Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/f8a32260de122eb83b60bdebe0c219c0ff6aad05.roa
File:                     f8a32260de122eb83b60bdebe0c219c0ff6aad05.roa (raw, json)
Hash identifier:          tE4YGLYvAnC6QViUJUKJkub4edaltV97dIecS+A08SA=
Subject key identifier:   42:3A:53:6A:B7:D0:F4:BB:07:4D:E3:98:AF:01:5C:A9:3B:DD:74:C8
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0E9C7D
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/f8a32260de122eb83b60bdebe0c219c0ff6aad05.roa
Signing time:             Wed 24 Mar 2021 14:29:30 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        2800:600:211::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 957565 (0xe9c7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=f8a32260de122eb83b60bdebe0c219c0ff6aad05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5e:65:90:45:6f:e7:cc:c8:7e:f0:29:5b:c1:
                    b3:af:f9:4d:d2:3c:53:52:52:7f:03:de:c0:ed:d1:
                    46:bc:00:be:46:f0:a9:96:f8:da:e3:c8:1a:dd:63:
                    98:50:29:55:87:44:63:c5:2d:99:5d:2f:c5:2c:a5:
                    ce:51:f8:45:49:dd:20:3a:91:fd:f9:e2:b0:6a:bb:
                    b8:96:56:14:a1:5d:72:c9:52:96:59:06:fb:4a:2a:
                    0b:35:6c:f5:05:14:24:2c:14:83:78:08:54:47:5b:
                    d0:a6:b5:39:50:97:14:e8:b8:f3:31:4c:16:ac:73:
                    bd:a4:e2:df:7a:b5:16:e6:07:4e:52:f6:9d:04:83:
                    0a:4e:8e:a8:e7:d0:0d:76:97:69:17:e1:98:a0:83:
                    a7:c3:0e:af:ec:b0:64:8b:f7:1d:ff:4a:7e:d7:e3:
                    6d:08:08:34:b7:03:58:39:b8:5a:c5:f3:19:c2:35:
                    73:af:0d:da:7d:ff:3b:b4:3e:88:f9:44:b4:92:bb:
                    e5:24:13:e0:41:1d:39:15:e7:ca:cd:5d:b4:be:fe:
                    86:56:fd:9e:66:8e:84:d9:35:b9:d8:77:33:0e:15:
                    3e:a4:20:9b:5b:6b:97:ea:99:56:5b:de:57:1e:cd:
                    b4:2f:68:ae:be:2c:d7:50:20:29:91:2b:8c:7e:fd:
                    41:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3A:53:6A:B7:D0:F4:BB:07:4D:E3:98:AF:01:5C:A9:3B:DD:74:C8
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/f8a32260de122eb83b60bdebe0c219c0ff6aad05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:600:211::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:7d:18:fa:b2:91:4f:a1:41:84:09:65:2d:09:5f:83:53:57:
         40:5b:e7:1a:de:22:bc:0f:7c:66:9a:4c:0d:8d:f1:7a:4f:10:
         8e:bf:f1:b3:98:6b:70:cb:09:33:57:3e:c3:69:1b:eb:7d:9b:
         fd:ac:f2:73:5c:62:a0:9b:2e:1f:3b:a8:c8:a3:30:a2:8b:a0:
         bb:67:67:7e:f9:89:21:a6:db:09:ee:d3:9c:a3:59:54:42:59:
         4e:50:2c:da:d3:b6:fa:91:8f:c7:4c:68:b6:0f:3d:50:f4:98:
         eb:14:23:b5:04:23:8a:28:8a:e3:40:4c:97:06:72:f5:b2:34:
         da:c2:01:46:e7:33:6c:9f:fd:42:66:57:a9:bd:3a:8a:d1:a8:
         14:59:0f:8d:ac:b2:8b:43:ab:3f:55:09:90:87:40:32:18:22:
         69:fd:c2:f9:62:4f:d1:37:03:8d:a2:6a:ed:4d:47:4a:77:78:
         54:97:f1:7e:0b:15:03:fd:f8:a7:6a:5f:62:26:1f:2b:11:62:
         1d:37:68:19:0c:9f:e2:07:01:eb:08:32:c7:c0:f5:9a:59:bd:
         f9:98:fe:26:c3:b6:44:89:eb:f0:ae:66:b1:ec:04:8a:e3:80:
         d3:0d:f9:e4:7f:1d:ae:b1:dc:5d:e6:89:8c:20:c7:94:0d:1c:
         65:ea:d7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----