Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5a9f7f60-0dda-4f8f-81d2-390cdc5ec1ce/8a4e4932fb8671189b55ce182c5f3f818a8e92ea.roa
File:                     8a4e4932fb8671189b55ce182c5f3f818a8e92ea.roa (raw, json)
Hash identifier:          TpyMtLqATw92FxVZEsL3Mj96CzT5NKVPPN0Q8CEq/1I=
Subject key identifier:   DF:D6:AF:89:E9:99:B0:C2:C1:E7:9F:31:28:C2:CD:A9:BA:F6:8F:9D
Certificate issuer:       /CN=4994ee0e52e1277a1f22a5f986e22d9914db47a9
Certificate serial:       3660
Authority key identifier: 6A:9B:2A:B0:36:CB:DE:68:D8:27:18:43:08:78:B3:79:67:EF:EC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4994ee0e52e1277a1f22a5f986e22d9914db47a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5a9f7f60-0dda-4f8f-81d2-390cdc5ec1ce/8a4e4932fb8671189b55ce182c5f3f818a8e92ea.roa
Signing time:             Mon 06 Mar 2023 19:44:26 +0000
ROA not before:           Sun 26 Feb 2023 19:47:55 +0000
ROA not after:            Sat 01 Mar 2025 19:47:55 +0000
asID:                     19429
IP address blocks:        2801:179::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13920 (0x3660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4994ee0e52e1277a1f22a5f986e22d9914db47a9
        Validity
            Not Before: Feb 26 19:47:55 2023 GMT
            Not After : Mar  1 19:47:55 2025 GMT
        Subject: CN=8a4e4932fb8671189b55ce182c5f3f818a8e92ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1b:90:08:06:0b:ba:9d:05:01:c1:35:20:58:
                    77:15:14:c5:41:ec:ca:7c:9a:bd:39:7d:af:cd:40:
                    ef:7d:7a:0b:0b:2a:2c:81:c7:95:5d:8a:4a:35:a4:
                    26:44:14:27:eb:37:3e:20:b6:c4:b1:53:19:7c:18:
                    6a:00:4a:c0:e1:41:df:9b:8b:c6:0d:f5:04:d1:d5:
                    b5:27:eb:ab:ca:b7:ba:76:db:91:9b:73:f3:77:6c:
                    8a:79:70:02:73:59:f9:4a:6e:64:68:00:a0:e8:0b:
                    95:65:44:54:58:98:0d:3c:2e:b4:b3:af:f6:1f:6d:
                    00:25:57:e3:ae:3c:57:86:98:72:4b:d1:13:d2:b3:
                    f2:23:fc:61:bd:2d:7b:1a:4d:c2:8d:83:25:10:ac:
                    bb:8d:86:f3:46:40:a1:48:9d:21:48:d6:21:bb:50:
                    57:c2:f3:97:d0:19:d2:31:11:1f:a6:10:0a:23:53:
                    af:96:2d:2f:0d:37:76:59:b6:4c:e6:46:3f:8e:e0:
                    f7:5b:5f:14:59:03:7e:d8:af:3c:ec:af:97:c4:aa:
                    0f:b7:fc:86:10:17:a5:11:60:67:a9:34:82:e2:ef:
                    20:7c:7a:4e:aa:31:91:ff:06:ba:3e:8c:d2:cf:46:
                    b5:ad:9b:e3:d0:7f:6c:12:91:d2:ff:41:de:1e:9b:
                    e2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D6:AF:89:E9:99:B0:C2:C1:E7:9F:31:28:C2:CD:A9:BA:F6:8F:9D
            X509v3 Authority Key Identifier:
                keyid:6A:9B:2A:B0:36:CB:DE:68:D8:27:18:43:08:78:B3:79:67:EF:EC:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4994ee0e52e1277a1f22a5f986e22d9914db47a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5a9f7f60-0dda-4f8f-81d2-390cdc5ec1ce/8a4e4932fb8671189b55ce182c5f3f818a8e92ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5a9f7f60-0dda-4f8f-81d2-390cdc5ec1ce/4994ee0e52e1277a1f22a5f986e22d9914db47a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:179::/44

    Signature Algorithm: sha256WithRSAEncryption
         21:c7:69:62:a1:1f:84:9d:7e:8b:96:2e:ef:0c:db:94:7e:b4:
         d4:19:35:b3:9b:9f:3d:ec:3d:48:81:93:d3:bb:0b:ec:b2:3b:
         f7:0a:f0:1d:e7:a7:87:68:43:f2:02:9d:c8:66:0a:92:b9:40:
         9a:01:51:2c:67:31:fe:58:28:d8:e1:06:c9:96:9e:85:69:87:
         2c:ea:6f:52:3d:aa:54:35:fa:aa:b4:d3:fe:7d:c7:5e:8d:1e:
         7b:bb:0c:e2:4c:57:fa:25:4c:03:f4:d3:f2:10:86:73:90:21:
         81:b9:3b:a4:15:b9:fd:f0:fb:86:76:d2:7a:45:0c:fd:a1:06:
         22:70:4f:31:da:ff:6c:a3:5b:07:87:c7:6c:e6:21:ab:0c:18:
         c1:f5:3f:a6:d1:75:3d:f6:06:07:6e:ce:a7:24:53:de:67:89:
         07:03:73:71:bb:24:21:2c:f6:0a:80:99:35:e4:66:b0:32:d7:
         ad:a9:a4:f4:ac:86:f0:2e:6c:3a:8e:3b:fd:a8:ff:fb:d8:28:
         fd:44:a9:6d:78:88:31:9e:34:b1:91:eb:7b:73:22:f9:26:a2:
         23:d0:ea:66:89:33:c2:0b:b8:e3:a2:16:48:e0:47:c4:d5:7a:
         b1:b0:33:e8:8a:9f:bf:c3:63:0e:1d:f2:5d:67:9a:56:68:45:
         4c:08:ac:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----