Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51df2027-9b4f-4cfe-a657-b7d2463525ee/279ba04db4e2da250c45039a8ccf4c515293f8ee.roa
File:                     279ba04db4e2da250c45039a8ccf4c515293f8ee.roa (raw, json)
Hash identifier:          KenviKkgirkbJn2p73Bga4WXKW9ccy8TVeyzpXGn0tM=
Subject key identifier:   C0:EF:AD:2F:33:E9:34:B1:C5:BF:77:A2:88:1E:C7:D3:7A:24:BC:63
Certificate issuer:       /CN=c1dc2333d1a049c4e8b328286573de8024220c17
Certificate serial:       0CB4A8
Authority key identifier: B5:79:94:3F:42:C6:25:1A:23:84:80:D5:12:8C:89:9B:97:3A:F0:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1dc2333d1a049c4e8b328286573de8024220c17.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51df2027-9b4f-4cfe-a657-b7d2463525ee/279ba04db4e2da250c45039a8ccf4c515293f8ee.roa
Signing time:             Wed 24 Mar 2021 14:46:23 +0000
ROA not before:           Wed 24 Mar 2021 14:46:22 +0000
ROA not after:            Tue 24 Mar 2026 14:46:22 +0000
asID:                     266831
IP address blocks:        2803:ca0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 832680 (0xcb4a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1dc2333d1a049c4e8b328286573de8024220c17
        Validity
            Not Before: Mar 24 14:46:22 2021 GMT
            Not After : Mar 24 14:46:22 2026 GMT
        Subject: CN=279ba04db4e2da250c45039a8ccf4c515293f8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:53:cb:8a:4d:4d:28:4a:db:0d:f0:67:a9:ae:
                    cc:38:d0:26:ec:9c:4d:b4:cc:63:3b:75:51:7c:8b:
                    4c:77:54:fa:d6:06:89:13:47:38:55:a8:68:33:a9:
                    6c:06:54:b9:d1:26:a7:d8:bb:2c:0a:0d:b1:7c:7f:
                    b1:fb:62:18:e1:fa:56:34:33:0d:81:cc:3e:9e:41:
                    51:7b:d9:07:17:a5:08:5d:83:ca:d2:06:b0:5f:b8:
                    e1:5b:06:85:54:4a:81:bb:b2:d9:ff:b9:07:c1:a6:
                    03:68:cd:86:06:7b:05:01:d1:d7:fa:21:27:ca:4a:
                    dd:77:1e:13:de:17:11:ae:c5:2d:cc:10:62:0e:2f:
                    09:09:c8:c9:57:1a:8d:0a:9d:f5:ba:39:fe:1d:d7:
                    fc:a0:f4:e4:3f:00:d7:0b:ce:92:10:b2:eb:d8:9c:
                    78:d4:35:e3:68:70:e2:0a:74:e7:85:b5:00:01:49:
                    77:3c:24:da:b2:c7:4d:40:53:e9:f3:54:29:74:cd:
                    8d:45:62:72:7c:69:13:04:ae:6a:8e:12:c0:5c:bf:
                    82:af:a9:01:bb:15:43:d1:bc:97:5f:69:6a:55:4c:
                    10:03:82:b4:99:6d:82:31:10:29:3f:da:89:7d:24:
                    97:e0:e7:14:da:51:03:ee:bd:99:f6:29:74:11:e6:
                    9e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EF:AD:2F:33:E9:34:B1:C5:BF:77:A2:88:1E:C7:D3:7A:24:BC:63
            X509v3 Authority Key Identifier:
                keyid:B5:79:94:3F:42:C6:25:1A:23:84:80:D5:12:8C:89:9B:97:3A:F0:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1dc2333d1a049c4e8b328286573de8024220c17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51df2027-9b4f-4cfe-a657-b7d2463525ee/279ba04db4e2da250c45039a8ccf4c515293f8ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51df2027-9b4f-4cfe-a657-b7d2463525ee/c1dc2333d1a049c4e8b328286573de8024220c17.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:2d:f5:d9:28:fa:b4:88:d3:82:c1:25:5e:4d:c5:bf:7a:e5:
         cc:ee:59:ee:72:dd:38:fb:c4:95:6d:f7:76:e2:d2:55:01:63:
         0e:cb:44:59:84:e4:26:50:1b:d3:1a:e3:90:b5:ad:2d:0e:12:
         0e:4f:d4:ca:d7:27:94:47:13:4a:fb:6e:df:74:d6:6e:f1:ee:
         3f:cc:32:1d:52:b0:92:24:1d:dc:27:9e:1b:ac:47:ca:94:e7:
         29:42:b6:0e:18:01:58:76:aa:74:3f:42:9f:ea:83:6b:0f:a1:
         25:2f:87:ba:4e:28:fa:8a:13:03:07:48:f6:39:3c:99:95:c3:
         9c:8f:3c:af:23:be:e4:a6:c4:de:68:60:87:7e:db:ec:4b:95:
         6c:43:11:b7:35:89:22:63:12:03:05:91:97:ba:71:63:1d:1f:
         71:1b:ef:b0:c7:8c:2a:26:a0:cc:bf:9d:9a:05:94:f2:fb:14:
         95:32:38:7d:23:e7:d9:e0:d4:ab:a3:96:6e:de:79:c0:40:c4:
         62:7d:5a:80:e0:f3:f4:13:fa:5e:96:9d:08:00:7d:f3:44:ae:
         e6:14:8a:02:d3:ed:40:6d:27:85:a4:43:58:1d:66:27:15:07:
         d9:15:ff:aa:24:25:34:b8:07:9e:ed:92:ba:15:4f:b7:64:27:
         33:5b:87:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----