Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/df646e4cf934dbce09a5e2bc18fdeee1be1a2218.roa
File:                     df646e4cf934dbce09a5e2bc18fdeee1be1a2218.roa (raw, json)
Hash identifier:          RvUEvFZqTYNVpZaP/1lNH3GKF1KezB4kkIjMcMyxSmc=
Subject key identifier:   41:DB:BD:BD:72:50:A0:12:EC:58:FD:3E:29:EB:CE:5D:E0:0A:E8:28
Certificate issuer:       /CN=79714d073f4d520d9dfb9d6d8ac625b3c9a02caf
Certificate serial:       0BFEFB
Authority key identifier: 5F:99:72:18:43:B5:F9:7D:54:A4:6C:88:6D:8F:1A:BC:45:75:4A:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/df646e4cf934dbce09a5e2bc18fdeee1be1a2218.roa
Signing time:             Wed 24 Mar 2021 14:47:32 +0000
ROA not before:           Wed 24 Mar 2021 14:47:32 +0000
ROA not after:            Tue 24 Mar 2026 14:47:32 +0000
asID:                     267811
IP address blocks:        2803:e3a0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786171 (0xbfefb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79714d073f4d520d9dfb9d6d8ac625b3c9a02caf
        Validity
            Not Before: Mar 24 14:47:32 2021 GMT
            Not After : Mar 24 14:47:32 2026 GMT
        Subject: CN=df646e4cf934dbce09a5e2bc18fdeee1be1a2218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a4:98:7b:79:9b:c9:d2:ef:30:5a:51:39:fd:
                    34:ee:49:3c:02:c7:a2:40:93:1c:c0:a1:ac:d4:bc:
                    9c:a5:97:5d:1c:57:5e:56:40:c9:19:45:3a:7e:c1:
                    ea:ff:7d:7a:35:6e:d7:f0:a9:5d:d1:a9:33:98:7b:
                    45:14:b1:59:74:03:21:df:bf:f8:37:a4:c5:3d:c0:
                    ba:18:5f:23:50:53:0f:e0:07:a8:af:3b:a4:d2:7e:
                    3b:1e:e9:79:f4:d4:3a:ff:8a:82:83:c4:19:5b:bc:
                    a9:b1:a7:6c:e7:5f:11:7c:99:64:a3:b1:9d:25:43:
                    26:27:c4:18:7f:7e:d9:25:79:eb:4e:57:5a:88:9c:
                    e0:b2:98:37:62:79:88:0f:91:ff:cc:83:e0:df:af:
                    2e:ba:8a:5e:27:ab:40:1b:55:ac:4b:a5:59:c2:1a:
                    6b:7a:d3:97:9b:64:d9:ab:b8:90:bf:c1:9e:6d:09:
                    1f:13:1d:b4:af:27:cd:c4:2a:e6:ec:51:4c:13:d7:
                    1f:65:24:e8:a4:08:18:b2:b3:87:5c:9a:c2:d3:23:
                    4d:c4:4e:7a:54:a6:cd:dd:9d:3c:be:8e:1f:cc:6d:
                    ec:8f:2d:a4:6e:e4:0b:9f:f1:fe:07:a8:06:f6:77:
                    b3:bb:eb:48:0f:b8:8b:bf:0a:2b:ef:38:f7:a7:c6:
                    b5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DB:BD:BD:72:50:A0:12:EC:58:FD:3E:29:EB:CE:5D:E0:0A:E8:28
            X509v3 Authority Key Identifier:
                keyid:5F:99:72:18:43:B5:F9:7D:54:A4:6C:88:6D:8F:1A:BC:45:75:4A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/df646e4cf934dbce09a5e2bc18fdeee1be1a2218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:c8:26:4f:ad:4b:64:1b:01:4e:2e:92:4a:e5:d5:64:75:f0:
         6f:62:a4:2e:e5:c3:e8:fa:49:e0:4d:92:06:f6:8e:b2:9c:84:
         67:e8:cf:63:48:c2:64:73:5d:59:35:10:22:ac:49:0f:ef:2a:
         eb:b2:d7:f0:58:5e:f3:cf:c6:cc:e1:20:27:d5:46:b2:8d:29:
         db:cb:29:48:eb:56:20:c8:bb:97:36:c9:3f:c9:1b:43:b0:19:
         79:7b:3e:6b:2e:5f:d8:35:e9:e3:45:5c:2c:e6:91:66:6f:e3:
         73:7f:a4:1a:2a:85:92:f8:5b:76:cc:54:5e:86:a5:5a:8b:b6:
         17:6a:78:f5:02:00:3b:54:03:ac:56:70:c7:05:85:92:c1:47:
         51:30:11:f0:1e:f0:68:ae:b8:b1:3e:0a:72:b2:78:97:6e:c6:
         d1:5e:28:e2:3a:9c:ac:f5:63:78:0f:38:63:6f:d9:d7:6a:bb:
         45:d6:b3:09:e8:49:b9:81:2f:1a:4d:64:36:2e:97:a1:b3:f0:
         e2:62:13:38:8d:25:51:00:94:50:0d:6d:ea:93:05:ed:4c:58:
         a6:12:df:0d:12:0a:1d:29:0e:74:87:33:ab:22:69:16:80:46:
         22:a7:4b:7f:46:0d:b5:a0:89:a5:99:25:42:6f:dc:d5:a8:a6:
         ed:55:71:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----