Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e4b41afb19ea38f251f847e9ab8e02192f2bd8ea.roa
File:                     e4b41afb19ea38f251f847e9ab8e02192f2bd8ea.roa (raw, json)
Hash identifier:          zXqmQH3SMermsujQTgLL9OiaHtdkBYRbo7LTrCyp9/c=
Subject key identifier:   18:A9:50:BD:B1:56:04:C2:0D:4C:BD:22:E9:17:72:45:0A:B0:C4:56
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       07F048
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e4b41afb19ea38f251f847e9ab8e02192f2bd8ea.roa
Signing time:             Wed 07 Sep 2022 21:05:57 +0000
ROA not before:           Wed 20 Jul 2022 03:00:00 +0000
ROA not after:            Wed 30 Apr 2025 03:00:00 +0000
asID:                     271891
IP address blocks:        2801:151:11::/48 maxlen: 48
                          2801:151:57::/48 maxlen: 48
                          2801:151:58::/48 maxlen: 48
                          2801:151:59::/48 maxlen: 48
                          2801:151:2a::/48 maxlen: 48
                          2801:151:a3::/48 maxlen: 48
                          2801:151:a4::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 520264 (0x7f048)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Jul 20 03:00:00 2022 GMT
            Not After : Apr 30 03:00:00 2025 GMT
        Subject: CN=e4b41afb19ea38f251f847e9ab8e02192f2bd8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c3:42:82:ea:6a:b3:98:a2:73:c9:0a:94:b6:
                    ef:db:64:92:a4:f9:d2:25:71:2d:85:c7:65:02:77:
                    ec:e4:e8:b7:66:47:7e:3b:1b:1f:72:e4:e7:1b:21:
                    52:92:fb:f0:90:58:97:4a:05:7f:8f:7a:c9:90:9d:
                    18:b5:54:e5:cd:04:f3:4e:ff:a2:ca:65:84:16:a0:
                    83:87:1f:cd:52:46:a0:07:c6:8a:21:31:ec:7f:cf:
                    10:bc:1f:fb:f7:98:95:4f:84:61:f8:ae:a4:7d:59:
                    ff:30:3e:a5:30:5f:c1:61:a5:f5:4c:95:39:74:80:
                    4f:70:64:39:e6:1d:f9:25:5b:b2:2b:8f:98:ed:ca:
                    3d:2a:14:51:37:4d:db:d4:32:39:bc:c7:e0:4a:e3:
                    cf:8a:82:66:9b:72:2e:89:79:e4:d5:60:80:34:10:
                    2b:ee:bd:e7:90:e2:b3:07:b7:ab:26:ec:59:3b:19:
                    3c:e8:7d:e1:07:d7:ce:31:38:08:14:48:12:e1:b2:
                    24:7c:7b:2a:b7:7d:4a:70:bb:ef:b4:25:63:bf:ae:
                    51:f0:e3:d5:24:d8:b5:4c:8d:ea:83:de:0d:26:66:
                    81:08:bd:7b:f6:0a:e0:5a:4f:2a:ab:b7:f7:4c:6b:
                    5d:79:ab:f1:56:30:13:80:96:ca:e1:f6:64:64:e0:
                    ee:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A9:50:BD:B1:56:04:C2:0D:4C:BD:22:E9:17:72:45:0A:B0:C4:56
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e4b41afb19ea38f251f847e9ab8e02192f2bd8ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:11::/48
                  2801:151:2a::/48
                  2801:151:57::-2801:151:59:ffff:ffff:ffff:ffff:ffff
                  2801:151:a3::-2801:151:a4:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         55:4d:ea:32:f3:a9:aa:97:59:c9:27:75:aa:75:73:a4:0d:17:
         9b:ec:7c:d6:06:30:89:e3:09:c2:cf:bf:92:2f:de:e3:9e:5f:
         eb:24:48:ed:9d:44:74:43:55:68:78:c7:ee:58:97:4c:d2:34:
         d8:ed:3b:7d:ea:fb:5b:ca:60:7f:6a:5e:c8:69:f4:34:7e:39:
         03:26:5a:e6:90:42:da:86:30:da:e5:b9:b8:26:40:da:e7:e7:
         7c:8f:b1:02:ff:fc:86:ea:50:5c:a0:e2:2d:42:37:01:e2:87:
         5a:8c:64:2c:8d:2b:7d:5b:7f:96:87:7f:e6:20:67:96:48:cb:
         b0:aa:28:0a:8d:13:61:8c:04:64:46:1f:1b:10:aa:df:52:ca:
         6b:42:e6:1b:e3:3c:ea:1e:ae:34:ea:7d:e1:a7:7a:b2:95:fb:
         1b:a3:f7:4f:06:0f:3c:e8:24:48:31:d3:25:8d:e1:36:4d:81:
         8f:42:49:ff:0f:21:bb:a4:ee:3f:5b:bd:fd:73:9b:c1:0f:7e:
         50:2e:65:02:3d:78:d4:ee:9a:41:b3:13:4d:4f:8e:7f:23:71:
         89:25:b0:30:ff:05:32:e6:fb:d3:5e:e5:c3:db:73:5d:29:0e:
         f2:eb:28:09:50:aa:ed:88:b9:7e:6d:cb:e9:20:4a:55:3f:5b:
         eb:9f:14:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----