Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/e1818a60d11438166c09ec7924c900cc09031f66.roa
File:                     e1818a60d11438166c09ec7924c900cc09031f66.roa (raw, json)
Hash identifier:          zIPJH/QWsVoD7IDSK5VxRy0lABkHGrAg/UyKM1V9w98=
Subject key identifier:   5D:89:DC:C8:6D:B3:1E:2D:93:D4:A3:08:2C:98:A9:16:1C:C8:6F:41
Certificate issuer:       /CN=01c01a1d9e34ff483e0b923a24bb992c0f849c5b
Certificate serial:       250A
Authority key identifier: 21:1D:99:A9:7A:3D:56:D2:CC:3E:53:4A:C6:9A:E2:2C:FE:68:70:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/e1818a60d11438166c09ec7924c900cc09031f66.roa
Signing time:             Tue 22 Nov 2022 02:59:29 +0000
ROA not before:           Mon 21 Nov 2022 02:58:07 +0000
ROA not after:            Fri 22 Nov 2024 02:58:07 +0000
asID:                     27951
IP address blocks:        2801:1a9::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9482 (0x250a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c01a1d9e34ff483e0b923a24bb992c0f849c5b
        Validity
            Not Before: Nov 21 02:58:07 2022 GMT
            Not After : Nov 22 02:58:07 2024 GMT
        Subject: CN=e1818a60d11438166c09ec7924c900cc09031f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ae:2a:fd:f5:a1:f2:a6:dd:f1:6b:dd:6a:01:
                    49:b9:08:67:69:e2:a7:45:aa:30:8a:56:9f:59:1c:
                    90:c0:8e:29:1c:00:bd:d4:c2:e1:65:0a:f8:74:5c:
                    f9:04:fc:a6:e6:c3:19:e2:ad:a7:f8:58:35:b7:81:
                    c3:37:da:10:94:a3:ce:e9:eb:a7:3a:02:e7:79:c9:
                    d2:34:14:66:51:ab:2c:94:ac:fc:09:8f:08:4a:aa:
                    78:88:2c:8c:71:e1:21:d5:5f:c1:98:3d:c2:72:33:
                    0e:36:4b:d4:ad:87:3a:3d:37:8a:38:0b:f3:df:7e:
                    91:b9:37:74:2d:b2:33:5d:b1:f1:14:ab:a3:71:25:
                    2d:52:6c:e2:50:5f:6c:b6:f4:75:28:78:5a:91:27:
                    9c:97:2d:34:5a:0b:6f:74:0a:8e:f2:71:9e:d1:48:
                    25:0f:d7:96:f9:fc:a7:c3:1f:b7:0f:34:07:63:f4:
                    50:5f:c0:26:3b:bd:f1:e4:d3:fd:88:04:e2:99:e9:
                    fe:71:f8:75:df:72:4f:c2:ed:ab:38:e7:d3:db:41:
                    37:13:7d:12:56:8d:56:48:76:b1:1b:4d:e5:0d:b9:
                    66:dd:54:b5:d2:2a:b8:db:aa:6f:4b:12:c5:bc:81:
                    56:93:0a:7a:c3:d2:19:0e:3a:27:44:9f:ec:3e:21:
                    aa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:89:DC:C8:6D:B3:1E:2D:93:D4:A3:08:2C:98:A9:16:1C:C8:6F:41
            X509v3 Authority Key Identifier:
                keyid:21:1D:99:A9:7A:3D:56:D2:CC:3E:53:4A:C6:9A:E2:2C:FE:68:70:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/e1818a60d11438166c09ec7924c900cc09031f66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a9::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:e1:bc:d2:ef:c2:fd:80:13:85:fd:2d:ff:47:c8:47:87:82:
         52:4b:6c:fd:a3:3a:5c:76:49:22:9a:b8:e1:65:03:c5:28:85:
         a6:77:0d:1f:be:1c:00:88:43:21:e4:a8:d6:68:cb:33:bc:d8:
         5c:20:42:c6:c2:a5:23:60:4e:e2:30:61:b7:0e:17:d5:c8:e8:
         ae:d8:6f:6e:bf:06:d5:65:f0:e4:ca:eb:ef:4f:14:f0:e0:9b:
         a3:0a:2e:c2:06:39:4a:72:7b:20:c5:d1:87:f3:94:ea:75:7b:
         10:e9:25:07:a2:ea:a9:57:77:46:e2:81:1f:79:c6:84:ad:aa:
         99:fc:b1:a2:58:64:ea:f8:f9:a6:f0:c6:34:6e:4d:28:88:0a:
         4f:05:b9:15:ab:4e:a3:e9:33:ca:99:b0:6b:b7:6a:db:f7:c9:
         22:20:e1:20:aa:7d:cb:52:4b:83:37:5e:1a:b3:2d:a5:44:46:
         1f:18:70:13:84:82:34:60:ac:c9:0d:30:6d:52:cc:0c:1b:cf:
         d6:9d:0a:5a:b3:7e:29:ea:58:8f:47:38:93:f5:54:54:cb:80:
         35:4d:70:c8:35:c3:b3:da:58:10:bc:74:6d:fc:c7:cb:76:b4:
         13:db:36:49:18:91:b0:51:a6:96:de:5b:4e:05:e7:df:44:45:
         50:11:0f:20
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICJQowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFj
MDFhMWQ5ZTM0ZmY0ODNlMGI5MjNhMjRiYjk5MmMwZjg0OWM1YjAeFw0yMjExMjEw
MjU4MDdaFw0yNDExMjIwMjU4MDdaMDMxMTAvBgNVBAMTKGUxODE4YTYwZDExNDM4
MTY2YzA5ZWM3OTI0YzkwMGNjMDkwMzFmNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqrir99aHypt3xa91qAUm5CGdp4qdFqjCKVp9ZHJDAjikcAL3U
wuFlCvh0XPkE/Kbmwxniraf4WDW3gcM32hCUo87p66c6Aud5ydI0FGZRqyyUrPwJ
jwhKqniILIxx4SHVX8GYPcJyMw42S9Sthzo9N4o4C/PffpG5N3QtsjNdsfEUq6Nx
JS1SbOJQX2y29HUoeFqRJ5yXLTRaC290Co7ycZ7RSCUP15b5/KfDH7cPNAdj9FBf
wCY7vfHk0/2IBOKZ6f5x+HXfck/C7as459PbQTcTfRJWjVZIdrEbTeUNuWbdVLXS
Krjbqm9LEsW8gVaTCnrD0hkOOidEn+w+IaqrAgMBAAGjggJeMIICWjAdBgNVHQ4E
FgQUXYncyG2zHi2T1KMILJipFhzIb0EwHwYDVR0jBBgwFoAUIR2ZqXo9VtLMPlNK
xpriLP5ocOcwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8wMWMwMWEx
ZDllMzRmZjQ4M2UwYjkyM2EyNGJiOTkyYzBmODQ5YzViLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9iN2M3NDY1My00N2M1LTRjMTMtOGUwZS01YmE0ZGNi
YmZhNWEvZTE4MThhNjBkMTE0MzgxNjZjMDllYzc5MjRjOTAwY2MwOTAzMWY2Ni5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2I3Yzc0NjUzLTQ3YzUtNGMxMy04ZTBlLTViYTRk
Y2JiZmE1YS8wMWMwMWExZDllMzRmZjQ4M2UwYjkyM2EyNGJiOTkyYzBmODQ5YzVi
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw
ETAPBAIAAjAJAwcEKAEBqQAAMA0GCSqGSIb3DQEBCwUAA4IBAQB74bzS78L9gBOF
/S3/R8hHh4JSS2z9ozpcdkkimrjhZQPFKIWmdw0fvhwAiEMh5KjWaMszvNhcIELG
wqUjYE7iMGG3DhfVyOiu2G9uvwbVZfDkyuvvTxTw4JujCi7CBjlKcnsgxdGH85Tq
dXsQ6SUHouqpV3dG4oEfecaEraqZ/LGiWGTq+Pmm8MY0bk0oiApPBbkVq06j6TPK
mbBrt2rb98kiIOEgqn3LUkuDN14asy2lREYfGHAThII0YKzJDTBtUswMG8/WnQpa
s34p6liPRziT9VRUy4A1TXDINcOz2lgQvHRt/MfLdrQT2zZJGJGwUaaW3ltOBeff
REVQEQ8g
-----END CERTIFICATE-----