Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/2fd07742940b7cec8eea638d442bba3e96bc5f03.roa
File:                     2fd07742940b7cec8eea638d442bba3e96bc5f03.roa (raw, json)
Hash identifier:          RikwDd3DWdiAmM+LgMZyS7c44sAEVSwZkflJlSr/OYE=
Subject key identifier:   85:E0:B9:45:AD:42:24:32:1C:B8:DF:B7:67:BE:A1:5D:89:FD:F6:CA
Certificate issuer:       /CN=ff21b6b8874efa4815d9d8305ad936329fe73ac8
Certificate serial:       B639
Authority key identifier: 94:8F:91:BF:DF:A7:DC:66:1E:61:BA:45:90:97:AB:DD:15:5C:22:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff21b6b8874efa4815d9d8305ad936329fe73ac8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/2fd07742940b7cec8eea638d442bba3e96bc5f03.roa
Signing time:             Wed 12 Apr 2023 22:22:27 +0000
ROA not before:           Mon 10 Apr 2023 22:19:46 +0000
ROA not after:            Sat 12 Apr 2025 22:19:46 +0000
asID:                     14080
IP address blocks:        2801:1f9::/48 maxlen: 48
                          2801:1f9:3::/48 maxlen: 48
                          2801:1f9:5::/48 maxlen: 48
                          2801:1f9:7::/48 maxlen: 48
                          2801:1f9:9::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46649 (0xb639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff21b6b8874efa4815d9d8305ad936329fe73ac8
        Validity
            Not Before: Apr 10 22:19:46 2023 GMT
            Not After : Apr 12 22:19:46 2025 GMT
        Subject: CN=2fd07742940b7cec8eea638d442bba3e96bc5f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:56:25:78:fa:b0:6f:55:39:66:b5:99:ed:f0:
                    6b:36:d3:9e:a1:a2:d9:3b:28:88:ca:77:57:3c:9d:
                    0e:11:18:88:97:75:f1:e7:f3:83:5b:2c:5d:2b:92:
                    f7:af:e0:a2:4e:fb:1b:60:c1:a5:6c:85:1f:4c:8b:
                    88:1d:68:d5:4e:d1:b0:9a:d8:22:82:4e:b5:62:9b:
                    85:ff:35:8e:81:8e:9d:05:5e:3c:a7:4c:61:df:4d:
                    fd:29:97:9e:44:40:7f:67:a3:fb:d3:8a:16:38:c0:
                    a7:6d:84:49:7b:7e:38:af:e1:67:0b:3e:f7:bf:1d:
                    e1:a2:bb:5a:ca:f8:0e:19:ea:f0:da:e8:36:7c:56:
                    fc:37:96:af:bf:44:ee:db:bf:fb:e0:20:20:3d:a3:
                    ae:31:f6:72:26:77:5c:c6:bb:5f:1e:01:c5:b8:d9:
                    d5:81:1d:fd:8a:9b:cc:ad:02:b3:d2:eb:0f:06:92:
                    36:66:0e:10:2f:73:59:13:27:24:b5:1c:6f:f7:fd:
                    08:7b:1b:a9:a1:01:af:f6:ee:07:22:60:9b:34:14:
                    5c:d7:ef:d2:5d:67:3a:8b:d4:f9:a3:28:28:8e:57:
                    68:24:d0:b8:94:ca:54:6a:0f:fe:fd:01:8d:f6:0e:
                    6c:40:1f:d1:d5:7b:c5:c9:7e:e5:c2:dc:08:4e:9e:
                    b2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E0:B9:45:AD:42:24:32:1C:B8:DF:B7:67:BE:A1:5D:89:FD:F6:CA
            X509v3 Authority Key Identifier:
                keyid:94:8F:91:BF:DF:A7:DC:66:1E:61:BA:45:90:97:AB:DD:15:5C:22:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff21b6b8874efa4815d9d8305ad936329fe73ac8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/2fd07742940b7cec8eea638d442bba3e96bc5f03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/ff21b6b8874efa4815d9d8305ad936329fe73ac8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f9::/48
                  2801:1f9:3::/48
                  2801:1f9:5::/48
                  2801:1f9:7::/48
                  2801:1f9:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:40:0e:45:42:69:be:63:39:4c:90:55:c0:a8:24:ce:5f:66:
         7d:cc:26:8c:95:c9:b4:ff:e8:be:fe:48:c7:b9:5e:22:82:4c:
         7a:3b:6c:45:60:86:49:ee:7c:da:b3:6d:07:db:2d:42:f6:4c:
         08:04:13:c5:ef:42:54:6e:4c:e3:90:70:89:e8:49:43:cc:d3:
         f6:78:c5:6b:92:44:a8:fb:21:c9:b8:27:ef:92:5b:39:b5:44:
         46:0a:ef:85:ec:22:42:51:47:61:f4:05:2a:05:36:8c:4a:fd:
         41:8c:74:cf:2d:80:a5:97:0c:90:2e:73:64:01:39:bf:94:c6:
         36:5a:29:bd:7a:73:0c:c9:00:cf:4d:9a:c5:ee:0d:79:09:d5:
         72:12:b0:a4:e7:a9:10:a4:89:8e:37:05:8a:67:90:e0:7d:f5:
         e1:2f:6a:d0:4c:c5:2e:44:55:ca:97:e5:e1:0f:53:56:4d:26:
         fd:93:7d:0b:a2:f3:4b:e9:c6:a6:de:5c:80:e8:67:b6:21:16:
         35:e3:25:77:24:7f:24:9f:39:48:6a:c1:58:10:52:24:ae:6e:
         18:4a:4a:97:1f:d7:43:80:26:43:3b:c6:db:36:e5:f9:27:01:
         35:87:35:df:47:e8:27:f3:19:b4:b7:3b:47:52:3d:8e:d6:22:
         e4:e2:c3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----