Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/336a742a-d46c-45c2-9eac-5499fac9f012/4e8444922dc2df630fcf2aae539f1633ef4d372f.roa
File:                     4e8444922dc2df630fcf2aae539f1633ef4d372f.roa (raw, json)
Hash identifier:          TNAK8YWAxTWPMebnyUjNcwoLz9Zl+1Q9Kcsek32SpJQ=
Subject key identifier:   CC:37:0B:AA:06:A3:90:11:6B:6A:27:7F:93:71:63:D0:1D:FF:C7:12
Certificate issuer:       /CN=46852e51a411e33b284cbd01be15ea19c9bee844
Certificate serial:       0165DF
Authority key identifier: 1E:3A:4D:97:5E:AC:E6:D0:E4:7D:29:BC:BD:A0:D0:4E:E3:92:CE:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/46852e51a411e33b284cbd01be15ea19c9bee844.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/336a742a-d46c-45c2-9eac-5499fac9f012/4e8444922dc2df630fcf2aae539f1633ef4d372f.roa
Signing time:             Thu 28 Apr 2022 15:48:19 +0000
ROA not before:           Thu 28 Apr 2022 03:00:00 +0000
ROA not after:            Sun 28 Apr 2024 03:00:00 +0000
asID:                     262589
IP address blocks:        2801:12:9800::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91615 (0x165df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46852e51a411e33b284cbd01be15ea19c9bee844
        Validity
            Not Before: Apr 28 03:00:00 2022 GMT
            Not After : Apr 28 03:00:00 2024 GMT
        Subject: CN=4e8444922dc2df630fcf2aae539f1633ef4d372f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:60:b3:e8:d7:bb:68:bb:28:6d:c9:c6:b1:b1:
                    58:7f:7a:c3:10:6d:a2:ab:d2:63:02:86:26:79:54:
                    6b:c8:06:38:37:b7:9b:23:dc:ca:02:b7:90:06:b9:
                    1f:29:87:0d:61:9b:77:60:8a:a7:c4:c2:2a:cd:27:
                    3e:9d:d0:e6:16:e3:4f:07:2d:13:5b:04:31:58:0d:
                    e5:a1:72:37:f4:f6:2a:fd:07:32:c9:32:b9:33:e6:
                    fa:7e:45:57:a1:98:72:70:12:a5:30:58:03:bc:74:
                    7b:52:06:7e:0e:78:76:0b:77:4e:91:3f:a5:1b:2e:
                    2e:45:4e:96:90:a2:be:dd:08:41:d6:b7:05:3f:49:
                    2e:9a:72:d0:40:db:a5:63:a7:a4:31:1c:cb:cb:10:
                    16:42:44:cf:eb:40:da:5c:1e:fd:64:e5:a9:c6:3b:
                    33:56:89:44:e0:7f:b2:79:98:7a:b0:ef:27:35:61:
                    97:af:9a:60:b6:d2:e7:c0:e2:c9:99:c2:0e:da:51:
                    94:66:98:63:9c:ab:a7:35:7a:78:30:53:64:b9:75:
                    d5:b2:77:19:ef:a3:d2:58:33:cc:3e:28:29:bf:48:
                    47:d1:02:59:dd:f2:6a:65:41:25:02:a0:e9:78:89:
                    04:97:55:a1:99:82:cd:fa:78:5d:fa:23:58:9e:50:
                    48:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:37:0B:AA:06:A3:90:11:6B:6A:27:7F:93:71:63:D0:1D:FF:C7:12
            X509v3 Authority Key Identifier:
                keyid:1E:3A:4D:97:5E:AC:E6:D0:E4:7D:29:BC:BD:A0:D0:4E:E3:92:CE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/46852e51a411e33b284cbd01be15ea19c9bee844.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/336a742a-d46c-45c2-9eac-5499fac9f012/4e8444922dc2df630fcf2aae539f1633ef4d372f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/336a742a-d46c-45c2-9eac-5499fac9f012/46852e51a411e33b284cbd01be15ea19c9bee844.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:36:97:69:23:4d:03:98:57:93:4f:50:fa:6f:28:cf:87:2f:
         5c:9b:64:c8:9e:c7:42:4b:94:fc:94:12:e9:e6:74:95:01:30:
         b0:37:98:80:65:5d:ab:48:00:24:e8:ff:06:9c:9e:da:01:5d:
         f9:5c:cb:86:b5:b9:7b:5a:6d:ac:eb:e2:28:07:a6:1a:77:52:
         08:9d:20:b2:27:58:ad:0a:5a:63:17:6c:e5:14:1c:34:ea:f1:
         e9:cb:e8:9b:0d:34:d4:7b:cb:c8:7c:81:d7:95:6b:cb:76:3c:
         45:c1:8c:11:aa:23:be:ee:90:30:b9:63:82:1e:b6:8a:d7:a6:
         6c:ad:cc:49:84:a4:0d:c5:2b:a0:b7:7d:70:d8:58:cc:e6:d8:
         5b:a3:0c:4b:24:16:62:04:fb:81:98:68:6b:a7:4d:2a:01:50:
         d0:b6:8e:5b:0c:58:bf:0a:12:e6:f4:4b:b7:16:36:f1:f0:fa:
         98:c3:e5:10:be:58:c6:76:c3:d0:1d:85:0c:d4:5b:09:1b:98:
         9f:d3:6d:ee:5a:82:7a:2d:26:f6:3d:59:93:3f:20:70:58:95:
         7a:95:92:98:23:e6:03:a1:da:98:93:0c:bc:4c:24:6c:9b:1c:
         f5:7e:71:2e:e1:f8:a5:ba:9f:18:86:14:72:fc:d6:bc:cb:71:
         a8:d0:fe:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----