Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/77bd001cec2efa7d9dd515acc908d8c9e9f6e33c.roa
File:                     77bd001cec2efa7d9dd515acc908d8c9e9f6e33c.roa (raw, json)
Hash identifier:          xMmXQFA7UPkQxtmvRjk0oViHwYmYSE5/SZzkCHFczBw=
Subject key identifier:   2B:42:6A:36:5B:3D:BE:B1:45:B0:A9:F7:59:80:1F:3A:F9:73:77:CC
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       241437
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/77bd001cec2efa7d9dd515acc908d8c9e9f6e33c.roa
Signing time:             Tue 06 Jun 2023 14:58:20 +0000
ROA not before:           Mon 05 Jun 2023 14:58:19 +0000
ROA not after:            Fri 06 Jun 2025 14:58:19 +0000
asID:                     28002
IP address blocks:        2001:13c7:7020::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2364471 (0x241437)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Jun  5 14:58:19 2023 GMT
            Not After : Jun  6 14:58:19 2025 GMT
        Subject: CN=77bd001cec2efa7d9dd515acc908d8c9e9f6e33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:6b:8f:91:cc:dc:f1:70:d6:87:02:e2:ac:
                    43:04:03:66:2b:63:01:91:ad:68:17:19:f3:be:97:
                    20:8a:f3:55:ce:1d:56:c0:15:f5:4e:19:d7:ec:70:
                    06:91:c5:f6:08:95:d3:97:a7:33:60:12:18:85:89:
                    66:cb:b9:12:09:16:3d:65:a0:42:b9:bf:1b:10:99:
                    0a:af:a2:4d:9c:38:8d:21:b1:41:d7:d0:a1:31:94:
                    f3:46:f6:ed:c5:88:d1:31:17:d8:37:b7:f5:aa:5c:
                    2e:ee:67:a7:d5:e4:6a:c8:81:b8:bc:fa:85:ce:66:
                    3e:79:64:97:0e:16:10:91:42:88:4d:2a:7a:18:aa:
                    89:de:11:fe:4e:05:fc:e4:25:3f:c4:b9:33:3a:1b:
                    87:f7:5a:1d:1c:79:6c:96:5f:e5:b5:75:9f:24:b8:
                    70:94:c8:a2:c1:8a:83:ed:6f:50:87:82:7a:f9:34:
                    63:03:1a:01:85:19:b9:17:e9:e7:c1:76:c8:52:0e:
                    6f:bb:e5:33:9b:97:ed:bf:97:ac:dc:4c:01:54:88:
                    e9:ea:d8:dc:89:a6:bd:b2:ed:1d:c2:34:68:da:bf:
                    6b:b7:c1:d2:e0:51:15:3f:14:95:88:bf:ca:2c:57:
                    a0:ca:41:88:34:36:85:bd:c0:f3:d8:dc:3b:78:6c:
                    fe:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:42:6A:36:5B:3D:BE:B1:45:B0:A9:F7:59:80:1F:3A:F9:73:77:CC
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/77bd001cec2efa7d9dd515acc908d8c9e9f6e33c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         78:d3:9e:35:57:d3:18:8b:81:44:57:67:37:7f:40:bc:93:e8:
         c5:e4:19:59:f5:88:4c:3d:cc:e6:2c:8e:87:4d:d6:57:30:01:
         63:d9:c8:63:78:53:90:21:59:89:9a:b4:6c:93:ad:59:a8:f3:
         22:0d:d4:a5:cd:66:9c:f6:a8:3e:76:b0:2f:2a:60:aa:9f:a9:
         81:87:ab:50:81:94:7b:a9:9b:d7:c8:cf:0a:0c:ea:65:3b:6e:
         de:7c:6b:a7:24:72:24:ae:cc:2a:c7:6b:71:e9:44:9b:41:52:
         43:8e:6e:1f:13:89:8e:84:b1:aa:96:8f:37:27:69:1d:ab:fc:
         63:ba:36:ec:43:1c:1e:65:b1:91:4c:11:4b:22:0e:a1:30:ba:
         ac:bc:33:42:07:71:5c:52:2c:98:ff:e9:72:b1:69:26:2f:f0:
         45:9a:74:ad:a8:05:1f:ce:a3:da:8c:95:52:62:45:f4:6d:66:
         11:12:6c:35:29:d2:60:b5:dd:e4:8f:59:2f:a5:ff:49:5b:47:
         4f:de:f3:fe:17:e3:a2:68:e1:6a:a7:d2:63:8b:08:95:ad:15:
         48:44:ac:d3:02:94:7e:6b:0d:e9:cc:ca:8b:13:b9:fc:a2:4b:
         bd:c0:2a:ce:3d:d5:a4:86:c0:98:bc:31:7d:42:02:5a:8b:85:
         7b:49:ad:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----