Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/b0ba2127d18037f01a01a7551ae2a044f6df6389.roa
File:                     b0ba2127d18037f01a01a7551ae2a044f6df6389.roa (raw, json)
Hash identifier:          h1D9QKr7bDhYfj6mzLydQzoZk1DcnRXDz14Bf+KpHQA=
Subject key identifier:   E8:B6:F3:63:06:D1:34:0D:AD:A3:F4:6A:4A:08:20:EE:43:57:E1:0D
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DD3E0
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/b0ba2127d18037f01a01a7551ae2a044f6df6389.roa
Signing time:             Wed 24 Mar 2021 14:28:47 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:2010::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906208 (0xdd3e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=b0ba2127d18037f01a01a7551ae2a044f6df6389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cf:91:c7:80:fe:75:7d:78:e8:ce:aa:e3:66:
                    38:96:e3:f3:5a:56:2a:99:00:7f:b4:a7:19:91:d2:
                    58:bb:65:8a:21:1b:4d:aa:cb:86:cd:e3:ab:71:dd:
                    f1:88:fb:a4:32:1b:b1:ee:82:1f:de:dd:74:21:31:
                    09:bb:0e:67:90:3e:1e:06:85:d7:62:ab:fe:fa:10:
                    7d:85:9a:b0:bc:ab:f1:b5:7e:aa:9e:92:c3:20:38:
                    8a:01:07:3c:4a:41:30:6b:b0:17:cb:91:f7:2d:d3:
                    83:02:15:6d:22:b4:c2:c9:53:0e:3f:23:3e:30:cc:
                    7d:60:e8:e0:60:6c:0a:a2:10:56:06:93:88:a4:d6:
                    0b:5a:70:b2:89:8e:db:c3:ab:b8:82:0c:31:ac:bb:
                    7c:a2:4f:c2:49:3d:9c:dc:ed:00:df:dc:3c:73:dd:
                    0d:22:d3:81:0b:a0:bb:0f:ae:04:8c:a4:58:2b:74:
                    1b:c1:62:85:92:b0:3d:58:17:05:2e:1d:90:dd:18:
                    8e:6e:6d:3f:dd:f0:96:19:f7:ff:5a:16:80:31:66:
                    e4:04:f1:c5:ed:bf:15:6f:f3:2a:3e:14:e5:ee:a1:
                    18:8e:f3:4a:d9:62:d6:a0:e2:1c:72:3f:95:8d:5b:
                    24:be:3d:ea:da:e3:41:3f:f6:64:cd:2b:7a:3c:3f:
                    77:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B6:F3:63:06:D1:34:0D:AD:A3:F4:6A:4A:08:20:EE:43:57:E1:0D
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/b0ba2127d18037f01a01a7551ae2a044f6df6389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:2010::/44

    Signature Algorithm: sha256WithRSAEncryption
         78:1c:5a:c2:1f:1e:47:4d:8e:a1:d9:af:48:21:fd:76:0f:13:
         56:7a:7e:47:c4:45:ec:d2:9f:68:b3:83:7d:ea:1d:ec:54:55:
         8d:14:f5:eb:56:a0:3b:62:f0:cd:67:75:93:07:ac:e3:c2:6d:
         0e:09:4a:20:7d:fa:68:12:42:b8:a0:2f:d5:04:1a:b3:e1:da:
         7e:5a:0b:de:4d:5d:3d:86:9c:bc:e8:90:bb:8a:98:5b:45:b1:
         51:1e:9d:2b:6e:db:37:ff:a1:fc:74:bd:4e:9d:d1:e1:c3:2c:
         63:fb:b0:96:54:a8:9e:4c:ef:ef:48:16:74:8e:84:8e:e1:72:
         64:d6:f8:7e:82:f3:60:10:12:cd:a5:08:42:f7:b7:77:1b:29:
         b4:a0:e9:9d:dc:c3:fb:44:9a:7d:2d:d8:50:09:10:88:78:06:
         1f:21:38:e2:62:32:0d:ac:90:f1:26:81:bb:dd:1b:11:00:b9:
         e3:d3:32:3f:81:53:92:69:c2:19:c3:22:fe:2f:1a:32:78:c7:
         8f:ef:d6:54:2d:2c:69:75:df:08:82:90:6f:aa:ec:c7:4e:a0:
         2d:77:b0:11:b2:61:3e:38:12:62:74:80:ab:da:10:34:0c:4c:
         ef:e0:c2:12:cf:a5:7f:02:da:03:50:20:53:5e:de:41:a3:6b:
         19:a2:49:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----