Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dba84dd-ae5d-4baa-9b17-679a55f42659/f55070800fb7fc98673d361df390ebc01fbfc2f8.roa
File:                     f55070800fb7fc98673d361df390ebc01fbfc2f8.roa (raw, json)
Hash identifier:          wKq3qdS8y9XNYNeAeH7KlB5b0hCO1hosoAGy7D2LdiE=
Subject key identifier:   7F:02:A2:B4:1D:93:74:65:56:D7:C5:2E:E6:ED:73:F1:C9:C6:97:76
Certificate issuer:       /CN=9de7850c99ebea3e5574cd6cb0998b06089c80ae
Certificate serial:       077E
Authority key identifier: CB:94:67:DC:64:53:FD:B1:43:31:D5:79:91:D9:F7:B3:ED:81:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9de7850c99ebea3e5574cd6cb0998b06089c80ae.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dba84dd-ae5d-4baa-9b17-679a55f42659/f55070800fb7fc98673d361df390ebc01fbfc2f8.roa
Signing time:             Mon 11 Apr 2022 14:00:35 +0000
ROA not before:           Mon 11 Apr 2022 03:00:00 +0000
ROA not after:            Thu 11 Apr 2024 03:00:00 +0000
asID:                     272115
IP address blocks:        2801:171::/45 maxlen: 45

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 08:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1918 (0x77e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de7850c99ebea3e5574cd6cb0998b06089c80ae
        Validity
            Not Before: Apr 11 03:00:00 2022 GMT
            Not After : Apr 11 03:00:00 2024 GMT
        Subject: CN=f55070800fb7fc98673d361df390ebc01fbfc2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1d:fc:ea:07:50:d2:c6:3c:f1:19:f5:cf:90:
                    ce:1a:7f:76:27:08:29:81:82:3d:d7:71:1e:5b:ab:
                    d4:03:24:ee:d0:91:45:08:d6:89:49:e3:2d:73:80:
                    3b:f4:50:80:b4:0d:2d:75:c2:ef:1b:8d:07:47:16:
                    54:6c:57:7d:dd:66:9a:e7:ce:df:f5:6e:a3:0a:e7:
                    6b:02:0a:0d:c3:5c:44:bc:4a:ca:cd:50:51:5c:e3:
                    3a:56:9a:17:86:51:c9:d0:26:db:e8:d6:21:93:b8:
                    a6:2b:cc:42:21:fc:e1:d3:74:91:f2:dd:e0:a1:2b:
                    70:2e:23:af:18:b1:c5:32:34:7c:b2:a1:99:c1:66:
                    bd:2c:dc:30:c6:9a:09:5c:02:01:d1:f7:a5:41:b9:
                    cb:2b:d1:62:a0:73:a4:82:4c:f0:b5:2b:14:eb:18:
                    20:d6:d7:f0:de:9c:3e:01:8a:16:ca:7f:bd:9a:6a:
                    9d:d6:f5:b1:5d:08:45:ec:b3:a9:87:e4:5e:6a:44:
                    f0:43:5e:e2:5d:d2:20:73:c3:19:c6:12:e0:4d:9c:
                    15:83:c6:87:dc:8c:2b:e1:cd:85:0e:2c:24:c3:c1:
                    98:44:74:e1:2f:90:f4:4b:17:e5:47:ac:7b:62:3c:
                    f2:66:d2:b9:b5:c0:9d:73:ed:02:cb:e0:bc:40:da:
                    11:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:02:A2:B4:1D:93:74:65:56:D7:C5:2E:E6:ED:73:F1:C9:C6:97:76
            X509v3 Authority Key Identifier:
                keyid:CB:94:67:DC:64:53:FD:B1:43:31:D5:79:91:D9:F7:B3:ED:81:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9de7850c99ebea3e5574cd6cb0998b06089c80ae.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dba84dd-ae5d-4baa-9b17-679a55f42659/f55070800fb7fc98673d361df390ebc01fbfc2f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dba84dd-ae5d-4baa-9b17-679a55f42659/9de7850c99ebea3e5574cd6cb0998b06089c80ae.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:171::/45

    Signature Algorithm: sha256WithRSAEncryption
         a1:6c:fc:b8:48:c3:0a:00:6e:b4:c2:bd:02:34:19:78:f7:50:
         96:1c:c9:4f:45:bf:56:13:ea:67:4b:a6:b2:21:c5:01:a4:73:
         78:7f:c9:41:53:60:e1:51:a5:9b:b6:ce:92:1b:93:4e:cf:91:
         83:07:7d:35:48:cc:ca:c7:e0:2e:ae:84:71:c9:4e:06:62:f2:
         b2:42:62:eb:20:5f:5b:47:cb:09:43:f4:5f:58:40:f2:c4:63:
         86:39:ab:af:7a:e9:78:a6:c2:48:a7:62:cd:c6:e0:f2:70:1c:
         96:8c:d9:23:9e:53:4c:1f:e3:a2:e6:55:e6:6d:cc:0f:34:83:
         fc:30:a1:c9:16:73:da:8e:e2:12:c1:62:ae:e9:7c:d3:3d:3e:
         25:31:8a:c5:80:bf:be:10:a0:94:65:8b:09:16:bc:11:5c:cf:
         ac:20:20:04:c6:11:23:3c:e0:b3:61:0d:f3:a4:d6:b5:93:a1:
         83:18:f8:75:05:be:83:5d:6d:30:78:c6:77:41:a2:c1:06:d2:
         b7:fe:c8:e2:a4:30:cb:e3:90:da:1e:3a:76:be:93:61:bf:1d:
         d0:00:73:d9:68:b5:b1:f7:a6:1e:ed:74:23:c5:56:8f:7d:fa:
         e3:87:c5:cc:2e:91:df:66:b1:01:e0:16:3d:5f:c9:f7:4e:05:
         35:43:9a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----