Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/7de8f1f038a7f7b7238e351a82bf3d19047069e1.roa
File:                     7de8f1f038a7f7b7238e351a82bf3d19047069e1.roa (raw, json)
Hash identifier:          F9/OW5POYtwRkc9rU8PaRTOg1p2Rc2pcy1AYnNyCD1o=
Subject key identifier:   3A:26:B7:12:76:E5:62:09:DE:0B:94:A0:E6:CB:92:34:DC:92:18:1D
Certificate issuer:       /CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
Certificate serial:       118C6B
Authority key identifier: 72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/7de8f1f038a7f7b7238e351a82bf3d19047069e1.roa
Signing time:             Mon 20 Sep 2021 19:15:08 +0000
ROA not before:           Mon 20 Sep 2021 03:00:00 +0000
ROA not after:            Wed 20 Sep 2023 03:00:00 +0000
asID:                     21826
IP address blocks:        2803:8100::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1150059 (0x118c6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
        Validity
            Not Before: Sep 20 03:00:00 2021 GMT
            Not After : Sep 20 03:00:00 2023 GMT
        Subject: CN=7de8f1f038a7f7b7238e351a82bf3d19047069e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b8:ed:7b:d9:42:93:ab:bc:8a:39:8c:33:9e:
                    63:d5:5a:27:46:22:37:ea:96:8e:b9:b8:98:48:07:
                    88:3d:2f:81:5d:28:6d:f2:54:10:fd:f7:dc:36:3e:
                    fd:52:0d:23:a0:51:b2:f0:70:e7:63:02:16:f0:1e:
                    a5:ed:c1:20:d9:e3:13:53:5c:0d:6e:53:16:08:77:
                    6f:2d:d4:21:c4:dd:21:ce:c5:c0:1e:43:c5:6f:ab:
                    66:38:01:e1:e2:10:3a:ac:e7:a1:30:3b:fa:c1:23:
                    fd:17:d1:49:56:f9:d5:5d:fb:88:9e:1b:d0:43:15:
                    13:b3:8a:f8:1f:60:e1:13:ee:03:3e:c9:3a:26:63:
                    38:33:f9:67:3c:49:e7:f5:59:63:6b:70:62:59:33:
                    6b:89:47:18:f1:26:79:cc:84:71:8d:4e:3b:5a:bf:
                    e6:7c:3e:ed:eb:60:c0:8b:04:e8:32:19:d9:27:46:
                    22:08:9d:e2:09:44:39:e9:b2:8d:f6:90:5c:07:52:
                    3b:86:36:3b:99:15:c5:8e:aa:ac:9b:64:b8:46:98:
                    f8:e2:7b:9f:8e:71:58:d1:be:0a:79:42:91:6b:df:
                    1e:6d:b4:9e:42:3b:18:63:41:5e:32:e1:d2:18:76:
                    50:6e:a9:ca:06:e9:ff:48:79:8a:a1:8d:74:c0:70:
                    9f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:26:B7:12:76:E5:62:09:DE:0B:94:A0:E6:CB:92:34:DC:92:18:1D
            X509v3 Authority Key Identifier:
                keyid:72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/7de8f1f038a7f7b7238e351a82bf3d19047069e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/ef2d0ae672567bf0e707903589365faae1ff0bbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8100::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:79:96:9b:c8:79:45:76:2d:14:5c:eb:57:56:b2:95:6a:cb:
         43:17:92:8c:29:e2:37:1a:91:fd:45:c2:5b:f3:e9:2f:04:34:
         1b:f9:f5:aa:c6:af:49:ea:e4:05:b7:d0:03:96:6c:51:12:93:
         95:dc:ae:0b:d6:ab:ea:59:7e:3d:a0:3f:20:6e:cc:a2:f5:70:
         d8:51:56:7d:92:e0:48:17:e1:0d:be:06:86:cf:9f:8a:07:cb:
         2d:b1:55:80:6b:25:6a:f6:8e:4b:10:72:03:3d:83:9a:c7:22:
         37:9c:ed:70:98:2e:9c:0a:93:8e:ec:79:ff:ad:31:d4:da:36:
         9e:a2:63:29:50:a2:8e:1b:d8:e1:cf:1c:7e:1e:7d:ce:0a:80:
         71:a5:de:ba:d2:ca:46:b9:5f:e0:61:f8:16:da:7d:d7:04:0a:
         65:78:37:04:c5:40:e5:e4:26:48:9c:3c:76:13:5e:8f:f5:4a:
         02:c6:64:ac:73:49:de:8f:c2:87:f2:f1:2b:84:ae:61:3e:ff:
         91:39:50:fc:60:a3:2e:f5:33:f2:35:6a:19:31:4e:71:e1:b5:
         cd:96:f3:23:f5:8d:78:83:19:c6:9f:50:fd:2e:02:ed:40:6f:
         3f:bb:5e:aa:5a:63:e4:c8:ba:39:fe:82:d1:84:6a:f8:d0:ce:
         60:61:a8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----