Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/20a66a365e978e3c10827937eb69f2f006a6f35b.roa
File:                     20a66a365e978e3c10827937eb69f2f006a6f35b.roa (raw, json)
Hash identifier:          jS5ZOLekPASK0U+ohxkh+H7PApLqGmU663cIQdx8SK0=
Subject key identifier:   3E:EC:BF:1F:92:6D:5F:98:EF:CF:CD:9E:D9:F3:B9:9F:77:8C:76:E9
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       0D13C8
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/20a66a365e978e3c10827937eb69f2f006a6f35b.roa
Signing time:             Thu 09 Mar 2023 14:03:09 +0000
ROA not before:           Tue 12 Apr 2022 03:00:00 +0000
ROA not after:            Wed 30 Apr 2025 03:00:00 +0000
asID:                     271891
IP address blocks:        2801:151:3d::/48 maxlen: 48
                          2801:151:52::/48 maxlen: 48
                          2801:151:53::/48 maxlen: 48
                          2801:151:ea::/48 maxlen: 48
                          2801:151:c4::/48 maxlen: 48
                          2801:151:57::/48 maxlen: 48
                          2801:151:58::/48 maxlen: 48
                          2801:151:59::/48 maxlen: 48
                          2801:151:a3::/48 maxlen: 48
                          2801:151:a4::/48 maxlen: 48
                          2801:151:a2::/48 maxlen: 48
                          2801:151:fb::/48 maxlen: 48
                          2801:151:3c::/48 maxlen: 48
                          2801:151:45::/48 maxlen: 48
                          2801:151:4b::/48 maxlen: 48
                          2801:151:51::/48 maxlen: 48
                          2801:151:5a::/48 maxlen: 48
                          2801:151:60::/48 maxlen: 48
                          2801:151:66::/48 maxlen: 48
                          2801:151:10a::/48 maxlen: 48
                          2801:151:f9::/48 maxlen: 48
                          2801:151:103::/48 maxlen: 48
                          2801:151:105::/48 maxlen: 48
                          2801:151:107::/48 maxlen: 48
                          2801:151:109::/48 maxlen: 48
                          2801:151:37::/48 maxlen: 48
                          2801:151:39::/48 maxlen: 48
                          2801:151:c5::/48 maxlen: 48
                          2801:151:8b::/48 maxlen: 48
                          2801:151:8c::/48 maxlen: 48
                          2801:151:e1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857032 (0xd13c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Apr 12 03:00:00 2022 GMT
            Not After : Apr 30 03:00:00 2025 GMT
        Subject: CN=20a66a365e978e3c10827937eb69f2f006a6f35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:19:65:fa:ee:aa:40:c4:22:c5:b9:78:15:15:
                    69:60:1b:54:4b:b9:06:57:93:7f:92:bc:5f:9a:9b:
                    47:bc:b8:ed:87:6a:2d:c6:36:8d:5d:23:0d:b5:f5:
                    6b:42:bd:35:b4:86:fa:ba:ab:2f:93:5f:c6:3c:9c:
                    c1:bc:b6:54:55:89:c0:61:2c:93:a0:65:b7:43:7c:
                    0d:ce:85:5d:23:8c:a5:31:4c:af:41:2e:00:4f:86:
                    1d:c1:12:78:1e:23:ef:14:47:be:1c:16:98:19:8c:
                    0e:76:3a:ff:8b:f3:19:c9:45:d3:88:a4:31:36:77:
                    6f:c6:83:7b:c5:7b:61:2c:ac:55:17:00:78:d1:4e:
                    b7:ea:92:fb:0d:5b:56:c3:30:e3:6d:e5:92:1e:ef:
                    b9:b6:6b:40:5d:7f:39:63:77:ef:75:38:07:bb:11:
                    ae:14:9a:15:fc:32:ab:a1:5a:8f:08:21:d7:70:6c:
                    58:dc:5e:29:c5:b2:5a:e7:e0:2b:79:51:7a:ed:e4:
                    2e:93:e8:bf:7a:78:1e:25:4b:b7:0c:ba:79:52:1b:
                    2e:f0:77:5a:f9:c7:27:55:3a:ed:cb:4d:e4:0a:b0:
                    df:28:50:e1:d3:59:b9:48:4e:b8:d1:09:39:67:74:
                    41:1a:3a:f6:e5:03:08:9d:bb:d5:41:85:ad:0d:17:
                    ab:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EC:BF:1F:92:6D:5F:98:EF:CF:CD:9E:D9:F3:B9:9F:77:8C:76:E9
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/20a66a365e978e3c10827937eb69f2f006a6f35b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:37::/48
                  2801:151:39::/48
                  2801:151:3c::/47
                  2801:151:45::/48
                  2801:151:4b::/48
                  2801:151:51::-2801:151:53:ffff:ffff:ffff:ffff:ffff
                  2801:151:57::-2801:151:5a:ffff:ffff:ffff:ffff:ffff
                  2801:151:60::/48
                  2801:151:66::/48
                  2801:151:8b::-2801:151:8c:ffff:ffff:ffff:ffff:ffff
                  2801:151:a2::-2801:151:a4:ffff:ffff:ffff:ffff:ffff
                  2801:151:c4::/47
                  2801:151:e1::/48
                  2801:151:ea::/48
                  2801:151:f9::/48
                  2801:151:fb::/48
                  2801:151:103::/48
                  2801:151:105::/48
                  2801:151:107::/48
                  2801:151:109::-2801:151:10a:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         31:84:27:6c:4c:4e:8b:d6:37:06:7e:5c:c5:fa:11:e2:2d:3d:
         3f:6a:7a:db:40:92:e3:29:d5:67:4f:bc:49:05:8f:3f:49:e5:
         8c:d1:e4:6c:ad:c8:c5:86:cd:66:58:8d:e2:1a:81:c1:6c:39:
         35:55:72:00:77:3a:d8:51:a8:88:97:a6:ba:3f:d4:0c:4d:31:
         f1:43:16:20:a9:c1:5a:5b:10:ff:48:ae:bf:ad:b5:2f:bf:26:
         cf:72:3f:98:c9:60:88:7e:66:6e:1e:4c:42:b2:ba:38:ea:31:
         6f:a5:9b:07:79:54:4b:9b:3b:0a:99:38:61:95:80:75:e6:b4:
         7d:68:bf:e3:33:20:35:72:ba:ee:05:0b:17:53:5b:56:7f:0b:
         5a:e9:5b:b9:f2:8d:ce:a9:00:2a:83:1a:de:82:7d:88:dc:1c:
         72:4c:8e:f1:df:98:65:8c:20:74:77:56:12:24:06:13:7c:be:
         be:e4:03:a5:e9:30:82:10:60:d7:e7:dc:82:56:a1:ac:32:55:
         99:33:40:7d:7c:09:54:5b:a9:4b:0c:10:21:83:e4:14:3c:0a:
         75:2f:e7:05:89:01:96:bf:29:79:78:ee:bf:2c:26:2b:4b:b0:
         48:57:22:20:32:bf:96:d2:96:ea:9b:4a:72:08:8e:ef:d6:ef:
         cf:3b:57:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----