Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/de420e0d3deb72f96fe1c453821e1b20ff672b6e.roa
File:                     de420e0d3deb72f96fe1c453821e1b20ff672b6e.roa (raw, json)
Hash identifier:          xPfDPwP/b9rUH91GJahpaE20Wv3OGsPgMP/sX27MWGg=
Subject key identifier:   55:76:C3:CD:32:76:B7:93:2C:70:68:E5:99:93:DB:5B:80:0F:44:18
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       0A9829
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/de420e0d3deb72f96fe1c453821e1b20ff672b6e.roa
Signing time:             Fri 15 Oct 2021 07:50:33 +0000
ROA not before:           Fri 15 Oct 2021 03:00:00 +0000
ROA not after:            Thu 15 Oct 2026 03:00:00 +0000
asID:                     54235
IP address blocks:        2803:5ce0:400::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694313 (0xa9829)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Oct 15 03:00:00 2021 GMT
            Not After : Oct 15 03:00:00 2026 GMT
        Subject: CN=de420e0d3deb72f96fe1c453821e1b20ff672b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f6:67:e0:a8:fe:8e:89:c3:aa:31:dc:68:90:
                    40:24:f8:91:a7:dd:06:fa:e6:06:73:c6:6e:be:3e:
                    bf:ea:f8:e4:e7:0d:b7:40:16:19:b6:f5:ab:8d:db:
                    78:44:85:53:00:49:40:a9:c7:88:ae:8a:b4:55:02:
                    2d:aa:5e:e9:12:b0:ef:16:05:cf:f5:18:1c:e1:dd:
                    f2:b9:89:10:57:7d:bf:8e:68:bd:96:92:e8:c6:e9:
                    82:0c:94:cb:96:17:41:5e:b3:ec:98:84:98:df:e0:
                    45:13:2b:ae:6d:9f:4c:9f:fd:e0:a0:6e:5e:70:ae:
                    04:9e:3b:ba:0d:17:cb:a0:8a:06:42:97:7d:3b:39:
                    e4:ab:45:be:f3:2b:d7:0e:ca:9f:5c:4f:35:1e:f1:
                    ff:4f:40:47:93:aa:c2:76:4a:bd:4b:76:48:80:5a:
                    29:e2:1d:32:20:59:7b:68:63:ae:28:a6:ae:04:39:
                    b5:8a:80:3e:2b:d4:0a:66:0b:bc:13:08:82:90:cf:
                    44:d7:06:31:dd:de:81:2d:02:ea:7f:ad:7e:66:da:
                    25:fe:aa:a7:75:55:5f:46:8a:3a:23:e6:8f:15:46:
                    2e:19:bf:b1:18:ba:ed:61:38:4d:2c:63:46:9b:72:
                    09:63:48:31:99:24:1e:19:18:e1:08:f3:d8:fc:9b:
                    e1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:76:C3:CD:32:76:B7:93:2C:70:68:E5:99:93:DB:5B:80:0F:44:18
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/de420e0d3deb72f96fe1c453821e1b20ff672b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:16:d7:55:f4:93:0e:38:86:16:89:54:59:93:ab:67:7c:16:
         3c:4a:c5:0b:95:f1:10:e7:47:30:a8:33:0d:19:4a:30:c9:fa:
         9f:2f:81:dc:84:29:c2:97:7a:12:ec:b1:07:73:2b:0e:1d:f3:
         ff:be:68:75:a9:69:5e:69:c1:a6:e8:fb:62:2e:03:7c:44:68:
         c2:7e:f4:43:98:85:be:65:ca:d8:c9:23:c6:4a:25:3e:20:df:
         ff:65:4c:f6:7b:f5:d3:52:05:e4:94:70:84:f8:5b:c5:a9:34:
         db:ee:4c:d3:78:58:9e:b5:c1:22:a7:7a:58:c7:86:02:ef:19:
         44:3c:e9:5d:12:80:92:35:71:07:ee:9b:94:8a:85:fa:22:0e:
         04:70:e8:84:13:b4:90:c0:9f:dd:1f:c7:e4:90:77:1e:13:59:
         17:d4:e0:5f:90:3c:1e:6e:d6:55:61:cf:a5:b6:fd:33:fe:13:
         8b:ef:f4:85:4a:90:60:34:56:d2:64:7d:59:8e:cb:f4:ad:7b:
         86:b8:7c:e5:1c:a0:13:cb:c5:bc:a1:dd:dd:f1:22:0f:a8:c4:
         33:97:1e:bc:d6:f7:c0:32:3c:bf:11:8f:cb:12:b9:18:af:f2:
         62:3c:d8:0c:59:22:1e:e7:82:81:14:cc:fa:99:8f:e2:4a:c7:
         7b:96:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----