Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/abf738cdf5fa3d1e3327778eb7130727fb978d5c.roa
File:                     abf738cdf5fa3d1e3327778eb7130727fb978d5c.roa (raw, json)
Hash identifier:          nQmvqq+Ml0z/ZFOkpvgTkM0bkapDR4tolH98OoLSlF0=
Subject key identifier:   25:EB:20:2A:6C:EF:E5:8F:80:0C:F1:5B:58:FC:DB:9A:94:E4:2E:45
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       0E8DF6
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/abf738cdf5fa3d1e3327778eb7130727fb978d5c.roa
Signing time:             Thu 27 Apr 2023 22:05:22 +0000
ROA not before:           Wed 26 Apr 2023 22:05:22 +0000
ROA not after:            Sun 27 Apr 2025 22:05:22 +0000
asID:                     271891
IP address blocks:        2801:151:ff::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 953846 (0xe8df6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Apr 26 22:05:22 2023 GMT
            Not After : Apr 27 22:05:22 2025 GMT
        Subject: CN=abf738cdf5fa3d1e3327778eb7130727fb978d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ca:3b:86:dc:56:ac:6c:ac:e3:0b:cc:3b:08:
                    77:11:91:c0:c3:f9:00:35:b2:fa:f7:c2:19:e6:93:
                    83:e3:a5:54:80:a2:95:77:e5:11:e4:9b:ef:e6:11:
                    81:69:3d:97:21:3c:ba:ed:0d:be:c7:a9:3e:92:a5:
                    f1:79:bb:ab:cd:b4:49:f9:5b:86:4c:41:f1:58:ec:
                    da:8c:f4:d4:31:ce:e1:df:3f:a3:0c:63:1c:f7:2f:
                    e1:af:0d:9c:50:b6:d9:74:9d:4e:ef:39:a1:8c:b3:
                    2e:d1:77:c5:83:bf:9d:25:57:75:7e:d0:29:e3:58:
                    12:8b:e7:b6:57:b4:9b:07:b3:93:0a:23:4b:5a:49:
                    6e:96:a4:34:32:98:b6:b6:95:ca:dc:78:a4:cc:a0:
                    67:72:9e:ab:40:d8:6a:5c:1e:12:fb:b4:da:01:bf:
                    12:c1:4a:25:21:fc:26:b6:3d:04:a1:f4:26:a8:d9:
                    e8:39:28:4c:2f:cd:39:72:8c:ea:a9:bc:2d:e9:57:
                    92:1a:f5:9e:44:59:a6:9f:c7:2e:b3:79:63:08:ec:
                    20:12:b6:cf:54:82:28:2e:72:8f:e2:b4:8e:d6:67:
                    45:e3:7d:35:96:d7:87:ac:3b:a8:ca:a7:f4:fa:35:
                    1e:93:84:4e:da:79:4c:1e:1a:1d:ba:67:71:99:e2:
                    40:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EB:20:2A:6C:EF:E5:8F:80:0C:F1:5B:58:FC:DB:9A:94:E4:2E:45
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/abf738cdf5fa3d1e3327778eb7130727fb978d5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:11:0d:95:df:67:cd:9a:20:25:8f:27:d8:38:22:f4:3c:60:
         02:57:ba:13:e0:31:99:97:6c:30:d7:21:4f:6b:1a:83:8f:32:
         ed:97:37:5a:2d:72:54:a4:69:e3:27:70:93:6c:a6:7d:8e:ad:
         03:d1:18:69:d0:40:aa:88:fd:0b:8b:49:0a:b2:8a:ff:48:28:
         70:a8:f2:9e:09:b8:5e:a4:8a:b0:45:1b:1a:90:d6:2b:95:fa:
         ca:39:d9:a1:c6:48:b0:6f:95:fa:b0:c2:d3:83:00:ce:d1:68:
         6c:17:ad:7b:75:6c:e4:a4:b6:e5:e3:57:fb:3b:95:b2:c4:66:
         09:8d:ad:1a:ad:35:22:5b:d5:03:90:d6:9a:1f:b2:b6:d5:61:
         2b:87:5c:7b:2e:bb:a3:ae:c4:32:b0:be:a5:69:ce:1e:10:2a:
         70:6a:77:62:02:6e:85:a2:e1:e4:d7:80:ea:30:36:fb:4f:c0:
         79:c4:96:3a:56:43:62:86:d9:db:12:f4:8e:d3:4d:cc:76:a4:
         59:59:6f:9c:de:01:c3:a4:e4:76:22:e2:5f:b8:d1:66:aa:b8:
         29:ef:95:de:5d:67:7d:72:62:7a:fd:59:ba:fc:db:1f:dd:f1:
         b9:e2:af:36:04:74:69:d2:a3:aa:14:71:43:f1:0f:c7:d1:59:
         2b:a1:9f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----