Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/d0b1011e00dc9463c72ca0001f6580492d29e192.roa
File:                     d0b1011e00dc9463c72ca0001f6580492d29e192.roa (raw, json)
Hash identifier:          ujjva/nUkGP/mdy5l6vIUY9C/qEcXxJYN717KdqUDHU=
Subject key identifier:   55:82:03:ED:CA:A6:B4:1B:3E:F1:BC:D2:D3:29:9A:D6:FC:6A:08:99
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       2459BF
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/d0b1011e00dc9463c72ca0001f6580492d29e192.roa
Signing time:             Fri 09 Jun 2023 21:00:11 +0000
ROA not before:           Thu 08 Jun 2023 21:00:11 +0000
ROA not after:            Mon 09 Jun 2025 21:00:11 +0000
asID:                     28002
IP address blocks:        2001:13c7:7020::/44 maxlen: 52

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2382271 (0x2459bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Jun  8 21:00:11 2023 GMT
            Not After : Jun  9 21:00:11 2025 GMT
        Subject: CN=d0b1011e00dc9463c72ca0001f6580492d29e192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1b:ce:ba:4b:83:03:72:e4:f0:1e:16:19:8e:
                    40:80:3c:70:88:99:07:a3:65:49:c3:cf:d9:a5:ea:
                    b5:e4:9c:99:fe:36:35:92:7c:58:92:80:8d:c7:56:
                    ab:e0:b4:95:58:d6:81:b0:55:36:50:01:b1:2c:41:
                    42:99:32:6f:af:f3:ad:1a:35:e7:b5:bc:19:34:ff:
                    6b:25:7a:98:8a:3c:9c:81:1f:fa:cc:0b:eb:61:3e:
                    ec:da:ea:16:0c:66:7a:1d:ab:07:97:46:82:71:e7:
                    d1:f1:93:9e:1f:6e:49:f6:e1:b2:bc:d7:ce:4f:22:
                    3f:76:c7:09:ca:e3:7b:02:75:59:5a:99:fa:8b:7a:
                    c8:6a:e6:5f:14:06:17:ec:16:1e:ff:bd:48:6b:6a:
                    27:ad:48:a6:59:b8:73:28:c3:73:a4:fa:cd:06:b6:
                    81:45:83:c8:c5:96:a4:75:e6:26:ba:60:c5:15:f5:
                    2c:bb:db:74:ee:df:93:76:88:a2:5f:15:ca:2a:89:
                    78:73:82:f5:8a:51:71:28:2e:d6:ea:18:ae:8d:f0:
                    f4:25:b0:37:28:22:0d:e2:7b:ce:c0:e3:2a:aa:7b:
                    95:40:08:4b:e7:53:8d:5c:ca:d7:b2:3a:f8:e3:cd:
                    65:b6:1a:a2:39:04:db:d3:74:19:c1:16:9f:0a:d8:
                    54:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:82:03:ED:CA:A6:B4:1B:3E:F1:BC:D2:D3:29:9A:D6:FC:6A:08:99
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/d0b1011e00dc9463c72ca0001f6580492d29e192.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         2e:57:92:4d:ae:18:b3:14:8e:72:c8:de:94:25:b6:29:e8:22:
         63:5c:87:66:04:a8:20:ca:ca:68:a2:9d:81:36:9f:5d:31:5f:
         d4:f0:b5:c6:e9:62:11:3d:5c:c9:53:32:0c:16:56:44:5e:7e:
         a6:15:e1:3a:3e:11:dd:a6:2e:c8:80:f8:e7:df:7d:80:fa:04:
         84:9e:2c:52:cf:63:28:24:cd:39:4a:43:07:41:98:b3:fb:3f:
         fe:ef:1b:0b:ee:8e:4a:44:a0:3e:13:f0:0f:f1:ac:5b:04:41:
         0f:4c:8c:4d:63:e7:d2:97:f2:da:a0:fe:88:e3:50:51:da:6b:
         da:fe:b6:f2:44:46:b8:2b:23:14:6a:37:a8:a1:34:d9:dc:a5:
         dc:6c:85:9a:94:be:5b:d6:2f:e5:59:69:82:f6:2b:90:89:57:
         a5:d2:89:2c:89:38:f2:d5:57:c6:3e:6b:ca:a5:ba:62:25:6c:
         f5:08:39:b6:c3:29:65:ad:2a:78:ba:8d:ea:63:cf:81:9f:b9:
         25:2c:60:f9:ad:16:d3:fc:02:bd:0e:3e:ca:d3:93:a0:2e:64:
         84:34:ef:0c:82:0f:cb:0e:6e:69:19:34:2f:0c:c9:7e:e4:b8:
         69:4a:fc:bf:10:59:b6:6f:36:4c:aa:c2:72:96:20:2b:c1:20:
         19:63:b2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----