Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/c9cbe5e99f16b74c611c3d59126c1da834689e8b.roa
File:                     c9cbe5e99f16b74c611c3d59126c1da834689e8b.roa (raw, json)
Hash identifier:          xgzfMQwiOmONMa8pt02s+yrPOd9XB9gUQiSBVvIvTCk=
Subject key identifier:   D2:E2:CA:F3:E2:79:F2:5B:5E:76:C5:06:C4:F0:AD:DA:2B:9B:F9:40
Certificate issuer:       /CN=a9b9d9319d2010f9907e00e3e1940885c59db093
Certificate serial:       18923D
Authority key identifier: 9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/c9cbe5e99f16b74c611c3d59126c1da834689e8b.roa
Signing time:             Wed 06 Jul 2022 14:38:59 +0000
ROA not before:           Wed 06 Jul 2022 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     262589
IP address blocks:        2800:650:4::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1610301 (0x18923d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b9d9319d2010f9907e00e3e1940885c59db093
        Validity
            Not Before: Jul  6 03:00:00 2022 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=c9cbe5e99f16b74c611c3d59126c1da834689e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:ed:79:29:c3:85:87:21:0d:0a:50:2d:d8:
                    f4:16:71:c0:19:59:80:29:37:4d:79:1b:7f:d9:c2:
                    65:30:39:52:70:0c:fd:02:e3:56:da:52:05:dc:67:
                    7f:d3:6d:a7:db:a5:1e:eb:f1:6f:84:ef:69:da:8e:
                    1c:00:eb:2e:32:73:7c:fc:fc:a5:71:07:66:b5:53:
                    ec:e2:7e:d1:80:3f:d3:f8:9b:e8:9b:70:2a:be:bb:
                    88:57:45:4a:81:31:66:9c:9d:d2:a3:a0:7d:cd:91:
                    c9:70:7e:5f:d2:89:45:08:5b:5c:b8:75:6e:3e:76:
                    ae:f1:dc:44:a3:79:a4:93:0c:71:a5:ac:86:63:a6:
                    23:f8:31:62:39:9b:68:38:08:dc:fe:b3:fb:75:fb:
                    b9:05:07:ab:75:fa:52:90:fe:e2:3a:f5:c7:af:27:
                    df:31:14:b4:47:a7:bf:38:3c:7f:c8:09:e5:7d:7f:
                    c0:b4:0c:a7:c7:4b:70:94:99:c3:69:ae:a3:b7:0d:
                    7c:ce:28:38:f6:79:b1:de:30:b3:7a:b0:3d:6a:4d:
                    8e:a9:3a:d0:8f:a9:fc:91:1c:f6:46:77:01:dc:1d:
                    86:cd:af:3a:42:db:98:77:cf:73:2b:86:c9:57:0f:
                    0f:b8:54:90:4b:ac:5d:21:8a:14:1b:59:42:88:46:
                    fb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E2:CA:F3:E2:79:F2:5B:5E:76:C5:06:C4:F0:AD:DA:2B:9B:F9:40
            X509v3 Authority Key Identifier:
                keyid:9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/c9cbe5e99f16b74c611c3d59126c1da834689e8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/a9b9d9319d2010f9907e00e3e1940885c59db093.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:650:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:06:c0:2c:b0:25:6e:da:81:44:44:39:38:64:96:21:60:a2:
         9f:ea:5d:20:26:7e:65:e4:81:f4:3b:3b:4c:c5:83:f4:d3:a3:
         fc:f2:16:5a:41:69:ec:16:d0:19:cd:f8:01:5c:24:27:61:f3:
         47:e2:2f:85:a4:86:33:bb:b3:ba:1b:cb:00:91:46:6c:39:54:
         71:97:ac:b1:5e:ad:c0:a6:12:a6:ef:cf:ef:5c:1c:e9:b3:aa:
         94:ee:1e:09:be:b5:07:87:44:36:79:9a:3c:f2:4e:90:0c:7d:
         60:c8:cb:8c:36:cc:f2:56:13:ee:43:2d:73:f3:ca:c0:5f:ec:
         bc:1c:97:2e:23:36:0b:c5:9c:ea:7c:bf:ef:d2:ae:48:c0:b8:
         88:89:d6:62:4f:ed:54:8f:23:25:60:d8:17:79:b9:65:9a:30:
         60:87:77:98:3b:00:00:19:31:eb:9a:a2:73:a2:e6:9e:d8:ba:
         09:24:ee:19:c7:82:af:72:0a:12:d1:51:3e:81:90:52:fe:04:
         1d:75:e0:f0:d4:7f:e5:45:df:96:93:de:ec:86:d1:01:a8:0b:
         06:8c:7a:e5:a1:1e:df:d8:dd:f8:72:02:c1:2e:10:30:a9:94:
         2e:84:45:7a:3a:d5:39:8f:b7:28:2d:c3:01:95:1f:f8:41:3a:
         58:69:c1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----