Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/bbb80af331ddbda765b085650ef7ee7e23409ee5.roa
File:                     bbb80af331ddbda765b085650ef7ee7e23409ee5.roa (raw, json)
Hash identifier:          vSbnU49eH2VKS+mvwtLw2PVBRWojpx+ZJAAbLRYPvqM=
Subject key identifier:   B9:A9:33:B4:1E:0D:AD:91:69:DF:02:F8:D3:CE:FA:52:6F:AC:B2:BC
Certificate issuer:       /CN=b0951c16b2e21e742562516097161ba7ad928df5
Certificate serial:       028B53
Authority key identifier: A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/bbb80af331ddbda765b085650ef7ee7e23409ee5.roa
Signing time:             Thu 18 Jan 2024 16:12:58 +0000
ROA not before:           Thu 18 Jan 2024 16:12:58 +0000
ROA not after:            Sun 18 Jan 2026 16:12:58 +0000
asID:                     28000
IP address blocks:        2801:165::/44 maxlen: 48

Validation:               Failed, certificate revoked on Tue 05 Mar 2024 18:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166739 (0x28b53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0951c16b2e21e742562516097161ba7ad928df5
        Validity
            Not Before: Jan 18 16:12:58 2024 GMT
            Not After : Jan 18 16:12:58 2026 GMT
        Subject: CN=bbb80af331ddbda765b085650ef7ee7e23409ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bd:e6:34:fd:49:87:96:29:45:d2:57:c9:48:
                    c9:0e:df:93:e8:b5:75:66:f3:c9:93:e0:cf:ca:d9:
                    19:22:55:2f:e3:af:1c:6c:fc:29:77:f8:b8:d0:46:
                    87:b5:65:97:12:f4:a2:7f:21:17:31:ee:e2:56:61:
                    92:e1:af:1e:a4:14:b9:c8:83:77:bb:60:92:75:38:
                    a6:40:2c:41:6f:56:e0:9e:f8:55:be:2e:d4:ba:1b:
                    05:16:3d:ae:33:7d:41:39:c3:a5:8b:77:a1:60:62:
                    9b:72:a5:81:fc:b4:a2:46:2c:a8:5b:ad:8f:3c:d1:
                    aa:78:74:64:1d:6f:ea:20:6a:ba:61:e1:37:0c:81:
                    6e:7c:ca:a0:46:85:42:08:9a:17:e2:7e:1d:62:f0:
                    1e:86:50:e1:44:79:c2:f8:70:c6:55:c1:18:b6:7a:
                    cd:89:8d:e6:2d:e4:15:01:77:e9:af:6c:fa:f7:b4:
                    63:20:7e:86:c3:bf:2b:18:75:ff:30:da:70:a2:5a:
                    96:c7:a7:40:9d:26:d2:9e:d9:a8:eb:43:7d:9b:44:
                    d3:6e:55:a9:f9:67:a4:70:14:8d:d5:aa:9c:cf:2e:
                    30:3e:ea:51:57:08:7a:12:36:a2:a8:6d:c7:96:1d:
                    95:72:70:f3:50:df:8d:bb:4b:72:ba:3f:e3:b6:78:
                    88:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A9:33:B4:1E:0D:AD:91:69:DF:02:F8:D3:CE:FA:52:6F:AC:B2:BC
            X509v3 Authority Key Identifier:
                keyid:A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/bbb80af331ddbda765b085650ef7ee7e23409ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

    Signature Algorithm: sha256WithRSAEncryption
         16:ab:21:2e:eb:f3:a5:e5:45:6e:33:dc:36:09:3f:2f:b6:90:
         24:b5:e5:2f:84:fd:8a:1e:20:1d:9a:f1:5e:cc:15:e3:72:f8:
         1d:d1:8f:7d:66:ad:01:33:24:b8:e1:d8:ee:c9:c7:9f:ee:28:
         d2:9e:17:0a:ad:03:31:8f:a2:5c:71:7e:97:08:6e:a3:9e:0b:
         61:ca:2d:01:3f:d3:65:51:73:1a:f1:e5:88:63:3e:ff:e2:52:
         89:78:63:ed:d2:5c:60:6e:de:f1:f6:30:c3:bc:e5:1a:12:70:
         bb:94:f1:b9:92:66:14:6f:41:e4:64:0a:7b:ff:7b:3d:d9:df:
         9b:15:3a:ef:fa:5a:e8:cd:ad:8a:5a:10:c0:f2:00:6c:f2:f9:
         2c:c6:36:7d:61:70:24:14:ef:ea:4d:38:32:b2:7a:76:1f:44:
         35:22:c3:fb:87:ae:26:76:2a:7f:23:7f:c5:f0:aa:0f:cf:93:
         03:ef:66:08:9a:39:94:cc:c6:95:1b:fb:d7:82:f0:42:1b:dc:
         a8:40:ef:89:80:62:b0:d3:85:2f:d6:bf:a1:b6:e6:06:59:4d:
         87:30:61:2a:be:8e:e4:41:cf:49:c7:d7:c0:8f:16:b0:8e:9b:
         62:fa:92:ec:66:2c:68:d4:0a:aa:96:eb:9c:f1:b9:68:0c:f0:
         11:9a:e3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----