Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/7dd09b4101fb27e89a4a8d4e701d819dab4eff84.roa
File:                     7dd09b4101fb27e89a4a8d4e701d819dab4eff84.roa (raw, json)
Hash identifier:          vdun+UcQTQUX2BCGGRtLx4QuFMH3M7g8d7IiaY+PkA0=
Subject key identifier:   C1:BA:72:FE:D9:A0:82:5C:DF:85:96:EF:42:2E:14:9C:00:3F:45:D2
Certificate issuer:       /CN=5be393491eb2c03f14214a706c7be3bb76a02485
Certificate serial:       0CE2B7
Authority key identifier: 81:52:EF:3A:9B:F5:23:2B:AA:03:28:C5:89:F0:B8:04:1E:FB:36:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5be393491eb2c03f14214a706c7be3bb76a02485.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/7dd09b4101fb27e89a4a8d4e701d819dab4eff84.roa
Signing time:             Wed 24 Mar 2021 14:39:14 +0000
ROA not before:           Wed 24 Mar 2021 14:39:14 +0000
ROA not after:            Tue 24 Mar 2026 14:39:14 +0000
asID:                     266802
IP address blocks:        2803:a8a0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844471 (0xce2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be393491eb2c03f14214a706c7be3bb76a02485
        Validity
            Not Before: Mar 24 14:39:14 2021 GMT
            Not After : Mar 24 14:39:14 2026 GMT
        Subject: CN=7dd09b4101fb27e89a4a8d4e701d819dab4eff84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f6:82:81:25:f8:45:44:d4:c2:a0:c6:72:70:
                    57:e4:c5:ea:b7:09:78:4e:a1:01:6b:95:fd:d7:21:
                    5c:d8:57:d6:c7:4e:ec:bb:87:47:28:3d:e5:e6:43:
                    e8:76:66:08:65:66:43:cb:2d:f0:12:79:48:ec:b0:
                    b2:4d:a4:fe:d5:7b:73:08:de:ce:7b:6a:a5:28:41:
                    28:17:23:e6:38:80:78:72:6c:e1:9f:db:55:c0:df:
                    07:54:fd:9b:7f:26:3e:59:ba:c0:cf:d2:e4:fc:48:
                    72:86:ce:92:2d:ce:0c:9b:57:d8:34:87:53:6d:1a:
                    66:95:f7:3c:e9:2b:d4:1b:5c:25:5a:93:3e:7a:15:
                    eb:a2:c6:52:fd:5f:33:43:4b:21:8a:b7:5f:a0:85:
                    67:84:38:71:e0:58:42:57:a9:f2:d3:da:c5:62:b6:
                    1f:02:a5:08:3d:08:53:c1:2a:47:97:fc:4b:8c:65:
                    c5:47:46:d7:17:ca:4f:8b:6e:69:41:32:1f:20:64:
                    f4:05:10:95:9e:1d:18:a9:4c:63:09:d4:59:c1:c5:
                    b2:e3:22:65:b6:98:74:9c:9c:cb:5b:bc:16:68:2f:
                    0e:fa:7b:fe:04:f2:d3:ca:98:dd:bb:13:fc:30:e9:
                    e0:89:a2:8b:ba:56:c4:50:5d:12:62:82:a3:bd:82:
                    ec:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BA:72:FE:D9:A0:82:5C:DF:85:96:EF:42:2E:14:9C:00:3F:45:D2
            X509v3 Authority Key Identifier:
                keyid:81:52:EF:3A:9B:F5:23:2B:AA:03:28:C5:89:F0:B8:04:1E:FB:36:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5be393491eb2c03f14214a706c7be3bb76a02485.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/7dd09b4101fb27e89a4a8d4e701d819dab4eff84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/5be393491eb2c03f14214a706c7be3bb76a02485.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:73:46:e0:5d:10:99:f9:66:0c:74:b4:1f:67:8f:62:5c:92:
         42:56:fb:1c:e8:3e:ec:ac:e2:3b:ef:38:17:03:90:d1:2c:7b:
         a5:43:e0:83:5f:bb:3c:68:04:39:58:dc:eb:a7:3b:b3:ee:57:
         0e:32:7e:40:d8:12:af:2d:25:56:d6:71:55:82:33:5c:56:3e:
         9e:64:62:3a:77:b0:dd:90:52:7a:b8:2d:72:06:70:ef:cb:03:
         b8:03:cf:4c:29:2f:fc:6f:e0:90:26:64:c8:c0:71:e8:dc:b2:
         ca:a6:c8:c3:c1:83:3a:48:b4:8d:1f:e3:d9:ea:b3:4c:e6:a9:
         df:d2:37:d1:fb:ac:7d:28:2d:27:e0:f8:79:7f:b7:aa:55:0e:
         88:f4:ae:43:db:83:76:55:1a:81:b0:16:65:15:07:25:b5:88:
         b3:eb:b0:51:67:d8:8c:84:d5:a4:90:af:12:ce:a4:cf:33:74:
         62:c0:9c:1c:57:12:af:04:e2:cf:45:80:f0:fe:1b:b0:5d:11:
         03:71:82:9d:e4:cd:58:7e:42:fc:dd:f8:fa:97:0f:25:ab:a8:
         02:03:96:ef:c9:ff:83:a0:43:89:4a:8d:18:02:5e:10:32:cd:
         30:2e:c6:2a:04:a7:dd:80:71:42:ab:35:1b:fc:f4:0f:49:44:
         08:e6:dd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----