Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce587e5a-f401-42a4-ba03-e008cace7668/8b297d34037d7c48df61b57719b541cf4945d69e.roa
File:                     8b297d34037d7c48df61b57719b541cf4945d69e.roa (raw, json)
Hash identifier:          cdOgiAe9Mj12tP3UXceEG37GnTSrG/ZTY2S7qDJ3vqY=
Subject key identifier:   B9:93:5F:35:8C:B2:F5:74:FC:A3:95:E6:90:02:03:1C:61:45:B4:B2
Certificate issuer:       /CN=f7fac38e0e71569318fbf63b7f8ceb000d19d4ca
Certificate serial:       02FC33
Authority key identifier: 5F:7D:25:E2:D1:A1:B1:AC:9E:5F:13:A2:B9:AA:F4:3D:D1:B6:18:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7fac38e0e71569318fbf63b7f8ceb000d19d4ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ce587e5a-f401-42a4-ba03-e008cace7668/8b297d34037d7c48df61b57719b541cf4945d69e.roa
Signing time:             Thu 15 Jul 2021 13:40:19 +0000
ROA not before:           Thu 15 Jul 2021 03:00:00 +0000
ROA not after:            Sat 15 Jul 2023 03:00:00 +0000
asID:                     271833
IP address blocks:        2801:1d6::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195635 (0x2fc33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7fac38e0e71569318fbf63b7f8ceb000d19d4ca
        Validity
            Not Before: Jul 15 03:00:00 2021 GMT
            Not After : Jul 15 03:00:00 2023 GMT
        Subject: CN=8b297d34037d7c48df61b57719b541cf4945d69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:e1:cb:d6:2e:cf:f8:65:2f:4b:9b:1b:b9:
                    ec:7f:70:c1:45:f9:a5:c9:c5:06:50:44:bb:fe:33:
                    e9:54:5b:bd:71:a2:ed:5d:27:36:33:ea:cd:e2:82:
                    c2:2c:3c:a7:89:db:c2:65:2c:90:92:cc:cb:3f:5b:
                    58:e4:6a:36:3a:ce:b7:e7:6c:2e:7f:29:db:35:ba:
                    cb:b0:a8:73:ca:c8:a3:3a:fd:0f:ee:4a:79:73:06:
                    3f:0d:54:a9:bb:99:ef:76:b7:8b:8f:b9:a1:01:15:
                    d3:cf:6e:a8:ab:98:09:02:d7:f1:4c:ad:4f:d3:f7:
                    3f:4b:38:84:e8:89:90:0c:fa:9d:91:aa:b7:2b:69:
                    fc:d8:4d:ba:72:bd:25:df:4f:b7:ed:13:e6:85:d6:
                    95:40:e0:13:f0:0c:9e:c7:76:7d:c5:83:ae:8a:b6:
                    2f:34:26:06:f6:41:ba:e3:f4:13:63:af:db:42:e9:
                    d0:b8:01:3c:ba:c2:5e:c4:a9:41:78:20:26:d6:a9:
                    7c:42:74:58:fa:b6:3d:ce:47:6f:2f:78:2e:08:d9:
                    95:c5:6c:b8:0b:3f:93:c1:d6:ce:79:d7:2e:cd:11:
                    e0:98:fd:f2:41:e0:0f:a1:8f:54:89:38:b8:cd:33:
                    9c:94:f4:20:39:f1:02:28:17:83:db:90:82:55:bf:
                    ce:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:93:5F:35:8C:B2:F5:74:FC:A3:95:E6:90:02:03:1C:61:45:B4:B2
            X509v3 Authority Key Identifier:
                keyid:5F:7D:25:E2:D1:A1:B1:AC:9E:5F:13:A2:B9:AA:F4:3D:D1:B6:18:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7fac38e0e71569318fbf63b7f8ceb000d19d4ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce587e5a-f401-42a4-ba03-e008cace7668/8b297d34037d7c48df61b57719b541cf4945d69e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ce587e5a-f401-42a4-ba03-e008cace7668/f7fac38e0e71569318fbf63b7f8ceb000d19d4ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d6::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:7d:90:e6:03:5f:99:6a:ee:f9:b1:b4:40:9c:21:bf:f5:5e:
         f6:2f:20:aa:1f:73:1d:0a:94:89:91:fc:fd:e7:a5:3a:30:3e:
         87:00:62:31:83:94:89:3e:a2:b7:67:20:e5:bf:bf:f6:d8:96:
         75:40:f4:ac:45:56:65:65:c4:b7:08:21:42:81:4b:a7:42:be:
         9d:f9:8f:be:9b:97:99:e8:61:de:e4:c6:84:df:58:67:ee:5d:
         09:d8:ca:21:81:3f:ac:a3:7f:38:28:c1:8e:72:38:5f:94:af:
         e3:6a:ee:0a:a1:d5:c0:14:6e:a9:f3:6b:45:9a:72:12:4c:65:
         f2:35:a0:b9:bb:24:9a:57:83:ca:c6:a7:3b:f4:e6:dc:3b:bb:
         1b:9f:5e:93:33:24:b4:4c:f2:2e:f0:3d:2a:d9:e3:72:7a:e4:
         b7:88:8d:3c:53:d0:5b:30:67:12:20:4c:a8:9d:00:29:18:79:
         4c:fe:77:04:10:09:40:5e:2f:b4:d6:e8:d1:ec:7f:d3:26:f8:
         14:9a:2a:08:bc:c9:1a:ce:8d:31:86:2e:a8:d5:dc:b4:95:87:
         f3:4d:de:05:16:20:59:ed:d0:ac:c9:c4:b5:93:93:d1:20:61:
         62:e4:3c:60:75:7b:68:d3:9b:f6:4b:4b:25:74:3f:da:38:11:
         5d:20:93:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----