Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/163efbe79a0e0a4147934337779658c25cb1abd0.roa
File:                     163efbe79a0e0a4147934337779658c25cb1abd0.roa (raw, json)
Hash identifier:          LTZP+0S8PkX2SvZQ0y6DnAYavOGg9M26RM6uy+c5OPk=
Subject key identifier:   7B:E1:B2:63:BC:C1:09:7A:B3:BF:2B:95:33:EB:C3:2E:92:FE:60:A1
Certificate issuer:       /CN=fc6cb1153f9d2823a345e050aa08a59869c1972e
Certificate serial:       07195A
Authority key identifier: B1:91:4D:1E:D5:69:1F:1F:92:2C:EE:5F:8A:E0:F6:18:CE:1D:37:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6cb1153f9d2823a345e050aa08a59869c1972e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/163efbe79a0e0a4147934337779658c25cb1abd0.roa
Signing time:             Tue 17 Jan 2023 14:52:29 +0000
ROA not before:           Mon 16 Jan 2023 14:46:51 +0000
ROA not after:            Fri 17 Jan 2025 14:46:51 +0000
asID:                     262589
IP address blocks:        2801:1d:8801::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465242 (0x7195a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6cb1153f9d2823a345e050aa08a59869c1972e
        Validity
            Not Before: Jan 16 14:46:51 2023 GMT
            Not After : Jan 17 14:46:51 2025 GMT
        Subject: CN=163efbe79a0e0a4147934337779658c25cb1abd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b6:41:27:30:24:ef:08:55:15:e1:f1:01:3e:
                    e0:46:af:04:57:71:de:33:8f:21:7f:43:14:18:5a:
                    90:c8:a2:41:72:f1:d1:08:ef:15:b6:d1:86:bd:d1:
                    09:56:ac:c7:43:80:b2:66:a1:e0:15:bf:5c:92:c4:
                    a7:fb:64:29:49:55:8e:0f:79:06:8e:94:48:b9:78:
                    b6:eb:b0:67:6b:a6:88:c3:fa:9f:90:fa:42:6d:d0:
                    93:bf:8f:22:8f:f7:bd:73:86:a5:28:3a:bd:49:ad:
                    46:27:94:a5:34:d0:1c:5c:54:cf:a9:5a:02:93:19:
                    25:a7:b1:7e:27:b8:6d:86:9f:36:02:d7:ac:9a:2f:
                    8f:78:a3:47:07:e9:82:4a:40:b4:71:7d:f5:6f:36:
                    4d:28:35:e6:30:b0:7b:57:a6:13:40:0d:3c:26:e5:
                    bd:87:ab:4f:55:3a:57:de:3c:73:dc:21:25:d8:91:
                    0a:78:5b:e5:5c:50:c3:cf:d1:05:e7:61:f3:6e:dc:
                    ca:e1:ec:35:09:a8:3c:46:11:70:b4:62:cf:d8:dd:
                    f7:2c:3d:bc:bb:05:e4:b9:53:05:5f:f2:a4:d0:aa:
                    d2:7f:a6:7e:33:27:1f:fa:50:c6:f9:5c:2c:da:af:
                    d1:4f:5e:d2:74:89:9d:00:13:e2:14:71:41:42:b6:
                    39:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E1:B2:63:BC:C1:09:7A:B3:BF:2B:95:33:EB:C3:2E:92:FE:60:A1
            X509v3 Authority Key Identifier:
                keyid:B1:91:4D:1E:D5:69:1F:1F:92:2C:EE:5F:8A:E0:F6:18:CE:1D:37:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6cb1153f9d2823a345e050aa08a59869c1972e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/163efbe79a0e0a4147934337779658c25cb1abd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/fc6cb1153f9d2823a345e050aa08a59869c1972e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:8801::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:eb:81:ce:9a:8d:05:2b:a1:00:17:63:18:0c:f8:27:00:61:
         18:de:dc:1d:65:6a:19:15:9b:96:42:24:3e:77:6f:d3:ae:43:
         76:1b:ad:0e:4e:57:47:80:cc:f4:e6:1d:b7:58:ea:6c:6b:1f:
         b1:2e:3b:87:9f:75:66:6a:5a:01:b5:e9:b2:70:04:22:6c:78:
         8f:5d:de:88:59:60:f3:b3:fe:4f:4f:95:f1:f3:0f:ba:c1:75:
         5e:8d:d9:9d:66:ff:55:c0:5d:d3:9e:c7:77:87:e5:5b:e5:14:
         98:a8:48:cb:27:12:f2:34:f4:8c:66:bc:01:d6:83:8a:d7:80:
         d2:d4:59:1b:04:9d:df:60:0d:b1:fe:17:bc:d4:4b:48:c1:1a:
         c0:84:87:72:d7:ad:54:18:89:81:53:da:13:4b:e6:07:1c:af:
         5d:70:76:4e:e2:b1:ed:61:6d:12:c0:f7:fd:a2:57:42:bc:a4:
         26:d4:9b:8a:2c:a9:b7:34:5a:84:b2:cf:b9:03:53:36:14:26:
         35:dc:9d:59:73:96:82:db:ad:b2:dc:29:e0:ae:37:da:9d:64:
         6c:08:79:e4:28:24:e3:d1:cc:67:49:17:b2:b0:25:de:8f:03:
         6b:37:69:7d:26:98:13:5f:fe:85:2b:51:0f:ef:84:d1:87:c7:
         b2:5b:37:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----