Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/401212e2e530db1e369778a3208c5fbfd1de60f6.roa
File:                     401212e2e530db1e369778a3208c5fbfd1de60f6.roa (raw, json)
Hash identifier:          egz3Sc0/+ztsplO0tNWKMW4EeHmfDQsgb2J3a6/0W0g=
Subject key identifier:   52:1D:C3:58:8F:F2:DF:B4:11:DD:97:CD:CB:49:66:C2:36:11:11:51
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       0A8DFA
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/401212e2e530db1e369778a3208c5fbfd1de60f6.roa
Signing time:             Fri 15 Oct 2021 07:46:23 +0000
ROA not before:           Fri 15 Oct 2021 03:00:00 +0000
ROA not after:            Thu 15 Oct 2026 03:00:00 +0000
asID:                     54235
IP address blocks:        2803:5ce0:300::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 691706 (0xa8dfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Oct 15 03:00:00 2021 GMT
            Not After : Oct 15 03:00:00 2026 GMT
        Subject: CN=401212e2e530db1e369778a3208c5fbfd1de60f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:47:b4:1e:73:36:16:9f:28:56:a1:b3:7a:bd:
                    a1:24:73:61:22:9e:e4:3a:92:46:0a:a4:9a:2d:c2:
                    0a:5b:41:f4:81:51:70:26:98:8c:72:b8:2d:75:b5:
                    02:d8:c3:fc:57:9d:fa:2e:e2:00:ef:0b:00:6c:49:
                    2e:1f:c7:f4:97:0e:d5:6f:d2:12:ad:9c:1e:f0:c8:
                    9e:c4:1b:53:2d:f7:e7:bf:f1:84:e1:14:14:bc:80:
                    55:83:df:c0:71:07:06:3d:b9:cd:40:3e:75:f9:91:
                    7e:2f:28:e6:8e:b5:89:5f:4c:b8:f5:67:91:00:7b:
                    a5:c8:92:af:f4:54:df:5e:b2:96:34:ae:00:e5:8a:
                    50:16:67:b8:ad:a6:7c:20:1b:34:67:90:6d:3a:89:
                    06:f5:15:07:77:82:59:59:d0:9e:e1:74:c8:97:af:
                    78:e2:6c:da:da:62:ab:d9:8e:1e:d2:8b:0d:7d:fc:
                    91:d5:e5:f3:5d:e2:14:7a:db:ec:01:fc:4f:21:bb:
                    fe:74:95:82:df:66:75:2a:4d:b2:92:29:d4:fc:73:
                    b5:54:55:ec:cd:70:04:1d:34:1c:c5:b7:58:ec:aa:
                    bb:da:94:37:27:57:05:02:2d:8a:99:d3:cd:f3:65:
                    e6:bf:8b:9a:c2:fc:bb:8f:4a:8a:e1:df:71:68:c7:
                    ec:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1D:C3:58:8F:F2:DF:B4:11:DD:97:CD:CB:49:66:C2:36:11:11:51
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/401212e2e530db1e369778a3208c5fbfd1de60f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         46:dd:9a:94:80:61:b3:22:3c:4e:43:9a:88:d4:c7:c9:83:26:
         6d:09:87:34:a4:17:0e:6a:56:e3:9d:23:8d:45:89:bf:a3:b3:
         3e:1d:ea:6b:cc:6d:5e:52:a9:97:40:72:94:86:2f:42:0d:3f:
         10:ae:82:3b:b9:57:7e:f8:91:35:51:86:01:4f:34:78:01:99:
         1c:08:84:71:a3:ff:60:8e:af:07:0c:4a:46:61:23:87:ed:40:
         bf:82:9f:7e:0b:ab:ba:17:f9:05:f8:e7:1a:60:ab:c7:4b:a8:
         44:fe:36:d4:08:f3:1c:13:7d:be:98:4b:94:ad:4f:31:c8:f9:
         2e:8c:43:ce:ff:39:6c:2a:b2:34:00:ce:33:5f:72:fc:06:db:
         23:d7:67:d7:b0:f8:66:82:4f:02:6b:9b:1b:90:8e:0c:6b:fb:
         cb:4c:37:a7:b6:7d:d8:c9:71:13:7e:b9:09:87:99:5b:cc:70:
         07:86:40:1e:70:87:2b:ed:eb:7c:ba:2c:21:50:50:6e:c5:97:
         96:9c:af:e7:15:cd:65:8d:fd:d7:44:11:40:d6:4a:21:e5:a6:
         ed:5d:71:0a:17:25:ed:70:95:ba:e6:73:ca:8d:44:e5:8d:9a:
         bc:a5:8f:92:36:2a:bc:77:0b:2c:a6:65:74:99:4b:8e:aa:35:
         0e:bb:e4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----