Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/430c6b7c06239369b4b8b3ffda0a467b2bbef03b.roa
File:                     430c6b7c06239369b4b8b3ffda0a467b2bbef03b.roa (raw, json)
Hash identifier:          CnEHhy0T+QfNW9TCakGxMf3lrjV3DX4cbNF7IGX75w4=
Subject key identifier:   50:DC:FE:C7:09:2A:8D:5B:70:CE:C4:A9:FB:D2:F3:51:C6:E3:C2:65
Certificate issuer:       /CN=af74f3aa42340a4c03a724bcfe9d604390d00998
Certificate serial:       0DAFEF
Authority key identifier: F8:C0:0E:76:BA:BC:3C:DE:FE:23:93:A2:4A:E4:97:0A:34:85:7E:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/430c6b7c06239369b4b8b3ffda0a467b2bbef03b.roa
Signing time:             Wed 24 Mar 2021 14:38:46 +0000
ROA not before:           Wed 24 Mar 2021 14:38:45 +0000
ROA not after:            Tue 24 Mar 2026 14:38:45 +0000
asID:                     264668
IP address blocks:        2803:cc20::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897007 (0xdafef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af74f3aa42340a4c03a724bcfe9d604390d00998
        Validity
            Not Before: Mar 24 14:38:45 2021 GMT
            Not After : Mar 24 14:38:45 2026 GMT
        Subject: CN=430c6b7c06239369b4b8b3ffda0a467b2bbef03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:36:19:0f:8b:55:37:a3:f8:ca:ef:ef:90:37:
                    23:11:c8:b0:ea:2d:5c:3e:d9:cd:61:c8:44:60:01:
                    5a:77:51:55:97:4f:88:91:dc:0e:57:41:aa:9a:fa:
                    0f:e7:7f:f4:b8:20:4c:5c:0d:29:a0:e6:ab:10:4d:
                    fc:ad:0e:a6:b7:53:b4:17:cd:19:fe:db:ec:b7:45:
                    a5:b4:78:c5:38:06:fa:1b:fd:2a:81:70:56:c1:1b:
                    48:0f:7e:5e:f0:fa:d2:8e:20:8a:96:ed:5b:50:8c:
                    41:38:92:19:8a:07:8d:13:93:59:2d:fe:3a:3c:ff:
                    f8:31:4a:c9:9a:42:49:f5:f5:6b:56:fb:a0:a2:31:
                    56:2d:0a:9b:f7:b2:56:84:72:e5:5c:5f:74:ff:7d:
                    4e:37:a8:cc:d5:d9:3d:e0:41:b7:47:ee:23:76:cf:
                    c5:41:c1:b5:a7:2b:cc:be:f2:13:f5:9d:63:48:8e:
                    71:72:22:6e:57:98:8c:5b:d8:11:53:d2:5c:8c:60:
                    57:04:81:38:0c:5d:12:c9:ee:59:c3:10:81:f6:ee:
                    6c:11:f8:54:09:70:64:e2:5d:ed:99:e9:5b:62:8d:
                    5c:77:4f:81:77:0d:93:4f:00:75:69:3a:c3:17:88:
                    fe:8f:b9:eb:cb:49:9a:d1:e2:8f:fe:6a:46:ab:15:
                    e2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DC:FE:C7:09:2A:8D:5B:70:CE:C4:A9:FB:D2:F3:51:C6:E3:C2:65
            X509v3 Authority Key Identifier:
                keyid:F8:C0:0E:76:BA:BC:3C:DE:FE:23:93:A2:4A:E4:97:0A:34:85:7E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/430c6b7c06239369b4b8b3ffda0a467b2bbef03b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/af74f3aa42340a4c03a724bcfe9d604390d00998.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:90:08:4a:05:fe:09:40:ab:25:49:e0:34:90:12:b8:66:da:
         3a:34:86:20:59:8a:53:94:1b:fb:a8:cb:99:37:d9:e2:42:d7:
         af:a3:33:17:cd:9e:af:91:fd:a1:dc:74:80:61:36:9e:68:33:
         63:45:18:83:de:30:dd:3d:c7:11:12:dd:71:c4:07:bb:2a:76:
         55:83:b0:87:90:d6:d8:24:76:c4:7b:20:67:fd:ff:e5:bd:d8:
         83:65:88:4b:a8:0e:7c:de:44:44:51:47:08:cb:c4:5d:9f:d4:
         50:5c:45:c2:59:2e:58:12:e5:aa:3e:10:1f:bc:3d:24:4b:f7:
         27:26:1c:b6:af:4c:eb:85:cd:85:0e:7a:6b:30:28:92:de:14:
         79:2c:2c:ec:b8:c4:bd:be:e3:39:fc:4e:21:a4:4b:36:73:16:
         b8:53:c0:a7:c2:65:2b:89:ae:17:13:e4:3e:4f:c6:d8:d6:02:
         ff:1b:9a:43:67:53:c7:10:cc:60:09:45:d3:4b:42:4a:ae:db:
         bc:94:13:14:5b:58:71:aa:5e:7e:5e:52:20:5b:5a:d2:f3:f8:
         ea:50:fa:70:52:7c:a3:5b:0d:20:64:03:26:57:42:96:23:00:
         0e:13:8f:63:52:29:29:fc:b5:fd:54:aa:6c:37:f0:b7:48:d2:
         ba:b1:af:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----