Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/e61b2c97db3ca593c8ecd92397fd90a00662bfb1.roa
File:                     e61b2c97db3ca593c8ecd92397fd90a00662bfb1.roa (raw, json)
Hash identifier:          r4xS4B6TXkpk4Xwvj5j7S6nhGqlCPIJcEfjCPGyLHTw=
Subject key identifier:   5D:0D:84:9A:AD:0B:1F:EC:0A:CD:8C:2E:FF:6C:9A:04:45:4E:E4:93
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       0A9368
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/e61b2c97db3ca593c8ecd92397fd90a00662bfb1.roa
Signing time:             Fri 15 Oct 2021 07:49:31 +0000
ROA not before:           Fri 15 Oct 2021 03:00:00 +0000
ROA not after:            Thu 15 Oct 2026 03:00:00 +0000
asID:                     54235
IP address blocks:        2803:5ce0:200::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693096 (0xa9368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Oct 15 03:00:00 2021 GMT
            Not After : Oct 15 03:00:00 2026 GMT
        Subject: CN=e61b2c97db3ca593c8ecd92397fd90a00662bfb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:5d:f8:4a:86:e8:c4:06:a4:b3:e4:56:b8:
                    65:89:94:f7:be:bb:b3:7a:92:54:33:ed:53:0a:c8:
                    44:6d:bc:0d:cc:2b:7e:fa:1c:3e:6d:71:5d:1e:3a:
                    21:47:7e:2f:c7:8a:5e:d1:d5:9b:59:af:72:a8:b0:
                    4e:c2:f0:b0:48:cf:4e:f0:e6:fd:ac:f2:e4:ed:4b:
                    63:a5:96:8e:1d:7b:cc:c8:a0:33:af:3b:b0:d3:f1:
                    85:65:3e:df:6f:9c:6e:cd:5f:43:fb:e6:e6:b1:47:
                    19:bc:ec:67:8c:71:47:40:36:1e:5b:fb:f3:5c:b5:
                    8a:1e:99:ae:4b:62:14:de:3d:59:ae:db:7c:bc:4d:
                    4d:af:9a:db:66:a2:9b:aa:98:b4:04:15:37:a2:4c:
                    98:23:84:b0:2e:02:99:21:6e:1f:f4:0a:5d:e2:05:
                    90:ba:c0:d0:11:e0:7a:21:97:8f:eb:70:b4:39:a9:
                    ea:67:c5:8b:24:be:c0:c4:fd:52:a2:a6:f5:0b:81:
                    cd:b6:93:69:7e:26:53:a3:20:33:2f:54:9c:96:78:
                    cd:37:fe:6f:18:e4:b5:5f:dc:42:04:3e:5a:7e:bc:
                    f0:82:de:3b:bd:62:cf:86:79:82:d0:47:06:b6:a8:
                    1b:92:28:9a:96:8b:31:be:b2:66:78:ee:19:55:b9:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0D:84:9A:AD:0B:1F:EC:0A:CD:8C:2E:FF:6C:9A:04:45:4E:E4:93
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/e61b2c97db3ca593c8ecd92397fd90a00662bfb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:40:85:7b:69:b9:71:e5:31:ee:91:66:a1:4e:91:e9:8e:50:
         f4:e2:3f:64:9e:3c:f3:af:78:cf:5e:b6:b9:0b:ec:e9:55:40:
         25:20:2d:13:24:8a:4a:0e:a8:e8:78:4e:be:2e:20:26:9a:8b:
         2f:75:48:b2:f9:2e:ae:d9:2e:c9:2d:2d:32:c3:df:5c:8f:03:
         95:a7:ba:44:cc:fc:25:42:d6:28:2a:c0:0f:8b:14:7c:19:d6:
         9c:fc:a2:69:db:b1:22:75:98:c6:7d:16:a8:a1:e1:ea:10:d8:
         95:6f:29:c6:f9:8f:ed:10:d1:25:9b:d2:36:06:ec:6b:05:e6:
         4d:0f:33:61:fe:68:29:dd:6f:1c:2c:2e:58:d7:af:51:55:9c:
         78:7b:c4:ff:36:af:28:9c:a6:d1:c3:06:22:89:50:36:77:c9:
         53:1a:b8:02:a9:07:26:96:6b:9e:05:41:c4:8f:8a:e2:71:f2:
         6b:f9:f9:52:01:99:b7:c9:bc:89:2d:9c:9f:57:a4:2b:37:a4:
         fc:2a:73:b1:11:e8:16:fe:ef:70:c6:d3:ca:b9:f5:6d:2e:ee:
         49:82:77:d1:84:c2:0c:51:75:57:f4:d7:7c:8d:36:92:4a:b8:
         08:42:3a:f0:8e:10:61:02:94:c8:34:ae:95:42:6f:5c:5c:9b:
         1c:da:46:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----