Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c6d3201-6538-49ed-8149-5a7bd4922202/51512321dcbfad13e5bbde0b1e7db785486061b1.roa
File:                     51512321dcbfad13e5bbde0b1e7db785486061b1.roa (raw, json)
Hash identifier:          6yfTP5svwTnlQbV4JbwZFYT3qLMGsEiVat3UC9Mt2Qk=
Subject key identifier:   04:02:98:E0:CF:32:5B:4D:44:21:B4:12:CB:6E:27:7A:01:85:7C:58
Certificate issuer:       /CN=7d1cf578607bddf5774ec2de09aa770ef8e6b54f
Certificate serial:       11C39A
Authority key identifier: D4:C1:53:10:1C:ED:B0:5C:54:4B:7C:47:0F:A8:10:3F:F7:28:BE:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d1cf578607bddf5774ec2de09aa770ef8e6b54f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4c6d3201-6538-49ed-8149-5a7bd4922202/51512321dcbfad13e5bbde0b1e7db785486061b1.roa
Signing time:             Wed 02 Feb 2022 16:22:22 +0000
ROA not before:           Mon 27 Dec 2021 03:00:00 +0000
ROA not after:            Wed 27 Dec 2023 03:00:00 +0000
asID:                     3816
IP address blocks:        2801:14a:c0::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1164186 (0x11c39a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d1cf578607bddf5774ec2de09aa770ef8e6b54f
        Validity
            Not Before: Dec 27 03:00:00 2021 GMT
            Not After : Dec 27 03:00:00 2023 GMT
        Subject: CN=51512321dcbfad13e5bbde0b1e7db785486061b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:87:81:ba:bd:64:da:4d:00:13:d7:1e:cc:83:
                    63:e8:0d:41:b3:ef:f2:16:3b:da:da:bf:75:73:0b:
                    d7:51:17:c7:b9:95:42:c2:89:8f:ed:5e:ac:ab:39:
                    89:a5:72:00:fe:19:b8:17:02:fb:e1:85:9d:f2:95:
                    6d:f9:cc:d6:17:0e:4f:5e:da:8f:2b:9d:f1:34:38:
                    c1:29:d7:e2:7c:cc:08:8f:df:6d:c7:ff:47:50:fa:
                    5f:99:c1:5f:2c:d7:94:e2:a9:50:a1:af:72:9a:12:
                    4a:97:86:2a:98:54:fc:6e:b7:35:2a:7e:2f:ff:50:
                    f1:1a:7d:6a:f7:76:d4:4c:91:c7:ed:2e:7f:d9:da:
                    93:59:2a:be:d4:2b:3e:84:94:1b:a3:48:c5:15:c9:
                    34:02:b1:45:6d:37:be:af:de:b4:f8:42:86:6b:98:
                    d7:e9:45:f9:65:eb:0e:fa:ae:50:7e:95:ea:24:15:
                    0e:2f:ad:e9:1c:00:53:a6:2a:68:b4:1a:29:79:07:
                    3e:48:84:35:e9:38:57:68:3b:a7:a0:43:16:5a:24:
                    99:ed:db:45:76:2a:c8:ef:7d:5b:c0:42:dd:ad:df:
                    cc:fc:5d:df:e2:40:68:c5:3c:4b:88:96:76:9c:76:
                    3a:9e:b5:7e:49:17:10:a5:2b:ff:05:1e:d7:d8:86:
                    a5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:02:98:E0:CF:32:5B:4D:44:21:B4:12:CB:6E:27:7A:01:85:7C:58
            X509v3 Authority Key Identifier:
                keyid:D4:C1:53:10:1C:ED:B0:5C:54:4B:7C:47:0F:A8:10:3F:F7:28:BE:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d1cf578607bddf5774ec2de09aa770ef8e6b54f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c6d3201-6538-49ed-8149-5a7bd4922202/51512321dcbfad13e5bbde0b1e7db785486061b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4c6d3201-6538-49ed-8149-5a7bd4922202/7d1cf578607bddf5774ec2de09aa770ef8e6b54f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14a:c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         2e:4b:a4:bd:ef:cf:0c:f4:23:1b:bd:b9:a7:45:8d:ee:b5:7e:
         48:77:98:b3:04:c4:de:a8:7c:dc:63:6a:61:e3:06:c6:5f:92:
         0d:6d:28:a0:38:9d:68:72:8c:74:42:20:72:fa:71:ad:79:fa:
         0e:04:19:d7:15:1d:28:e4:ce:a2:4c:1c:c4:4a:79:ec:ae:4d:
         c4:40:e6:ad:50:9d:32:10:fb:99:61:1a:93:f7:65:22:58:18:
         5c:bb:6f:a3:b5:68:45:6c:56:8d:57:fa:2b:07:57:7c:33:c8:
         6d:d6:c9:03:a5:60:f2:b4:87:09:04:ff:1d:39:31:8b:e2:83:
         79:a1:1a:02:4a:d8:21:00:93:d7:56:ad:e7:30:81:dd:6e:f3:
         cd:58:0b:e7:26:08:d7:db:2f:1c:f8:3b:12:ab:b1:89:b6:a5:
         24:ae:61:ec:b3:df:93:76:f6:c7:d2:61:5e:cf:ff:2b:86:41:
         15:45:b0:d0:cd:89:a7:81:fe:6e:91:26:81:d1:2e:92:ac:b5:
         e7:a9:19:75:94:e2:17:10:2c:8f:63:61:aa:e7:16:b6:a7:db:
         14:85:df:2f:c1:76:a3:a1:97:83:73:10:75:2d:2d:c9:ac:ff:
         1d:d4:09:8c:38:f4:be:d6:47:3a:db:bb:d9:e9:ea:ad:a3:14:
         ff:13:a3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----