Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62a6ea40-4eb1-425f-b468-eae415f1c94f/db1f9e0cac87a0c1b4b7afa6d1620393a5f017fb.roa
File:                     db1f9e0cac87a0c1b4b7afa6d1620393a5f017fb.roa (raw, json)
Hash identifier:          Onmkh9ICbTIkcQJjhXOsMio9sgZIRLp1ViJHJ1t+sVw=
Subject key identifier:   43:12:F1:13:80:56:7F:32:15:4B:DF:A8:FA:8F:DB:80:C8:A2:88:BA
Certificate issuer:       /CN=ee6f8cd6a6232a4f4258f841671ecbfc513e3959
Certificate serial:       0E2A34
Authority key identifier: 17:C7:4D:D7:34:E9:D0:61:C1:EC:4D:B8:E0:31:BA:26:8C:6D:54:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee6f8cd6a6232a4f4258f841671ecbfc513e3959.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62a6ea40-4eb1-425f-b468-eae415f1c94f/db1f9e0cac87a0c1b4b7afa6d1620393a5f017fb.roa
Signing time:             Fri 18 Jun 2021 14:50:21 +0000
ROA not before:           Fri 18 Jun 2021 03:00:00 +0000
ROA not after:            Sun 18 Jun 2023 03:00:00 +0000
asID:                     269829
IP address blocks:        2803:7760:200::/39 maxlen: 39

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 928308 (0xe2a34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee6f8cd6a6232a4f4258f841671ecbfc513e3959
        Validity
            Not Before: Jun 18 03:00:00 2021 GMT
            Not After : Jun 18 03:00:00 2023 GMT
        Subject: CN=db1f9e0cac87a0c1b4b7afa6d1620393a5f017fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:86:0f:0a:ff:65:1b:44:48:b7:8c:e2:5f:bd:
                    e4:e0:e9:13:d7:82:7c:89:2b:af:40:38:84:58:15:
                    87:e5:2d:be:5b:e6:95:c8:bc:1f:cd:77:a6:af:5f:
                    07:36:90:bc:19:6e:b1:1b:12:51:86:97:65:21:4a:
                    96:63:57:2e:9b:2c:1c:10:f5:37:5f:ae:22:ad:f7:
                    93:3a:68:36:ec:7c:26:bb:73:d9:76:d5:d9:dc:b8:
                    d7:05:58:be:85:4d:0f:c8:c2:d7:cc:c9:97:c9:4d:
                    7e:75:96:77:bc:f6:38:79:43:19:40:9f:c2:f1:61:
                    f9:24:59:ed:95:eb:ef:6f:bd:4a:b3:50:00:c9:16:
                    9d:8a:a2:05:f6:a2:8e:7b:ab:7f:3c:45:28:ab:ea:
                    5a:5b:c9:f0:ab:f6:30:6c:12:8c:dd:f1:37:77:f7:
                    3f:2e:70:c5:55:78:2b:f4:8a:d9:55:78:b5:01:76:
                    ce:de:04:15:eb:67:59:a5:14:db:b0:ae:7c:e6:38:
                    d3:6d:20:0c:65:b6:99:b8:8f:c2:95:87:6b:20:75:
                    a5:24:e6:b9:87:e8:02:eb:47:9d:96:1c:83:4e:7d:
                    3b:cc:bc:62:0a:43:54:32:3b:8a:a9:70:bf:30:3c:
                    f2:dd:c7:37:3f:d2:1a:6d:5a:8f:8f:14:2f:15:72:
                    12:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:12:F1:13:80:56:7F:32:15:4B:DF:A8:FA:8F:DB:80:C8:A2:88:BA
            X509v3 Authority Key Identifier:
                keyid:17:C7:4D:D7:34:E9:D0:61:C1:EC:4D:B8:E0:31:BA:26:8C:6D:54:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee6f8cd6a6232a4f4258f841671ecbfc513e3959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62a6ea40-4eb1-425f-b468-eae415f1c94f/db1f9e0cac87a0c1b4b7afa6d1620393a5f017fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62a6ea40-4eb1-425f-b468-eae415f1c94f/ee6f8cd6a6232a4f4258f841671ecbfc513e3959.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7760:200::/39

    Signature Algorithm: sha256WithRSAEncryption
         2e:a3:b9:39:76:cc:de:09:f6:9d:b6:a1:9c:4a:68:37:a4:cd:
         d2:42:75:39:80:aa:31:f8:2b:a3:27:46:8a:3a:e3:3e:68:6c:
         23:d2:8c:ee:9f:73:8c:80:f5:5e:7b:fb:f4:63:0f:47:ee:0e:
         52:f6:42:b8:29:a4:de:ba:be:61:cb:03:a2:a3:90:b9:5c:2d:
         26:dc:75:26:9e:c3:68:bc:83:68:6e:33:a6:93:40:c2:4e:d1:
         d4:ee:2c:25:e3:bb:f5:e5:ca:44:ed:0f:93:93:7b:eb:d6:2a:
         d2:fd:d2:cf:c3:14:a7:e9:78:90:62:82:f2:c6:af:52:ce:a8:
         7e:72:0b:f8:06:36:49:32:8e:b2:ae:02:ac:44:3d:d3:80:b5:
         87:d8:a8:92:a3:09:1d:50:4f:4e:3a:cc:b0:ce:89:61:61:b9:
         ea:83:26:91:ea:80:55:ac:86:f8:a3:03:85:54:c1:5b:26:82:
         50:bd:90:78:43:01:7a:8e:b3:db:ae:ff:db:f2:02:31:68:14:
         c9:f5:18:3a:92:c0:f9:1a:9b:b9:ef:a4:1a:0d:2f:c3:69:2f:
         a1:ec:1e:36:ee:c2:d0:be:b1:f4:1a:91:ee:92:19:25:14:8d:
         f5:ce:9e:b2:98:71:53:8c:5a:8e:43:6d:4b:f1:8b:ab:f0:8b:
         e5:c0:ca:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----