Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/cb5f349cf7476f9259324ecfae33cd1985f8dd7b.roa
File:                     cb5f349cf7476f9259324ecfae33cd1985f8dd7b.roa (raw, json)
Hash identifier:          0OSxqizkCNKHz6jUwElrpCWX7ZqMCBG1kgG/2ekv1OU=
Subject key identifier:   B2:A3:8E:CE:DB:62:70:E9:A7:EE:21:FD:38:76:B2:C9:41:CB:C3:9F
Certificate issuer:       /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial:       0D951E
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/cb5f349cf7476f9259324ecfae33cd1985f8dd7b.roa
Signing time:             Wed 24 Mar 2021 14:37:06 +0000
ROA not before:           Wed 24 Mar 2021 14:37:05 +0000
ROA not after:            Tue 24 Mar 2026 14:37:05 +0000
asID:                     52423
IP address blocks:        2803:6900:574::/48 maxlen: 48
                          2803:6900:581::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890142 (0xd951e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
        Validity
            Not Before: Mar 24 14:37:05 2021 GMT
            Not After : Mar 24 14:37:05 2026 GMT
        Subject: CN=cb5f349cf7476f9259324ecfae33cd1985f8dd7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bf:aa:58:13:88:7c:76:96:5a:d8:a0:58:77:
                    64:31:1e:e1:e4:a8:80:3e:43:4d:38:18:cf:27:35:
                    53:9b:05:cf:93:a4:24:e5:5c:49:2d:cd:df:25:23:
                    26:7c:c7:3e:dd:f3:89:bb:05:d5:b7:2f:22:70:c3:
                    8e:c1:05:61:45:c4:d4:0b:e8:f0:42:0f:bd:61:a4:
                    a5:82:56:f3:b1:c1:3a:47:23:56:6b:b1:19:04:72:
                    c0:1a:fd:eb:ab:9f:1a:2b:6b:f9:f2:c8:07:a8:65:
                    f3:bc:22:b5:48:a8:dc:58:f0:83:fa:26:a0:21:71:
                    e6:ee:36:7d:8f:7b:31:64:71:dd:fe:ac:62:29:12:
                    bc:34:cc:6e:9a:38:f5:7b:15:91:16:5e:79:bd:92:
                    df:d8:c6:6f:5a:f6:b4:46:e9:01:1c:1d:0d:c4:4b:
                    fe:58:0d:46:e2:5d:ab:fe:7e:e5:39:a8:5f:a2:ca:
                    d0:ee:ca:c7:2b:65:92:4b:11:8a:b2:5a:c7:7a:b0:
                    8f:88:8d:a1:a5:94:33:9b:fe:4e:4d:de:05:06:da:
                    d4:3d:69:ec:58:c8:86:c1:c0:66:53:03:1c:76:77:
                    a8:88:fb:62:45:e2:74:db:36:95:c8:cd:2f:ad:38:
                    89:b2:8c:98:5e:24:c8:cd:d1:90:d0:58:fd:84:42:
                    1c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A3:8E:CE:DB:62:70:E9:A7:EE:21:FD:38:76:B2:C9:41:CB:C3:9F
            X509v3 Authority Key Identifier:
                keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/cb5f349cf7476f9259324ecfae33cd1985f8dd7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:574::/48
                  2803:6900:581::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:bb:cb:d5:e8:eb:d9:9a:da:63:64:da:e8:97:06:71:aa:f8:
         28:c7:12:d2:6e:4c:eb:6f:4b:89:18:a3:37:f3:4d:94:4c:dd:
         a5:5d:c6:7e:f7:86:73:c6:99:43:1b:71:ef:97:2c:82:25:ad:
         d7:9c:c5:08:e5:dd:6e:c0:14:99:f5:d3:7b:0a:00:d1:2a:ca:
         2c:69:86:03:b7:28:7c:1e:8d:4e:d0:61:14:f3:30:cc:3c:a1:
         99:ca:f7:c9:58:1c:d4:8f:0c:24:47:d2:c8:ec:50:2e:a4:f6:
         23:7f:c2:07:3a:44:b0:bf:7b:c5:6a:7f:43:7a:0f:0f:c7:ad:
         40:2e:88:af:53:eb:d1:af:d5:6b:ab:e6:9d:19:8f:aa:a7:af:
         a5:a9:2c:e3:81:c5:e2:df:f1:03:1c:e6:22:a9:8a:87:3c:77:
         dd:95:0b:b2:90:2c:f5:74:71:35:3a:02:6c:93:bf:05:2d:70:
         85:b3:91:29:4f:f4:e4:77:03:f2:2c:4a:1f:74:eb:06:33:44:
         e9:91:17:b5:c7:3b:b1:be:08:29:e4:07:70:f4:17:56:26:6a:
         5b:f5:1c:9d:c7:e1:79:9d:f7:4a:44:37:ae:33:14:26:8a:c1:
         72:35:79:1b:69:11:c2:fd:85:66:81:14:f0:e0:b3:cb:0d:ce:
         75:78:2d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----