3:e3:
         de:c5:f5:b7:17:a7:57:9a:64:3f:13:d7:0b:f7:56:2b:05:f5:
         0d:33:f8:69:3b:32:f3:29:17:a5:57:73:44:dd:fe:60:58:92:
         ae:02:41:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----