Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/a6197a349bd583e800d80450ee2e1d2cc115c502.roa
File:                     a6197a349bd583e800d80450ee2e1d2cc115c502.roa (raw, json)
Hash identifier:          J4e4fg50eC4tzxYm/rdrHGX0eqYs4wDPwYQ7089ZbME=
Subject key identifier:   8A:74:58:EA:33:F0:A1:9A:F4:F1:02:95:C8:0B:03:ED:D5:21:11:15
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       0A2A8D
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/a6197a349bd583e800d80450ee2e1d2cc115c502.roa
Signing time:             Wed 24 Mar 2021 14:43:21 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        2001:1278:f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666253 (0xa2a8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=a6197a349bd583e800d80450ee2e1d2cc115c502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ac:d7:61:fe:9a:48:a1:c0:41:97:f7:90:d3:
                    42:90:93:d6:ae:7e:44:65:27:b9:06:98:e4:6f:b3:
                    d9:17:4e:c3:99:61:5c:6d:7d:1e:11:72:16:bd:8c:
                    f6:95:ba:69:fb:82:44:e4:0c:e4:b3:57:9e:3f:b9:
                    f5:69:cc:ff:b5:e2:d5:5b:fb:2b:79:6a:ec:92:92:
                    ae:38:61:60:df:db:ef:45:8e:0d:fc:37:c1:0d:2e:
                    d6:61:5b:04:c7:38:1d:d2:ad:59:2c:a2:e7:d3:56:
                    24:fa:9a:6b:7e:68:b8:18:c9:b2:b9:59:2e:d2:38:
                    56:e1:fe:59:ed:67:8c:ca:e3:2b:62:38:af:05:0b:
                    cb:1b:8f:fd:04:44:c8:bf:bf:53:01:cf:5d:31:46:
                    2d:2d:f2:f8:e2:f5:31:2e:3d:6f:18:7c:96:1a:2a:
                    05:46:ca:8c:a9:14:77:ff:be:a0:b0:6b:6b:68:2c:
                    1a:76:c0:39:e3:b1:a1:72:fa:f9:f1:8c:89:aa:6f:
                    b7:68:c8:6c:b1:06:9d:63:82:43:ea:a4:d6:9e:a0:
                    b9:d8:64:4b:61:cc:9c:c7:03:bb:ba:a6:67:91:cd:
                    9c:7e:d0:4a:b5:1c:95:b6:99:a9:90:d3:af:2c:44:
                    09:c3:50:c1:dc:05:4f:4c:d8:fc:83:8b:71:10:08:
                    44:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:74:58:EA:33:F0:A1:9A:F4:F1:02:95:C8:0B:03:ED:D5:21:11:15
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/a6197a349bd583e800d80450ee2e1d2cc115c502.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1278:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:dd:45:10:18:e1:b3:89:e0:0d:95:86:ab:ed:28:30:cf:e2:
         9f:9b:86:73:67:f6:be:0f:02:0c:8f:73:4c:14:96:fd:b5:1a:
         c3:56:fd:e1:f8:b9:91:d6:52:96:c1:ff:e4:e4:66:d0:e2:49:
         61:86:a7:a3:ef:f0:e2:5a:3c:aa:cb:0c:20:8c:88:35:a2:38:
         e0:ef:14:3f:05:47:96:b6:e0:da:dc:4e:01:ca:76:2d:ca:bf:
         b6:33:21:43:99:88:82:75:78:c0:6b:bb:1a:28:de:f3:95:19:
         50:66:70:6b:c5:72:d8:a5:ff:65:c9:69:d6:3f:4c:8a:4f:47:
         f2:46:64:1d:81:ee:00:dc:17:1a:1b:6a:80:dd:dc:21:38:6c:
         45:cb:da:1b:59:05:a8:05:bc:b6:c0:c1:f6:78:d2:d7:04:9d:
         0c:62:c5:ca:ef:43:85:eb:f0:4c:51:4b:70:51:33:e1:f7:93:
         4a:e7:e2:44:43:65:9b:80:6b:3e:4e:d5:0d:3c:b0:52:6f:a3:
         99:2c:b2:cb:c7:71:a1:20:55:b1:3e:76:b4:bb:72:75:8d:d7:
         20:12:c9:20:a1:0e:6a:65:5d:95:03:31:21:6b:76:f4:17:2a:
         63:8d:23:54:98:76:cd:f8:fc:eb:11:85:3a:65:b6:fa:2d:b2:
         35:b0:df:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----