Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/9d0ec0527f6e31ee084ffea069844170fdc9eee4.roa
File:                     9d0ec0527f6e31ee084ffea069844170fdc9eee4.roa (raw, json)
Hash identifier:          YPRVUvr8inE3VO497Qd61GUs3iATkRQFwloMi3uoSCI=
Subject key identifier:   26:12:FC:A2:69:86:60:03:6A:B7:C1:C0:78:1B:BA:74:52:11:B7:98
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       0E324C
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/9d0ec0527f6e31ee084ffea069844170fdc9eee4.roa
Signing time:             Wed 19 Apr 2023 17:47:06 +0000
ROA not before:           Tue 18 Apr 2023 17:47:06 +0000
ROA not after:            Sat 19 Apr 2025 17:47:06 +0000
asID:                     271891
IP address blocks:        2801:151:ff::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 930380 (0xe324c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Apr 18 17:47:06 2023 GMT
            Not After : Apr 19 17:47:06 2025 GMT
        Subject: CN=9d0ec0527f6e31ee084ffea069844170fdc9eee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:53:4a:45:6e:c8:40:c6:d9:ab:44:4a:90:26:
                    ac:77:34:56:19:7e:b6:2e:65:68:7f:03:2d:ac:ea:
                    80:f9:65:bd:13:f1:5e:3e:48:06:ac:3f:8b:21:e9:
                    5d:4c:2e:a4:d1:0d:36:b3:04:63:b0:37:5d:cd:9a:
                    1c:c8:6d:62:2f:5f:00:59:dd:e6:5f:6e:21:9d:88:
                    72:dc:34:db:39:64:76:50:88:28:fe:d5:51:a8:45:
                    82:22:38:3a:a3:52:a1:f9:7f:08:35:f0:44:a4:85:
                    4a:62:e4:ba:56:25:a5:25:19:97:b1:42:94:d7:f5:
                    bb:82:eb:0c:4c:e2:44:f8:8f:3a:13:f9:40:b4:0c:
                    61:5e:27:a2:fe:f5:9b:31:3f:cc:e2:7e:d4:cc:f9:
                    fe:45:24:2d:f5:be:61:0c:cd:5f:15:26:a7:cb:b5:
                    ac:65:94:a4:fa:f6:d4:98:7f:a0:ce:b0:ee:9c:de:
                    ad:14:81:73:b3:90:45:3e:d0:53:2b:23:3a:3e:74:
                    89:a5:83:73:fa:c9:87:ce:b5:85:43:02:10:68:f0:
                    1a:52:3e:a7:5c:e7:a0:d2:90:30:4d:2c:05:51:9e:
                    93:d0:13:4a:39:89:b8:5c:7c:c1:78:92:2e:ab:1e:
                    29:6d:e8:92:34:71:a9:d6:b3:80:78:16:2e:06:3b:
                    1b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:12:FC:A2:69:86:60:03:6A:B7:C1:C0:78:1B:BA:74:52:11:B7:98
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/9d0ec0527f6e31ee084ffea069844170fdc9eee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:98:57:df:8d:33:bd:90:a0:50:1e:04:2f:1a:4e:db:37:7e:
         bc:17:60:67:59:bb:eb:23:36:45:77:39:c8:91:5f:fc:10:ec:
         ab:18:e8:fe:6c:53:cf:6e:3b:f8:eb:bd:59:39:ba:26:69:59:
         80:04:29:19:f1:45:c4:79:3c:ca:60:4b:55:32:f0:30:8b:8a:
         46:44:00:92:37:80:df:b2:42:95:aa:bd:fe:58:83:e6:f7:e7:
         7e:f9:2d:ab:bf:f5:47:bf:4b:ca:d9:67:23:ea:e4:16:70:a2:
         db:35:ad:38:58:b1:46:8e:8c:2a:db:4d:2a:01:22:43:5e:3e:
         ed:94:8c:0d:ec:f0:39:a3:bc:06:f3:16:99:3c:85:fa:05:47:
         22:04:6e:ee:12:59:e8:b2:51:9e:68:9d:d4:4b:50:f8:4a:fd:
         80:47:53:3a:87:36:50:a3:ab:06:ba:7b:08:5d:42:06:7f:12:
         43:39:80:f9:c7:42:d6:b8:3c:9e:46:14:6e:a8:18:ad:f1:ef:
         a8:82:2b:39:65:1d:08:12:11:4c:1e:bb:a2:15:ea:84:34:53:
         3e:6f:da:f9:4a:bc:e3:05:28:1d:f8:00:c9:38:55:2c:d9:ef:
         9d:0e:0d:90:f2:91:26:60:65:36:4b:32:29:2b:93:98:12:60:
         26:92:b0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----