Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/e3a7d69c22d9860bf01bf05c7428e5ee08fa94d5.roa
File:                     e3a7d69c22d9860bf01bf05c7428e5ee08fa94d5.roa (raw, json)
Hash identifier:          U9ktIXZsxLy3r5JVayfT7dXfIkuwrJXOCjX42vBg1U4=
Subject key identifier:   5F:AA:B0:AA:A3:0B:FC:75:A9:ED:47:B6:B3:45:9E:33:AE:5A:56:E2
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       20FA5F
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/e3a7d69c22d9860bf01bf05c7428e5ee08fa94d5.roa
Signing time:             Thu 23 Mar 2023 08:30:27 +0000
ROA not before:           Wed 22 Mar 2023 08:30:27 +0000
ROA not after:            Fri 21 Mar 2025 08:30:27 +0000
asID:                     52224
IP address blocks:        2001:13c7:7012::/48 maxlen: 48
                          2001:13c7:7012::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2161247 (0x20fa5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Mar 22 08:30:27 2023 GMT
            Not After : Mar 21 08:30:27 2025 GMT
        Subject: CN=e3a7d69c22d9860bf01bf05c7428e5ee08fa94d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:03:24:ee:49:a1:b5:0d:2a:02:36:5e:3c:bc:
                    c6:4d:75:23:68:fe:a9:69:3e:f8:09:08:6f:d3:9f:
                    1b:26:3e:26:bb:4d:b4:40:b8:f4:fc:0f:2c:73:42:
                    bd:aa:66:5f:33:c6:8e:48:1c:16:ed:4f:40:e2:31:
                    f5:b9:ce:a0:00:a4:e0:47:ac:34:a0:0a:35:9a:db:
                    34:38:7f:8e:f7:11:a7:15:37:f9:4a:d6:23:12:56:
                    a1:44:02:cc:5f:30:19:6a:39:a7:9e:e8:8d:ad:25:
                    6b:fe:ed:29:81:cf:d7:f9:ba:1b:0d:39:58:d1:ae:
                    e2:87:1f:55:62:7a:56:0b:ad:64:01:28:9b:92:ab:
                    4a:77:6e:8e:32:92:9e:3c:71:9e:94:af:92:97:28:
                    67:94:a7:70:8c:a8:ef:24:c3:aa:ea:d6:a3:04:77:
                    39:f8:cd:f0:96:34:5b:61:c4:02:24:94:19:37:a2:
                    23:6b:e8:7b:09:d6:d9:cf:d1:77:83:bd:30:f3:04:
                    34:a3:6e:dd:43:cf:7c:7f:a3:e4:97:b0:a7:ac:17:
                    fc:bd:2c:2a:12:aa:bc:34:a9:99:db:b5:b6:f4:85:
                    d8:48:f2:28:30:7e:7d:30:81:28:4d:8c:b3:e5:57:
                    09:5c:dc:9c:0f:4e:79:dd:80:e4:d9:cc:53:a3:81:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AA:B0:AA:A3:0B:FC:75:A9:ED:47:B6:B3:45:9E:33:AE:5A:56:E2
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/e3a7d69c22d9860bf01bf05c7428e5ee08fa94d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7012::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:13:79:67:c6:7a:ff:e0:b3:d1:a3:16:7a:f6:90:8f:6b:2f:
         38:d3:32:c9:94:29:91:3b:ac:34:fb:05:9f:ff:d4:2d:72:cc:
         9f:fd:32:99:b7:cc:52:f6:b4:a9:51:76:c6:57:f9:d4:58:aa:
         78:e4:e2:ce:b6:80:20:d4:85:f4:5d:29:dc:b5:ca:e4:1e:30:
         c3:d1:42:4c:85:f9:d9:3c:13:32:2b:65:52:9f:2d:20:cc:a0:
         8e:1f:79:61:0b:87:58:ad:bd:e8:89:22:d8:19:ce:48:5f:dd:
         ed:e8:9d:8e:09:5d:c5:b6:28:b7:ea:ed:69:37:96:4b:92:63:
         75:37:16:da:e4:8a:e2:38:80:48:16:b6:19:bd:26:6e:9b:c5:
         14:de:ef:48:27:a1:db:31:a2:1c:b2:3a:91:ab:4b:20:4e:94:
         5c:84:c0:96:4b:7f:fa:24:4b:70:e7:ef:c1:8a:7d:e2:7b:74:
         91:5d:6c:69:e4:4c:df:51:c4:1d:31:1a:c3:20:6c:88:03:53:
         e0:e3:17:a8:22:5d:9d:c9:fb:00:a2:86:f8:8c:7d:95:75:e3:
         36:57:b7:61:40:87:27:90:13:ed:7a:ee:a2:18:ff:12:6d:66:
         ed:94:c6:ec:43:58:0d:dc:de:ab:46:8e:0a:a4:e4:03:52:ce:
         96:3c:8f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----