Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/b0de01c12f20ee95ebf4c79fc40e03b7fda56752.roa
File:                     b0de01c12f20ee95ebf4c79fc40e03b7fda56752.roa (raw, json)
Hash identifier:          4j3rcWRTogcG8IOVdAG9WpBK+nfVUmfMIjAu4853JYY=
Subject key identifier:   45:70:E2:D1:1D:08:27:9F:F1:3B:99:3B:61:82:21:B0:7B:24:63:9A
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       0E5697
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/b0de01c12f20ee95ebf4c79fc40e03b7fda56752.roa
Signing time:             Wed 24 Mar 2021 14:39:09 +0000
ROA not before:           Wed 24 Mar 2021 14:39:07 +0000
ROA not after:            Tue 24 Mar 2026 14:39:07 +0000
asID:                     61468
IP address blocks:        2800:68:baca::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 939671 (0xe5697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 24 14:39:07 2021 GMT
            Not After : Mar 24 14:39:07 2026 GMT
        Subject: CN=b0de01c12f20ee95ebf4c79fc40e03b7fda56752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bb:71:67:07:d6:83:27:d7:dd:ab:7e:e3:b0:
                    66:79:38:32:65:0c:e9:2a:26:8c:56:c0:97:c0:3a:
                    47:2d:e5:35:aa:b9:4f:28:e5:b5:40:af:e1:b8:3d:
                    92:ae:9a:28:3a:98:4a:46:74:3f:dc:1b:95:46:b4:
                    65:00:c3:eb:88:30:0d:f5:72:5e:62:61:66:26:0e:
                    9c:e3:be:49:4a:a5:9c:19:b8:ef:3f:cd:75:b2:ea:
                    27:cd:51:c8:26:a9:41:1f:7d:40:d0:61:21:4a:8c:
                    03:9d:f8:9a:7a:38:f7:21:1d:31:87:89:ac:b8:a6:
                    ff:1c:44:9a:a8:71:16:24:69:c1:e8:c2:fd:7a:0c:
                    19:b9:17:d1:51:f7:6b:6a:a0:f8:8b:85:c2:ab:1c:
                    2c:6f:38:7e:5c:1f:15:5b:62:6f:96:6c:11:66:c9:
                    52:53:a7:6b:bb:8c:47:72:b9:4a:bc:47:b0:80:81:
                    82:f9:d8:b3:9b:62:cc:67:50:91:0f:f4:9e:ff:50:
                    b4:d8:27:8d:9c:dd:f2:b5:ac:9e:8d:7e:e7:cc:9b:
                    f7:aa:02:26:e3:43:e4:bf:31:ba:7b:37:70:76:7f:
                    90:09:b7:c7:94:51:69:2c:50:5b:35:4c:b6:49:df:
                    2c:8b:38:54:90:8c:63:78:43:cc:bd:f6:fe:81:21:
                    35:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:70:E2:D1:1D:08:27:9F:F1:3B:99:3B:61:82:21:B0:7B:24:63:9A
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/b0de01c12f20ee95ebf4c79fc40e03b7fda56752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:baca::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:62:01:b6:8f:95:60:b4:0d:9f:9d:33:d2:50:7c:60:0e:b8:
         93:39:4f:cd:1b:87:75:2d:dd:7a:c3:5e:4c:a9:12:cf:8a:92:
         f5:f6:80:b1:4f:b3:7d:07:ae:c1:df:85:5b:af:ca:84:d2:89:
         4a:9d:97:2d:8b:f7:8f:7b:07:20:69:b9:43:3f:e9:f4:aa:8e:
         6a:c5:5f:c5:fc:5c:f8:23:11:1a:75:4c:64:0c:65:22:96:8b:
         df:0e:e4:72:6b:b6:c9:03:75:5b:78:74:e9:8f:21:2b:04:1d:
         74:2f:76:18:f5:11:74:d5:92:dd:5f:20:0d:62:e3:a8:89:62:
         e0:ca:c4:cd:86:01:c6:af:ec:fc:df:c4:ee:77:e3:f5:bf:b8:
         13:6d:e9:fe:99:8f:70:7a:79:58:b1:7e:78:48:29:26:31:d3:
         0f:1f:a7:35:61:80:1f:e0:7b:20:e4:8e:f9:14:a8:08:5b:24:
         98:dd:5c:a6:76:35:a3:ae:02:82:02:ed:f1:f4:9b:41:f0:d2:
         1b:c8:94:82:b1:c3:b4:18:cc:98:2d:bb:9f:b3:42:ca:d0:4a:
         3b:d9:c0:73:41:7c:c6:5b:21:13:1b:c4:b1:b2:5d:df:c3:12:
         91:b3:38:40:30:f0:5c:99:e7:e8:70:fd:e1:e0:bc:5d:57:a3:
         11:9d:33:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----