Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/a0ca2750cbc165f75d3f9a3da667418f0fd48327.roa
File:                     a0ca2750cbc165f75d3f9a3da667418f0fd48327.roa (raw, json)
Hash identifier:          6aaLzIBHAn9XBKBLk+ji3s49yTD2DDco0Ob16X4T4iE=
Subject key identifier:   64:94:FF:E4:2F:AA:B2:4D:C1:02:1C:96:E0:E2:6E:6F:82:91:A1:62
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       240879
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/a0ca2750cbc165f75d3f9a3da667418f0fd48327.roa
Signing time:             Tue 06 Jun 2023 13:51:50 +0000
ROA not before:           Mon 05 Jun 2023 13:51:50 +0000
ROA not after:            Fri 06 Jun 2025 13:51:50 +0000
asID:                     28002
IP address blocks:        2001:13c7:7020::/44 maxlen: 58

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2361465 (0x240879)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Jun  5 13:51:50 2023 GMT
            Not After : Jun  6 13:51:50 2025 GMT
        Subject: CN=a0ca2750cbc165f75d3f9a3da667418f0fd48327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:42:06:7f:e0:31:78:c0:60:6f:ab:42:f6:d8:
                    ca:ae:f2:9f:93:a3:ad:31:11:8b:59:0e:04:18:33:
                    6a:4d:20:c2:7b:d3:4c:c3:4a:42:30:5a:33:34:f5:
                    c8:77:e9:ec:59:28:6c:bc:b6:5e:77:42:e7:ad:dc:
                    ea:42:4f:c8:29:16:80:ad:5b:80:f6:4d:81:e6:9e:
                    7d:65:1e:e4:8a:ef:fa:60:df:45:f3:d0:63:75:d9:
                    4f:98:c4:b8:3b:25:fc:fd:83:18:f8:17:3d:17:11:
                    a6:9b:fd:73:4b:1c:5f:3a:c1:32:d4:50:7d:8c:5b:
                    00:26:eb:4a:5d:ef:80:5e:5e:b0:6d:a0:09:90:02:
                    a6:49:2a:e9:e7:29:76:35:ba:67:68:fd:48:a0:1b:
                    30:2d:dc:94:cf:b6:57:57:ae:ce:2c:66:3c:d7:a0:
                    f1:a6:3d:13:25:c1:3e:9e:66:3f:bf:53:ef:cf:7b:
                    6f:2d:bc:75:8d:02:9e:84:bd:0e:72:39:77:be:c7:
                    d4:b2:a4:20:fe:a4:ca:fd:fc:3a:0f:44:c8:5d:32:
                    a4:1b:9d:32:e1:eb:54:ed:8f:5f:72:dd:c8:d6:18:
                    85:9e:0e:49:b5:54:43:a6:c0:74:be:3a:c9:26:52:
                    99:66:3d:bd:5a:9e:af:59:d5:1b:4b:55:4c:7f:54:
                    97:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:94:FF:E4:2F:AA:B2:4D:C1:02:1C:96:E0:E2:6E:6F:82:91:A1:62
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/a0ca2750cbc165f75d3f9a3da667418f0fd48327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         53:b8:0a:08:6f:c8:b4:03:37:3f:1c:9c:9f:fa:32:a0:06:0b:
         50:11:e6:48:7b:00:2e:4d:82:77:b8:3b:15:be:4c:16:a5:91:
         0f:4c:0b:56:00:9a:8e:ab:d0:2f:e8:e5:cc:d5:2a:63:b2:27:
         a6:a1:2c:ef:51:83:01:95:f2:e3:6d:5b:36:cc:02:5d:a5:8e:
         ca:4f:7c:0e:71:fd:09:3e:f0:6c:0b:1b:1c:a8:e8:bd:f9:e6:
         83:e6:da:ee:72:30:36:7d:5d:56:7c:21:85:34:09:94:39:5d:
         15:ea:94:d6:92:f7:b1:8d:17:2a:4b:cc:5b:c2:8b:56:b8:61:
         dc:ed:b6:18:43:a2:8a:46:f2:b9:6f:f9:76:fa:f2:39:79:16:
         e5:70:00:84:47:6c:5c:78:06:8b:25:de:ef:52:b3:11:cf:e5:
         3a:92:13:3c:07:3e:7e:d8:72:cc:78:31:e7:8c:df:2f:40:80:
         23:ba:67:5a:2f:25:3a:96:66:3b:e1:dd:60:5b:f7:4d:e6:47:
         87:54:ac:ef:c9:16:ca:e5:1d:dd:e1:55:ce:e6:eb:ef:10:f2:
         ab:31:95:6a:7e:73:d6:3b:70:8d:d9:5d:69:eb:fe:67:8d:93:
         0b:18:7d:f7:19:d1:63:b1:8a:0d:1c:9a:01:0e:50:77:ef:a5:
         3c:0a:25:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----