Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/354332c2d69d9e8ee558cb83ca9ff4d4aa635685.roa
File:                     354332c2d69d9e8ee558cb83ca9ff4d4aa635685.roa (raw, json)
Hash identifier:          U6YqkEnI3CL8xwNGC39x6WbqL0Xg2J+hmZnvBrlLcnk=
Subject key identifier:   9F:E2:40:7F:55:FD:42:EC:7C:9C:63:52:5C:A7:BA:6F:18:FB:3E:29
Certificate issuer:       /CN=bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6
Certificate serial:       128773
Authority key identifier: 03:83:6F:62:CD:84:48:90:75:9C:DD:AE:F4:FF:A7:33:CF:5A:B6:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/354332c2d69d9e8ee558cb83ca9ff4d4aa635685.roa
Signing time:             Fri 15 Oct 2021 05:07:29 +0000
ROA not before:           Fri 15 Oct 2021 03:00:00 +0000
ROA not after:            Sun 15 Oct 2023 03:00:00 +0000
asID:                     28022
IP address blocks:        2800:510:3::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1214323 (0x128773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6
        Validity
            Not Before: Oct 15 03:00:00 2021 GMT
            Not After : Oct 15 03:00:00 2023 GMT
        Subject: CN=354332c2d69d9e8ee558cb83ca9ff4d4aa635685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fd:48:d1:9a:44:a1:c0:68:35:93:c2:b0:04:
                    6c:a9:2a:93:95:59:cc:9b:92:bd:b0:0b:67:17:07:
                    84:8e:5a:42:ae:69:aa:2a:f8:1b:0c:75:9c:e6:65:
                    c4:56:8f:9e:05:f4:0e:7e:a8:1d:7e:65:fd:c5:4e:
                    71:b7:e2:0d:21:c4:3c:db:48:aa:25:00:01:0e:fe:
                    41:6d:3e:be:50:65:a9:8a:12:3e:56:3a:2f:04:05:
                    80:87:a7:8f:d0:81:c8:3e:15:53:64:17:85:04:ce:
                    c7:33:a1:0d:98:98:b4:34:6f:9c:9d:68:02:40:f1:
                    41:b9:2b:ff:e8:4c:6d:69:c8:f9:5c:9c:ef:0a:66:
                    8f:94:75:7c:2a:32:3c:bd:88:95:63:d6:21:f9:0e:
                    5f:ec:6f:6c:a8:82:90:db:b0:85:b4:f2:72:cd:96:
                    92:fb:d7:14:4a:3e:75:68:f0:91:7a:66:9f:a7:56:
                    5f:92:2b:23:0e:a7:bd:06:a3:f5:39:34:10:0e:53:
                    84:54:a1:b7:a5:09:52:66:36:b4:95:2d:40:6d:f4:
                    9c:61:5e:f5:27:f4:1b:90:43:94:29:98:33:74:6d:
                    7c:5f:0f:ce:c2:20:3e:12:24:a9:b1:67:a3:9f:b8:
                    c7:7a:6f:a9:f9:f0:40:8b:1e:e4:b0:12:55:47:bc:
                    89:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E2:40:7F:55:FD:42:EC:7C:9C:63:52:5C:A7:BA:6F:18:FB:3E:29
            X509v3 Authority Key Identifier:
                keyid:03:83:6F:62:CD:84:48:90:75:9C:DD:AE:F4:FF:A7:33:CF:5A:B6:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/354332c2d69d9e8ee558cb83ca9ff4d4aa635685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:510:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:3d:a0:13:16:0b:3d:cf:7b:54:c0:60:14:5b:c9:76:86:a7:
         c4:c3:8f:e6:29:b1:10:07:bd:65:7a:f5:ee:a0:58:f5:85:d4:
         f8:03:45:e6:99:b9:9b:bb:54:90:6a:09:bc:00:9b:8f:2b:a8:
         86:c3:6a:48:95:ff:8c:75:e8:08:39:a6:3f:89:a5:9b:79:9a:
         58:0f:00:de:68:f0:1d:52:86:6d:19:eb:ee:85:a8:13:ec:1b:
         19:9f:71:32:d1:82:84:f2:32:b6:ec:61:7c:00:9f:bf:05:6c:
         c9:99:5d:69:5c:30:86:a3:3a:95:2c:74:15:b9:29:bb:99:3a:
         c3:61:38:82:ed:2b:36:3b:8e:47:31:b9:a8:43:90:8d:ce:55:
         ed:55:70:72:5b:5e:fe:ff:04:06:67:ee:21:bd:dd:00:3c:24:
         6f:96:31:bf:8d:48:1e:af:11:2e:cc:1a:b6:25:c8:08:6c:01:
         49:17:99:c9:f8:f8:77:14:fb:df:b7:07:cd:44:3b:d7:48:a9:
         8e:9e:8d:6e:58:9d:90:65:e2:c0:49:2b:bb:72:3a:9c:b9:23:
         07:70:7c:3d:a4:98:81:12:25:8c:f7:85:8f:43:b5:3c:9c:ba:
         6e:49:45:70:39:b9:83:ea:84:04:66:98:10:02:d7:1b:34:2c:
         f3:90:db:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----