Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/9cec72b1c40898159396ce1da3b38568c5c1b9b1.roa
File:                     9cec72b1c40898159396ce1da3b38568c5c1b9b1.roa (raw, json)
Hash identifier:          D685YXeX15zcfWw/PSfqt1YEP0mUDZrt2pU8NAWoxLU=
Subject key identifier:   74:E6:CE:88:E4:68:AC:49:C4:3C:78:75:DB:2A:E3:EA:3A:0F:EF:11
Certificate issuer:       /CN=f6fe25a266009db467ead60d5ec947af0402cb02
Certificate serial:       12337A
Authority key identifier: B4:E7:FD:7E:36:23:82:23:C3:0C:03:91:F3:2B:E7:BF:31:0F:E8:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f6fe25a266009db467ead60d5ec947af0402cb02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/9cec72b1c40898159396ce1da3b38568c5c1b9b1.roa
Signing time:             Fri 24 Mar 2023 08:32:28 +0000
ROA not before:           Thu 23 Mar 2023 08:32:28 +0000
ROA not after:            Sat 22 Mar 2025 08:32:28 +0000
asID:                     271885
IP address blocks:        2801:12:e800::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192826 (0x12337a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6fe25a266009db467ead60d5ec947af0402cb02
        Validity
            Not Before: Mar 23 08:32:28 2023 GMT
            Not After : Mar 22 08:32:28 2025 GMT
        Subject: CN=9cec72b1c40898159396ce1da3b38568c5c1b9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:61:de:3c:d0:e6:a2:81:cb:cc:a0:d5:0c:e4:
                    b3:42:41:a0:31:1a:a4:a7:00:7b:ac:47:f6:7c:d2:
                    4c:c9:3f:6e:2d:41:04:a9:7f:68:cd:e1:fd:f4:2f:
                    20:17:a8:d1:73:e8:e0:79:19:af:01:7f:ad:94:a9:
                    6c:a4:60:b5:d3:55:46:af:02:ab:6a:0c:07:76:37:
                    7f:42:4d:0f:1d:42:77:cd:8c:11:df:19:e7:88:cf:
                    58:27:c9:d5:4e:5d:07:fc:f3:2d:26:a5:86:68:d9:
                    21:20:1e:d7:6c:e9:9e:d3:7b:c6:16:a2:8c:61:71:
                    2b:f9:43:f9:de:e4:dd:14:39:a2:b4:40:d9:2c:63:
                    9f:1e:4d:7e:b5:a0:1c:f1:9d:ce:6f:16:fe:f0:2c:
                    81:d9:28:e2:31:e9:9f:e7:08:4f:4b:bc:d9:d2:6b:
                    8b:51:97:7b:3f:ca:4b:d0:c3:20:2a:f1:e2:18:c9:
                    2d:83:9d:03:88:b7:c1:ff:93:44:aa:a2:54:96:7c:
                    28:80:49:3f:c0:b5:b5:8c:7c:4d:fe:90:9c:bc:a6:
                    15:59:f3:60:b8:07:6d:f8:36:58:75:fd:4b:13:9c:
                    76:06:77:9e:d9:c3:b2:32:e3:6e:30:0b:c9:db:61:
                    a3:43:70:b8:5a:4d:57:88:93:19:f5:30:74:37:21:
                    1f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E6:CE:88:E4:68:AC:49:C4:3C:78:75:DB:2A:E3:EA:3A:0F:EF:11
            X509v3 Authority Key Identifier:
                keyid:B4:E7:FD:7E:36:23:82:23:C3:0C:03:91:F3:2B:E7:BF:31:0F:E8:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f6fe25a266009db467ead60d5ec947af0402cb02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/9cec72b1c40898159396ce1da3b38568c5c1b9b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/f6fe25a266009db467ead60d5ec947af0402cb02.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:79:ab:50:b9:69:cc:ce:e4:7b:3f:45:16:c9:63:ce:6f:49:
         55:7c:b2:b5:e5:dd:2d:dd:cc:20:18:42:97:ab:d7:27:64:b6:
         72:a5:04:f4:c2:0f:3e:44:83:21:72:f3:69:6f:2c:09:f4:1f:
         f2:d0:1e:bb:b2:8b:d4:29:9f:07:08:40:ba:ca:ce:94:b8:c6:
         1b:02:6c:ac:03:27:67:23:f2:e0:f7:bf:55:2a:4d:58:f8:d5:
         fc:ad:c8:fd:64:5f:1c:83:02:c4:da:37:26:2d:6c:40:5b:24:
         9e:23:40:f9:d0:56:9a:89:d6:01:78:1f:85:49:bd:5f:e4:c6:
         c9:f9:10:f9:5d:8d:fa:bb:6e:4d:34:a4:33:77:6f:89:4a:da:
         19:2f:a3:fd:dd:84:79:ce:2f:ac:f5:02:19:bd:99:d5:88:2e:
         44:a1:0f:68:da:30:4f:05:97:97:1f:ff:f4:bd:b0:7c:f6:f4:
         ec:cf:fd:95:76:53:e2:11:15:60:60:6e:61:f1:b0:53:2c:f1:
         e9:9b:50:6c:09:e6:50:a3:40:f3:9e:bb:37:11:b6:b0:60:29:
         7c:84:7e:9e:56:b0:fd:98:69:b4:79:01:f1:ee:2d:92:cc:83:
         e8:38:53:37:62:2d:26:b1:31:66:58:6b:b4:34:7e:bd:39:c8:
         f2:64:a3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----