Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/c9335f5aa6e79ac05a6c464bc1ac877df4ccaba7.roa
File:                     c9335f5aa6e79ac05a6c464bc1ac877df4ccaba7.roa (raw, json)
Hash identifier:          WfN3M/BNMrezvu1vsYn/73zw2yNOVIhKDi3vGmmwyic=
Subject key identifier:   37:24:73:4F:99:75:52:55:F1:D7:83:DA:8B:97:DB:A5:88:DF:BD:21
Certificate issuer:       /CN=62a2147e821b0c697078021ef06a9b4b9bf02ef3
Certificate serial:       0C6181
Authority key identifier: CF:58:10:B7:13:2B:C8:29:72:26:7F:9F:7D:FB:82:A5:7F:CF:E3:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a2147e821b0c697078021ef06a9b4b9bf02ef3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/c9335f5aa6e79ac05a6c464bc1ac877df4ccaba7.roa
Signing time:             Wed 24 Mar 2021 14:42:08 +0000
ROA not before:           Wed 24 Mar 2021 14:42:07 +0000
ROA not after:            Tue 24 Mar 2026 14:42:07 +0000
asID:                     267828
IP address blocks:        2803:b860::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811393 (0xc6181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a2147e821b0c697078021ef06a9b4b9bf02ef3
        Validity
            Not Before: Mar 24 14:42:07 2021 GMT
            Not After : Mar 24 14:42:07 2026 GMT
        Subject: CN=c9335f5aa6e79ac05a6c464bc1ac877df4ccaba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3f:41:5b:fb:9d:26:9a:d9:40:e9:58:5a:aa:
                    2f:25:6d:b5:37:ee:1d:d0:27:b7:4a:76:21:38:0d:
                    65:cd:56:33:89:1d:ed:14:fd:c7:f9:e3:03:e8:87:
                    c5:f1:53:36:f2:e8:75:8d:f3:39:61:e7:da:39:5f:
                    77:d2:ed:50:e6:0b:98:b7:10:ab:65:58:18:30:41:
                    17:7b:75:1b:8d:6e:3e:ef:b8:3d:4d:18:3a:e3:61:
                    6e:fe:5e:23:7a:12:05:91:4e:20:24:ab:11:1c:53:
                    ca:e6:99:33:61:80:39:58:d6:77:da:12:a4:13:95:
                    5a:51:00:59:ad:cb:e8:7d:7b:0e:d2:0e:0e:82:6c:
                    d5:5e:72:b1:bc:c8:75:8b:4f:f4:66:76:04:2d:95:
                    b2:ab:53:53:26:af:0a:ef:3e:bb:cb:fd:29:8a:25:
                    cd:ed:c0:cc:a2:43:b3:15:5c:37:2b:87:9c:b9:0a:
                    bb:b2:7e:bd:c3:ae:58:35:ba:b2:cf:da:23:6b:61:
                    2e:e7:19:20:78:12:4d:5b:80:b6:14:98:a0:b1:7f:
                    18:cc:97:63:42:02:46:84:16:16:7e:31:08:c0:43:
                    27:6e:74:e1:6f:2d:14:c3:fa:cc:13:e7:49:be:c9:
                    aa:c2:96:79:02:2f:24:7b:4c:93:32:63:b2:94:1f:
                    06:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:24:73:4F:99:75:52:55:F1:D7:83:DA:8B:97:DB:A5:88:DF:BD:21
            X509v3 Authority Key Identifier:
                keyid:CF:58:10:B7:13:2B:C8:29:72:26:7F:9F:7D:FB:82:A5:7F:CF:E3:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a2147e821b0c697078021ef06a9b4b9bf02ef3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/c9335f5aa6e79ac05a6c464bc1ac877df4ccaba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/62a2147e821b0c697078021ef06a9b4b9bf02ef3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b860::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:61:42:07:54:da:2c:55:96:0c:b7:f3:45:30:6b:6f:ac:08:
         bc:9d:bf:7b:44:15:4b:2e:fe:90:0b:7e:1d:40:51:2e:47:fe:
         3d:6f:1a:79:78:86:0e:21:ed:40:fb:57:12:4a:dd:3a:1e:47:
         26:1a:4a:c5:c9:6f:0a:05:36:90:56:da:eb:d2:24:63:35:27:
         29:0f:50:3c:48:aa:f2:42:36:9c:86:4e:49:67:4a:e6:24:3e:
         a0:19:08:52:ce:f3:6e:6c:52:8f:db:23:20:87:1c:d5:92:be:
         52:05:f1:28:c5:90:83:dc:39:88:58:23:72:b9:49:40:f6:d2:
         d9:f0:cd:c7:18:af:29:53:91:0c:94:aa:49:3d:85:38:04:65:
         33:b2:86:e2:66:44:b8:7f:ce:df:59:98:a0:21:d6:13:01:36:
         17:1d:7c:db:a8:80:d5:ee:d3:c3:25:57:b3:dd:b2:3b:61:1a:
         f9:e4:f0:95:be:55:f4:aa:fa:18:30:8b:8f:77:c2:d5:76:cf:
         55:0e:88:84:dd:a0:cb:3f:47:d2:ca:93:af:cc:14:76:f5:81:
         e6:b8:46:ef:00:bb:17:a6:64:d1:45:6d:d8:95:87:06:3e:90:
         f3:90:bd:c1:91:04:57:58:42:39:93:70:2b:39:ea:21:aa:d5:
         c6:08:ac:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----