Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/0bc0d29a8d1cb616eaf45606a5a044ec4df7a631.roa
File:                     0bc0d29a8d1cb616eaf45606a5a044ec4df7a631.roa (raw, json)
Hash identifier:          TMawn0Nhp5+6pmk8vv3CkjZk0nd7wX3RXXa05IuB1QY=
Subject key identifier:   92:23:00:2A:E1:24:E3:61:49:D4:A2:04:E5:90:33:2A:7F:3E:18:1D
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       057D48
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/0bc0d29a8d1cb616eaf45606a5a044ec4df7a631.roa
Signing time:             Wed 24 Mar 2021 14:28:53 +0000
ROA not before:           Wed 24 Mar 2021 14:28:53 +0000
ROA not after:            Tue 24 Mar 2026 14:28:53 +0000
asID:                     10753
IP address blocks:        2803:5ce0:a00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359752 (0x57d48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Mar 24 14:28:53 2021 GMT
            Not After : Mar 24 14:28:53 2026 GMT
        Subject: CN=0bc0d29a8d1cb616eaf45606a5a044ec4df7a631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:df:74:f0:67:7b:57:97:0c:bb:42:9a:f1:98:
                    23:4d:b3:f0:b2:e0:e7:eb:bc:28:71:f7:9b:d7:2a:
                    d3:73:f8:c0:1c:a1:74:9e:9b:cf:e6:28:93:37:94:
                    20:c2:c3:7e:58:fe:30:c5:92:ca:ac:f1:9c:93:68:
                    d4:dc:67:63:c7:52:92:e3:5b:19:15:d7:2e:a0:d5:
                    5e:76:ee:50:16:ed:2f:bb:9f:34:ac:ac:10:d4:ab:
                    48:b2:bf:e2:c3:33:12:aa:f0:45:9a:d5:09:f0:23:
                    3f:af:c6:df:b4:c4:1b:4f:3e:cf:bc:d8:39:ab:ea:
                    f1:f4:fe:17:aa:9e:a9:e1:79:3a:0a:81:1a:08:d3:
                    9c:d1:1a:3d:02:9f:0d:26:4b:f1:df:9a:ec:68:50:
                    26:e9:01:d6:ed:f8:b0:0c:26:b1:b4:ee:70:fb:90:
                    63:9c:5e:27:1b:7b:84:bc:80:0e:b9:3a:df:96:c3:
                    30:1a:0f:11:f1:6f:4d:dd:31:3b:ea:f2:7c:e7:01:
                    e9:d2:10:3e:eb:0a:84:b1:04:a2:d0:28:3d:05:54:
                    19:65:95:ca:d5:03:12:e8:83:20:75:a8:78:3c:d4:
                    47:1b:85:44:72:32:be:9d:ec:d2:82:c3:52:cd:c7:
                    bb:2b:ee:93:5e:7c:e3:29:e2:65:fd:4c:9b:70:a9:
                    f3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:23:00:2A:E1:24:E3:61:49:D4:A2:04:E5:90:33:2A:7F:3E:18:1D
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/0bc0d29a8d1cb616eaf45606a5a044ec4df7a631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:ba:fa:34:9b:32:a4:6c:30:10:f1:55:47:6f:17:0c:da:18:
         d8:93:09:5b:36:c5:f8:4b:73:47:61:fa:5d:e5:41:63:57:65:
         9c:05:6e:6c:93:b7:35:29:ee:e3:9a:d9:7b:5c:c8:6a:60:b6:
         25:3b:57:1c:f8:34:03:a0:ed:7f:c5:2e:ed:15:c6:d8:2e:e8:
         31:8a:ce:53:7a:67:fc:d2:83:1a:d3:3c:ad:9f:b0:53:4a:e6:
         5a:19:15:7b:0a:dd:87:2f:bf:f2:2a:a3:70:85:73:41:37:5b:
         06:db:6b:5c:fe:51:8c:fd:1e:43:3a:a0:75:52:59:ff:0d:79:
         94:f9:3d:29:da:23:7c:22:33:a2:b2:c5:f0:27:27:bf:e6:cc:
         36:db:a0:15:0b:4d:a4:1a:0c:3b:35:f3:4b:dd:9a:eb:08:69:
         90:77:c5:ed:ad:68:ad:0b:20:98:65:0f:10:69:f8:05:7d:aa:
         0a:00:21:04:0e:e8:28:55:9a:c3:0e:42:ce:c9:3a:2b:bd:5e:
         bb:d1:57:91:d5:46:6e:d9:e1:ad:e0:15:02:ad:01:c4:67:09:
         0a:d1:f7:59:d9:4f:e5:49:e7:ab:d8:d5:c6:7f:59:2c:79:bf:
         f8:3a:7f:9a:ea:14:4f:cd:74:7e:74:59:df:72:53:c4:66:77:
         fc:1b:df:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----