Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/8dcc2ab6d085037e982064f168639f6c3b672a56.roa
File:                     8dcc2ab6d085037e982064f168639f6c3b672a56.roa (raw, json)
Hash identifier:          yFbnS4V5M2I7PA3ilG4h6rl6yiWqTO33JodzxIym31g=
Subject key identifier:   A8:BC:BD:52:E0:F7:A7:7B:18:C4:AF:64:C4:31:25:FE:C1:9F:AC:7C
Certificate issuer:       /CN=82de3982dc3fe10698e2213ddec20b8ab75df7bf
Certificate serial:       154BD0
Authority key identifier: AD:2C:98:FD:25:51:E2:8A:30:65:C7:48:5B:5F:46:44:46:B9:7F:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82de3982dc3fe10698e2213ddec20b8ab75df7bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/8dcc2ab6d085037e982064f168639f6c3b672a56.roa
Signing time:             Tue 01 Feb 2022 20:03:38 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     14522
IP address blocks:        2800:9a0::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1395664 (0x154bd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82de3982dc3fe10698e2213ddec20b8ab75df7bf
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=8dcc2ab6d085037e982064f168639f6c3b672a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ac:37:6b:4c:64:ed:66:ff:65:b7:41:e6:de:
                    b7:6b:9d:3e:61:9c:9d:d0:4f:5d:9a:54:ec:06:40:
                    47:6a:18:7a:f4:2e:a3:91:a0:c0:a2:4a:10:08:b0:
                    6f:dd:cf:7b:b9:46:80:78:e5:1c:41:6a:70:70:ba:
                    20:85:af:ca:74:9e:cc:87:7b:01:81:87:60:32:8c:
                    5c:22:a9:f0:72:51:bc:e0:31:2b:cc:2f:4f:97:41:
                    fa:19:d2:5d:f3:c9:ff:93:76:78:38:1b:f5:20:06:
                    db:c2:a3:19:3a:15:57:6b:95:3c:2d:73:4c:97:68:
                    ae:7d:93:62:77:93:79:ac:29:61:37:88:cb:f6:fa:
                    47:5d:93:f4:13:b0:99:d4:0d:ff:71:72:87:c0:35:
                    9a:66:b2:4b:8e:73:dd:9b:40:bc:a0:a6:90:28:89:
                    54:4c:d6:65:56:52:74:fa:83:b2:d6:e9:58:61:24:
                    7f:9a:88:80:3a:ff:a7:04:4d:d9:6a:b0:11:ef:7c:
                    09:7f:ec:d6:de:a1:16:18:74:9c:43:fa:34:ea:79:
                    d8:27:58:3c:a8:f7:c1:2a:0d:5e:41:64:4e:74:37:
                    8e:46:ba:61:1c:86:cc:8b:29:d4:29:de:b1:1e:ef:
                    a0:db:d4:4f:de:f7:82:0b:ac:2d:ef:bf:f6:9c:ee:
                    a9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BC:BD:52:E0:F7:A7:7B:18:C4:AF:64:C4:31:25:FE:C1:9F:AC:7C
            X509v3 Authority Key Identifier:
                keyid:AD:2C:98:FD:25:51:E2:8A:30:65:C7:48:5B:5F:46:44:46:B9:7F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82de3982dc3fe10698e2213ddec20b8ab75df7bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/8dcc2ab6d085037e982064f168639f6c3b672a56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/82de3982dc3fe10698e2213ddec20b8ab75df7bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:9a0::/29

    Signature Algorithm: sha256WithRSAEncryption
         01:3a:9a:cc:c0:6c:5f:42:f0:e2:8f:f0:ad:fd:ba:4a:42:94:
         ec:74:1a:a9:77:ca:65:79:38:ce:be:80:5a:7f:e5:65:b6:cd:
         e7:ce:a2:14:f9:05:38:b1:79:bb:ae:64:d6:db:7a:d8:ca:c6:
         d1:f9:ce:54:31:46:16:40:ba:08:87:49:ba:59:07:c1:35:0d:
         d1:57:cc:c5:76:10:94:d6:dc:e2:ba:d6:d5:83:13:d0:19:77:
         19:86:25:08:ed:63:51:9e:91:6a:3c:4c:f7:20:d3:f8:6f:6d:
         13:07:4a:80:5a:51:61:b0:6d:f5:ac:98:d1:38:ea:17:55:d3:
         93:ca:45:7b:4e:37:c2:14:75:ad:aa:83:a2:61:dd:1c:93:68:
         ca:7a:b8:c3:cf:40:b2:fc:32:18:5c:ec:67:29:06:00:03:87:
         96:3b:a0:6d:ed:6f:f8:32:14:a2:c4:37:f5:90:3b:54:81:8d:
         59:dd:e3:ca:4a:f1:73:c5:f2:13:4d:fa:79:d2:f2:77:50:f1:
         43:e2:d8:ba:4c:32:75:3b:24:70:59:c7:b7:b1:a6:73:d1:d4:
         95:3f:46:86:0c:93:40:db:ef:33:89:6a:22:6b:3f:20:ee:2b:
         85:34:e9:e0:76:c9:2a:70:73:d9:50:f9:72:60:42:b2:a3:46:
         77:83:34:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----