Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/4bf05821a67af7a189740f6c8dfde64fdb7f8652.roa
File:                     4bf05821a67af7a189740f6c8dfde64fdb7f8652.roa (raw, json)
Hash identifier:          Mw62EYadRRX6AstmH84jBMlD4jrVbJK/IubKqIUWkGw=
Subject key identifier:   EB:A0:80:CE:4E:A2:54:A8:F8:C8:70:70:A5:FB:CC:2D:CE:E0:17:2E
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       0E4745
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/4bf05821a67af7a189740f6c8dfde64fdb7f8652.roa
Signing time:             Wed 19 Apr 2023 18:08:26 +0000
ROA not before:           Tue 18 Apr 2023 18:08:26 +0000
ROA not after:            Sat 19 Apr 2025 18:08:26 +0000
asID:                     271891
IP address blocks:        2801:151:59::/48 maxlen: 48
                          2801:151:c5::/48 maxlen: 48
                          2801:151:53::/48 maxlen: 48
                          2801:151:a3::/48 maxlen: 48
                          2801:151:3d::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 935749 (0xe4745)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Apr 18 18:08:26 2023 GMT
            Not After : Apr 19 18:08:26 2025 GMT
        Subject: CN=4bf05821a67af7a189740f6c8dfde64fdb7f8652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8d:7c:44:d2:4b:86:af:b7:98:30:22:92:a0:
                    ce:89:09:b7:98:b3:bf:2a:bf:7b:40:a2:2b:3c:d3:
                    9e:c5:71:ce:03:d9:f9:e7:e7:d3:6f:d7:45:41:7f:
                    de:58:8a:c5:ad:a1:d6:4c:e2:0b:27:87:fb:17:23:
                    f4:8d:c9:c7:48:b9:af:d0:30:31:36:52:a7:33:ba:
                    4b:ea:85:67:90:9e:78:6b:11:de:df:51:1d:2d:45:
                    78:92:cd:13:86:21:41:0a:dd:90:70:29:4f:74:74:
                    24:8f:9a:bd:d6:79:ca:4a:0a:00:23:ed:38:71:37:
                    0e:ea:d1:e3:e7:37:ae:0e:8a:2b:87:37:bb:ff:72:
                    3e:03:3f:79:51:20:da:e1:9c:56:da:ba:0e:c3:b7:
                    1e:35:9d:2c:b7:9f:f6:04:57:57:99:08:e7:0c:17:
                    74:60:e3:83:59:04:19:e2:53:fd:24:05:18:28:38:
                    1d:f3:45:f0:ce:a8:61:cf:4e:26:43:1f:1e:fb:0e:
                    17:ea:de:22:4c:19:1c:37:6f:ae:ae:e6:e7:e2:1d:
                    76:56:8e:2e:da:51:4a:70:3d:2d:be:8c:e5:15:06:
                    79:01:32:cb:77:d7:bc:41:5f:30:08:09:93:df:18:
                    72:fd:e0:25:5d:7d:b7:d2:4e:eb:57:81:ee:09:51:
                    c9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A0:80:CE:4E:A2:54:A8:F8:C8:70:70:A5:FB:CC:2D:CE:E0:17:2E
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/4bf05821a67af7a189740f6c8dfde64fdb7f8652.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:3d::/48
                  2801:151:53::/48
                  2801:151:59::/48
                  2801:151:a3::/48
                  2801:151:c5::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:be:8f:7b:84:0a:ab:eb:f3:cb:06:30:ed:70:c4:9d:e6:b5:
         72:6b:fa:be:1e:f2:98:4a:da:a3:08:c3:25:0e:be:bc:44:99:
         1c:bd:90:ee:e2:84:88:ba:6d:70:ac:2a:69:28:04:70:7b:ac:
         23:93:99:73:ee:bd:cd:65:7c:ff:62:04:c0:c6:df:ec:fe:2c:
         33:3c:d1:f5:b6:c1:4d:76:07:db:6f:6d:82:43:f5:58:c5:40:
         c9:53:e7:62:18:e2:e2:a0:82:df:e3:a4:69:36:73:45:1a:36:
         94:6c:7f:89:c2:2c:dc:19:a0:38:8d:83:0f:8f:b2:b0:6f:14:
         de:23:2f:d2:c1:09:60:08:1c:b4:57:ef:69:3b:3c:60:70:69:
         01:88:d6:cc:4c:fa:dd:11:1a:b6:eb:32:49:1b:b0:5c:38:20:
         bd:aa:3f:ea:a3:f5:c7:06:80:55:7c:c0:b2:ae:3a:5f:0d:78:
         e3:2d:25:f6:8b:ad:e9:cc:ee:8e:3a:2a:96:32:d5:b1:d7:5a:
         a6:be:d0:44:ce:df:a1:b4:04:a5:19:f8:9a:e3:c5:ac:b7:42:
         8e:bf:14:6f:d8:9f:26:0c:4b:ff:df:44:d4:c5:be:ea:40:b8:
         c5:8c:23:49:62:e4:83:f2:19:4a:e8:9a:3b:b9:3f:3a:c6:8b:
         27:fd:d9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----