Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/4bc268f94965090316369b65d293a1d7904efeaf.roa
File:                     4bc268f94965090316369b65d293a1d7904efeaf.roa (raw, json)
Hash identifier:          IxFT0DwBhaQLZ7KFE2VduSnGP1doV56uCWXlawWYyfA=
Subject key identifier:   8A:FE:44:03:9B:E4:28:13:47:E1:4B:84:1C:F4:38:B7:DF:E7:39:10
Certificate issuer:       /CN=01c01a1d9e34ff483e0b923a24bb992c0f849c5b
Certificate serial:       1F62
Authority key identifier: 21:1D:99:A9:7A:3D:56:D2:CC:3E:53:4A:C6:9A:E2:2C:FE:68:70:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/4bc268f94965090316369b65d293a1d7904efeaf.roa
Signing time:             Tue 22 Nov 2022 02:58:06 +0000
ROA not before:           Mon 21 Nov 2022 02:57:02 +0000
ROA not after:            Fri 22 Nov 2024 02:57:02 +0000
asID:                     13489
IP address blocks:        2801:1a9::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8034 (0x1f62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c01a1d9e34ff483e0b923a24bb992c0f849c5b
        Validity
            Not Before: Nov 21 02:57:02 2022 GMT
            Not After : Nov 22 02:57:02 2024 GMT
        Subject: CN=4bc268f94965090316369b65d293a1d7904efeaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:29:a5:39:61:ea:c3:f9:0d:a3:ec:a0:47:2a:
                    2b:f9:91:09:71:1e:31:57:34:26:de:cf:18:fa:c5:
                    47:ab:b6:da:f8:8a:b3:37:f9:6b:bb:59:a4:d1:17:
                    d0:69:fa:5b:4d:65:cc:84:c6:ad:40:b5:d0:af:c0:
                    66:81:8f:cf:6e:fb:1d:93:9c:ed:5a:55:fd:e4:50:
                    2d:a6:77:4f:d8:8f:fc:0a:39:c6:fa:8d:54:08:0a:
                    27:85:14:53:13:51:04:f1:2a:38:e7:22:60:7b:2d:
                    b6:b1:a8:d3:03:04:15:07:d4:b3:69:b0:66:6b:7a:
                    28:89:82:ee:46:ba:e2:e3:e3:65:98:1c:06:ae:ee:
                    e4:ad:2d:54:4e:ff:2b:1f:b9:a9:3e:5b:cd:f4:0a:
                    25:ab:f7:d9:ae:6b:50:3c:e7:0d:43:d5:1e:d2:24:
                    d1:f3:19:08:3c:3b:8e:bf:ce:3b:41:df:13:69:1a:
                    7e:c7:4f:c2:88:5d:33:86:b8:30:86:d2:ac:6e:0e:
                    39:6a:bf:ea:29:6c:a1:68:ab:2b:0c:1d:fa:85:dd:
                    ea:40:72:11:7c:2c:6d:8b:6f:d8:17:c0:94:02:8c:
                    d3:a1:fd:86:64:95:46:de:5e:c4:d1:23:db:d7:6e:
                    29:82:48:76:6a:2d:17:22:66:95:a3:61:e1:28:01:
                    5d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FE:44:03:9B:E4:28:13:47:E1:4B:84:1C:F4:38:B7:DF:E7:39:10
            X509v3 Authority Key Identifier:
                keyid:21:1D:99:A9:7A:3D:56:D2:CC:3E:53:4A:C6:9A:E2:2C:FE:68:70:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/4bc268f94965090316369b65d293a1d7904efeaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a9::/44

    Signature Algorithm: sha256WithRSAEncryption
         32:2c:e2:77:e6:f8:94:ea:a5:3e:02:a5:de:66:22:26:ef:c5:
         ff:f2:ff:f9:6f:4e:4c:fa:3f:1b:38:ce:a5:94:d7:99:0e:d6:
         56:a4:19:8e:db:cf:57:d8:d2:55:61:e6:2b:d5:6e:be:13:57:
         b1:a2:82:c4:e2:1c:f3:e4:f0:e2:fc:31:72:88:7e:6c:1e:9a:
         fd:1d:0d:48:46:06:9a:02:5b:08:9b:48:00:e2:70:b9:31:62:
         7d:f6:c8:9b:f5:e4:f6:79:97:0d:2f:0b:1b:f6:f2:3c:e5:7d:
         0f:4c:3a:6b:ee:a0:d2:2d:1d:b8:b4:17:60:d1:a5:f2:56:69:
         09:c3:b8:22:c5:04:d6:85:3b:86:a2:41:de:f4:90:2b:a9:81:
         ed:4d:7c:75:4c:18:6d:b2:83:0b:f2:29:93:b3:3b:1d:db:a3:
         cd:82:ad:8d:4e:41:65:17:a2:03:3e:39:15:8c:0d:39:3a:d2:
         ec:90:0d:84:cc:94:d4:4c:2f:0d:02:1c:5c:4e:97:11:12:3d:
         56:71:18:5a:e6:8f:a9:f0:c2:fd:8c:fc:80:ba:0f:77:f2:23:
         fd:9f:e2:74:06:1a:26:14:2e:bb:fd:e0:65:67:63:cd:a0:d4:
         a9:10:48:d9:61:27:80:97:54:4e:50:6d:38:47:25:1b:c7:40:
         3b:60:9c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----