Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/4f60005716167853fb0b7c56a90a4fbcb165bc9e.roa
File:                     4f60005716167853fb0b7c56a90a4fbcb165bc9e.roa (raw, json)
Hash identifier:          AyjqnLjlUKnIS+GzBlE2tPZm2fH/D1x/L+GAMTTDgKc=
Subject key identifier:   07:0E:DA:12:83:E8:5F:51:88:B9:9D:27:4A:82:05:71:63:A5:B6:E1
Certificate issuer:       /CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
Certificate serial:       0ACF65
Authority key identifier: 8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/4f60005716167853fb0b7c56a90a4fbcb165bc9e.roa
Signing time:             Mon 03 Apr 2023 21:07:19 +0000
ROA not before:           Wed 26 Jan 2022 03:00:00 +0000
ROA not after:            Sat 27 Jan 2024 03:00:00 +0000
asID:                     11315
IP address blocks:        2800:a00::/32 maxlen: 48

Validation:               Failed, certificate revoked on Fri 26 Jan 2024 07:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 708453 (0xacf65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
        Validity
            Not Before: Jan 26 03:00:00 2022 GMT
            Not After : Jan 27 03:00:00 2024 GMT
        Subject: CN=4f60005716167853fb0b7c56a90a4fbcb165bc9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:e2:90:9c:70:28:b7:49:8c:3b:15:05:17:
                    cc:0d:e9:81:d5:09:e7:f7:07:9d:eb:6e:38:ef:e3:
                    a8:48:72:16:cf:1d:da:e0:6f:bf:9f:a8:59:18:42:
                    4d:38:b3:c3:b1:c2:f2:41:a1:df:a5:b0:2c:3d:f0:
                    c7:00:20:76:6a:f6:33:51:77:a2:3a:14:77:98:a9:
                    3a:67:2e:47:23:1f:d0:4d:b5:1b:4d:0a:8a:b5:ab:
                    5c:f9:aa:4c:38:2f:4c:6d:f0:03:18:6b:cd:35:47:
                    c9:36:6a:5b:47:54:d4:a5:66:86:61:db:56:6b:20:
                    76:b5:2d:e3:05:f6:e7:fb:c3:2c:08:a7:9d:e1:b8:
                    bb:a2:fb:22:30:4b:2b:64:9b:f2:fb:9e:5d:27:c9:
                    c2:2d:0a:7a:5b:c4:0e:66:c4:30:6f:4d:2b:27:2a:
                    24:f5:61:87:89:ec:c9:da:fe:e8:1c:01:77:30:ac:
                    4a:91:f9:68:0a:35:e5:11:66:2d:ff:c4:ec:b7:c2:
                    64:c5:6e:9c:af:55:8d:52:e3:d8:77:54:ec:77:65:
                    a0:2d:3b:e4:1c:88:13:a9:57:51:5f:20:91:d0:4e:
                    9d:03:44:03:39:09:c3:11:69:d3:70:36:cc:b3:cf:
                    f1:7b:51:a6:67:98:c0:8f:9d:22:55:ef:57:bb:d0:
                    4a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0E:DA:12:83:E8:5F:51:88:B9:9D:27:4A:82:05:71:63:A5:B6:E1
            X509v3 Authority Key Identifier:
                keyid:8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/4f60005716167853fb0b7c56a90a4fbcb165bc9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/78379cd71229f217b9f834bbc4e3fa24f7014f89.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:a3:d3:69:69:48:a5:ee:3e:e3:6c:99:39:f6:5e:84:ae:35:
         b6:51:b5:bc:ac:37:c6:07:68:80:af:88:c4:f2:78:1e:6c:d6:
         9c:8f:8c:8c:22:b1:13:3a:0e:7d:c7:f9:ef:34:a0:0e:83:2a:
         65:1b:20:f5:88:70:de:80:16:9e:01:f5:9f:6e:e1:24:2a:f4:
         7b:28:10:11:74:54:1f:2c:9d:87:38:3d:49:a0:29:c8:a0:cd:
         8e:45:ef:bd:33:e7:a7:36:d0:65:ea:ae:b9:aa:c4:8e:01:06:
         59:71:c7:3f:ab:33:c8:f7:2e:52:e5:46:c0:5e:55:71:a3:2c:
         87:5c:aa:0c:0a:af:45:89:27:8b:07:67:9b:b7:a7:e6:1a:b8:
         7a:85:37:29:42:5b:f8:00:d5:15:91:c8:94:90:59:7b:72:f4:
         d3:9c:ee:f5:c8:8b:3c:62:a6:d5:54:9d:67:b3:75:20:a2:cc:
         12:fd:62:51:7e:56:be:33:d0:dd:29:fa:83:fc:71:fd:92:da:
         71:8e:f0:fe:39:91:3b:2e:b1:70:ed:a6:5f:97:5d:51:a8:2b:
         5e:59:4a:ef:19:93:d6:23:bc:df:be:02:e9:91:95:a9:0a:37:
         10:ba:d5:5c:38:54:24:f4:40:23:4e:4c:10:02:9b:d4:54:45:
         5b:75:f7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----