Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/3ba10b5545b6f40a9e3330031b8d1fbdaa34ee97.roa
File:                     3ba10b5545b6f40a9e3330031b8d1fbdaa34ee97.roa (raw, json)
Hash identifier:          GGIpstrBRNvSuuJdo/xPCkn4j610URFrgPLu4m7Q5ts=
Subject key identifier:   9D:DA:2C:72:96:BB:7B:A8:FE:14:5A:E7:20:31:B5:CE:BA:CC:AD:B7
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DA926
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/3ba10b5545b6f40a9e3330031b8d1fbdaa34ee97.roa
Signing time:             Wed 24 Mar 2021 14:28:46 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:2020::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895270 (0xda926)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=3ba10b5545b6f40a9e3330031b8d1fbdaa34ee97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8b:f5:72:31:9a:ed:5e:6c:68:9e:e2:b7:39:
                    d2:f4:4e:a3:65:68:40:ac:59:b4:1f:62:2b:27:74:
                    fb:56:7a:77:65:c1:e8:d3:25:6b:e6:72:dc:bd:20:
                    89:be:f6:34:ab:94:5e:98:4f:c3:55:46:b1:4a:e7:
                    aa:1b:5e:8a:3b:57:cf:fb:04:b0:90:c8:70:0a:30:
                    2d:08:6b:ce:89:50:f3:d1:9e:bc:1d:41:cc:4c:63:
                    73:d8:ba:53:7f:5d:dd:95:1f:cd:2b:3e:4a:06:04:
                    23:df:b0:7b:df:c0:83:b1:20:35:bd:00:d7:8f:f7:
                    55:1e:b9:e5:f1:18:06:a0:3e:19:27:2c:e9:e8:b8:
                    a7:62:3b:27:2f:99:98:b6:6d:4c:3d:ff:58:78:ca:
                    7a:98:9f:ea:93:c2:ca:3d:94:03:de:77:48:a8:38:
                    7e:e4:d4:48:d4:c9:6d:33:46:e6:bb:93:5d:e9:ab:
                    42:02:97:42:d7:0f:c5:47:50:db:07:1c:21:ac:a0:
                    c0:d3:fc:64:12:2b:72:84:43:79:f4:a2:87:76:8b:
                    5c:16:69:6b:a6:e7:c1:1c:4e:ac:d1:ba:19:0d:28:
                    00:ab:74:a4:3c:d4:db:f1:d4:e0:a5:38:70:33:5b:
                    81:c7:60:02:82:3e:ed:26:91:5a:09:96:25:6c:28:
                    7c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DA:2C:72:96:BB:7B:A8:FE:14:5A:E7:20:31:B5:CE:BA:CC:AD:B7
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/3ba10b5545b6f40a9e3330031b8d1fbdaa34ee97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:2020::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:ad:e9:c1:a1:d5:a4:74:08:fc:c7:0a:06:e4:fa:50:b7:5d:
         80:a1:d9:45:b5:a3:8b:45:b7:45:65:42:89:40:68:03:b9:cc:
         20:74:fd:80:82:20:e8:75:11:93:34:67:76:ac:bd:7a:d1:83:
         f4:8b:fb:4e:74:f9:9c:bc:39:e6:43:b8:a3:d5:37:b5:0f:58:
         6c:ce:e7:e6:8f:cd:e1:d7:ef:37:eb:f9:c2:7f:c0:3b:e7:90:
         8f:c7:62:c5:e2:9f:b5:13:4c:04:3a:e2:d2:8b:90:11:41:d2:
         14:17:9a:08:b6:bd:6d:38:d9:d3:81:43:53:6a:62:b9:e1:23:
         ea:10:7e:7f:79:7c:bc:00:8b:79:ac:96:f5:12:89:42:79:c6:
         40:0e:96:89:49:c5:88:ea:88:46:a5:b7:62:41:98:56:e3:c0:
         37:10:99:fd:60:99:55:05:c0:15:68:5f:7d:5f:23:4f:43:27:
         07:3b:d9:6c:32:71:e2:00:3d:93:ab:0e:6f:72:3e:9f:b4:eb:
         f8:e6:a1:5e:59:de:15:f3:44:74:9c:a4:e3:55:fb:bb:45:0e:
         7d:1f:80:8b:5f:0b:33:27:06:f6:fb:fc:bb:c6:e6:26:6f:4d:
         a7:87:0f:eb:78:51:c3:aa:55:18:8c:29:fa:ef:d5:e3:41:bf:
         75:6f:c0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----