Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/616a61efa14e6f491591ce6668cc631045862e60.roa
File:                     616a61efa14e6f491591ce6668cc631045862e60.roa (raw, json)
Hash identifier:          8fqnnj3xUoZBXROlGILiyUfuSzI4A483C9DjhsqVjs8=
Subject key identifier:   59:66:BF:8F:1E:D2:AC:80:35:ED:3A:7A:49:17:6E:B1:8D:86:E6:21
Certificate issuer:       /CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
Certificate serial:       19B434
Authority key identifier: 57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/616a61efa14e6f491591ce6668cc631045862e60.roa
Signing time:             Wed 07 Sep 2022 21:28:46 +0000
ROA not before:           Wed 24 Mar 2021 14:37:09 +0000
ROA not after:            Tue 24 Mar 2026 14:37:09 +0000
asID:                     263779
IP address blocks:        2001:13c7:7004::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1684532 (0x19b434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
        Validity
            Not Before: Mar 24 14:37:09 2021 GMT
            Not After : Mar 24 14:37:09 2026 GMT
        Subject: CN=616a61efa14e6f491591ce6668cc631045862e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e8:e9:4a:b4:d7:58:46:fc:45:51:1b:3c:59:
                    3e:90:ca:2e:5e:d9:25:15:5f:65:c3:59:23:22:6a:
                    6c:9d:28:be:b2:73:fa:ca:cc:61:fc:c4:86:b1:26:
                    6c:1d:99:01:3c:99:90:29:ac:6b:a2:76:56:23:63:
                    82:b9:6a:22:c6:56:34:a5:05:93:8c:3c:9e:26:c6:
                    26:a4:dd:14:f9:ad:45:96:05:8b:f5:8e:96:dc:63:
                    1e:a0:95:a3:a1:86:96:0b:da:85:8e:90:e8:e1:cc:
                    de:35:84:b8:05:62:83:1b:b9:64:02:93:63:36:9b:
                    20:e4:75:89:3c:e1:81:3f:52:24:d1:e1:22:7b:db:
                    be:e8:9c:9d:27:ac:af:ab:63:a3:1f:2b:0f:d7:5f:
                    ed:e6:d9:99:77:f7:24:79:a7:33:3b:6d:ab:a5:25:
                    8e:1c:1f:b4:22:e3:1f:d3:fe:3c:aa:c8:d7:04:1e:
                    17:e3:f3:be:76:30:3e:ed:c6:21:60:db:50:bd:5e:
                    c0:65:92:5d:41:56:2b:71:ef:31:da:46:47:f6:6b:
                    c5:92:1e:9e:ff:2c:8f:1e:09:a4:8b:b9:a4:33:9c:
                    f7:60:97:18:37:e1:3f:e5:bc:43:6c:59:ef:27:04:
                    72:e7:3c:75:a3:f5:0c:ad:38:4b:cf:f8:61:63:a5:
                    bd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:66:BF:8F:1E:D2:AC:80:35:ED:3A:7A:49:17:6E:B1:8D:86:E6:21
            X509v3 Authority Key Identifier:
                keyid:57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/616a61efa14e6f491591ce6668cc631045862e60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7004::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:37:32:fa:af:29:6d:fc:60:27:0f:92:c5:30:db:fc:9f:cf:
         72:c1:b5:f2:78:37:07:78:94:1f:46:40:76:95:80:ee:e8:2d:
         b6:c8:0e:73:aa:ab:7c:43:bf:b4:20:3f:ac:a7:17:2f:09:fc:
         34:f4:fc:d4:5a:a2:92:68:99:53:6c:45:be:30:2c:24:a3:d2:
         85:32:11:7b:15:8d:65:22:99:c9:a5:03:6f:82:1e:42:82:5c:
         97:87:17:28:4c:fd:8d:e8:2c:9e:de:6d:2e:61:49:1f:c9:1a:
         3d:9b:4f:b1:7a:92:be:39:ba:84:ed:d4:c7:9f:4c:20:4a:9d:
         bd:90:5d:81:b8:f8:db:a9:35:8d:f9:6d:a0:5f:74:15:7d:45:
         16:b8:2c:34:60:9c:9d:ec:79:84:ca:76:a5:65:7e:da:1a:8e:
         97:6b:2a:f6:b1:a9:2b:40:61:20:d4:fc:d7:25:e2:77:c9:0c:
         66:3f:fb:01:48:f1:0b:82:67:88:2e:37:53:93:b6:b7:05:da:
         3a:2f:79:27:db:56:6b:33:c4:f1:30:93:a7:86:fb:4f:33:ba:
         0e:37:4a:12:02:a8:52:21:ca:2a:77:f2:03:82:76:22:38:4b:
         f0:06:a5:49:2d:a0:a3:98:8d:f8:0d:74:81:d3:f0:7d:38:36:
         fa:7a:23:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----