Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/e3ad6d271b8e922d92f0a04e589d5480a29bbdc8.roa
File:                     e3ad6d271b8e922d92f0a04e589d5480a29bbdc8.roa (raw, json)
Hash identifier:          o9tGES7v5AW1uC0Q5U0tVh2URhatLZEBC61BSbJ+tZ8=
Subject key identifier:   2D:8E:E8:CE:67:2D:4C:61:1F:C5:12:DD:07:42:D2:EE:9D:FB:CE:53
Certificate issuer:       /CN=0a22b2d0a072d0d716973baadd546791926ae121
Certificate serial:       0888E6
Authority key identifier: 2B:C5:A8:D9:B1:F6:9A:B6:46:AA:55:5F:AF:CA:37:5E:CF:67:8D:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a22b2d0a072d0d716973baadd546791926ae121.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/e3ad6d271b8e922d92f0a04e589d5480a29bbdc8.roa
Signing time:             Wed 24 Mar 2021 14:42:08 +0000
ROA not before:           Wed 24 Mar 2021 14:42:08 +0000
ROA not after:            Tue 24 Mar 2026 14:42:08 +0000
asID:                     269964
IP address blocks:        2803:96e0::/32 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559334 (0x888e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a22b2d0a072d0d716973baadd546791926ae121
        Validity
            Not Before: Mar 24 14:42:08 2021 GMT
            Not After : Mar 24 14:42:08 2026 GMT
        Subject: CN=e3ad6d271b8e922d92f0a04e589d5480a29bbdc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:56:c9:15:78:a8:26:89:15:fd:d8:25:65:34:
                    a7:6d:99:e4:59:88:c8:53:e0:63:37:c7:71:af:42:
                    2c:8b:1a:d1:f8:56:3e:63:5a:e5:1a:04:bd:48:3a:
                    06:e7:89:aa:43:ae:18:00:2a:4d:2e:10:08:b2:60:
                    29:3f:d1:47:45:1c:01:d5:1f:e4:68:9d:67:21:01:
                    ff:4a:52:34:8f:24:47:4e:07:21:6a:33:e1:ce:5d:
                    f6:bb:ac:e5:32:ef:1f:b3:85:70:aa:73:95:be:dd:
                    11:cf:67:7a:4d:e0:6e:a3:de:58:3e:a1:15:4a:91:
                    c3:82:5e:c6:87:12:ea:35:0d:04:4a:ee:0c:96:6e:
                    98:05:4c:4b:a9:9e:52:e4:2e:f1:91:fc:04:2c:e2:
                    83:1e:58:c8:db:48:78:56:30:7b:06:34:f9:d3:2d:
                    4b:59:ea:59:b1:dc:d3:b9:5d:d8:31:9a:d0:33:c3:
                    cd:62:d1:9a:de:ee:c4:77:98:bd:c8:f9:35:d4:d5:
                    b3:fc:12:34:5c:6e:c1:35:43:6c:a3:8f:4e:00:6c:
                    89:fc:73:ec:e2:b7:1e:fc:98:0f:24:49:58:f4:9b:
                    57:29:42:a2:62:79:fe:3d:d3:b8:a1:f2:cd:a0:b2:
                    1c:d7:ae:e3:25:08:7a:fe:25:f7:36:bf:3c:c7:2c:
                    83:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8E:E8:CE:67:2D:4C:61:1F:C5:12:DD:07:42:D2:EE:9D:FB:CE:53
            X509v3 Authority Key Identifier:
                keyid:2B:C5:A8:D9:B1:F6:9A:B6:46:AA:55:5F:AF:CA:37:5E:CF:67:8D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a22b2d0a072d0d716973baadd546791926ae121.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/e3ad6d271b8e922d92f0a04e589d5480a29bbdc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/0a22b2d0a072d0d716973baadd546791926ae121.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:96e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:07:1d:fd:3c:9a:e6:bb:4a:0b:ee:7e:b3:88:1f:06:57:67:
         2e:37:75:02:01:27:28:73:bb:fb:6b:79:64:bc:cc:4b:3c:c1:
         46:ee:dd:c6:06:20:de:55:02:46:22:d1:6b:c8:11:e4:be:d4:
         8f:4d:d5:6a:27:f7:08:d2:1a:23:26:a3:fa:7e:5b:01:77:82:
         70:b4:bf:47:37:8c:30:3e:9a:cc:53:bf:5a:8f:ea:b0:f0:63:
         ec:0a:0c:87:41:63:1b:06:15:b9:43:0c:1f:e0:cb:87:4b:1c:
         1a:89:5c:11:5d:26:c7:f7:2b:2f:3a:63:ba:db:f2:e7:1b:bf:
         63:c2:c2:05:9d:fa:49:44:58:62:77:a6:01:a8:e7:c4:6f:8f:
         96:07:e0:e4:10:d0:2d:c1:5c:5f:00:f4:ab:a9:a3:4c:d1:b1:
         3b:1d:42:0b:f9:c3:fa:28:80:02:1f:23:f8:9b:2f:1b:a1:47:
         6d:14:23:99:3c:bd:f4:f3:fb:99:e5:d0:ea:96:f4:3e:2d:4a:
         62:f9:31:ed:85:2f:75:7f:ed:62:8e:f2:e6:04:4e:1d:e9:b4:
         90:27:d5:5e:c6:b4:3f:4b:2f:4a:e0:13:54:71:72:c8:fc:2f:
         9b:50:a6:f9:6a:b7:55:d5:d7:8a:fa:05:65:89:11:75:2b:1b:
         4c:2a:34:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----