Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/121d1a706cfc42374cd0ba97edb3efd995e7146c.roa
File:                     121d1a706cfc42374cd0ba97edb3efd995e7146c.roa (raw, json)
Hash identifier:          W1nO4u4JlBzJVNmKjm+xPsQA58OYqfhW1fbUTvawm/E=
Subject key identifier:   A6:0D:7F:4A:27:AA:F9:0C:F9:8B:62:38:A0:8A:08:0E:92:73:7A:D9
Certificate issuer:       /CN=6930ea902e7534388d28d0e3ac75b7e3026edd6c
Certificate serial:       0DA090
Authority key identifier: 00:AF:5D:8C:2B:F3:24:E0:01:53:6B:43:3D:55:C6:2E:41:22:ED:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6930ea902e7534388d28d0e3ac75b7e3026edd6c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/121d1a706cfc42374cd0ba97edb3efd995e7146c.roa
Signing time:             Wed 24 Mar 2021 22:51:42 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     6568
IP address blocks:        2800:cd0:3a00::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893072 (0xda090)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6930ea902e7534388d28d0e3ac75b7e3026edd6c
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=121d1a706cfc42374cd0ba97edb3efd995e7146c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a0:37:4e:97:1c:2f:32:f5:50:e5:3f:12:60:
                    28:f1:8e:d0:19:a0:7a:57:0d:74:65:b1:42:e0:5d:
                    ef:85:9f:5b:5f:25:62:31:1b:f6:6e:23:4b:0d:6e:
                    1c:45:fd:4e:d4:ab:1d:38:d2:8e:ef:1c:34:41:6b:
                    30:bf:fa:22:28:c6:f8:a8:54:c6:da:4c:a1:4c:6a:
                    cb:d5:3c:87:2e:72:d3:57:fc:23:33:bf:98:69:3f:
                    a4:d3:c4:62:7b:32:28:ce:5a:97:77:f6:c7:24:47:
                    d7:ee:65:80:1f:78:68:16:b3:b5:52:51:90:d5:b2:
                    ee:33:f6:4d:ca:63:35:9a:8a:7f:40:22:27:cf:11:
                    4e:45:40:d6:82:0d:5f:25:50:e3:1b:2b:5d:2c:55:
                    cd:59:74:2b:4b:b0:cb:bb:5a:ae:c7:a4:65:a2:a5:
                    47:4d:fc:05:d2:13:57:65:32:45:37:b9:7e:3d:82:
                    4b:90:e0:ed:15:ca:fc:79:46:36:e7:16:a9:b4:c2:
                    12:5b:b2:35:c3:3c:cf:35:bb:13:2b:54:73:ee:81:
                    80:c9:af:ce:57:21:8e:d1:22:31:f1:30:90:b6:a4:
                    ad:e3:5e:04:cb:83:c9:40:0f:c6:8a:f4:cd:10:6f:
                    ec:dd:33:b5:5e:49:19:b0:0a:b4:15:c7:30:af:c6:
                    5b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0D:7F:4A:27:AA:F9:0C:F9:8B:62:38:A0:8A:08:0E:92:73:7A:D9
            X509v3 Authority Key Identifier:
                keyid:00:AF:5D:8C:2B:F3:24:E0:01:53:6B:43:3D:55:C6:2E:41:22:ED:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6930ea902e7534388d28d0e3ac75b7e3026edd6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/121d1a706cfc42374cd0ba97edb3efd995e7146c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/6930ea902e7534388d28d0e3ac75b7e3026edd6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:cd0:3a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:93:30:24:b4:58:57:d0:d4:d3:a2:be:ff:cc:9e:4e:f2:32:
         18:33:d0:8b:a1:b5:30:24:09:5e:6e:12:38:d6:1b:06:07:fe:
         94:3c:09:37:e9:f9:43:8c:18:02:4c:1b:f3:9b:46:8c:96:bc:
         20:1c:b9:a8:5a:2a:27:6a:09:86:cf:70:a2:ee:e8:86:72:75:
         1c:91:96:bc:e0:ae:01:d7:d9:f1:cc:2f:36:63:72:85:08:27:
         3d:a9:55:e8:16:70:e4:bb:0e:b5:3a:34:df:f6:67:25:ed:e5:
         18:35:c7:4a:a3:93:84:47:64:40:07:e1:b0:3d:49:7b:fa:36:
         fa:55:aa:ef:8b:6b:a9:83:86:1d:61:dd:79:28:af:fa:a6:69:
         27:e4:43:d1:ab:c3:1c:6e:ba:6c:df:ef:51:c0:ce:19:a5:7d:
         c5:85:62:ba:aa:8b:b8:e0:65:3c:8b:dc:74:f3:52:1d:71:cc:
         5f:1b:31:11:a9:47:ed:8d:86:d1:21:77:c8:6e:89:85:c4:4a:
         10:5b:df:e6:ce:ce:aa:9a:57:a0:68:f4:4c:d0:3d:d3:80:34:
         4a:75:52:73:57:57:71:88:41:45:db:28:35:59:d2:e7:e2:e5:
         d4:1e:54:ce:5c:24:98:34:75:d2:4e:ef:ea:37:0f:0c:88:52:
         f2:65:1b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----