Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64be4256-47cf-41c9-aef7-c6ff7fb6c33c/59397f7d053a21fa0186a98605b6d4d33d74ebb3.roa
File:                     59397f7d053a21fa0186a98605b6d4d33d74ebb3.roa (raw, json)
Hash identifier:          p0LnwG0v9haFdxtaaJ+cOhgA1HWHLOs40CgaYz2g98Y=
Subject key identifier:   45:A6:AA:AC:46:48:C3:67:FC:2A:E9:C8:92:5E:A8:65:DC:65:49:7E
Certificate issuer:       /CN=2841b92f480790c95087b23abaa6ab50dfc95e5b
Certificate serial:       0363
Authority key identifier: A0:78:60:58:21:2C:D7:4C:DB:49:76:D5:8D:9B:78:59:DF:C9:01:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2841b92f480790c95087b23abaa6ab50dfc95e5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64be4256-47cf-41c9-aef7-c6ff7fb6c33c/59397f7d053a21fa0186a98605b6d4d33d74ebb3.roa
Signing time:             Fri 01 Oct 2021 20:15:31 +0000
ROA not before:           Fri 01 Jan 2021 03:00:00 +0000
ROA not after:            Sun 01 Oct 2023 03:00:00 +0000
asID:                     14080
IP address blocks:        2801:11:800::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867 (0x363)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2841b92f480790c95087b23abaa6ab50dfc95e5b
        Validity
            Not Before: Jan  1 03:00:00 2021 GMT
            Not After : Oct  1 03:00:00 2023 GMT
        Subject: CN=59397f7d053a21fa0186a98605b6d4d33d74ebb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b9:fc:67:45:d9:d5:61:9d:c0:23:ba:66:55:
                    41:f9:e7:4f:68:7c:cd:59:5b:fc:6b:e3:79:55:c8:
                    b8:66:b7:d0:ac:fe:64:27:5b:ea:42:90:82:f4:17:
                    fc:19:69:dd:9d:cf:1d:d0:20:24:f8:6e:9f:dc:4c:
                    d5:db:8b:82:5e:94:0b:e4:ad:cc:ef:25:81:67:1c:
                    15:ad:9f:b2:1c:8e:75:4e:bb:d9:60:1e:cc:d6:7c:
                    d7:61:c4:07:ab:d7:f0:4a:76:45:5f:15:fa:34:11:
                    0f:1a:61:78:ae:0d:dd:42:8d:dc:57:6b:95:d0:36:
                    dc:00:ef:da:f2:a3:2a:35:ac:00:c6:93:1c:e7:ed:
                    ca:d1:e1:5d:9e:e9:9d:bc:2b:08:45:bd:7a:c8:44:
                    8a:af:5b:a7:42:0b:7d:c0:1c:1a:dd:5f:9f:4a:06:
                    f5:29:d1:1b:07:79:77:f2:a8:0f:01:cb:fe:6a:d2:
                    07:9d:e6:3c:08:d2:47:0b:7e:a6:ea:c0:18:e7:4e:
                    fe:ae:11:50:96:62:a1:91:14:7d:60:6a:0f:b9:a5:
                    53:23:b8:d8:8f:3b:ef:ca:03:32:31:74:22:0b:87:
                    34:fe:2b:be:80:73:b6:29:fe:f2:3b:5a:27:40:26:
                    cc:02:55:98:fc:bc:9c:ab:38:ca:3a:d9:e6:4d:96:
                    e2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A6:AA:AC:46:48:C3:67:FC:2A:E9:C8:92:5E:A8:65:DC:65:49:7E
            X509v3 Authority Key Identifier:
                keyid:A0:78:60:58:21:2C:D7:4C:DB:49:76:D5:8D:9B:78:59:DF:C9:01:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2841b92f480790c95087b23abaa6ab50dfc95e5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64be4256-47cf-41c9-aef7-c6ff7fb6c33c/59397f7d053a21fa0186a98605b6d4d33d74ebb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64be4256-47cf-41c9-aef7-c6ff7fb6c33c/2841b92f480790c95087b23abaa6ab50dfc95e5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:4b:bc:b4:0e:68:ed:30:b1:d2:04:cf:f8:a9:84:d6:00:97:
         d1:05:56:85:5e:b6:65:9a:d6:4c:84:89:46:54:de:2d:7e:76:
         11:5f:f1:64:a9:a3:a4:54:81:87:e9:a7:62:f8:70:1b:b8:2b:
         00:e0:8b:97:17:27:93:4d:00:d7:a3:9b:1b:11:e0:1c:02:04:
         83:01:73:dc:8d:40:a6:26:bb:36:20:86:47:57:a9:5e:3c:95:
         65:e6:e8:0a:26:bb:91:3a:3e:6e:9d:d3:c4:c5:e9:ae:0c:0b:
         f0:04:b2:24:93:2a:f8:4b:23:0d:fe:18:8c:1a:28:77:44:5b:
         ca:3c:2f:81:3f:34:88:74:4a:14:03:6a:50:fd:86:e3:20:b6:
         b8:9c:75:e0:c6:94:8d:49:01:b5:b5:97:51:00:e9:04:cb:6e:
         c9:ef:9f:3f:4a:16:44:48:8c:1c:5d:eb:f6:da:a0:28:62:a4:
         b6:dc:2c:65:1a:26:2f:ab:2c:cf:45:60:98:2b:2e:e6:9e:d3:
         09:c4:11:54:4e:dd:32:58:6b:43:72:71:bd:a7:62:19:d9:87:
         f1:5c:9c:d4:d4:ec:04:63:e1:63:e2:23:f2:ad:9c:f4:4f:a2:
         5a:d0:3b:49:1a:6c:1b:71:53:3d:8b:ac:0f:cc:31:f6:c8:8d:
         97:4a:aa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----