Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/07cb0df721f9bb018952df0731b7170be79f17ec.roa
File:                     07cb0df721f9bb018952df0731b7170be79f17ec.roa (raw, json)
Hash identifier:          Ft5rsJ75x1EaviKMXe/covTcS6IV8r+eGmJJbyWa+4Y=
Subject key identifier:   75:26:67:AB:FD:CA:68:3C:87:45:03:86:3C:C8:71:82:0B:6E:15:1E
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       1072C8
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/07cb0df721f9bb018952df0731b7170be79f17ec.roa
Signing time:             Sat 19 Jun 2021 01:12:31 +0000
ROA not before:           Fri 18 Jun 2021 03:00:00 +0000
ROA not after:            Sun 18 Jun 2023 03:00:00 +0000
asID:                     28000
IP address blocks:        2801:1b8::/47 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1077960 (0x1072c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Jun 18 03:00:00 2021 GMT
            Not After : Jun 18 03:00:00 2023 GMT
        Subject: CN=07cb0df721f9bb018952df0731b7170be79f17ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e1:8c:66:03:6c:8d:6d:7c:76:11:df:13:5b:
                    48:31:80:12:62:8c:b5:28:ae:98:62:52:da:fb:7b:
                    6d:dd:fb:ae:66:a4:62:ae:24:55:57:ca:77:9e:c4:
                    38:52:e8:61:a3:7f:ac:a6:da:2a:0a:e5:34:2b:aa:
                    d1:c6:8b:67:b6:cb:4d:aa:2d:f4:27:bd:c1:2c:d0:
                    7a:cf:0f:a7:30:bf:35:10:d6:ea:d6:d0:ee:53:54:
                    77:52:b4:5d:fd:90:c3:46:8a:13:4e:44:bd:48:b4:
                    82:19:53:0b:1f:75:e5:9f:18:83:88:1e:e6:4c:a6:
                    90:25:75:c1:bf:7e:e0:7c:6b:e8:3f:dc:37:50:67:
                    4a:03:cb:10:27:37:3d:6e:49:4c:c3:43:7d:0f:36:
                    17:54:f3:2c:45:e4:56:26:c2:be:5f:99:ba:d8:00:
                    e7:8b:93:b4:93:b1:22:d4:02:a5:99:c6:e9:49:c5:
                    05:f8:60:e3:af:d3:d4:eb:8e:3c:16:e5:cc:fc:bf:
                    45:3e:ef:c4:07:08:bd:f2:0b:b0:cc:c1:05:7e:9f:
                    38:6e:51:cc:39:03:eb:d0:4c:9e:63:78:89:07:60:
                    f3:21:53:58:81:71:00:ca:b2:7c:5d:9e:2a:6e:39:
                    22:be:a8:b3:51:17:f9:fd:a1:e3:02:32:ef:cc:54:
                    8c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:26:67:AB:FD:CA:68:3C:87:45:03:86:3C:C8:71:82:0B:6E:15:1E
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/07cb0df721f9bb018952df0731b7170be79f17ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b8::/47

    Signature Algorithm: sha256WithRSAEncryption
         94:f7:21:49:ba:56:e6:75:22:5f:c8:47:b0:8e:92:db:96:e6:
         77:93:17:e6:84:8c:20:44:3f:09:54:d1:eb:4a:ba:12:00:83:
         50:cb:45:51:ca:e2:9d:26:a1:fb:99:ff:bd:db:9b:33:a8:80:
         f3:c0:02:6e:ca:10:af:b2:b2:64:7b:e0:49:c8:76:e3:ca:9e:
         d8:86:e8:8d:45:28:8a:5b:70:89:48:58:00:4c:1f:eb:a0:e9:
         ef:78:9d:c8:cb:ad:8a:8a:2a:e7:82:ef:4b:23:39:7e:61:b9:
         10:08:00:b2:93:3e:e7:50:3d:54:91:f5:d2:cc:17:ef:91:c3:
         22:ec:87:27:ca:fc:23:23:f8:cf:dc:c3:ab:f4:b0:4b:06:be:
         58:a8:04:5a:ee:75:c7:ad:e2:c7:9d:ed:9a:7d:eb:84:6e:4b:
         28:53:7c:60:56:ef:db:25:8f:7a:3b:93:93:c4:8a:97:a7:a1:
         64:bd:a1:a8:b3:69:15:4d:b9:3b:db:fc:67:2c:ea:84:31:48:
         c0:57:53:cc:1c:09:3c:bc:ed:21:62:81:5c:67:c5:32:ee:2e:
         f2:37:83:6d:be:46:36:e8:7a:6a:7d:40:b5:da:76:1d:6e:63:
         45:87:bc:6e:a3:71:92:bb:b8:ce:94:06:c8:72:17:74:3c:64:
         14:61:8f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----