Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/4b649873729165e9f74b5d5ec477ee63d3d6b2ef.roa
File:                     4b649873729165e9f74b5d5ec477ee63d3d6b2ef.roa (raw, json)
Hash identifier:          rPxSxPi6Ip7A0OXPOlAqbjQvH98qVruGXtep2mKx8H8=
Subject key identifier:   AC:B1:9B:96:2B:A5:70:AC:03:F0:71:8C:7A:D5:0C:1C:D3:DC:46:28
Certificate issuer:       /CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
Certificate serial:       0D4AB7
Authority key identifier: 08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/4b649873729165e9f74b5d5ec477ee63d3d6b2ef.roa
Signing time:             Wed 24 Mar 2021 14:47:21 +0000
ROA not before:           Wed 24 Mar 2021 14:47:21 +0000
ROA not after:            Tue 24 Mar 2026 14:47:21 +0000
asID:                     27717
IP address blocks:        2800:930::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871095 (0xd4ab7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
        Validity
            Not Before: Mar 24 14:47:21 2021 GMT
            Not After : Mar 24 14:47:21 2026 GMT
        Subject: CN=4b649873729165e9f74b5d5ec477ee63d3d6b2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:ab:0a:da:e1:2e:c2:14:db:8b:19:d4:fe:
                    2e:d9:70:2e:83:ab:10:b7:2a:a0:9a:08:ae:a8:98:
                    e8:b2:df:56:c1:74:4c:0b:45:b0:42:39:60:b2:50:
                    dc:af:da:7a:f1:c2:86:35:12:4e:68:c0:c9:10:db:
                    73:5b:9e:7c:9b:b0:b2:3b:cc:86:e6:6f:da:57:ce:
                    31:81:91:6f:75:07:73:f3:f5:e0:c5:66:d2:c9:52:
                    46:dd:62:fe:25:e7:f6:e2:b8:ed:ad:55:30:88:5a:
                    07:f7:d4:cc:98:5c:71:c0:7f:cd:40:41:d9:44:ee:
                    07:bb:ca:dc:98:1f:4d:7f:0b:c2:af:6a:08:b5:0d:
                    34:db:7e:33:68:9a:9b:8b:cd:c2:09:50:31:67:08:
                    31:5c:f4:00:b2:08:b6:e9:8d:b3:7a:f0:d6:1f:ef:
                    31:f9:9e:bc:fd:2f:d9:ca:6d:a0:1f:bb:5a:9e:23:
                    06:b5:41:2b:17:4f:47:3d:69:29:3b:9e:80:0b:c8:
                    b3:44:1c:07:bc:21:3d:39:c5:9c:c1:0d:d3:c2:0e:
                    1d:67:5e:0f:78:8c:fc:21:db:e5:da:48:16:60:1a:
                    13:c0:b6:80:f1:92:b0:8f:7a:71:a4:e4:9e:e9:3c:
                    7d:06:36:42:7f:b6:05:f3:84:1a:aa:a5:88:68:b0:
                    b4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B1:9B:96:2B:A5:70:AC:03:F0:71:8C:7A:D5:0C:1C:D3:DC:46:28
            X509v3 Authority Key Identifier:
                keyid:08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/4b649873729165e9f74b5d5ec477ee63d3d6b2ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/96fbc1b8c542f9384f9a2004e66a61080248cdc6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:930::/29

    Signature Algorithm: sha256WithRSAEncryption
         34:9e:8d:ae:16:9f:07:ce:6b:70:65:6b:12:fa:0f:3b:5b:e5:
         5b:1d:ce:38:f8:33:bd:68:f8:94:62:ae:20:73:b9:be:ea:27:
         d5:9a:7e:b8:4e:12:da:92:d7:08:02:8c:c9:c8:61:e1:ce:8d:
         a5:57:92:b5:f3:d7:a0:d7:7e:09:69:6e:97:9c:19:1c:cf:44:
         1e:26:bf:71:a8:ff:c5:78:7b:75:89:7e:5a:ed:18:e8:41:2f:
         90:a1:67:26:84:ee:65:65:24:6c:bc:d2:58:78:8b:be:76:8d:
         d4:d6:e3:fd:c8:b8:b6:d5:cf:d3:0a:6b:61:90:78:45:93:f2:
         db:06:b2:96:d7:55:00:d3:ba:c3:c6:d4:85:05:9f:64:4f:67:
         e0:7b:d4:cb:8c:e3:d7:b7:e1:ee:ed:06:22:78:7e:60:85:55:
         2a:0c:42:c5:2b:0e:eb:b4:db:2a:18:ee:28:da:f4:0f:6e:b9:
         2b:d5:6a:da:24:82:59:a3:96:dd:ca:bb:80:ab:b6:e0:d3:3d:
         19:e3:87:0e:b1:a5:c5:3f:27:ac:fd:3a:c2:5b:7c:f3:7a:d0:
         53:9e:a8:06:a0:23:d7:ec:39:10:24:18:9a:26:22:53:ea:d8:
         84:f8:df:21:1b:e0:c5:fd:ce:0d:11:37:8d:65:8e:6b:dd:16:
         a6:26:da:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----