Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f382b92-f970-4d47-8d80-7b4255bd2a92/c2f05e22eee20972133c536bcaefd56b2e6b467f.roa
File:                     c2f05e22eee20972133c536bcaefd56b2e6b467f.roa (raw, json)
Hash identifier:          lwpNvyL4hnEadAX7YSKo3xtXPgD82EHRVfDd9R32txg=
Subject key identifier:   1D:6B:5E:E3:D0:09:D5:86:AF:9D:46:0F:E5:A2:E1:0A:B9:B5:62:72
Certificate issuer:       /CN=83224a116c610d8fbb400355d82709d9c5e1946b
Certificate serial:       0B035C
Authority key identifier: EC:05:27:23:42:39:9D:9B:DE:0A:53:2D:0D:6E:1A:64:2C:1B:B1:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83224a116c610d8fbb400355d82709d9c5e1946b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3f382b92-f970-4d47-8d80-7b4255bd2a92/c2f05e22eee20972133c536bcaefd56b2e6b467f.roa
Signing time:             Wed 24 Mar 2021 14:41:12 +0000
ROA not before:           Wed 24 Mar 2021 14:41:11 +0000
ROA not after:            Tue 24 Mar 2026 14:41:11 +0000
asID:                     269838
IP address blocks:        2803:1f60::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 721756 (0xb035c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83224a116c610d8fbb400355d82709d9c5e1946b
        Validity
            Not Before: Mar 24 14:41:11 2021 GMT
            Not After : Mar 24 14:41:11 2026 GMT
        Subject: CN=c2f05e22eee20972133c536bcaefd56b2e6b467f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:02:a0:bc:f9:a4:75:79:32:c1:1e:c5:16:a7:
                    88:e1:e9:5f:a5:56:d0:de:47:92:ef:e7:6c:24:19:
                    7b:ac:19:19:bc:65:f5:e1:fa:16:80:6f:22:88:28:
                    4f:8b:f0:d2:c0:ec:02:67:50:a4:10:2e:f1:34:3a:
                    da:02:8e:43:e3:03:39:60:1d:c5:8f:cd:00:7f:12:
                    27:8c:75:d4:30:9f:dc:7a:7c:46:4e:fb:45:00:8d:
                    13:85:a4:c6:f9:46:22:13:e4:60:ed:6e:ba:d6:99:
                    36:e2:b0:d6:5b:78:3c:2b:80:06:2b:3c:d3:b0:de:
                    e4:eb:46:e7:6a:6b:ae:c2:13:41:33:a8:b6:00:af:
                    61:0a:64:8a:28:93:15:18:26:15:6c:dc:e7:b1:2f:
                    0d:7e:d5:3d:0b:5b:84:43:bb:2d:82:ef:6b:4e:fd:
                    3c:57:6b:82:9b:26:cc:9e:8d:f7:80:a1:bf:b1:12:
                    cc:1d:98:ea:f7:05:36:f2:37:df:87:54:a7:d6:b6:
                    7c:77:28:b9:50:dc:41:14:82:07:8e:27:71:57:e3:
                    3a:c2:c1:90:b2:39:f3:6e:01:51:cc:f3:70:53:2c:
                    1a:63:a2:11:50:21:89:f3:e3:79:3f:89:0e:a1:65:
                    c3:d3:ef:4f:0f:55:71:5f:38:db:ce:71:bf:05:55:
                    ca:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6B:5E:E3:D0:09:D5:86:AF:9D:46:0F:E5:A2:E1:0A:B9:B5:62:72
            X509v3 Authority Key Identifier:
                keyid:EC:05:27:23:42:39:9D:9B:DE:0A:53:2D:0D:6E:1A:64:2C:1B:B1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83224a116c610d8fbb400355d82709d9c5e1946b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f382b92-f970-4d47-8d80-7b4255bd2a92/c2f05e22eee20972133c536bcaefd56b2e6b467f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3f382b92-f970-4d47-8d80-7b4255bd2a92/83224a116c610d8fbb400355d82709d9c5e1946b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:65:1b:5b:00:78:6a:54:b0:df:c7:fe:95:e1:98:0b:18:04:
         c5:02:cd:45:a2:18:1a:c8:4a:9e:ee:dd:4c:cf:28:0a:8c:2f:
         bc:21:bf:f7:0c:25:f4:2d:f7:b7:7c:52:c4:af:75:a3:2e:17:
         ea:49:89:be:05:40:01:33:29:fc:f5:cb:b3:d8:de:59:94:b1:
         ed:ff:a5:51:84:cb:71:1d:9c:cb:5f:3b:29:b7:84:c5:cc:fa:
         3c:37:92:f6:82:8b:d4:f8:1e:c6:26:be:29:ab:74:e5:13:8b:
         82:8b:fe:30:29:fe:a7:27:75:b3:02:68:6c:e2:aa:fa:d2:42:
         a4:71:1e:2c:f3:48:65:e8:62:e2:96:47:82:3f:58:47:76:3d:
         53:b3:fb:c5:44:37:bb:83:d1:68:d5:3e:1b:6a:b0:57:de:37:
         0a:eb:be:06:ec:76:c6:5d:f6:d5:63:29:78:9d:00:79:56:71:
         57:ea:25:db:18:bd:44:67:c9:6c:b3:6e:66:68:15:17:dc:51:
         a6:7a:38:f3:72:14:14:65:de:9d:96:a9:73:67:2e:30:23:36:
         10:ef:b2:b1:6b:6c:a9:ef:78:83:4f:fc:de:87:09:3c:c2:a1:
         98:8d:4b:7d:d0:cd:ca:d4:2a:0b:1b:8e:2f:29:8e:de:c3:6f:
         21:34:7b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----