Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/c161fdf54315543287d765a768b193fea27bbb26.roa
File:                     c161fdf54315543287d765a768b193fea27bbb26.roa (raw, json)
Hash identifier:          0eRqigiLl7F68tf+bBDejwt5VvcwvCgnZQT3oB7o5xI=
Subject key identifier:   68:81:05:A5:AF:57:73:0E:DB:A3:E7:35:75:43:55:49:70:AE:A9:75
Certificate issuer:       /CN=592c73df8a5ecfa22ed98642ab6ae2e46949dd61
Certificate serial:       0DC984
Authority key identifier: C6:A2:6F:94:DA:2F:63:72:B3:F2:37:16:F2:78:17:C3:07:A5:F6:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/c161fdf54315543287d765a768b193fea27bbb26.roa
Signing time:             Wed 24 Mar 2021 14:41:04 +0000
ROA not before:           Wed 24 Mar 2021 14:41:04 +0000
ROA not after:            Tue 24 Mar 2026 14:41:04 +0000
asID:                     265724
IP address blocks:        2803:9dc0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903556 (0xdc984)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=592c73df8a5ecfa22ed98642ab6ae2e46949dd61
        Validity
            Not Before: Mar 24 14:41:04 2021 GMT
            Not After : Mar 24 14:41:04 2026 GMT
        Subject: CN=c161fdf54315543287d765a768b193fea27bbb26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:52:72:0a:02:a7:e9:c6:df:95:69:a4:28:dd:
                    ff:2d:51:07:14:92:b8:45:96:5e:52:c1:d2:31:06:
                    5f:7a:23:d3:49:13:15:c8:51:5b:30:46:6b:a5:c3:
                    3f:37:a2:2b:f4:a2:4f:d8:39:d2:d9:62:ed:4c:3c:
                    84:2d:db:1e:60:a4:44:a9:9f:91:bf:0a:97:12:09:
                    e9:50:d2:f2:b3:b5:11:6f:e4:05:fb:66:8b:99:92:
                    72:3d:5c:91:d6:6a:46:b7:6b:b0:f5:f5:bb:49:7e:
                    24:be:33:3e:fb:e8:ce:a3:d6:b7:7d:f3:8e:be:f9:
                    31:55:3a:4e:3f:05:d8:7f:13:70:7f:71:5c:65:8f:
                    c8:4f:59:dd:c5:c8:10:5e:b1:46:53:a2:5c:17:5d:
                    02:0b:fb:82:43:48:4a:db:eb:84:97:a7:27:5f:96:
                    3d:db:8c:73:82:7f:e6:5c:7e:e1:8e:f4:aa:df:44:
                    df:cc:4e:3f:39:d8:b6:3d:39:4e:02:c6:10:a7:91:
                    a2:38:01:42:51:d9:a7:df:59:5b:a5:75:aa:35:87:
                    70:5e:b3:bb:7f:ca:fc:a4:70:86:df:c4:c3:e8:4b:
                    38:f4:31:8e:78:df:d5:e0:4a:68:76:12:36:6b:b6:
                    87:04:66:69:0c:03:06:f2:b7:5f:3e:42:74:3b:9a:
                    e1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:81:05:A5:AF:57:73:0E:DB:A3:E7:35:75:43:55:49:70:AE:A9:75
            X509v3 Authority Key Identifier:
                keyid:C6:A2:6F:94:DA:2F:63:72:B3:F2:37:16:F2:78:17:C3:07:A5:F6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/c161fdf54315543287d765a768b193fea27bbb26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:52:27:53:66:a8:e9:91:6e:f7:1c:9c:bd:da:cb:3b:51:b9:
         60:84:d1:52:0e:39:1b:4b:61:b0:a2:9f:9e:5d:d0:bb:f7:b2:
         1d:29:95:78:17:eb:6c:87:52:73:78:0d:fd:2c:bc:6a:bc:14:
         ba:01:0f:82:f3:d8:0d:b0:cf:b5:47:66:90:4b:8c:e6:31:90:
         e6:74:06:6c:85:00:21:fb:83:e8:87:8f:90:8c:0b:d1:9b:00:
         40:ea:06:92:ae:ba:52:8e:17:ff:53:46:f3:a3:29:49:22:9f:
         66:86:cc:9f:c3:64:32:14:24:55:f6:3c:38:70:d0:72:68:cb:
         4f:38:6c:a3:01:04:22:3f:56:0d:9a:49:bd:f8:7c:4f:2b:8a:
         6a:4e:c6:fe:d5:51:a6:c9:80:04:21:4d:b9:95:a6:b6:6e:f4:
         95:71:b8:7b:04:a0:cb:9a:92:b1:1e:d5:5d:28:76:54:4a:09:
         37:91:f8:f5:88:5d:54:c5:39:7b:02:cd:91:5a:01:6f:1d:d7:
         18:0e:d9:d6:2d:d9:cc:13:48:ea:69:5f:18:24:67:e0:74:45:
         00:d4:b2:5b:0a:71:62:30:35:38:b8:2f:bd:18:fc:b3:31:7a:
         8d:ae:ce:b1:31:2d:76:5e:02:57:1b:f2:f9:9b:5c:f7:2b:f6:
         4b:73:6c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----