Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/b5961285671411cd7813c3cf348765a02ca8d0e0.roa
File:                     b5961285671411cd7813c3cf348765a02ca8d0e0.roa (raw, json)
Hash identifier:          AELXXiEnQmz+E/eRF0gFh/l52HMayZxvNRJaeyuTnGg=
Subject key identifier:   89:E1:8A:D7:28:5F:D9:76:40:D4:3A:47:D7:75:2D:33:A1:FD:98:42
Certificate issuer:       /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial:       0D926C
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/b5961285671411cd7813c3cf348765a02ca8d0e0.roa
Signing time:             Wed 24 Mar 2021 14:37:06 +0000
ROA not before:           Wed 24 Mar 2021 14:37:05 +0000
ROA not after:            Tue 24 Mar 2026 14:37:05 +0000
asID:                     52423
IP address blocks:        2803:6900:574::/48 maxlen: 48
                          2803:6900:581::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889452 (0xd926c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
        Validity
            Not Before: Mar 24 14:37:05 2021 GMT
            Not After : Mar 24 14:37:05 2026 GMT
        Subject: CN=b5961285671411cd7813c3cf348765a02ca8d0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a3:de:36:f7:5d:22:1c:69:a6:9b:62:8c:4d:
                    d3:64:8d:74:9e:dd:3d:f6:67:0e:08:8a:9e:31:cc:
                    6d:dd:87:6c:f9:db:2f:c9:6f:2f:7b:c2:48:14:b8:
                    0b:ff:00:c4:62:77:79:0b:86:45:a9:4c:ff:ec:31:
                    f4:a9:b0:da:65:cd:87:f8:e2:13:d2:a4:75:a0:05:
                    3f:40:1b:04:a3:65:47:61:ed:fc:0c:a0:79:91:b6:
                    61:28:68:74:b7:f8:a5:0f:30:77:1f:6c:ed:92:8d:
                    99:92:0f:9f:aa:ba:fb:3d:9a:82:b9:ef:12:34:a2:
                    f2:b9:56:d7:0a:e9:08:49:ce:ec:0b:97:ac:91:a9:
                    29:0a:b2:57:c3:a7:70:74:73:0d:3f:a0:14:d7:87:
                    f3:53:11:a2:87:4f:db:6d:f0:f3:4c:c2:3f:61:e3:
                    e4:85:12:ab:41:a1:89:9f:ab:84:fe:9c:bf:3f:bc:
                    f4:32:c2:53:81:9e:b6:b7:01:ad:66:95:2f:0d:66:
                    fe:81:b4:a6:1f:e0:7b:71:5c:1b:f7:41:30:59:9f:
                    87:39:f4:92:fc:2d:52:e6:24:22:6e:7e:72:1f:b2:
                    d1:0c:4e:e4:62:c0:1d:b1:83:69:87:23:6e:1a:d6:
                    41:28:fd:8c:f4:1b:e6:3c:36:56:91:27:2c:ad:f3:
                    70:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E1:8A:D7:28:5F:D9:76:40:D4:3A:47:D7:75:2D:33:A1:FD:98:42
            X509v3 Authority Key Identifier:
                keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/b5961285671411cd7813c3cf348765a02ca8d0e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:574::/48
                  2803:6900:581::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:b0:0d:40:d5:9f:99:ed:19:d7:ff:1d:1e:d3:a0:06:1a:aa:
         8b:42:ae:d4:5b:d0:1d:50:07:f6:7d:57:2e:11:e0:a8:4c:62:
         25:08:66:70:86:a6:ef:2a:33:89:7a:6a:ac:54:0d:eb:88:f6:
         ee:41:cc:9c:02:b2:80:1d:05:ff:55:7b:e4:00:c6:c9:a7:3b:
         48:0e:c8:8d:b8:b3:76:91:6a:98:71:cd:68:25:93:fa:86:3a:
         a9:fd:10:40:08:f5:45:6a:af:f9:58:16:5c:20:b0:cd:4c:da:
         79:ae:1b:97:05:8d:27:52:36:eb:b7:8e:80:52:dd:ed:d6:69:
         a9:13:90:be:2e:4b:56:b6:7e:ec:d6:8a:46:2a:16:d2:6b:76:
         b1:ba:f8:09:58:35:c9:76:0d:82:8f:8b:3b:85:31:20:31:66:
         f1:d0:0a:e3:c1:c7:51:8a:be:06:01:34:9e:b1:0a:e0:67:35:
         c2:f6:04:32:ee:d0:d7:21:8b:48:8e:82:80:66:8b:cf:6b:5c:
         e1:1d:3c:d5:55:1c:11:fb:50:42:04:cf:44:64:3e:3f:3c:ab:
         b1:da:7f:58:bd:d8:ed:bf:4e:bf:5d:20:4e:cf:d2:07:bd:7b:
         44:b7:9c:66:f1:f7:14:b2:5d:3f:a1:3f:7d:80:24:7c:d8:b8:
         2e:88:bb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----