Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/52f77f9c006cbf24b5d8b1601aec1d8cf17fa0d8.roa
File:                     52f77f9c006cbf24b5d8b1601aec1d8cf17fa0d8.roa (raw, json)
Hash identifier:          wquBo+tKzQCOn61itFaow+01IrYetms8tKEasQXOoeA=
Subject key identifier:   7A:17:11:40:B3:08:CA:11:53:02:71:35:EA:3A:FE:20:88:C8:80:F8
Certificate issuer:       /CN=82de3982dc3fe10698e2213ddec20b8ab75df7bf
Certificate serial:       0D8B51
Authority key identifier: AD:2C:98:FD:25:51:E2:8A:30:65:C7:48:5B:5F:46:44:46:B9:7F:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82de3982dc3fe10698e2213ddec20b8ab75df7bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/52f77f9c006cbf24b5d8b1601aec1d8cf17fa0d8.roa
Signing time:             Wed 24 Mar 2021 14:40:36 +0000
ROA not before:           Wed 24 Mar 2021 14:40:36 +0000
ROA not after:            Tue 24 Mar 2026 14:40:36 +0000
asID:                     14522
IP address blocks:        2800:9a1::/36 maxlen: 40
                          2800:9a3::/38 maxlen: 40
                          2800:9a3:400::/40 maxlen: 40
                          2800:9a3:1000::/39 maxlen: 40
                          2800:9a3:2000::/40 maxlen: 40
                          2800:9a3:3000::/40 maxlen: 40
                          2800:9a3:4000::/40 maxlen: 40
                          2800:9a3:5000::/40 maxlen: 40
                          2800:9a3:6000::/40 maxlen: 40
                          2800:9a4::/36 maxlen: 40
                          2800:9a7::/36 maxlen: 40
                          2800:9a7:3000::/36 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887633 (0xd8b51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82de3982dc3fe10698e2213ddec20b8ab75df7bf
        Validity
            Not Before: Mar 24 14:40:36 2021 GMT
            Not After : Mar 24 14:40:36 2026 GMT
        Subject: CN=52f77f9c006cbf24b5d8b1601aec1d8cf17fa0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d5:8a:c4:fe:88:78:02:e3:84:eb:99:51:0a:
                    cd:ea:1c:fe:99:8e:fb:15:c3:f0:87:d5:04:b8:64:
                    87:be:ec:1a:fc:85:e4:09:a9:b8:66:64:0e:65:1b:
                    fc:0c:84:ea:43:56:e9:47:7e:c3:aa:02:c9:09:ca:
                    e7:b0:42:cc:80:94:83:f6:41:32:11:b1:0e:97:d5:
                    7c:48:1a:58:72:80:24:52:f3:46:fb:0d:fe:07:f1:
                    d5:00:87:8f:b8:a2:bc:ff:88:73:8f:0a:b5:a6:0d:
                    80:f3:46:b5:3a:ab:c5:1f:d7:2a:d7:83:eb:67:fa:
                    d8:4e:6d:d7:9e:e0:39:08:62:9b:9c:08:9f:27:ca:
                    b8:c5:50:3b:06:4e:99:bf:92:31:d3:05:72:df:f6:
                    23:d8:73:d7:7f:5d:14:fc:3e:ca:67:6d:59:ce:12:
                    fb:d6:4e:2b:11:44:fc:8b:9c:48:bc:a1:c8:73:5b:
                    7b:8b:53:bd:7a:08:70:cd:ea:76:3e:6e:de:f7:aa:
                    e9:8f:54:c2:ff:ed:27:8a:ce:42:bb:cf:92:1c:95:
                    a0:19:58:98:f6:d7:9b:1d:0b:5b:94:5d:ed:00:b7:
                    c1:2b:88:89:71:15:fb:fc:e6:df:90:92:b6:71:a9:
                    0c:09:ad:79:a7:03:55:1b:9b:9f:06:f5:e1:05:df:
                    e1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:17:11:40:B3:08:CA:11:53:02:71:35:EA:3A:FE:20:88:C8:80:F8
            X509v3 Authority Key Identifier:
                keyid:AD:2C:98:FD:25:51:E2:8A:30:65:C7:48:5B:5F:46:44:46:B9:7F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82de3982dc3fe10698e2213ddec20b8ab75df7bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/52f77f9c006cbf24b5d8b1601aec1d8cf17fa0d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/82de3982dc3fe10698e2213ddec20b8ab75df7bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:9a1::/36
                  2800:9a3::-2800:9a3:4ff:ffff:ffff:ffff:ffff:ffff
                  2800:9a3:1000::/39
                  2800:9a3:2000::/40
                  2800:9a3:3000::/40
                  2800:9a3:4000::/40
                  2800:9a3:5000::/40
                  2800:9a3:6000::/40
                  2800:9a4::/36
                  2800:9a7::/36
                  2800:9a7:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         90:ce:12:c3:38:1a:6a:c8:3a:2c:18:29:41:d4:3a:94:53:e6:
         e1:6e:bc:1d:ae:5c:1a:89:44:6f:27:9d:a4:4e:ac:ef:6f:22:
         7e:5d:3c:68:f1:c7:39:26:44:bf:d0:54:2c:3c:c5:a3:5e:24:
         3c:57:70:28:a2:42:db:41:78:28:a4:33:d4:a1:5f:15:df:7d:
         29:36:4a:20:c1:96:ee:e3:90:24:2c:38:1a:5a:bd:3f:c4:ae:
         62:29:74:a6:b0:55:9a:4c:92:a7:87:2d:8b:aa:7e:56:b9:6b:
         6e:01:96:ec:19:91:99:ba:1c:ef:c9:3f:a4:ab:f2:5f:e2:7c:
         db:bd:06:4b:ac:98:49:c1:b0:3a:0b:14:19:85:32:da:65:5e:
         fd:06:9a:4d:a3:3c:9a:56:36:91:19:13:1e:a5:23:c3:bd:51:
         13:e0:ab:3a:6b:f0:83:9c:5f:b6:fa:39:ed:53:54:33:12:9a:
         28:a5:43:b6:0c:6d:f0:c6:4e:28:c1:f3:dd:63:6a:5f:2e:25:
         04:15:f8:65:9c:39:3d:c1:de:81:9f:ac:c5:cf:d9:34:c9:17:
         dc:c3:ee:a2:56:06:1b:a8:7e:22:48:dc:97:c7:ec:22:3f:e0:
         a1:7d:dd:64:e6:d2:87:6c:65:39:fa:d5:95:f2:75:fd:29:6d:
         5b:ac:66:7c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----