Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/e123a32dcd5864b42140ecfae5f37cb3dd04918a.roa
File:                     e123a32dcd5864b42140ecfae5f37cb3dd04918a.roa (raw, json)
Hash identifier:          J2X1ID9FzgwWTyEenbuJv3/cMgnY9hb25DyT45cZXqE=
Subject key identifier:   D0:C8:92:73:96:34:82:F3:90:85:98:BD:02:93:44:EC:E1:5B:D6:A7
Certificate issuer:       /CN=bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3
Certificate serial:       0B69
Authority key identifier: 09:79:D2:E5:30:32:6D:03:CB:CF:74:CC:C9:7C:68:B4:D3:3F:23:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/e123a32dcd5864b42140ecfae5f37cb3dd04918a.roa
Signing time:             Mon 18 Apr 2022 15:52:17 +0000
ROA not before:           Mon 18 Apr 2022 03:00:00 +0000
ROA not after:            Thu 18 Apr 2024 03:00:00 +0000
asID:                     270143
IP address blocks:        2806:3df:f000::/36 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2921 (0xb69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3
        Validity
            Not Before: Apr 18 03:00:00 2022 GMT
            Not After : Apr 18 03:00:00 2024 GMT
        Subject: CN=e123a32dcd5864b42140ecfae5f37cb3dd04918a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:78:77:b7:28:54:4b:08:42:83:51:72:95:eb:
                    36:7d:05:21:88:5f:3a:09:cf:1f:26:e3:9e:4f:2e:
                    bd:79:4e:47:43:64:0d:39:9c:1b:92:83:54:51:94:
                    e2:4f:61:30:39:e4:6f:82:d6:79:c4:5d:f6:06:d5:
                    03:3f:85:39:ed:7e:d7:38:67:da:8b:2f:0c:cc:27:
                    d8:a1:e4:a0:d3:49:3f:02:45:92:d5:08:34:37:78:
                    9f:bc:13:11:53:90:0f:aa:0e:c5:14:c4:74:8e:79:
                    73:10:e1:2f:c0:8c:de:29:9e:48:5c:e2:05:09:c0:
                    de:ad:87:df:29:b2:64:1d:fa:a4:49:ba:e8:70:72:
                    53:1f:9e:98:2b:62:22:6a:e5:67:4f:b3:80:9c:25:
                    47:1c:e0:97:81:7c:d3:4c:51:14:44:b5:86:a7:79:
                    6a:b6:68:30:18:29:53:c9:79:bf:d3:fa:10:b0:db:
                    bb:2f:7a:de:9b:d8:bf:52:b1:9c:66:da:7e:e5:71:
                    07:eb:32:92:f4:08:94:f6:29:73:95:64:5b:5d:91:
                    96:bb:df:e5:28:9a:d0:69:0d:82:67:b0:07:3c:e7:
                    af:3b:06:e9:d9:ef:e0:ed:44:e2:72:2b:63:d8:5b:
                    6b:ca:7d:31:7b:16:2e:05:c5:41:aa:c2:e9:64:38:
                    45:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C8:92:73:96:34:82:F3:90:85:98:BD:02:93:44:EC:E1:5B:D6:A7
            X509v3 Authority Key Identifier:
                keyid:09:79:D2:E5:30:32:6D:03:CB:CF:74:CC:C9:7C:68:B4:D3:3F:23:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/e123a32dcd5864b42140ecfae5f37cb3dd04918a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3df:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8b:3e:69:45:14:ef:73:66:a6:9c:af:71:07:df:06:f7:cd:63:
         3b:8a:5a:14:68:74:65:e1:29:bf:e8:b0:60:1b:e4:19:92:9f:
         76:7c:68:cd:d8:5d:d8:fa:67:b5:56:94:20:67:45:f0:c3:a8:
         35:2e:4c:db:d8:bf:b2:5e:bf:aa:73:8f:8f:f2:2e:ff:f5:72:
         13:be:98:df:23:1a:55:23:5d:c4:8a:65:a6:15:54:0d:ef:c2:
         6f:1e:f6:bc:e7:25:f9:62:a6:cc:a3:8c:a3:37:0d:12:c0:36:
         a6:57:25:30:81:25:0d:c0:59:eb:11:cb:10:1f:99:84:7a:72:
         1c:8f:1d:81:0f:1a:29:3f:8f:24:40:eb:1c:a5:65:8d:38:3c:
         e4:64:d6:4a:45:04:96:46:3b:5e:18:66:de:2b:8b:9d:98:c8:
         8e:54:7a:2d:e6:a2:cc:11:38:03:54:75:0a:4c:c0:9d:46:12:
         ed:f0:0f:8c:90:2e:df:2e:5e:d6:ce:3a:23:78:01:8c:e7:4c:
         a1:a3:8e:c7:83:f9:32:94:61:84:17:d4:1e:60:d9:23:d7:6d:
         2e:a5:05:00:fc:35:cb:16:14:19:b8:ad:34:8f:93:0b:95:a2:
         87:fb:66:e2:28:e4:cb:6c:cf:05:b8:e6:eb:4a:11:39:f5:8c:
         b8:9d:bd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----