Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3930cb5c-6adb-423c-97b4-af3afbe59205/2277b9d99ec8385a3b8813d4f8f171593eb65507.roa
File:                     2277b9d99ec8385a3b8813d4f8f171593eb65507.roa (raw, json)
Hash identifier:          I4EpVv3UeFlSZgQ1f60EYAFhhBzDyxAOtE7ByryaF+Y=
Subject key identifier:   41:64:49:18:ED:C9:CD:77:6E:9B:63:A4:D3:A2:6C:D8:32:10:59:D0
Certificate issuer:       /CN=455a0128ffd8e326e1f151fa1ad8365768d0e332
Certificate serial:       0397
Authority key identifier: B1:D1:95:2A:9B:2E:3A:06:3F:48:2F:2B:5A:36:1D:EA:EE:D9:C9:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/455a0128ffd8e326e1f151fa1ad8365768d0e332.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3930cb5c-6adb-423c-97b4-af3afbe59205/2277b9d99ec8385a3b8813d4f8f171593eb65507.roa
Signing time:             Wed 16 Mar 2022 17:59:51 +0000
ROA not before:           Wed 16 Mar 2022 03:00:00 +0000
ROA not after:            Sat 16 Mar 2024 03:00:00 +0000
asID:                     272021
IP address blocks:        2801:1a1::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919 (0x397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a0128ffd8e326e1f151fa1ad8365768d0e332
        Validity
            Not Before: Mar 16 03:00:00 2022 GMT
            Not After : Mar 16 03:00:00 2024 GMT
        Subject: CN=2277b9d99ec8385a3b8813d4f8f171593eb65507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:4b:ff:25:59:02:c7:4a:40:de:62:59:b8:
                    40:0f:bd:1d:4e:5d:18:b2:cd:20:c2:1f:d2:d4:4d:
                    ef:8b:73:c3:d9:c7:24:fa:50:8b:94:77:04:df:10:
                    46:10:42:49:0a:c8:24:73:7b:ed:ff:fc:cb:a8:d4:
                    0d:1a:2c:92:f2:c9:6d:81:c4:0e:4f:f8:14:b9:3a:
                    cb:9e:1c:35:2e:e6:97:16:7c:f4:33:ff:54:39:38:
                    33:77:b1:84:4a:4c:22:36:4e:cf:5e:6c:52:5d:07:
                    a6:1c:14:32:b7:08:d8:1c:c1:a3:c7:98:d5:b5:c8:
                    5d:e2:85:59:95:89:db:31:68:80:b6:07:0c:68:4b:
                    c3:1e:6e:53:8c:cd:c2:ac:81:d1:b9:f2:13:28:55:
                    2f:7d:94:66:48:75:b5:20:80:44:5d:73:e4:ac:09:
                    0a:01:bb:4d:2d:81:2b:5a:8c:dd:94:b2:a3:03:a6:
                    c0:20:8c:da:c4:b4:88:a9:fb:de:62:be:25:d2:66:
                    be:85:fa:de:a2:26:8b:7e:57:ed:3f:68:c2:9d:d6:
                    cb:4d:66:83:8e:fe:82:d7:7e:07:73:94:55:5c:2b:
                    7d:95:54:88:5a:fe:41:f0:66:70:b7:f0:f0:ac:08:
                    64:42:fb:cd:77:a2:78:3e:bc:6b:5c:0e:a9:12:19:
                    12:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:64:49:18:ED:C9:CD:77:6E:9B:63:A4:D3:A2:6C:D8:32:10:59:D0
            X509v3 Authority Key Identifier:
                keyid:B1:D1:95:2A:9B:2E:3A:06:3F:48:2F:2B:5A:36:1D:EA:EE:D9:C9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/455a0128ffd8e326e1f151fa1ad8365768d0e332.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3930cb5c-6adb-423c-97b4-af3afbe59205/2277b9d99ec8385a3b8813d4f8f171593eb65507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3930cb5c-6adb-423c-97b4-af3afbe59205/455a0128ffd8e326e1f151fa1ad8365768d0e332.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a1::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:8c:88:3f:0a:f1:e3:73:90:44:ca:5c:2e:9f:e7:b9:f8:d7:
         8e:bd:d9:06:87:c1:59:4f:62:73:2a:c7:54:c1:3c:b8:93:cb:
         41:bd:8d:fa:24:b5:8f:2b:15:b0:50:9d:07:ca:83:21:d4:0d:
         c4:74:3f:61:d0:c8:98:13:00:fe:c9:5c:20:6d:0b:1b:fb:e3:
         4f:2b:01:54:a5:2a:a6:1d:b3:43:82:e4:c5:09:28:83:55:e9:
         ac:56:d6:b9:bb:81:48:bc:e4:0c:37:37:ff:38:39:4f:21:6d:
         5c:12:18:35:83:f9:4e:57:de:ad:36:55:a6:8d:f7:90:59:00:
         b8:8d:73:46:02:ef:bd:4b:25:c5:2d:51:eb:c7:a9:60:c2:3b:
         f9:03:3f:6e:c7:72:ed:24:0b:47:2e:c6:87:5c:de:16:21:a0:
         a5:f9:eb:94:b4:5c:17:d2:37:a6:6a:30:be:63:46:24:eb:3e:
         58:14:0c:07:b7:05:72:8c:a5:a7:b8:46:30:d0:8f:92:d7:e6:
         6b:31:bf:3a:3c:d2:40:b9:b2:74:a3:bb:fd:96:5f:30:00:ce:
         dc:a1:da:27:ae:9e:6c:66:0f:f7:1c:22:67:9e:42:94:e9:76:
         e5:d9:71:ba:b9:c1:4d:a3:33:e4:12:7c:ad:35:d8:c9:24:79:
         a3:47:94:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----