Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e5c180f-ad69-4685-857d-60da248b236d/e29f85d453d5e73d72f0c32da98e7294777f2a3a.roa
File:                     e29f85d453d5e73d72f0c32da98e7294777f2a3a.roa (raw, json)
Hash identifier:          Q+6iuxR1KUx+Fr9k+w/EdWm3aBni6+4Fr4dN898xyUM=
Subject key identifier:   AB:13:3F:B3:B7:91:53:ED:36:2F:59:F2:4A:73:7F:41:03:B8:EC:16
Certificate issuer:       /CN=033367e5ad5492626298a00d7acc4757c59b9b8b
Certificate serial:       02BC
Authority key identifier: 71:1E:07:4E:6A:25:14:F3:AC:18:7B:69:8A:E7:F8:14:46:CB:6E:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/033367e5ad5492626298a00d7acc4757c59b9b8b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e5c180f-ad69-4685-857d-60da248b236d/e29f85d453d5e73d72f0c32da98e7294777f2a3a.roa
Signing time:             Mon 20 Feb 2023 18:35:45 +0000
ROA not before:           Sun 19 Feb 2023 18:35:19 +0000
ROA not after:            Thu 20 Feb 2025 18:35:19 +0000
asID:                     252689
IP address blocks:        2801:14:3800::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 700 (0x2bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=033367e5ad5492626298a00d7acc4757c59b9b8b
        Validity
            Not Before: Feb 19 18:35:19 2023 GMT
            Not After : Feb 20 18:35:19 2025 GMT
        Subject: CN=e29f85d453d5e73d72f0c32da98e7294777f2a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:83:10:25:af:70:e7:b6:66:00:77:ee:e2:cc:
                    88:73:25:a4:63:eb:02:27:02:f3:37:a6:71:05:4e:
                    aa:3a:3e:a0:85:e6:7c:44:61:b4:ab:74:0a:b9:a1:
                    e8:8e:1a:96:da:d7:48:35:4c:c5:e0:fa:04:cc:aa:
                    b1:b3:34:b9:4a:59:7d:55:35:73:9d:fa:b4:41:7c:
                    44:18:e1:e7:bf:ce:4d:02:88:1a:e9:9e:1f:bb:fa:
                    0d:1c:96:a0:93:6d:3b:27:37:9b:6c:41:23:af:69:
                    3e:28:1d:2a:55:43:3e:27:cf:bf:62:52:21:a4:05:
                    ff:7c:72:51:01:de:d5:84:28:b5:ad:8d:14:51:7b:
                    ec:a9:32:46:52:ce:e5:0d:57:88:1d:0a:4e:be:e1:
                    6a:fc:25:7e:ef:21:49:3d:71:16:01:d3:66:b1:b6:
                    87:6d:fb:13:43:ba:73:20:c3:96:5e:ab:d0:76:21:
                    33:dd:47:15:62:9d:02:6c:e8:d0:0f:1a:0f:c2:0c:
                    c1:d7:24:28:d9:bf:88:a7:c7:8b:37:19:8d:9e:e6:
                    47:97:01:c4:7b:c1:1d:20:b9:c3:47:25:10:43:2c:
                    ac:a8:a7:c5:ea:e1:79:81:74:b6:b8:78:ba:7b:ca:
                    1f:54:b3:bb:d8:db:df:fc:0f:f6:c9:92:16:c8:52:
                    19:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:13:3F:B3:B7:91:53:ED:36:2F:59:F2:4A:73:7F:41:03:B8:EC:16
            X509v3 Authority Key Identifier:
                keyid:71:1E:07:4E:6A:25:14:F3:AC:18:7B:69:8A:E7:F8:14:46:CB:6E:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/033367e5ad5492626298a00d7acc4757c59b9b8b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e5c180f-ad69-4685-857d-60da248b236d/e29f85d453d5e73d72f0c32da98e7294777f2a3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e5c180f-ad69-4685-857d-60da248b236d/033367e5ad5492626298a00d7acc4757c59b9b8b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:ce:2e:a1:8f:f5:34:2b:c2:c6:1a:43:83:9d:a1:be:4d:2a:
         b3:9d:1c:86:7b:9e:e0:c7:06:af:9f:31:12:12:0d:03:28:ad:
         40:c9:a1:ca:d4:ba:29:9f:a0:04:92:f3:f8:83:84:69:4d:be:
         a1:8b:f8:eb:51:d1:96:47:54:4c:ed:da:8e:0c:16:90:df:82:
         6d:2d:59:91:44:40:ac:47:0b:57:6e:f3:32:35:07:11:6c:98:
         eb:42:3b:51:f5:0f:8c:4a:17:2c:04:a6:27:28:b8:4f:4d:ba:
         dc:a7:c6:ce:b5:94:e7:90:30:a2:79:61:38:87:f8:aa:8b:6d:
         04:cd:ae:81:35:61:4f:bd:bd:cb:87:0f:12:4b:17:70:62:12:
         50:17:a1:46:78:25:36:e3:c2:10:0e:95:5c:0c:98:8d:57:0a:
         66:eb:96:f2:2a:42:4f:a2:eb:53:48:17:9b:f0:91:b2:d8:f9:
         4c:57:e6:40:88:15:97:fb:35:06:16:ed:94:73:b1:87:65:0c:
         14:16:38:33:9f:74:09:12:3e:dc:6b:78:c7:38:01:1a:a0:98:
         cc:60:f2:7b:93:21:1b:af:b3:3b:3c:8d:ab:13:bd:0c:13:ff:
         5f:c5:5b:b8:64:e3:26:ee:3e:bc:5a:f3:5d:8a:ee:54:b4:69:
         c0:8f:94:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----