Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/bfe4b800c54455d01abd7ae67b038a88f55454cc.roa
File:                     bfe4b800c54455d01abd7ae67b038a88f55454cc.roa (raw, json)
Hash identifier:          uYD1JhWCEed8E1dz0HivapIlscRu9v+dKLykxN1bwc4=
Subject key identifier:   B4:76:5A:68:29:76:0B:6A:87:00:40:B1:E4:18:C9:72:10:E4:F2:22
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       0658AF
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/bfe4b800c54455d01abd7ae67b038a88f55454cc.roa
Signing time:             Fri 30 Apr 2021 09:23:54 +0000
ROA not before:           Fri 30 Apr 2021 03:00:00 +0000
ROA not after:            Sun 30 Apr 2023 03:00:00 +0000
asID:                     271809
IP address blocks:        2803:5ce0:500::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415919 (0x658af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Apr 30 03:00:00 2021 GMT
            Not After : Apr 30 03:00:00 2023 GMT
        Subject: CN=bfe4b800c54455d01abd7ae67b038a88f55454cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3d:29:4d:eb:dc:06:82:53:3c:6c:5b:9a:2e:
                    31:75:9d:ec:9d:d9:7d:a9:df:74:2e:a9:40:f1:7b:
                    ca:b3:8d:38:6e:28:af:28:ca:f0:bd:8a:f8:0b:35:
                    95:37:3c:97:32:d1:d4:83:cd:f6:65:e5:67:f3:40:
                    9c:66:b0:f5:32:de:68:a7:30:6b:aa:fb:85:25:0b:
                    bf:1e:5c:98:03:82:62:cb:33:a4:aa:fc:3a:cb:06:
                    1c:a1:31:01:69:23:17:fb:24:de:5d:0d:5e:bf:42:
                    ce:61:cb:62:1e:28:28:d5:7b:e2:06:19:0d:22:ac:
                    4c:5f:4d:3b:4c:3b:10:17:e8:26:bf:96:09:ad:ed:
                    a3:a6:d2:8b:af:de:50:d6:6a:c7:27:7b:b7:0f:91:
                    74:54:1f:8d:70:09:9c:1c:d7:80:c0:a7:3f:e2:e7:
                    ad:67:00:83:03:36:15:c5:46:e3:c4:a0:3b:f8:3e:
                    55:03:f8:26:18:74:13:01:55:01:c1:19:38:7d:b4:
                    d4:14:d4:bf:20:67:fd:4d:81:18:30:33:4b:e8:9b:
                    f2:51:5f:17:0a:bf:77:59:58:b5:a8:5f:9a:5d:3b:
                    dd:06:6e:83:b6:91:d1:6a:ec:86:e6:84:62:c0:cc:
                    1c:3e:95:55:94:2a:4b:81:8e:bd:c4:bc:42:2e:62:
                    3b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:76:5A:68:29:76:0B:6A:87:00:40:B1:E4:18:C9:72:10:E4:F2:22
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/bfe4b800c54455d01abd7ae67b038a88f55454cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:89:2a:76:0b:fc:42:52:7a:84:31:34:2b:ca:5e:ee:a9:9a:
         00:c8:86:24:64:48:05:c6:e5:a4:d1:5b:0a:47:cc:5d:28:10:
         d9:ce:93:f6:1b:30:fa:f3:3b:ba:96:97:62:6c:d9:e1:7b:fe:
         ee:17:74:53:06:6f:37:8f:1c:56:c2:c2:92:a1:e5:c6:01:14:
         ab:62:e8:c9:07:58:fb:d2:1f:cc:a3:ee:31:6d:67:2b:26:ed:
         96:6a:52:04:e8:f4:0e:e4:71:3e:ba:8e:82:6a:b1:20:ec:05:
         4e:73:73:95:15:2f:6e:e4:ee:ce:eb:72:82:b3:c9:1c:8d:39:
         34:bf:94:31:bf:cf:4b:77:65:de:38:58:91:34:d9:22:38:d2:
         8a:cc:a8:f5:2e:78:aa:10:82:c9:30:21:d4:a1:c5:6b:fa:de:
         d3:05:1e:09:bf:be:9b:37:78:d4:09:12:1b:43:54:89:71:36:
         88:e8:b8:1c:e3:5c:25:29:c5:72:77:b8:3e:70:40:a1:b5:f9:
         0e:d7:8f:48:cf:b1:c3:db:aa:73:8c:ed:5e:0d:da:c9:20:e5:
         c5:57:73:6e:24:79:16:c1:9e:20:2c:bd:3a:2b:2c:8d:17:ff:
         c1:8f:6f:b8:4f:0b:d3:17:65:9c:f1:38:11:6c:42:d4:79:6f:
         b5:17:83:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----