Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/2a38bd89e77f782e6f29228f73e1905e0f321bf3.roa
File:                     2a38bd89e77f782e6f29228f73e1905e0f321bf3.roa (raw, json)
Hash identifier:          gqMTjacXabjZ5DYENCMriDSpJZVtCk4Zo740wWs4+aE=
Subject key identifier:   46:94:16:DC:FB:75:16:24:1A:A5:90:9E:94:07:4E:54:DE:68:DF:D2
Certificate issuer:       /CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
Certificate serial:       011235
Authority key identifier: DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/2a38bd89e77f782e6f29228f73e1905e0f321bf3.roa
Signing time:             Tue 26 Oct 2021 11:34:04 +0000
ROA not before:           Mon 20 Sep 2021 03:00:00 +0000
ROA not after:            Wed 20 Sep 2023 03:00:00 +0000
asID:                     271956
IP address blocks:        2803:7610:1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70197 (0x11235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
        Validity
            Not Before: Sep 20 03:00:00 2021 GMT
            Not After : Sep 20 03:00:00 2023 GMT
        Subject: CN=2a38bd89e77f782e6f29228f73e1905e0f321bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b7:30:95:9f:a1:46:4d:46:10:01:59:93:13:
                    c0:f0:c8:7e:53:15:cb:1c:14:6b:b1:5c:95:27:71:
                    aa:a4:76:31:ea:4f:2a:70:cd:1b:f6:f3:57:2c:93:
                    68:89:0f:5f:dc:b7:16:30:27:27:5d:6b:af:30:9e:
                    10:f0:d2:e0:65:b2:12:58:d0:ad:b3:e5:8f:68:3d:
                    1c:85:4f:92:c0:2d:2c:49:e6:5c:5e:0a:c1:56:02:
                    95:e7:2d:d0:38:8b:d4:af:17:00:5d:22:7b:59:23:
                    33:ab:5d:09:6a:eb:e8:f8:8b:ef:b1:8f:66:b8:b8:
                    d3:d4:9b:f2:e9:a1:9e:63:5d:af:99:b3:fa:33:31:
                    b6:57:c2:f5:a1:70:ef:36:61:54:a5:ec:5e:69:cc:
                    16:89:e0:5b:c7:db:e2:92:3c:ab:42:9b:37:fc:b5:
                    78:46:02:39:0f:58:db:fc:34:fb:c6:cf:e3:d8:bb:
                    da:1c:c8:b7:4d:02:c5:c7:96:d3:9b:47:4d:76:c0:
                    61:d4:cd:9b:41:05:e8:6b:e5:10:7f:cd:04:cc:fe:
                    73:84:f1:a7:d9:a2:e2:6d:12:0e:9b:5a:e2:18:1d:
                    79:d5:02:0f:8f:83:02:d0:bb:80:9c:c2:69:02:c5:
                    1d:f1:30:4c:a7:33:43:bd:d2:22:7e:f5:bc:dd:25:
                    1a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:94:16:DC:FB:75:16:24:1A:A5:90:9E:94:07:4E:54:DE:68:DF:D2
            X509v3 Authority Key Identifier:
                keyid:DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/2a38bd89e77f782e6f29228f73e1905e0f321bf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7610:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:e4:29:97:44:31:29:dd:09:47:48:61:97:d3:77:14:b9:18:
         c9:37:b5:bf:2b:02:ff:2f:34:f9:d7:61:60:d9:ca:51:47:84:
         83:fb:e7:5a:38:92:53:79:23:32:2a:86:e4:67:77:be:e7:cd:
         98:8a:b8:9f:9c:f9:75:64:3f:b9:73:4b:c6:83:6d:8f:51:af:
         09:18:fb:20:84:4f:58:5b:29:2b:2f:08:c5:74:af:d0:bf:4e:
         be:c8:4f:24:72:f6:84:f0:94:f4:84:43:6c:e3:23:38:90:55:
         bf:89:53:d4:ad:0b:ea:5d:5f:d4:59:bd:38:47:36:90:ee:e9:
         cb:85:f5:02:e0:de:76:b1:69:4c:50:84:53:fa:87:f5:5c:3f:
         9b:2d:34:2e:66:56:d0:ea:19:45:77:64:b9:06:a1:4e:93:69:
         5b:00:05:fc:84:6c:71:01:b0:5d:7c:0f:1e:f6:e7:66:38:6f:
         ca:7b:ce:97:af:a8:48:1d:38:cd:91:16:ac:ce:64:be:48:7c:
         25:b5:3a:0f:55:86:28:ef:fe:2c:b1:7b:9a:5b:44:17:8c:e7:
         54:3c:77:7b:47:15:d4:13:61:22:81:67:49:fc:5b:7a:85:a4:
         00:dd:f4:e7:27:29:2f:16:a3:05:42:34:ab:e1:b6:f0:aa:4e:
         06:a8:16:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----