Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5a9f7f60-0dda-4f8f-81d2-390cdc5ec1ce/63e469d731a18da40448318313f3ddf22b2c3730.roa
File:                     63e469d731a18da40448318313f3ddf22b2c3730.roa (raw, json)
Hash identifier:          MX3A0HI2rq7CKNuDUO5q6tfkt5BtOeCg8WBIB7pcCJQ=
Subject key identifier:   C5:30:CD:BD:87:3D:89:9C:94:ED:1D:07:7F:34:21:B8:A1:83:4C:D9
Certificate issuer:       /CN=4994ee0e52e1277a1f22a5f986e22d9914db47a9
Certificate serial:       1493
Authority key identifier: 6A:9B:2A:B0:36:CB:DE:68:D8:27:18:43:08:78:B3:79:67:EF:EC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4994ee0e52e1277a1f22a5f986e22d9914db47a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5a9f7f60-0dda-4f8f-81d2-390cdc5ec1ce/63e469d731a18da40448318313f3ddf22b2c3730.roa
Signing time:             Thu 02 Mar 2023 19:25:31 +0000
ROA not before:           Mon 27 Feb 2023 19:47:55 +0000
ROA not after:            Sat 01 Mar 2025 19:47:55 +0000
asID:                     14429
IP address blocks:        2801:179::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5267 (0x1493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4994ee0e52e1277a1f22a5f986e22d9914db47a9
        Validity
            Not Before: Feb 27 19:47:55 2023 GMT
            Not After : Mar  1 19:47:55 2025 GMT
        Subject: CN=63e469d731a18da40448318313f3ddf22b2c3730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d9:bd:d5:77:33:b5:83:d8:c0:d7:e3:12:32:
                    fd:5e:cb:04:fd:2c:64:9b:4d:46:92:21:27:b8:cc:
                    6b:cf:dd:7f:83:c6:12:81:15:be:55:1d:5b:f0:a1:
                    a6:63:d4:5c:e8:18:8b:6b:a3:36:6c:df:d6:79:a6:
                    0e:5e:8e:b0:5c:d3:f6:88:aa:d7:42:c3:a8:82:12:
                    e3:c2:2b:de:be:c3:ca:02:15:7a:c1:02:53:23:b7:
                    dc:d1:d4:c6:92:44:de:a1:24:14:38:35:d2:7a:05:
                    b1:a6:b8:c2:7f:2c:08:ad:d7:97:80:09:c1:02:4d:
                    ea:f3:e8:35:c3:1b:b4:e6:f9:d6:cc:15:99:2d:eb:
                    1d:62:59:2e:fc:98:ed:99:eb:78:75:b9:91:e6:5b:
                    9b:12:77:aa:8b:ac:8a:38:5f:fa:35:19:1b:83:23:
                    a7:6a:1d:98:cf:40:c2:2d:ea:a2:58:1a:e6:bc:73:
                    b9:51:f7:4f:5c:06:c4:de:ef:72:34:8a:07:1c:c6:
                    83:8b:d2:b8:9f:f5:59:e8:58:fa:3b:bf:99:ff:70:
                    70:68:42:7d:14:bf:f0:dd:df:32:36:6b:a2:fc:e0:
                    0a:65:92:83:2e:d6:2d:24:9b:92:a2:7c:8d:6e:49:
                    50:55:1e:1d:0b:fc:dd:b3:93:f9:e3:04:a1:e1:56:
                    c9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:30:CD:BD:87:3D:89:9C:94:ED:1D:07:7F:34:21:B8:A1:83:4C:D9
            X509v3 Authority Key Identifier:
                keyid:6A:9B:2A:B0:36:CB:DE:68:D8:27:18:43:08:78:B3:79:67:EF:EC:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4994ee0e52e1277a1f22a5f986e22d9914db47a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5a9f7f60-0dda-4f8f-81d2-390cdc5ec1ce/63e469d731a18da40448318313f3ddf22b2c3730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5a9f7f60-0dda-4f8f-81d2-390cdc5ec1ce/4994ee0e52e1277a1f22a5f986e22d9914db47a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:179::/44

    Signature Algorithm: sha256WithRSAEncryption
         0e:52:e9:3d:b0:c6:80:c3:c5:40:e7:8b:0c:5a:c7:a6:7d:94:
         71:f6:5b:a9:1a:d2:22:2f:c1:02:6f:23:ef:42:05:56:4d:8d:
         f6:f1:6c:09:12:7a:19:89:57:d9:89:46:08:45:fa:0e:1d:ea:
         06:73:7f:a5:30:8c:21:d7:c5:7c:b4:80:a5:d8:72:c9:7f:ce:
         3e:85:f7:af:09:5e:5b:79:75:e6:88:13:cb:38:98:38:92:b2:
         58:e7:e9:0f:a7:99:92:9a:f4:dc:e5:73:50:86:db:bb:12:5d:
         8e:8e:91:8e:12:fc:a9:dd:c8:27:7c:b7:f6:2d:e8:81:50:3a:
         6c:12:c9:09:95:3c:15:07:4f:4f:8b:e5:9c:51:61:22:ee:b0:
         9e:f9:07:1d:35:0e:e9:0a:31:d5:99:28:03:ab:4e:bb:45:15:
         a5:9b:d8:51:76:cc:7d:21:af:1e:38:51:dc:d0:ec:00:d5:ba:
         17:25:2f:70:39:49:80:de:ed:0e:35:ba:fd:75:a2:a4:82:75:
         e1:b7:08:f7:a4:43:c0:d8:ea:a6:14:a0:82:46:5c:34:99:5f:
         41:87:a0:ce:14:d6:45:41:05:d5:84:65:ff:ab:2d:99:e0:7a:
         dd:1c:b5:f2:c0:6b:7e:fb:e5:41:d7:05:40:b6:e2:60:bd:05:
         98:16:07:33
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICFJMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk5
NGVlMGU1MmUxMjc3YTFmMjJhNWY5ODZlMjJkOTkxNGRiNDdhOTAeFw0yMzAyMjcx
OTQ3NTVaFw0yNTAzMDExOTQ3NTVaMDMxMTAvBgNVBAMTKDYzZTQ2OWQ3MzFhMThk
YTQwNDQ4MzE4MzEzZjNkZGYyMmIyYzM3MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCw2b3VdzO1g9jA1+MSMv1eywT9LGSbTUaSISe4zGvP3X+DxhKB
Fb5VHVvwoaZj1FzoGItrozZs39Z5pg5ejrBc0/aIqtdCw6iCEuPCK96+w8oCFXrB
AlMjt9zR1MaSRN6hJBQ4NdJ6BbGmuMJ/LAit15eACcECTerz6DXDG7Tm+dbMFZkt
6x1iWS78mO2Z63h1uZHmW5sSd6qLrIo4X/o1GRuDI6dqHZjPQMIt6qJYGua8c7lR
909cBsTe73I0igccxoOL0rif9VnoWPo7v5n/cHBoQn0Uv/Dd3zI2a6L84AplkoMu
1i0km5KifI1uSVBVHh0L/N2zk/njBKHhVskTAgMBAAGjggJeMIICWjAdBgNVHQ4E
FgQUxTDNvYc9iZyU7R0HfzQhuKGDTNkwHwYDVR0jBBgwFoAUapsqsDbL3mjYJxhD
CHizeWfv7BQwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS80OTk0ZWUw
ZTUyZTEyNzdhMWYyMmE1Zjk4NmUyMmQ5OTE0ZGI0N2E5LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy81YTlmN2Y2MC0wZGRhLTRmOGYtODFkMi0zOTBjZGM1
ZWMxY2UvNjNlNDY5ZDczMWExOGRhNDA0NDgzMTgzMTNmM2RkZjIyYjJjMzczMC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzVhOWY3ZjYwLTBkZGEtNGY4Zi04MWQyLTM5MGNk
YzVlYzFjZS80OTk0ZWUwZTUyZTEyNzdhMWYyMmE1Zjk4NmUyMmQ5OTE0ZGI0N2E5
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw
ETAPBAIAAjAJAwcEKAEBeQAAMA0GCSqGSIb3DQEBCwUAA4IBAQAOUuk9sMaAw8VA
54sMWsemfZRx9lupGtIiL8ECbyPvQgVWTY328WwJEnoZiVfZiUYIRfoOHeoGc3+l
MIwh18V8tICl2HLJf84+hfevCV5beXXmiBPLOJg4krJY5+kPp5mSmvTc5XNQhtu7
El2OjpGOEvyp3cgnfLf2LeiBUDpsEskJlTwVB09Pi+WcUWEi7rCe+QcdNQ7pCjHV
mSgDq067RRWlm9hRdsx9Ia8eOFHc0OwA1boXJS9wOUmA3u0ONbr9daKkgnXhtwj3
pEPA2OqmFKCCRlw0mV9Bh6DOFNZFQQXVhGX/qy2Z4HrdHLXywGt+++VB1wVAtuJg
vQWYFgcz
-----END CERTIFICATE-----