Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32a5cbb0-d0cb-41d9-80de-a7e9c7e9cc1c/ad4c7e43340f9ff74da8355a94551140e67ccdf2.roa
File:                     ad4c7e43340f9ff74da8355a94551140e67ccdf2.roa (raw, json)
Hash identifier:          7TpT+uDzGu7AxEKaJdtVl2PJJGJWLTCAXcLz3Fx5E8s=
Subject key identifier:   7C:F5:31:91:25:BD:31:CC:36:38:C4:40:B1:B5:DE:AC:16:65:E1:9F
Certificate issuer:       /CN=14972a169d27abbbc1d8a239ac2b44de8608deaf
Certificate serial:       A81C
Authority key identifier: D0:95:FE:EA:57:78:6C:4B:ED:26:2B:97:BF:BF:0A:B3:43:97:5C:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14972a169d27abbbc1d8a239ac2b44de8608deaf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/32a5cbb0-d0cb-41d9-80de-a7e9c7e9cc1c/ad4c7e43340f9ff74da8355a94551140e67ccdf2.roa
Signing time:             Wed 22 Mar 2023 15:18:07 +0000
ROA not before:           Tue 21 Mar 2023 15:18:07 +0000
ROA not after:            Wed 22 Mar 2028 15:18:07 +0000
asID:                     1
IP address blocks:        2801:12:3800::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43036 (0xa81c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14972a169d27abbbc1d8a239ac2b44de8608deaf
        Validity
            Not Before: Mar 21 15:18:07 2023 GMT
            Not After : Mar 22 15:18:07 2028 GMT
        Subject: CN=ad4c7e43340f9ff74da8355a94551140e67ccdf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5a:13:f1:75:fe:34:e8:8a:92:88:69:0f:d8:
                    6a:3a:f6:8d:da:b2:de:9e:17:ee:3f:a0:ac:af:f6:
                    98:1c:61:9b:ae:b5:ea:c9:4b:2f:d6:32:b7:f6:66:
                    3c:70:c0:bf:90:9c:eb:19:07:73:b0:08:07:63:af:
                    33:34:b2:b0:82:ed:88:a8:26:1e:6f:34:53:df:30:
                    6c:7c:4d:ac:89:23:4a:a3:fd:b3:ed:55:a8:34:7c:
                    60:7f:f4:49:80:d4:0c:c5:86:0b:a9:19:bd:fc:5b:
                    12:84:9b:2f:8d:9b:4c:a0:17:0b:87:b7:2b:6e:8a:
                    b6:d6:03:8a:6d:bf:05:3e:c9:9d:48:4c:6b:45:4a:
                    3a:50:99:1d:44:ee:6f:93:38:65:2c:e7:0c:fb:90:
                    d6:99:c0:84:dd:c2:a1:d8:b0:fa:cb:53:9b:e8:11:
                    cd:c2:7f:2a:60:9d:7a:81:5b:08:1d:34:d4:2f:ce:
                    c9:3d:10:6e:97:64:c4:79:3f:12:6f:4d:38:85:16:
                    74:ba:20:2e:54:e2:23:98:82:d1:c4:09:59:cb:66:
                    cb:52:a5:ff:43:d4:4c:0f:72:7f:88:86:f6:3b:fe:
                    73:60:ed:7a:0a:44:29:24:d7:9b:a3:13:53:a4:35:
                    8d:74:e4:f0:e2:a1:8e:67:c6:04:ef:25:b3:43:19:
                    8e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F5:31:91:25:BD:31:CC:36:38:C4:40:B1:B5:DE:AC:16:65:E1:9F
            X509v3 Authority Key Identifier:
                keyid:D0:95:FE:EA:57:78:6C:4B:ED:26:2B:97:BF:BF:0A:B3:43:97:5C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14972a169d27abbbc1d8a239ac2b44de8608deaf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32a5cbb0-d0cb-41d9-80de-a7e9c7e9cc1c/ad4c7e43340f9ff74da8355a94551140e67ccdf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/32a5cbb0-d0cb-41d9-80de-a7e9c7e9cc1c/14972a169d27abbbc1d8a239ac2b44de8608deaf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:6e:c9:03:b6:e9:28:7d:05:c0:a9:25:37:61:0b:95:a6:70:
         8a:48:3c:5e:e3:6e:7f:12:a5:ee:77:b0:d5:66:7e:e5:4b:d4:
         34:c5:51:52:d7:d2:c3:6a:32:7b:a1:df:91:c6:c3:76:d2:25:
         5c:a6:b0:c7:4c:06:a3:98:34:d4:b5:48:7d:3c:a4:8e:05:18:
         60:e3:40:4f:48:ef:23:de:cc:e6:70:c7:02:30:a5:81:a1:86:
         94:15:45:bf:41:85:d6:9f:e5:bc:ca:3b:5e:8e:da:bd:be:f0:
         55:0a:5f:f1:67:94:60:f6:6e:1b:3e:9f:b9:5c:af:e8:cb:ad:
         04:95:c9:91:9a:24:05:b2:c3:72:3f:58:f6:6f:f1:03:63:60:
         0f:c4:7c:7a:69:11:d5:29:6c:62:62:07:e2:24:83:4d:4f:64:
         a9:74:ff:b8:a5:1b:11:81:57:34:47:a6:db:cd:0e:dd:7f:9c:
         35:b1:61:49:91:e0:ae:7b:09:1d:e3:17:c2:d1:2b:57:ec:80:
         bc:c4:cd:e3:94:05:38:47:97:82:63:9f:c1:47:ca:ac:8a:2f:
         80:9b:02:86:d5:0f:3c:84:e0:79:61:4f:bd:c3:5c:8e:12:c3:
         19:a2:71:28:08:55:aa:1b:74:f6:9a:cc:c0:26:c8:5f:40:ef:
         3d:5a:c0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----