Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3dd161a7-6dca-445c-bdcf-55fb64e474f3/f18312b7f9ab542d519782aba7984fbc51e73239.roa
File:                     f18312b7f9ab542d519782aba7984fbc51e73239.roa (raw, json)
Hash identifier:          ZfGoyg29mUWxk0kIGPhLPWG+SdW1cJZv99iyqBOC65s=
Subject key identifier:   BD:9D:2B:E7:70:87:83:74:7A:01:8E:ED:8D:FD:30:E1:D1:8E:42:32
Certificate issuer:       /CN=6b5d884a539dc194148028738ffe2577e3a345c2
Certificate serial:       0452
Authority key identifier: FD:7E:40:C9:CB:F3:AD:08:C5:E6:2F:80:E8:AC:7B:32:B7:F3:7E:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b5d884a539dc194148028738ffe2577e3a345c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3dd161a7-6dca-445c-bdcf-55fb64e474f3/f18312b7f9ab542d519782aba7984fbc51e73239.roa
Signing time:             Mon 19 Apr 2021 14:19:30 +0000
ROA not before:           Mon 19 Apr 2021 03:00:00 +0000
ROA not after:            Wed 19 Apr 2023 03:00:00 +0000
asID:                     271901
IP address blocks:        2801:1de::/46 maxlen: 46

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1106 (0x452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5d884a539dc194148028738ffe2577e3a345c2
        Validity
            Not Before: Apr 19 03:00:00 2021 GMT
            Not After : Apr 19 03:00:00 2023 GMT
        Subject: CN=f18312b7f9ab542d519782aba7984fbc51e73239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:4d:ad:28:3d:69:e4:6c:10:bd:67:9c:7d:
                    35:19:2d:3c:53:14:27:35:64:8c:83:ef:2a:6a:9c:
                    22:9b:8d:92:91:9d:1d:60:85:80:53:ee:3f:f8:62:
                    54:13:7f:a0:09:ba:d0:b0:c9:9f:7b:43:8d:80:2e:
                    e4:5f:5e:0d:e7:83:a1:12:09:d6:8c:1d:27:c9:3f:
                    1c:aa:db:cc:47:a7:10:39:2d:99:ca:b6:9b:97:b8:
                    ca:39:9a:00:2b:b0:35:d0:74:d8:37:0f:3a:f3:43:
                    c6:c4:63:06:30:33:c2:d7:fa:80:59:3d:ef:2a:c6:
                    23:76:f7:10:7d:6d:88:24:ca:2b:95:fb:a4:9f:98:
                    d8:a8:52:4c:87:86:97:4c:7b:d2:91:22:fb:34:1b:
                    90:a4:ad:eb:4f:5e:20:ea:67:df:a0:73:9f:36:68:
                    ad:b5:d1:f3:56:d9:16:53:a7:88:bf:c7:be:a3:94:
                    85:5f:0c:f5:a4:c8:27:5c:01:ac:c5:5a:06:78:28:
                    ec:b5:7e:f8:3c:04:a4:81:d7:4c:b7:4e:aa:68:f0:
                    f7:db:7c:c3:61:2a:d7:3f:a1:8e:34:1c:1e:8b:44:
                    03:ef:b6:1e:ef:f4:19:35:6c:b9:db:0c:98:16:86:
                    10:ef:be:e2:bd:0c:71:e3:77:fd:30:fd:a0:1e:e2:
                    42:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9D:2B:E7:70:87:83:74:7A:01:8E:ED:8D:FD:30:E1:D1:8E:42:32
            X509v3 Authority Key Identifier:
                keyid:FD:7E:40:C9:CB:F3:AD:08:C5:E6:2F:80:E8:AC:7B:32:B7:F3:7E:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b5d884a539dc194148028738ffe2577e3a345c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3dd161a7-6dca-445c-bdcf-55fb64e474f3/f18312b7f9ab542d519782aba7984fbc51e73239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3dd161a7-6dca-445c-bdcf-55fb64e474f3/6b5d884a539dc194148028738ffe2577e3a345c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1de::/46

    Signature Algorithm: sha256WithRSAEncryption
         03:09:02:29:96:18:c6:7e:ad:52:19:36:cb:e9:31:1c:50:9a:
         48:f7:4e:40:4d:34:2e:1a:9d:da:1d:d4:44:10:12:fd:e6:c2:
         20:a4:ff:6d:66:40:e8:51:dd:05:0b:66:8e:77:ca:91:f1:65:
         1d:4a:b3:c6:10:cc:f7:ab:39:4e:82:25:d8:24:6d:07:6f:af:
         17:19:84:5a:b0:e0:c8:44:2f:5b:4a:26:b5:ca:b6:58:0e:0c:
         d4:d2:7d:36:77:c1:4b:66:0f:e8:2c:2a:c0:89:4b:eb:8b:f1:
         61:fa:eb:76:bf:b3:14:cb:0f:8f:b5:c3:51:6e:5b:be:91:82:
         02:10:9c:34:1b:6d:b7:ff:b0:1f:60:50:35:19:25:a0:e9:b6:
         51:d1:d5:cb:43:9d:28:7a:1d:7d:5d:21:06:45:df:57:71:9c:
         1d:87:ae:a9:1a:42:55:3a:4b:2c:59:7a:cb:81:fe:2b:19:e3:
         c7:fe:31:58:7b:40:91:01:1f:76:27:c2:3a:62:c3:f3:ca:bc:
         36:d7:32:3d:a2:a8:75:0a:4e:f3:e3:0b:1f:1f:d3:0e:03:e8:
         82:3f:e5:c9:97:e5:d9:ee:e8:95:83:c0:fb:09:4a:e5:23:1c:
         c7:b7:0a:fb:eb:c1:7e:48:7e:01:c4:4d:50:5a:0a:b3:e4:a4:
         54:0b:08:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----