Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/bc6017379492bb474bbd9b6f8475e3807dd5d5e7.roa
File:                     bc6017379492bb474bbd9b6f8475e3807dd5d5e7.roa (raw, json)
Hash identifier:          83U262XM2CrzqBrsLtpx70y7HCLXwx0ROQoLhTI4bZw=
Subject key identifier:   F1:EB:3B:1D:19:95:FD:7B:F8:8F:94:8F:12:93:BC:A2:58:07:82:3B
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       234430
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/bc6017379492bb474bbd9b6f8475e3807dd5d5e7.roa
Signing time:             Wed 17 May 2023 14:52:51 +0000
ROA not before:           Tue 16 May 2023 14:52:51 +0000
ROA not after:            Sat 17 May 2025 14:52:51 +0000
asID:                     28002
IP address blocks:        2001:13c7:7020::/44 maxlen: 52

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2311216 (0x234430)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: May 16 14:52:51 2023 GMT
            Not After : May 17 14:52:51 2025 GMT
        Subject: CN=bc6017379492bb474bbd9b6f8475e3807dd5d5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e3:e8:67:35:1a:1e:b5:78:f4:50:15:c6:ce:
                    0b:73:56:6f:8e:53:80:97:5d:30:8c:a3:c9:25:43:
                    4e:03:63:3f:da:90:d9:ea:25:5b:1d:18:a7:9d:29:
                    a7:80:da:6f:98:98:e7:0f:28:3b:20:02:f1:57:ad:
                    06:f8:67:ec:f5:5a:99:30:89:8c:69:49:0c:c8:9a:
                    f7:7a:3c:84:13:ec:0e:69:f2:3a:46:88:1c:3f:5d:
                    3b:1c:c5:6e:cd:6e:d0:6a:36:c2:79:1b:64:1a:c6:
                    7a:8e:4c:aa:41:61:5c:89:b4:d9:cc:9b:56:bd:fc:
                    7f:bc:b4:80:e5:af:31:5c:0e:90:fb:cb:c7:86:61:
                    95:e4:e3:2b:f4:14:fa:70:07:7d:be:41:20:c7:b8:
                    5f:3d:8e:ca:ee:0e:72:a7:18:e2:d4:1d:97:f8:ab:
                    95:bc:76:b4:bd:a9:25:4a:93:06:06:37:ed:f8:dc:
                    3a:9e:10:e5:2e:e8:b0:31:99:be:88:77:65:2d:44:
                    22:a0:00:aa:a7:26:15:b7:60:50:0b:a4:1b:c8:f0:
                    d9:7f:ea:8d:82:61:ac:74:af:f3:ad:ab:86:91:50:
                    ee:30:c1:94:c3:e9:04:a1:46:69:2f:8e:6d:f5:9e:
                    05:8b:5a:7b:b0:7c:32:db:3d:5b:c9:c9:86:ba:66:
                    36:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EB:3B:1D:19:95:FD:7B:F8:8F:94:8F:12:93:BC:A2:58:07:82:3B
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/bc6017379492bb474bbd9b6f8475e3807dd5d5e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         5f:d0:bb:7a:89:93:6a:92:14:f8:2b:36:6d:20:f4:0c:2f:bc:
         87:9a:53:a3:7e:05:3e:bf:65:93:7a:e8:ca:99:41:a8:65:c1:
         53:69:b9:2d:58:78:98:af:2b:10:5f:b0:4d:f9:4e:22:f5:e7:
         67:3b:bd:10:36:39:80:71:5d:86:01:3b:8d:4d:49:a2:75:f6:
         88:f6:f6:58:ca:a1:74:1f:d3:aa:b1:23:64:6d:8c:01:19:68:
         86:59:a1:dd:eb:09:d2:3b:e9:29:9f:51:c3:bd:df:c5:98:61:
         f2:f9:55:0e:a4:9e:79:0a:0a:79:43:10:59:fe:1a:11:e4:04:
         72:d1:64:30:5d:48:ff:f5:b8:f2:d2:af:47:be:76:e3:2a:5a:
         40:78:6a:d8:8f:02:5a:98:8c:ef:5c:2d:cb:65:49:12:32:46:
         59:b5:44:3f:51:11:11:67:12:08:ce:4b:e2:9b:73:dd:e5:49:
         53:55:7f:cd:4f:71:70:0a:50:95:36:de:a2:b3:f6:11:23:cf:
         25:f5:01:3e:b2:88:81:5c:91:10:6b:f7:e4:d3:46:f5:56:5c:
         48:f2:d6:b2:61:3e:9f:69:8c:ec:48:c8:aa:5a:a4:1b:74:07:
         df:2c:45:65:27:6f:0b:04:e7:87:68:f2:fb:67:43:02:58:d5:
         da:15:41:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----