Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/ecfecf47bf3279f2a58561a3cef83a029a7b870e.roa
File:                     ecfecf47bf3279f2a58561a3cef83a029a7b870e.roa (raw, json)
Hash identifier:          u4KjsFVVfVGdc9zt9/TTyU3p0Vmo5UY1C40QY1n9WOk=
Subject key identifier:   08:44:F8:10:9B:D1:00:C5:0F:0B:B6:01:69:61:FC:8E:D4:CE:91:9B
Certificate issuer:       /CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
Certificate serial:       14223F
Authority key identifier: 84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/ecfecf47bf3279f2a58561a3cef83a029a7b870e.roa
Signing time:             Sun 14 Jan 2024 07:30:03 +0000
ROA not before:           Sun 14 Jan 2024 07:30:03 +0000
ROA not after:            Tue 13 Jan 2026 07:30:03 +0000
asID:                     22822
IP address blocks:        2801:114::/44 maxlen: 48
                          2803:9310::/32 maxlen: 48

Validation:               Failed, certificate revoked on Fri 02 Feb 2024 03:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1319487 (0x14223f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
        Validity
            Not Before: Jan 14 07:30:03 2024 GMT
            Not After : Jan 13 07:30:03 2026 GMT
        Subject: CN=ecfecf47bf3279f2a58561a3cef83a029a7b870e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b7:0f:e4:06:a2:80:99:5e:32:64:28:52:50:
                    cc:9d:5f:4b:c1:0c:b8:75:6b:46:ff:37:8d:8b:91:
                    62:9e:51:61:8c:0b:64:17:7d:81:63:d2:7b:93:4c:
                    8a:1d:a3:32:be:ed:32:8e:ed:13:5a:7f:37:1d:60:
                    88:7c:28:05:03:c6:db:29:2f:1e:8d:c6:e5:03:13:
                    b5:56:e9:04:85:4a:f1:00:30:64:d6:b2:08:58:dd:
                    49:95:5b:9f:08:96:55:b8:75:49:9b:59:6f:a4:cb:
                    9d:86:e3:c6:a7:e3:9a:f0:1a:3f:01:1e:98:70:0e:
                    cd:1f:bc:53:ba:67:55:e4:16:18:65:77:64:03:42:
                    91:b8:e1:ac:07:96:de:a3:f2:3e:ca:30:4d:3e:3e:
                    f4:69:3f:7e:ae:19:84:34:8c:27:eb:ac:81:fd:9c:
                    3b:0f:da:b6:41:0b:99:c8:23:47:dc:97:3d:a2:66:
                    b2:ce:1c:36:09:c8:8c:59:4e:27:9c:88:f9:c7:1e:
                    84:95:76:5a:9b:22:36:9f:b5:94:c6:23:7f:35:1f:
                    45:fa:dd:04:46:b6:b1:04:8d:03:00:d8:94:db:ae:
                    43:37:00:2d:01:d5:16:03:ad:b4:5d:ba:a1:1c:17:
                    65:d2:5b:09:49:5d:7b:38:59:e2:0b:8b:e0:b4:73:
                    b1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:44:F8:10:9B:D1:00:C5:0F:0B:B6:01:69:61:FC:8E:D4:CE:91:9B
            X509v3 Authority Key Identifier:
                keyid:84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/ecfecf47bf3279f2a58561a3cef83a029a7b870e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:114::/44
                  2803:9310::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:2c:49:13:c5:1f:56:5f:73:80:23:28:db:0f:c3:8b:99:e4:
         24:3e:23:86:aa:b5:8e:b1:3b:5e:45:e5:0c:5d:7c:af:18:54:
         f5:0c:87:e8:eb:dd:77:ce:ce:22:71:37:d7:95:e3:05:bf:43:
         3d:69:d3:65:5f:8b:ee:d4:fa:95:24:86:a7:df:46:54:f2:1e:
         a8:10:2e:29:21:b5:91:56:02:fd:c2:01:25:fc:6e:6b:e5:db:
         8e:58:e5:75:e7:f9:da:6e:3d:04:fc:bf:b5:05:66:a0:65:e2:
         f7:5e:69:62:29:17:b6:ca:55:46:fc:71:be:6a:10:d7:fd:6e:
         d8:16:97:fa:e3:81:88:76:a5:aa:c5:6c:43:43:72:92:0a:d5:
         6a:98:cd:3a:a6:2f:84:cb:95:33:73:d1:d7:40:fc:c5:12:24:
         34:82:b2:2f:dc:84:d4:ba:d8:7c:52:8c:1d:1f:38:e6:37:95:
         29:db:29:4e:96:db:bd:a3:23:84:08:16:ca:ca:0a:e2:d7:67:
         eb:bb:60:27:ac:ff:a7:5f:ea:89:73:1c:1c:b4:ab:1f:d8:93:
         f3:75:b4:77:b6:91:1e:46:be:e0:6b:a9:9b:ec:9b:e6:26:b5:
         08:94:82:75:80:e0:c4:51:48:a9:17:d0:4c:97:e6:67:49:16:
         a9:5e:3f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----