Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e76395a3e72260f2122314a187d5fd788d95cecd.roa
File:                     e76395a3e72260f2122314a187d5fd788d95cecd.roa (raw, json)
Hash identifier:          KukiMdSRIgoLmr5LTETSo2TpOquiBnI134YMTGYTVxY=
Subject key identifier:   36:EE:19:21:2C:D2:54:03:FE:7F:B1:A8:BC:16:33:7B:CC:87:41:F9
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       0E443F
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e76395a3e72260f2122314a187d5fd788d95cecd.roa
Signing time:             Wed 19 Apr 2023 17:57:33 +0000
ROA not before:           Tue 18 Apr 2023 17:57:33 +0000
ROA not after:            Sat 19 Apr 2025 17:57:33 +0000
asID:                     271891
IP address blocks:        2801:151:3c::/48 maxlen: 48
                          2801:151:52::/48 maxlen: 48
                          2801:151:a2::/48 maxlen: 48
                          2801:151:58::/48 maxlen: 48
                          2801:151:c4::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934975 (0xe443f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Apr 18 17:57:33 2023 GMT
            Not After : Apr 19 17:57:33 2025 GMT
        Subject: CN=e76395a3e72260f2122314a187d5fd788d95cecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:95:a8:df:2c:a8:c1:43:0c:1a:d8:e9:2a:aa:
                    40:b2:63:cf:e7:69:4f:69:d5:f1:38:ef:19:75:38:
                    6a:f2:0e:81:1b:de:95:04:d6:17:1c:63:cd:95:ea:
                    3b:57:ef:6c:ef:b4:fc:26:0e:31:27:ae:c2:19:3a:
                    09:4a:01:39:e2:99:d8:97:fb:58:54:a1:bc:f4:fc:
                    76:36:2d:10:20:c4:16:2a:2a:88:74:c2:11:e1:8e:
                    10:95:36:8b:e1:19:c1:f2:ab:83:69:ce:a8:4c:6b:
                    78:28:2f:b7:8c:33:ae:ae:2d:8c:7b:c3:1a:42:b3:
                    01:5f:09:37:99:97:b9:37:2c:a2:b1:4e:6e:31:3d:
                    c2:9e:a4:d8:83:95:71:d4:ad:8f:b7:dd:64:35:32:
                    13:ed:ab:76:16:e1:07:64:0a:dc:d7:35:58:e8:e9:
                    06:ad:53:fa:1e:07:2a:82:dd:a7:7e:0b:b0:ae:8a:
                    38:45:f9:a2:3a:c5:a8:f9:7a:50:dd:fd:aa:52:70:
                    33:10:7c:74:e4:de:d2:c0:a8:19:17:4c:e5:a4:20:
                    cd:58:31:3b:43:cf:b1:98:c9:b5:59:eb:6e:0c:75:
                    ca:f2:87:f5:6f:fd:b2:ef:5a:49:43:eb:f8:b3:02:
                    74:e0:d2:72:9d:a0:bc:87:a2:a6:4e:f4:8a:6d:6c:
                    99:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EE:19:21:2C:D2:54:03:FE:7F:B1:A8:BC:16:33:7B:CC:87:41:F9
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e76395a3e72260f2122314a187d5fd788d95cecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:3c::/48
                  2801:151:52::/48
                  2801:151:58::/48
                  2801:151:a2::/48
                  2801:151:c4::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:92:85:a8:08:0b:d1:27:94:19:f0:9e:e8:3e:bd:cb:c7:70:
         5c:a7:05:22:1a:02:30:d7:38:92:eb:ad:49:53:f9:74:b6:75:
         ae:23:e9:82:60:ca:67:53:a1:4a:15:22:1b:46:eb:5e:53:6a:
         14:77:e9:20:65:38:6c:ca:9c:30:6d:17:c9:1b:26:12:47:29:
         46:1a:d0:cd:6c:59:6e:00:56:bf:4c:2a:9f:2c:57:9c:5e:22:
         ce:e5:97:b8:fe:f7:f6:f1:b1:e5:98:4a:a3:52:75:e9:69:73:
         0b:5a:b6:01:7e:47:f1:b5:f2:02:99:6e:4d:78:d0:75:90:3c:
         23:1f:f1:c9:44:8f:91:d4:42:8a:52:e3:08:7b:97:2f:80:55:
         aa:76:75:95:f5:d7:63:2a:51:dd:6b:7c:8a:d0:66:33:99:c7:
         eb:b9:71:c2:c8:c0:59:a0:8b:38:00:0c:b8:70:2a:ac:11:37:
         a4:c2:02:33:e2:61:21:62:99:d8:c6:bd:ef:67:29:13:ed:7e:
         51:b0:c0:65:b6:64:7e:71:b0:0f:82:f1:4c:d2:c9:57:6d:83:
         f2:2c:1f:ed:44:b9:c6:7c:11:8a:c7:3c:1f:b1:c2:31:ad:a4:
         13:86:d8:8d:6a:31:3c:a8:98:6e:86:5e:ec:93:f9:ea:f4:1e:
         b1:63:b0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----