Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/c9210b7b5ae6002503f031a77be9ae6ad72ecbb1.roa
File:                     c9210b7b5ae6002503f031a77be9ae6ad72ecbb1.roa (raw, json)
Hash identifier:          oB0t/C0fIVoKjjRSmD947vUHZL2pf3ARwx1yohZRvdQ=
Subject key identifier:   72:5D:C4:00:FC:76:9E:89:60:23:FB:0A:83:EF:8D:F6:89:7F:C1:B9
Certificate issuer:       /CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
Certificate serial:       0D5FA8
Authority key identifier: F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/c9210b7b5ae6002503f031a77be9ae6ad72ecbb1.roa
Signing time:             Wed 24 Mar 2021 14:38:40 +0000
ROA not before:           Wed 24 Mar 2021 14:38:40 +0000
ROA not after:            Tue 24 Mar 2026 14:38:40 +0000
asID:                     264668
IP address blocks:        2803:c420::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876456 (0xd5fa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
        Validity
            Not Before: Mar 24 14:38:40 2021 GMT
            Not After : Mar 24 14:38:40 2026 GMT
        Subject: CN=c9210b7b5ae6002503f031a77be9ae6ad72ecbb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:aa:c8:e1:13:f7:87:eb:57:22:2c:67:40:b0:
                    e6:3e:fd:96:6c:98:f1:83:44:7a:3b:4a:ce:27:cd:
                    cc:54:08:b8:72:20:71:59:5c:65:af:8f:3c:32:12:
                    69:97:5d:c6:71:2f:07:92:55:e1:1e:7b:8e:25:51:
                    7f:8b:a4:72:eb:55:3a:d8:e0:d6:b2:f8:12:67:7c:
                    81:46:c4:06:a8:b4:ae:f4:a8:67:e7:46:85:44:cc:
                    3b:76:e3:6d:25:a7:b2:e2:cc:c7:55:d7:f8:62:d5:
                    93:09:c1:48:af:9b:01:26:a3:6f:af:f0:a8:94:b4:
                    2b:78:c0:02:9d:f7:59:41:e0:b9:da:03:08:d0:72:
                    65:a4:f1:03:0c:81:85:43:1c:9a:0b:57:8a:3b:b4:
                    3b:e9:54:e6:3e:27:e6:40:cd:e6:eb:bf:5d:ab:7d:
                    69:0c:d0:8d:5e:6c:35:e2:5e:89:75:c0:42:fa:99:
                    5f:5c:bc:0f:a0:57:79:be:7e:79:4d:40:83:77:4c:
                    c1:22:14:71:26:a8:f4:cd:6a:75:1e:d2:da:08:3a:
                    8c:e1:1c:5f:87:a8:20:07:62:20:e6:7f:b3:8f:3e:
                    fe:17:22:e6:9c:ef:1c:03:12:13:f2:31:19:e2:2e:
                    44:fe:36:96:46:43:ec:26:ae:a8:4a:36:91:54:82:
                    26:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5D:C4:00:FC:76:9E:89:60:23:FB:0A:83:EF:8D:F6:89:7F:C1:B9
            X509v3 Authority Key Identifier:
                keyid:F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/c9210b7b5ae6002503f031a77be9ae6ad72ecbb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/19bdf7eba9512ec4f3179e720563bd1d6965a593.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c420::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:68:95:c3:7c:79:b7:c5:b0:94:81:e9:ba:f8:62:d5:a4:af:
         75:35:28:9c:4a:16:ac:58:9d:fd:b7:da:aa:83:69:86:71:4f:
         0f:d6:fd:e4:19:7b:b2:e4:ae:92:b6:db:c1:d2:de:5e:05:70:
         17:40:19:19:25:6e:f2:74:9d:ef:26:53:45:24:c1:00:c3:25:
         05:d0:36:f2:49:db:ac:25:d1:8a:c0:21:41:bf:bd:06:3e:ed:
         a8:12:43:45:d1:a0:ed:13:43:70:21:24:c3:ca:a6:e1:ad:b6:
         86:6e:02:a2:e1:4b:7d:77:75:40:4a:be:5c:0a:5b:86:c8:2b:
         08:cb:a8:d8:36:2e:51:45:b5:2d:92:82:da:ec:a5:16:a7:70:
         87:e3:6e:43:cf:51:fd:bc:09:f8:02:ed:58:86:b1:19:03:fd:
         38:0a:4a:31:c2:04:c9:c2:ca:6e:0f:fa:d1:d3:a7:ce:1f:cb:
         01:e2:19:8c:ae:70:c9:11:15:e3:13:7c:1b:d1:59:5f:67:fb:
         e2:51:d7:a3:22:87:f4:ba:b1:36:db:aa:79:40:d1:24:5b:0b:
         1c:1d:f3:e1:3d:7e:d7:d1:63:5f:0e:be:6c:16:a6:6c:7e:96:
         21:82:d3:70:5c:05:e9:ab:0e:71:c2:83:04:b1:7a:71:bb:40:
         1a:9c:0e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----