Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/8ec8665c8b90d004baf40131bf4474735be0b1cb.roa
File:                     8ec8665c8b90d004baf40131bf4474735be0b1cb.roa (raw, json)
Hash identifier:          F+ZjTYege12JHQKw3SNy9kXOs64vjWFJQHA/hqlK+zA=
Subject key identifier:   8E:36:CE:96:95:C8:E8:64:35:7C:8A:E7:93:B7:72:81:35:8E:B2:58
Certificate issuer:       /CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
Certificate serial:       F859
Authority key identifier: DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/8ec8665c8b90d004baf40131bf4474735be0b1cb.roa
Signing time:             Mon 25 Oct 2021 13:05:55 +0000
ROA not before:           Mon 25 Oct 2021 03:00:00 +0000
ROA not after:            Wed 25 Oct 2023 03:00:00 +0000
asID:                     271956
IP address blocks:        2803:7610:3::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63577 (0xf859)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
        Validity
            Not Before: Oct 25 03:00:00 2021 GMT
            Not After : Oct 25 03:00:00 2023 GMT
        Subject: CN=8ec8665c8b90d004baf40131bf4474735be0b1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:4a:0b:7a:a9:40:11:96:22:b2:e9:f4:8d:
                    18:9b:bb:0a:d8:68:ec:1f:52:e5:10:f5:ab:c6:5a:
                    54:66:a9:be:f2:cc:6b:19:f6:6e:6d:40:2b:aa:0d:
                    c9:d5:b9:46:ba:e1:27:1a:b7:f8:e1:22:79:8c:71:
                    4d:0c:35:5c:9f:5f:1f:42:63:ce:c7:6f:3c:1b:2b:
                    70:3b:d5:be:94:e6:56:54:af:29:ce:8c:fa:a1:7d:
                    97:a9:c4:e8:e9:29:f1:34:42:fb:6f:ef:b5:3d:77:
                    ed:b9:94:0a:80:cf:6e:7d:b9:4e:d0:7f:15:4a:39:
                    02:26:0d:29:68:f1:87:fa:c6:34:5e:77:d7:d6:2c:
                    c3:0b:02:d7:6b:af:d2:03:28:17:9a:47:06:bb:86:
                    8e:9d:8a:5b:7f:3e:10:6c:ce:e7:f9:27:60:6b:c7:
                    04:20:6a:4f:d3:15:70:c0:ac:d6:0e:f9:49:fd:fd:
                    ff:4c:0a:00:29:dd:70:7c:1a:dd:7c:16:bc:ac:bd:
                    2a:15:51:b0:21:c8:63:88:fd:52:ac:2e:3d:20:e8:
                    94:54:ae:34:c1:fd:9d:00:18:66:e1:36:af:35:d4:
                    91:ec:2e:10:a6:dc:38:9e:3b:ec:57:de:54:25:38:
                    46:46:5c:26:7b:d6:fa:f8:70:5b:30:38:06:75:76:
                    05:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:36:CE:96:95:C8:E8:64:35:7C:8A:E7:93:B7:72:81:35:8E:B2:58
            X509v3 Authority Key Identifier:
                keyid:DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/8ec8665c8b90d004baf40131bf4474735be0b1cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7610:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:98:75:66:0a:4e:0d:5d:f7:43:45:5a:2e:3e:46:d6:be:33:
         12:27:a4:47:ac:4a:3b:8d:5f:0c:87:f4:10:2d:65:37:33:77:
         61:66:bf:39:65:11:0d:af:d7:d2:1d:4c:81:ef:80:1e:f5:cf:
         05:c6:5b:b2:ba:32:3d:f4:0f:f0:9a:17:19:f1:0b:6c:2b:11:
         37:20:a9:96:85:9c:87:75:e9:3b:73:15:ae:4f:27:f1:9b:df:
         bd:b5:dc:2f:ad:f7:14:6e:f3:66:dd:13:ef:19:37:d7:b0:a9:
         33:81:3a:d3:48:30:e9:0e:51:45:52:e5:48:cf:05:7a:f9:6e:
         a6:be:5f:30:5e:17:6f:15:e9:77:50:d1:63:ee:62:c0:2a:a7:
         1a:44:a5:8f:e5:85:85:ba:56:7c:0b:4e:a7:e7:ce:f1:bf:98:
         0c:1e:29:6c:d7:6e:49:01:23:fa:55:a7:11:b1:89:18:c8:0d:
         d6:bb:af:ad:19:ca:fb:82:fc:3d:c5:ea:29:19:d5:0b:5d:b7:
         29:84:7d:a2:34:e5:ee:ff:07:18:f6:e7:fd:0d:ce:a7:7e:87:
         fb:37:75:1e:8d:81:72:c4:e6:de:58:60:a3:de:60:78:5b:f8:
         c5:dd:35:10:98:ba:44:4f:5c:cd:e8:5a:9a:03:fd:16:40:04:
         31:e8:91:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----