Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/ea9acfe28a7dc354ac6afd3bec9ae57e3c7c4937.roa
File:                     ea9acfe28a7dc354ac6afd3bec9ae57e3c7c4937.roa (raw, json)
Hash identifier:          QjYkstHhNPNA2cmeC15Ruo8/dlY/KRGGQa1u72C/uW8=
Subject key identifier:   22:95:1C:EB:25:62:C8:FD:71:CA:40:D6:56:1C:C3:B6:C1:AF:AF:A4
Certificate issuer:       /CN=bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6
Certificate serial:       127FD7
Authority key identifier: 03:83:6F:62:CD:84:48:90:75:9C:DD:AE:F4:FF:A7:33:CF:5A:B6:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/ea9acfe28a7dc354ac6afd3bec9ae57e3c7c4937.roa
Signing time:             Fri 15 Oct 2021 05:05:48 +0000
ROA not before:           Fri 15 Oct 2021 03:00:00 +0000
ROA not after:            Sun 15 Oct 2023 03:00:00 +0000
asID:                     28022
IP address blocks:        2800:510:1::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1212375 (0x127fd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6
        Validity
            Not Before: Oct 15 03:00:00 2021 GMT
            Not After : Oct 15 03:00:00 2023 GMT
        Subject: CN=ea9acfe28a7dc354ac6afd3bec9ae57e3c7c4937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:bf:31:d5:b3:57:d2:9c:2c:14:ea:c6:39:
                    b2:91:e0:d4:00:23:01:c2:16:7a:64:1d:f9:51:f4:
                    15:54:95:40:e7:f5:3a:9f:a3:58:ee:10:3d:ce:7d:
                    aa:6a:58:af:be:9d:89:d5:62:21:ae:38:fe:97:3d:
                    fc:95:75:69:8b:5d:b2:40:0a:cc:ba:e2:36:61:8e:
                    88:82:a8:d1:c8:6b:84:1d:3f:5f:fb:e8:2c:dd:16:
                    61:91:11:34:d8:ae:13:bf:01:c3:b3:a3:47:fd:69:
                    4a:9e:c3:aa:74:69:18:0f:d4:2a:18:d9:1f:86:5b:
                    b9:39:60:c9:35:3b:7d:00:13:b3:90:b7:6f:ed:63:
                    8b:29:ba:94:2a:17:a4:2b:2a:c7:36:51:52:b9:a8:
                    8a:43:96:57:a9:d4:de:b6:ed:03:a8:44:11:68:d4:
                    c7:1d:e8:2e:c9:e8:ec:dd:f1:2a:ea:97:b4:0a:4d:
                    5c:77:df:4c:77:02:6c:e8:26:bb:56:d5:83:b5:04:
                    e9:30:6f:07:46:87:7b:73:f3:d5:1f:ac:eb:99:6b:
                    b0:73:6d:49:7d:09:85:51:5f:49:ad:a4:b2:99:1a:
                    59:14:95:0e:82:67:b8:fd:49:7e:39:b2:b7:0e:22:
                    da:0b:1e:c6:8d:c8:bb:cd:d4:42:4a:ab:d9:e4:c6:
                    00:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:95:1C:EB:25:62:C8:FD:71:CA:40:D6:56:1C:C3:B6:C1:AF:AF:A4
            X509v3 Authority Key Identifier:
                keyid:03:83:6F:62:CD:84:48:90:75:9C:DD:AE:F4:FF:A7:33:CF:5A:B6:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/ea9acfe28a7dc354ac6afd3bec9ae57e3c7c4937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:510:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:08:7f:5e:a9:52:97:30:4f:d8:59:c7:61:f1:03:86:22:ad:
         e4:fd:10:a0:90:7a:96:61:8c:b2:8e:a4:60:74:61:c3:28:d7:
         f7:cc:d7:80:29:30:5e:61:13:2f:8a:f3:89:42:a1:9e:f5:f8:
         ed:b9:0d:d5:cf:60:3d:40:25:6a:9c:29:de:fd:f6:16:60:1f:
         9d:c6:db:82:fc:20:47:1d:a6:79:2e:ed:f7:89:57:90:c2:3a:
         e2:98:50:1d:c7:c3:ed:86:92:bd:78:14:b5:fd:18:9f:05:f0:
         9f:f3:af:56:d3:06:3e:96:99:44:b5:e0:15:a0:e6:3f:51:b2:
         01:eb:89:62:7d:29:65:02:f4:47:34:ad:11:b3:9e:e9:f7:bb:
         db:c3:74:b9:4f:b3:d5:22:18:ab:01:af:3d:2f:e6:23:64:07:
         7d:7b:1c:99:a4:e9:54:b2:b3:ee:6b:c6:8d:7f:5a:67:15:03:
         0f:d9:3d:78:18:e2:c7:d3:84:47:12:fc:58:ba:a8:62:74:a1:
         7e:e2:a1:c0:63:d1:72:42:46:02:56:60:f0:c8:d2:d8:78:37:
         a8:2d:75:13:ad:e1:2e:8c:ea:ab:4d:9b:74:6c:69:ed:9c:a8:
         2f:87:c8:f5:90:4e:ab:cb:9a:ff:7d:9b:61:08:67:53:42:88:
         5c:5b:56:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----