Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/530e464d4c7eeab66ec3b20147bb6e1ce7bf9ade.roa
File:                     530e464d4c7eeab66ec3b20147bb6e1ce7bf9ade.roa (raw, json)
Hash identifier:          HJxgkXPa8/9SMkIdp4D4NaYnAiEJ+VQ3wFXl/xFxl5U=
Subject key identifier:   DE:50:A7:A8:88:C2:DE:4C:6A:99:A7:AD:DE:FD:FA:10:3F:C7:3F:22
Certificate issuer:       /CN=b0aa757766600ae92f780498bacfcff9762981a2
Certificate serial:       0D892D
Authority key identifier: 11:B2:C6:EC:B1:C2:E0:CA:EE:F2:27:05:A1:35:3B:85:FF:B0:E9:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0aa757766600ae92f780498bacfcff9762981a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/530e464d4c7eeab66ec3b20147bb6e1ce7bf9ade.roa
Signing time:             Wed 24 Mar 2021 14:33:05 +0000
ROA not before:           Wed 24 Mar 2021 14:33:05 +0000
ROA not after:            Tue 24 Mar 2026 14:33:05 +0000
asID:                     262239
IP address blocks:        2803:9a00:17f::/48 maxlen: 64

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 16:04:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887085 (0xd892d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0aa757766600ae92f780498bacfcff9762981a2
        Validity
            Not Before: Mar 24 14:33:05 2021 GMT
            Not After : Mar 24 14:33:05 2026 GMT
        Subject: CN=530e464d4c7eeab66ec3b20147bb6e1ce7bf9ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:bf:c3:0c:8c:e3:44:8c:9b:91:d2:77:dd:68:
                    2c:7b:f1:71:28:d6:c9:15:f3:48:8e:fc:ff:af:fb:
                    cc:cd:bd:44:2a:26:ae:1e:12:9f:d7:2e:6a:ee:d8:
                    3a:74:48:1d:72:2f:ee:4c:f6:7a:5d:71:50:a4:e3:
                    da:44:c2:15:96:ef:03:34:d5:57:f7:ea:07:85:2e:
                    4b:cf:e5:0d:ca:88:d1:bc:fc:5b:fe:5d:7a:15:b0:
                    57:8b:ca:5b:e8:27:5d:9d:74:0d:44:64:e9:55:eb:
                    6a:ba:fc:75:35:9f:0d:d2:eb:bb:55:53:1e:70:81:
                    2f:ec:23:f0:30:92:7f:7d:99:c7:13:7e:1b:f8:3e:
                    42:70:b5:ba:1b:9f:98:a2:22:76:75:30:b7:5b:8a:
                    87:e3:07:91:ea:b5:ef:20:c6:bc:78:1c:c7:56:4c:
                    e8:36:af:3e:71:40:f9:b0:20:9d:76:3f:84:53:77:
                    97:a2:eb:fb:77:6d:e0:34:79:c8:d6:9f:1d:71:f1:
                    1a:bc:3a:e6:78:0d:f8:01:00:14:45:89:04:75:81:
                    04:0b:fa:70:5f:c7:4c:b3:bd:21:37:64:10:83:dc:
                    1f:f5:6c:1f:ec:c1:c3:c2:67:df:41:72:66:91:cd:
                    78:c3:6d:65:3b:08:88:bd:09:2f:95:1c:da:c7:c1:
                    4e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:50:A7:A8:88:C2:DE:4C:6A:99:A7:AD:DE:FD:FA:10:3F:C7:3F:22
            X509v3 Authority Key Identifier:
                keyid:11:B2:C6:EC:B1:C2:E0:CA:EE:F2:27:05:A1:35:3B:85:FF:B0:E9:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0aa757766600ae92f780498bacfcff9762981a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/530e464d4c7eeab66ec3b20147bb6e1ce7bf9ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/b0aa757766600ae92f780498bacfcff9762981a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9a00:17f::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:d2:85:7f:d6:b0:82:8a:50:18:07:b5:b9:c4:86:9f:36:37:
         7f:79:08:b3:b1:f4:82:bd:82:cd:37:08:03:12:c1:c4:9b:fb:
         1a:bd:f0:90:64:ef:cc:3d:56:ce:99:e2:ff:ce:d9:7a:56:bb:
         9b:37:08:c6:66:4d:a8:4a:6f:96:b2:6e:8f:3d:ce:18:09:c2:
         10:5a:87:b8:cd:d5:7c:2a:77:c7:9d:fc:d8:d0:7f:2f:9d:d9:
         58:1b:e3:99:0c:97:dc:78:77:6d:05:6b:a6:4c:af:3e:27:0e:
         e4:62:fd:de:3b:04:74:a7:eb:93:03:16:2c:c2:9c:cb:ad:4f:
         fd:20:a8:18:d2:3f:3e:fe:3b:8c:e9:05:16:66:0a:0d:79:90:
         a4:a1:e0:79:c0:a9:68:14:f7:83:bc:eb:4d:dc:ed:5c:84:23:
         af:8e:90:14:b8:b3:38:48:ef:aa:78:33:01:e7:db:9b:f1:12:
         ec:ab:e0:09:2b:df:f6:a9:43:33:74:f7:8a:83:ed:75:7b:58:
         3d:79:b9:8e:27:7d:e0:cd:18:50:78:b5:10:d4:76:6a:e7:12:
         f5:07:f2:52:c5:b3:3f:de:44:38:ae:a1:15:84:f0:ef:35:19:
         a3:09:aa:34:02:42:fe:85:a0:ac:7a:53:ce:9d:a2:ce:23:b7:
         18:f0:6d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----