Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/0e2dc789a054d5dd3ffd777a097a7a1ddadf505d.roa
File:                     0e2dc789a054d5dd3ffd777a097a7a1ddadf505d.roa (raw, json)
Hash identifier:          l2zOJ+epJ5ywTNoI6gor/nYPYUhQtFYua411QkDXoe0=
Subject key identifier:   EA:DA:04:11:8E:08:A1:AA:41:53:C1:A4:C8:06:DB:64:59:F6:CD:E4
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       1AA82E
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/0e2dc789a054d5dd3ffd777a097a7a1ddadf505d.roa
Signing time:             Fri 29 Jul 2022 20:05:51 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     28001
IP address blocks:        2801:1b8::/44 maxlen: 47

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1746990 (0x1aa82e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=0e2dc789a054d5dd3ffd777a097a7a1ddadf505d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2c:a1:74:1d:b9:6c:00:15:b9:4b:cf:93:af:
                    8d:e7:7c:66:a7:9e:c3:6c:d5:db:12:97:59:0b:09:
                    80:5d:c2:f7:43:96:9d:25:c5:11:79:18:e2:6b:f1:
                    0e:7b:94:dc:cd:64:e9:52:6b:01:c2:79:33:de:76:
                    7c:a1:28:00:96:af:46:80:ae:f7:05:9c:01:19:c4:
                    d8:c0:88:57:b1:b7:2c:b5:a3:8b:9f:6e:39:7a:ec:
                    89:ab:b4:fd:73:d8:44:17:6b:43:c5:6e:ff:c2:14:
                    1b:c0:83:33:fe:40:e9:cb:b6:ee:ab:be:f4:eb:46:
                    ef:be:ec:f6:88:97:0b:03:20:0f:86:6e:8e:3c:ce:
                    bd:f9:15:2d:6c:76:2a:19:3c:51:97:ec:7a:ac:0d:
                    7e:f1:ca:e3:aa:72:4e:c0:10:94:8a:c2:43:d9:be:
                    64:2c:e5:7a:b5:ad:65:d7:31:81:7b:b6:3b:a2:3d:
                    99:98:d6:91:49:ea:7b:7d:33:1b:bc:a8:16:6d:f1:
                    cf:bb:00:f8:59:8a:3d:c1:a2:e1:18:fe:88:f4:c1:
                    2a:1b:43:fd:97:ea:95:78:c2:a9:7a:50:22:b6:f3:
                    54:d6:53:86:6b:9a:e1:0f:53:de:70:51:fe:07:67:
                    44:a8:a7:ef:3b:23:cd:46:ce:23:b5:ee:c0:40:d1:
                    1f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DA:04:11:8E:08:A1:AA:41:53:C1:A4:C8:06:DB:64:59:F6:CD:E4
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/0e2dc789a054d5dd3ffd777a097a7a1ddadf505d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b8::/44

    Signature Algorithm: sha256WithRSAEncryption
         90:06:f1:b5:f3:e3:1d:d9:31:d6:ac:b7:63:3e:04:2a:f6:6e:
         10:71:a0:e6:6f:ca:85:c3:5e:17:15:47:ed:fe:12:c9:04:99:
         c5:01:99:b2:e4:4a:d0:77:92:53:e1:d5:77:90:be:00:2f:8f:
         ee:ca:77:f7:6b:a2:3a:e6:29:a1:43:2d:cf:fe:08:d7:49:ec:
         da:6c:d4:eb:59:f3:12:80:d3:10:04:43:aa:65:c6:7d:24:f2:
         0b:c7:6c:1c:a6:ab:fc:5c:d6:b6:4b:d1:c7:be:44:33:00:33:
         0c:d2:90:23:f6:e1:80:f5:bd:24:ae:3d:66:5d:0f:51:98:33:
         5e:a6:16:57:9b:c3:f9:08:50:ec:22:a1:2b:b0:91:74:3b:43:
         d1:f9:8e:3f:62:cb:aa:16:ff:84:2c:41:47:e2:67:79:20:aa:
         0f:41:21:8e:e3:44:77:f2:f6:90:ce:6d:34:ea:f0:7a:a2:06:
         8e:31:54:7a:50:41:07:82:50:e7:fc:23:c1:4e:c2:f7:28:5c:
         04:41:3c:42:5f:3a:1d:6d:83:14:4c:f5:9f:4e:38:ec:f5:51:
         50:6a:a6:dc:ae:b1:a0:1e:0d:0d:01:59:bd:0a:a0:80:45:0f:
         75:82:0a:ca:81:cf:94:c1:63:98:74:41:08:32:23:11:8f:d6:
         dd:66:72:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----