Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/1eac57354dab9c0c4bf11e8d9a308734b591d344.roa
File:                     1eac57354dab9c0c4bf11e8d9a308734b591d344.roa (raw, json)
Hash identifier:          Td5JcNbjabpIhp4jh+KVaa5oMHwAKZP/yDQO+8G8Vgc=
Subject key identifier:   26:6E:C5:F6:6F:53:AA:CC:00:35:B2:5E:43:0A:ED:94:38:51:47:14
Certificate issuer:       /CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
Certificate serial:       09FC
Authority key identifier: 8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/1eac57354dab9c0c4bf11e8d9a308734b591d344.roa
Signing time:             Thu 27 Jan 2022 12:54:38 +0000
ROA not before:           Thu 27 Jan 2022 03:00:00 +0000
ROA not after:            Sat 27 Jan 2024 03:00:00 +0000
asID:                     11315
IP address blocks:        2800:a00::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2556 (0x9fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
        Validity
            Not Before: Jan 27 03:00:00 2022 GMT
            Not After : Jan 27 03:00:00 2024 GMT
        Subject: CN=1eac57354dab9c0c4bf11e8d9a308734b591d344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5c:cd:d6:fd:56:d7:26:14:5f:6a:0b:19:3d:
                    f5:eb:81:70:89:f1:42:86:32:fc:72:1a:44:fb:e3:
                    20:4c:1a:a8:86:11:17:8c:b8:db:09:b3:06:0b:88:
                    9d:6c:c1:a3:40:7a:4b:34:fe:b8:e9:a1:32:6b:d3:
                    8b:1e:30:21:c3:28:7a:a4:16:89:0d:e9:52:e3:52:
                    f7:bc:89:f2:f2:55:ad:7c:a8:61:7e:e5:fc:d6:f1:
                    6f:cb:eb:14:7d:e5:a3:ea:f4:1a:60:10:2f:b7:b4:
                    47:09:2d:36:21:28:df:2c:a5:df:6e:5a:5f:cd:4a:
                    9c:5d:59:99:f4:66:5b:4a:0d:5f:9b:e3:f2:45:c1:
                    7f:cd:14:52:52:a2:29:5d:b7:1e:13:2a:d2:ca:45:
                    83:a5:ff:0d:91:5c:35:d1:3e:3c:ae:1c:07:96:c5:
                    c5:4d:2d:13:56:87:26:d1:ae:36:72:1e:b3:8c:fd:
                    2a:e4:c4:54:59:36:7c:7c:5f:81:0b:f3:f9:7c:24:
                    1a:0a:bf:61:df:0c:68:47:6d:bc:6a:52:bd:95:7a:
                    0b:97:6b:a5:dc:6e:38:19:f0:21:90:f0:5b:8d:42:
                    16:5a:2d:0f:4f:90:44:89:b7:f6:eb:be:d9:3e:9e:
                    d9:04:82:b6:01:7b:3e:4e:1e:20:cc:c1:6d:bf:0e:
                    d9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6E:C5:F6:6F:53:AA:CC:00:35:B2:5E:43:0A:ED:94:38:51:47:14
            X509v3 Authority Key Identifier:
                keyid:8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/1eac57354dab9c0c4bf11e8d9a308734b591d344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/78379cd71229f217b9f834bbc4e3fa24f7014f89.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:44:52:d8:d0:4b:96:2a:f1:d8:59:62:7a:1a:5f:b7:14:94:
         d5:09:f0:3e:ff:64:d9:d7:68:d2:7a:b1:15:a2:8d:b4:1c:8a:
         f8:a7:42:06:e1:b1:4d:bb:c0:23:d0:f3:65:16:e8:ce:ba:f9:
         37:04:ef:14:71:e2:45:f6:54:85:6e:15:51:0b:f3:23:63:d9:
         65:ce:b5:8f:fd:5c:38:98:56:ef:4e:61:b7:bc:a3:32:2a:0f:
         06:26:e5:b9:b4:00:45:22:f4:58:6d:8b:9d:2b:92:ad:f1:68:
         7c:6a:77:65:20:f5:3c:64:33:d3:93:67:97:1f:dc:20:eb:7f:
         fb:cd:64:e9:76:b8:c2:19:76:e4:dc:ba:cc:f2:c3:ed:d5:6f:
         ca:b8:82:47:4f:e2:8d:16:14:7b:af:31:8d:5b:7e:bf:d2:3f:
         05:2b:b4:26:b9:21:a0:ed:db:2f:9c:19:68:cb:dd:34:73:9b:
         c7:1a:91:1f:59:45:ab:c5:f6:31:5b:76:26:db:1d:b3:12:30:
         b3:48:79:4f:82:85:22:a8:57:c6:06:bd:1c:b5:04:e5:6a:c5:
         5e:58:ed:38:b9:e5:5f:de:e6:5b:5d:da:b9:c8:91:22:4e:a9:
         15:5d:3b:aa:4f:c7:1b:97:ae:dd:47:3c:5c:f7:1c:4a:5a:c4:
         c5:9d:62:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----