Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/57889645ee0c0aaa4fd60c05e26e45afc40c9574.roa
File:                     57889645ee0c0aaa4fd60c05e26e45afc40c9574.roa (raw, json)
Hash identifier:          cD3QCoQ7JCG3I72TZknh/OJTK/6EzSx51XvD6Lm+k2Y=
Subject key identifier:   3C:97:4A:49:E5:76:60:63:4B:31:E2:5E:7B:86:12:1A:DE:68:16:D2
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       13E924
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/57889645ee0c0aaa4fd60c05e26e45afc40c9574.roa
Signing time:             Mon 01 Nov 2021 15:22:33 +0000
ROA not before:           Mon 01 Nov 2021 15:22:32 +0000
ROA not after:            Sun 01 Nov 2026 15:22:32 +0000
asID:                     28000
IP address blocks:        2801:1b8::/47 maxlen: 56

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1304868 (0x13e924)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Nov  1 15:22:32 2021 GMT
            Not After : Nov  1 15:22:32 2026 GMT
        Subject: CN=57889645ee0c0aaa4fd60c05e26e45afc40c9574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:bc:1a:aa:36:a7:29:5f:bb:c1:b8:59:f3:
                    df:7d:b3:31:ba:29:3b:a1:8c:e1:25:9f:f4:16:4d:
                    be:56:41:a9:e4:57:cf:d2:fb:b8:70:7d:2b:5a:73:
                    cb:c2:ab:8a:2d:3c:f4:34:92:67:25:9b:f6:fb:14:
                    6a:7c:cb:6a:aa:ca:02:aa:e3:b3:9f:1c:56:3a:fa:
                    44:a7:0c:19:74:30:f1:7e:00:89:ba:b1:23:e8:be:
                    39:92:d5:de:8d:bb:f3:03:a3:41:52:2f:a3:7a:ff:
                    f5:0b:b6:2e:00:5f:82:bf:5a:e2:ff:22:88:de:1f:
                    6f:91:41:90:ea:2f:2c:fc:bd:4c:db:28:87:4f:60:
                    82:2f:5a:8f:6f:97:d4:91:2a:f6:b4:90:15:78:e1:
                    0b:66:b4:6e:36:db:51:a5:f3:fe:dd:0d:11:5e:00:
                    8c:cd:3d:a0:41:63:c0:c0:e2:4c:65:01:18:07:ca:
                    a9:0b:47:3d:76:24:ea:74:a5:76:77:a3:a7:a8:77:
                    ae:61:e3:a0:5c:8b:cd:e7:ee:ef:ea:20:05:0d:86:
                    b9:7a:d7:0f:0b:37:e0:38:a6:5b:51:cd:8e:d1:36:
                    00:90:a8:ae:b2:8d:02:20:5d:06:c4:da:db:26:c1:
                    93:1f:f6:46:36:e0:68:da:c4:d5:e0:5d:91:22:42:
                    47:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:97:4A:49:E5:76:60:63:4B:31:E2:5E:7B:86:12:1A:DE:68:16:D2
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/57889645ee0c0aaa4fd60c05e26e45afc40c9574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b8::/47

    Signature Algorithm: sha256WithRSAEncryption
         2f:40:04:d1:4f:ba:db:fe:e1:0b:47:78:f9:49:2b:cf:5b:85:
         fd:4f:29:8e:da:99:da:a5:33:81:82:cc:99:de:9c:42:a1:41:
         89:41:c5:e1:72:ea:d5:f2:78:7b:c0:ef:fe:92:32:92:8b:a1:
         24:60:8a:2d:ea:a6:4d:e3:a8:bd:86:c2:33:d6:08:dd:cd:d9:
         f8:7e:12:f0:35:c5:39:fc:b5:73:77:97:a7:ec:af:73:e8:8b:
         19:a5:53:04:c7:03:29:53:57:ff:9e:23:00:65:2c:8b:fb:d4:
         ba:63:f3:f7:fc:33:ef:89:03:f4:cc:6e:e8:0c:56:ed:c6:b9:
         73:64:6e:73:6e:14:53:a0:c8:a6:38:97:12:da:3a:50:d8:60:
         70:ee:2e:bb:79:24:cb:73:48:81:f3:80:68:c2:78:0d:ee:db:
         ca:a9:a3:68:74:db:1d:68:33:23:94:28:58:f1:34:5a:62:d0:
         10:ee:dd:62:33:ed:3a:1c:5e:66:d7:9f:91:45:57:5e:56:ec:
         1e:0c:72:cb:85:37:07:36:63:3a:05:7d:ae:ab:81:bf:f9:3c:
         ce:45:27:92:3d:85:50:ed:ab:eb:57:b3:65:a4:34:3f:0c:80:
         78:57:4e:6f:7d:0d:bb:93:ed:d2:11:ae:96:66:b7:74:05:94:
         0d:8b:ad:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----