Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/36822b880e21ac0c6f9fdebdb332cf7a1779a344.roa
File:                     36822b880e21ac0c6f9fdebdb332cf7a1779a344.roa (raw, json)
Hash identifier:          WRt4G3CLfjOGQBw7TwZf93D58MPTn6GIFEnwoZRKy8Y=
Subject key identifier:   46:DF:3F:78:93:19:C2:1E:D6:EB:D7:85:32:AD:DB:97:64:D3:8F:86
Certificate issuer:       /CN=24b9a83a84ed651b0b613359fbb1a875e436316a
Certificate serial:       0461
Authority key identifier: 9D:1F:1D:B8:DF:8B:E2:EE:E7:E2:DE:4D:77:E5:8B:F3:8D:2C:CC:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b9a83a84ed651b0b613359fbb1a875e436316a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/36822b880e21ac0c6f9fdebdb332cf7a1779a344.roa
Signing time:             Tue 21 Jun 2022 18:38:24 +0000
ROA not before:           Tue 21 Jun 2022 03:00:00 +0000
ROA not after:            Tue 14 Jan 2025 03:00:00 +0000
asID:                     270149
IP address blocks:        2806:3c8::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1121 (0x461)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b9a83a84ed651b0b613359fbb1a875e436316a
        Validity
            Not Before: Jun 21 03:00:00 2022 GMT
            Not After : Jan 14 03:00:00 2025 GMT
        Subject: CN=36822b880e21ac0c6f9fdebdb332cf7a1779a344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f2:69:e0:08:41:de:d7:33:b7:fd:30:3a:2f:
                    fa:09:b1:e9:01:1b:d7:19:48:51:23:e0:20:f7:ef:
                    7d:73:9e:af:ca:4e:14:4d:d6:21:0a:82:ea:40:b1:
                    5f:f1:cb:b5:f4:5b:aa:49:8f:69:fa:51:20:ea:4a:
                    b6:e1:6b:da:79:5a:53:e8:c8:1d:6f:c1:5d:3a:c0:
                    4f:9c:95:5c:5a:71:2e:2e:3a:fe:89:ff:7c:32:c3:
                    7b:e9:7b:7e:f0:13:50:ea:94:59:4d:9e:cd:62:0e:
                    8e:19:e6:b0:9e:a1:fb:cc:05:dc:8f:65:e8:eb:ae:
                    8f:3b:83:73:7c:3a:99:78:69:05:06:bf:47:5e:db:
                    ae:1e:26:15:f1:da:83:c8:69:e7:c8:c4:f2:8b:db:
                    b9:b8:7c:e8:c6:38:14:ee:4f:73:fd:12:a4:41:b1:
                    d2:fe:6c:94:3a:81:1f:41:15:7a:59:fe:31:ee:54:
                    03:13:07:1d:82:86:4b:fc:86:63:85:ae:ed:b3:e0:
                    e1:7c:cd:c7:96:f3:ff:16:09:89:b9:b2:0c:b5:36:
                    3e:ab:36:7e:c7:f3:03:50:82:c0:db:d1:53:0a:af:
                    53:94:3e:8a:05:32:5e:bc:a9:7b:3c:d8:a1:5e:db:
                    a5:01:07:c3:14:21:78:25:06:b5:22:55:19:29:27:
                    92:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DF:3F:78:93:19:C2:1E:D6:EB:D7:85:32:AD:DB:97:64:D3:8F:86
            X509v3 Authority Key Identifier:
                keyid:9D:1F:1D:B8:DF:8B:E2:EE:E7:E2:DE:4D:77:E5:8B:F3:8D:2C:CC:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b9a83a84ed651b0b613359fbb1a875e436316a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/36822b880e21ac0c6f9fdebdb332cf7a1779a344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/24b9a83a84ed651b0b613359fbb1a875e436316a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:39:68:2a:70:f5:30:4e:74:89:df:c1:dc:68:b1:d5:8f:3f:
         56:ee:59:42:4f:f3:06:d1:d5:32:8a:49:a6:cd:71:02:29:4f:
         75:f9:2e:34:e4:f5:58:11:7f:55:7d:a8:78:56:35:c1:ac:08:
         ba:be:bd:a2:5e:67:95:29:cf:07:89:06:af:fb:bf:ea:64:14:
         6e:8a:7a:70:36:75:71:4d:67:9e:8d:41:d8:b3:84:d8:8c:be:
         16:e4:97:f9:bf:74:d0:a6:5b:56:a9:f9:6f:4f:e1:dc:2f:c0:
         77:70:ff:38:de:8c:01:d6:5d:62:13:01:30:1e:40:09:c1:8c:
         ff:3a:1a:c3:ea:55:62:8a:20:77:17:53:ac:8a:c1:4b:33:d2:
         b8:03:ea:a1:76:96:a5:fd:3d:fe:8b:94:72:1c:24:b5:ff:c4:
         7c:a7:a4:29:df:8c:60:b1:12:95:d8:8c:08:2c:35:f9:c1:c8:
         0e:d3:30:30:cc:2e:a9:dd:43:7f:da:1f:81:f9:8c:9e:88:52:
         d0:28:3a:2e:46:5e:2a:20:71:e0:4c:67:46:ce:43:34:1a:3e:
         e2:a8:e6:1e:9e:dc:7a:0d:ec:bc:da:93:fb:a4:36:a9:54:50:
         4d:61:82:36:85:5f:a2:77:72:32:0f:16:4c:af:5f:22:7c:eb:
         59:2d:6c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----