Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/2316ad222d136c9c314f5e3eadcb12f2320c5570.roa
File:                     2316ad222d136c9c314f5e3eadcb12f2320c5570.roa (raw, json)
Hash identifier:          6LQPCdvi9iN87XTVq2AswyhcJ0uXdbVlm2V94APAa1M=
Subject key identifier:   81:93:93:A2:44:53:92:CA:A9:80:F2:A4:E1:18:1C:FF:CA:C3:03:7F
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0E9842
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/2316ad222d136c9c314f5e3eadcb12f2320c5570.roa
Signing time:             Wed 24 Mar 2021 14:29:30 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        2800:600:400::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 956482 (0xe9842)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=2316ad222d136c9c314f5e3eadcb12f2320c5570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5a:61:f4:03:06:83:3e:65:88:a3:a1:f2:13:
                    6d:77:5e:4b:3c:64:64:af:3f:8f:cf:a4:6b:27:21:
                    71:08:7e:74:de:38:1c:61:9a:c7:37:a0:ba:f1:af:
                    89:4e:86:fb:51:a2:e0:91:6c:67:f9:e4:db:06:ad:
                    86:e0:03:08:69:6e:70:fb:e4:b2:8c:9a:d9:b0:f6:
                    66:4a:14:dd:78:b7:82:94:c9:7d:dc:12:b9:b0:6e:
                    28:11:74:a2:c9:64:b0:57:c5:d4:14:0d:85:59:66:
                    ce:c3:f2:d5:8a:8d:53:fc:e2:85:d3:f5:02:d5:a5:
                    75:03:0a:21:9b:fc:a4:66:bf:43:53:0d:e8:4d:15:
                    55:0e:89:83:e9:be:b6:3a:6d:e1:09:3b:fb:26:71:
                    5b:83:09:88:8e:66:e2:26:e6:88:d4:dc:27:9f:6e:
                    3f:85:49:5b:b4:65:2d:21:ba:cc:9c:70:f8:8c:92:
                    04:41:f1:07:d0:50:b4:de:3b:9c:a1:4b:b1:6a:25:
                    e3:12:bf:86:7b:df:51:d2:99:54:ce:c3:2e:37:cf:
                    a5:e5:49:93:d8:39:8f:96:2e:b3:11:40:3f:68:9c:
                    2b:ea:7c:bc:0e:fa:1e:97:75:73:7a:c6:3b:77:c6:
                    18:ae:0c:2f:ba:c0:2a:49:98:cd:91:4e:86:34:0c:
                    af:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:93:93:A2:44:53:92:CA:A9:80:F2:A4:E1:18:1C:FF:CA:C3:03:7F
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/2316ad222d136c9c314f5e3eadcb12f2320c5570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:600:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:9c:f3:46:64:35:7e:06:79:e2:dd:9f:0f:87:24:a1:57:f3:
         84:7c:f3:83:ea:97:32:25:6b:ce:a7:4c:5d:e3:26:da:1c:0d:
         2d:f2:92:56:23:1a:e7:3e:ee:5e:5a:35:3f:79:14:65:03:9f:
         2d:7b:68:a6:4b:4b:ba:09:85:fa:89:23:ef:1c:1b:d5:89:16:
         21:92:fd:b4:78:3a:d8:7e:f6:77:bd:55:d8:cc:b2:7b:b9:ea:
         12:ff:31:aa:7c:63:10:c3:4c:76:63:d0:84:9e:07:e3:83:e5:
         50:f4:63:a5:33:90:ea:bc:43:e4:cb:75:20:05:bf:3e:06:b6:
         1f:3c:7e:80:e3:1a:f4:5a:f2:c2:87:b3:8e:27:27:24:53:9c:
         a1:1f:86:5d:57:e7:8a:44:82:c9:7a:1f:15:88:60:7e:ff:95:
         88:90:5c:38:02:b9:9f:12:7f:c7:b2:61:3c:98:35:5b:fe:51:
         2d:ba:e4:4e:a2:71:67:3f:9f:d8:7c:49:0b:17:ec:fd:7f:cc:
         ff:be:f2:15:2d:6c:42:61:d0:54:e4:8d:bc:0b:1a:b2:1e:38:
         28:78:c9:21:60:9d:f7:a4:45:ba:3e:63:a9:a5:0d:d2:0a:0f:
         49:97:1f:ff:86:86:b7:09:e9:2b:3f:50:9c:24:4c:d6:2d:f7:
         dd:82:46:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----