Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/44d6bbd382e72db716526eeca966e12ca34b5073.roa
File:                     44d6bbd382e72db716526eeca966e12ca34b5073.roa (raw, json)
Hash identifier:          SHNvuE5Nj5RtXVgy1cFf9FO9oRsTBH6UVj1xOMOeW/k=
Subject key identifier:   79:EC:47:E4:0E:FD:81:1F:CA:03:0E:6D:C9:68:9F:15:24:8D:B5:96
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       0CF470
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/44d6bbd382e72db716526eeca966e12ca34b5073.roa
Signing time:             Thu 09 Mar 2023 13:57:34 +0000
ROA not before:           Sat 16 Apr 2022 03:00:00 +0000
ROA not after:            Wed 30 Apr 2025 03:00:00 +0000
asID:                     271891
IP address blocks:        2801:151:3d::/48 maxlen: 48
                          2801:151:52::/48 maxlen: 48
                          2801:151:53::/48 maxlen: 48
                          2801:151:c3::/48 maxlen: 48
                          2801:151:ea::/48 maxlen: 48
                          2801:151:c4::/48 maxlen: 48
                          2801:151:11::/48 maxlen: 48
                          2801:151:57::/48 maxlen: 48
                          2801:151:58::/48 maxlen: 48
                          2801:151:59::/48 maxlen: 48
                          2801:151:a3::/48 maxlen: 48
                          2801:151:a4::/48 maxlen: 48
                          2801:151:a2::/48 maxlen: 48
                          2801:151:fb::/48 maxlen: 48
                          2801:151:3c::/48 maxlen: 48
                          2801:151:45::/48 maxlen: 48
                          2801:151:4b::/48 maxlen: 48
                          2801:151:51::/48 maxlen: 48
                          2801:151:5a::/48 maxlen: 48
                          2801:151:60::/48 maxlen: 48
                          2801:151:66::/48 maxlen: 48
                          2801:151:10a::/48 maxlen: 48
                          2801:151:f9::/48 maxlen: 48
                          2801:151:103::/48 maxlen: 48
                          2801:151:105::/48 maxlen: 48
                          2801:151:107::/48 maxlen: 48
                          2801:151:109::/48 maxlen: 48
                          2801:151:37::/48 maxlen: 48
                          2801:151:39::/48 maxlen: 48
                          2801:151:c5::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 849008 (0xcf470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Apr 16 03:00:00 2022 GMT
            Not After : Apr 30 03:00:00 2025 GMT
        Subject: CN=44d6bbd382e72db716526eeca966e12ca34b5073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:2b:4f:9a:f2:0a:42:82:ed:78:fe:9f:89:
                    9e:02:51:07:d4:cd:4e:5b:2e:5e:e2:b1:36:c4:13:
                    d2:95:06:dd:b1:fc:13:36:91:91:2c:49:b8:64:07:
                    d9:6a:fe:68:ba:4f:cd:4f:8a:b5:0d:d8:ba:d3:d8:
                    b7:39:ad:5b:8d:b3:7b:7b:65:c9:46:00:14:71:cc:
                    17:5e:4a:76:b1:b5:e9:07:aa:38:30:82:89:cc:fe:
                    4f:35:dc:f7:79:3f:a8:67:61:0e:d1:38:1f:ac:fd:
                    db:dd:18:e2:ba:44:57:12:c7:43:d4:30:11:ff:26:
                    cb:dc:d5:81:5e:34:03:e9:b5:50:db:31:be:aa:c1:
                    f4:f0:a9:68:d4:2c:5f:e8:9b:9f:e7:db:e6:0c:7b:
                    53:ba:6d:40:e7:cd:a9:14:0e:1b:53:39:c2:a6:f5:
                    53:5b:6e:f3:cd:5f:f8:8f:f8:56:20:6d:60:77:d5:
                    f5:72:e7:7c:d1:84:c0:d6:8c:c6:75:f4:3f:f0:b5:
                    86:1a:09:37:71:64:fd:b0:ef:39:e3:d5:53:56:45:
                    24:a4:1f:7a:3b:c3:9d:94:f8:52:01:2a:b4:2a:04:
                    46:79:20:6f:b0:d7:2c:9a:01:37:e3:18:3e:dc:19:
                    b4:5f:4a:a7:51:36:82:29:be:4b:e6:64:c4:80:72:
                    71:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EC:47:E4:0E:FD:81:1F:CA:03:0E:6D:C9:68:9F:15:24:8D:B5:96
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/44d6bbd382e72db716526eeca966e12ca34b5073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:11::/48
                  2801:151:37::/48
                  2801:151:39::/48
                  2801:151:3c::/47
                  2801:151:45::/48
                  2801:151:4b::/48
                  2801:151:51::-2801:151:53:ffff:ffff:ffff:ffff:ffff
                  2801:151:57::-2801:151:5a:ffff:ffff:ffff:ffff:ffff
                  2801:151:60::/48
                  2801:151:66::/48
                  2801:151:a2::-2801:151:a4:ffff:ffff:ffff:ffff:ffff
                  2801:151:c3::-2801:151:c5:ffff:ffff:ffff:ffff:ffff
                  2801:151:ea::/48
                  2801:151:f9::/48
                  2801:151:fb::/48
                  2801:151:103::/48
                  2801:151:105::/48
                  2801:151:107::/48
                  2801:151:109::-2801:151:10a:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         1f:25:fa:3f:14:d8:8e:e6:c7:27:a6:e1:c6:72:3b:dd:4e:7a:
         bc:2f:9a:b1:05:ee:d3:fc:d8:0d:f9:43:c5:8c:d8:81:5d:3a:
         d3:ee:60:75:0f:ce:78:19:f4:c4:f3:61:f8:3a:28:ad:a5:3e:
         dc:22:b8:db:a0:10:22:fc:bc:22:6a:1d:7b:8e:10:94:13:2f:
         d4:f0:5b:76:f7:8e:bd:23:d0:f3:2c:5d:4c:56:12:dc:4a:4e:
         1d:10:90:68:4c:d2:2a:38:0f:6c:ea:bb:1e:d1:c6:15:2d:0a:
         56:ee:2c:ca:e5:c5:45:31:64:dc:4b:ab:66:e7:ee:04:d5:84:
         6f:15:76:12:03:8f:f6:2a:4b:19:4d:d2:30:e7:56:b2:17:ec:
         79:f2:98:e5:fa:9f:e4:6f:d3:aa:5d:a5:62:f7:c2:ae:da:18:
         d1:5d:04:32:a1:0e:46:f7:1a:d1:ba:6c:98:36:b3:8f:19:2a:
         53:34:f4:dc:f9:5b:88:0f:a2:ec:67:98:a5:6e:35:b6:54:6f:
         e8:2f:80:d2:b1:ed:c5:05:41:b6:a9:75:c9:4b:f6:18:cc:d4:
         e3:ae:d1:db:ab:2d:cf:92:2f:be:30:14:b8:8e:13:27:38:25:
         6f:45:f4:f5:05:ea:32:a7:d3:c4:b9:a9:16:29:40:8b:81:52:
         f4:54:3f:09
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgIDDPRwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVi
N2RiYjE0ODJiNDcwNWM0MTE1ZjQ2OThkMDE4NzUwMDcwYmNlY2IwHhcNMjIwNDE2
MDMwMDAwWhcNMjUwNDMwMDMwMDAwWjAzMTEwLwYDVQQDEyg0NGQ2YmJkMzgyZTcy
ZGI3MTY1MjZlZWNhOTY2ZTEyY2EzNGI1MDczMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoDwrT5ryCkKC7Xj+n4meAlEH1M1OWy5e4rE2xBPSlQbdsfwT
NpGRLEm4ZAfZav5ouk/NT4q1Ddi609i3Oa1bjbN7e2XJRgAUccwXXkp2sbXpB6o4
MIKJzP5PNdz3eT+oZ2EO0TgfrP3b3RjiukRXEsdD1DAR/ybL3NWBXjQD6bVQ2zG+
qsH08Klo1Cxf6Juf59vmDHtTum1A582pFA4bUznCpvVTW27zzV/4j/hWIG1gd9X1
cud80YTA1ozGdfQ/8LWGGgk3cWT9sO8549VTVkUkpB96O8OdlPhSASq0KgRGeSBv
sNcsmgE34xg+3Bm0X0qnUTaCKb5L5mTEgHJxkwIDAQABo4IDPDCCAzgwHQYDVR0O
BBYEFHnsR+QO/YEfygMObclonxUkjbWWMB8GA1UdIwQYMBaAFCs7rHKdDqdCH724
kNkjvaR318opMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWI3ZGJi
MTQ4MmI0NzA1YzQxMTVmNDY5OGQwMTg3NTAwNzBiY2VjYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDQ5ZWNjMTktYzI5MS00ZmNmLTk2OTctNGE5NjY5
YjMwZTgwLzQ0ZDZiYmQzODJlNzJkYjcxNjUyNmVlY2E5NjZlMTJjYTM0YjUwNzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NDllY2MxOS1jMjkxLTRmY2YtOTY5Ny00YTk2
NjliMzBlODAvNWI3ZGJiMTQ4MmI0NzA1YzQxMTVmNDY5OGQwMTg3NTAwNzBiY2Vj
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB/wYIKwYBBQUHAQcBAf8E
ge8wgewwgekEAgACMIHiAwcAKAEBUQARAwcAKAEBUQA3AwcAKAEBUQA5AwcBKAEB
UQA8AwcAKAEBUQBFAwcAKAEBUQBLMBIDBwAoAQFRAFEDBwIoAQFRAFAwEgMHACgB
AVEAVwMHACgBAVEAWgMHACgBAVEAYAMHACgBAVEAZjASAwcBKAEBUQCiAwcAKAEB
UQCkMBIDBwAoAQFRAMMDBwEoAQFRAMQDBwAoAQFRAOoDBwAoAQFRAPkDBwAoAQFR
APsDBwAoAQFRAQMDBwAoAQFRAQUDBwAoAQFRAQcwEgMHACgBAVEBCQMHACgBAVEB
CjANBgkqhkiG9w0BAQsFAAOCAQEAHyX6PxTYjubHJ6bhxnI73U56vC+asQXu0/zY
DflDxYzYgV060+5gdQ/OeBn0xPNh+DooraU+3CK426AQIvy8Imode44QlBMv1PBb
dveOvSPQ8yxdTFYS3EpOHRCQaEzSKjgPbOq7HtHGFS0KVu4syuXFRTFk3EurZufu
BNWEbxV2EgOP9ipLGU3SMOdWshfsefKY5fqf5G/Tql2lYvfCrtoY0V0EMqEORvca
0bpsmDazjxkqUzT03PlbiA+i7GeYpW41tlRv6C+A0rHtxQVBtql1yUv2GMzU467R
26stz5IvvjAUuI4TJzglb0X09QXqMqfTxLmpFilAi4FS9FQ/CQ==
-----END CERTIFICATE-----