Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/262b5fe2bf55c91fc87ce3a688980dd41277c1e2.roa
File:                     262b5fe2bf55c91fc87ce3a688980dd41277c1e2.roa (raw, json)
Hash identifier:          u3nblfqpGC0Y5Eeo8lw7m9rnZwRsTKo+KO5fgbW8vq4=
Subject key identifier:   6E:DB:E3:AD:84:7B:AC:82:04:45:66:50:1B:4D:71:D2:F2:53:0B:DB
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       191FA0
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/262b5fe2bf55c91fc87ce3a688980dd41277c1e2.roa
Signing time:             Mon 06 Jun 2022 03:30:10 +0000
ROA not before:           Fri 18 Jun 2021 03:00:00 +0000
ROA not after:            Sun 18 Jun 2023 03:00:00 +0000
asID:                     28000
IP address blocks:        2801:1b8::/47 maxlen: 47

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1646496 (0x191fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Jun 18 03:00:00 2021 GMT
            Not After : Jun 18 03:00:00 2023 GMT
        Subject: CN=262b5fe2bf55c91fc87ce3a688980dd41277c1e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:62:b4:1f:45:a9:4f:1b:16:10:07:bc:86:1d:
                    dd:38:ee:1b:d9:84:84:52:b0:39:a9:15:b7:c6:bc:
                    7e:a5:8b:15:2b:54:c9:f3:7a:c9:2d:a9:ab:e3:e0:
                    6d:ca:79:af:a2:7b:99:da:d3:8c:5c:4b:65:b0:b2:
                    69:f7:9b:af:fc:c6:a1:04:03:6d:8b:13:00:6e:26:
                    87:bf:c9:d8:a1:1e:6a:65:46:f9:a4:6a:d8:0c:cc:
                    92:bd:97:91:51:40:57:b4:d4:bf:4d:6d:5d:ab:81:
                    e6:d3:aa:18:0b:b8:f8:a3:68:9e:2d:34:92:ec:c4:
                    60:a2:ab:9b:cd:80:7b:7f:cf:02:b9:fe:20:ee:ad:
                    03:d8:7e:ad:d0:f3:e3:a0:c9:f9:22:a0:ac:1f:9b:
                    21:5f:c5:d4:9d:7b:eb:d3:51:d7:00:28:5f:eb:69:
                    07:ba:65:de:9c:28:f9:b0:32:a7:34:22:11:7f:a0:
                    16:76:3f:e7:dd:f4:4f:e8:9d:0c:d5:46:80:71:58:
                    4e:b8:c5:a7:79:02:56:3c:e3:d4:63:d8:20:45:87:
                    92:e5:8e:b6:75:16:0e:e7:d5:48:4e:c9:d5:44:9a:
                    c2:d8:35:2c:0c:b6:e2:93:54:02:83:0f:ee:79:26:
                    7b:49:da:60:7c:9b:8f:37:58:ed:54:c4:14:0a:f6:
                    50:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DB:E3:AD:84:7B:AC:82:04:45:66:50:1B:4D:71:D2:F2:53:0B:DB
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/262b5fe2bf55c91fc87ce3a688980dd41277c1e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b8::/47

    Signature Algorithm: sha256WithRSAEncryption
         73:e8:63:ac:16:bb:d9:6a:09:2b:c7:66:38:77:d0:d4:be:12:
         6b:95:45:9f:da:cf:dc:3c:80:0a:ca:81:1b:cc:d6:80:2d:49:
         8b:e5:a6:89:e7:86:a5:fa:c6:1e:09:b5:06:53:58:8e:c7:55:
         39:ba:da:4f:74:0e:29:b1:f6:b7:46:4e:50:e1:0f:d3:77:2c:
         c2:12:bf:55:af:f4:2b:27:33:2b:16:47:e8:ad:6e:de:09:67:
         78:82:d8:0c:54:7f:dd:03:03:57:68:f6:0b:00:a9:2e:98:a2:
         82:80:68:e2:c7:dd:ae:35:61:da:3d:59:3c:ab:08:8b:35:4e:
         44:f0:a7:5a:d6:02:41:5c:7e:ee:3d:42:bc:c1:ef:a8:46:46:
         cf:43:cb:a7:b7:05:f0:ca:f8:60:7a:47:ec:b9:4f:e8:82:8b:
         91:60:65:af:31:25:0c:ac:3c:84:d4:1b:79:ba:0f:ba:b3:43:
         d5:98:6a:a5:92:f9:74:4f:bf:6d:2d:7f:11:95:2f:3b:fd:06:
         99:49:0c:bc:b9:0c:a5:b1:21:b2:71:7d:b4:a0:67:76:10:7d:
         5c:54:87:fa:6d:a3:47:df:5d:2a:aa:fd:2a:57:ab:6f:cf:e4:
         08:54:e1:ce:d4:e4:06:a8:14:91:fc:43:bd:42:7e:4e:01:b8:
         2f:37:3f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----