Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/14c1094fcf82e790ad468284139f21af0f0e0238.roa
File:                     14c1094fcf82e790ad468284139f21af0f0e0238.roa (raw, json)
Hash identifier:          uMsAq/QJdLVjIdYyaTWXFtki138QpeCdeFhsyJH46oo=
Subject key identifier:   33:34:5C:EE:72:F8:ED:74:C4:F5:FD:D1:0A:23:37:98:B3:06:32:92
Certificate issuer:       /CN=01c01a1d9e34ff483e0b923a24bb992c0f849c5b
Certificate serial:       014AFC
Authority key identifier: 21:1D:99:A9:7A:3D:56:D2:CC:3E:53:4A:C6:9A:E2:2C:FE:68:70:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/14c1094fcf82e790ad468284139f21af0f0e0238.roa
Signing time:             Thu 29 Dec 2022 16:41:10 +0000
ROA not before:           Mon 14 Nov 2022 02:57:02 +0000
ROA not after:            Fri 22 Nov 2024 02:57:02 +0000
asID:                     13489
IP address blocks:        2801:1a9:2::/48 maxlen: 48
                          2801:1a9:1::/48 maxlen: 48
                          2801:1a9::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84732 (0x14afc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c01a1d9e34ff483e0b923a24bb992c0f849c5b
        Validity
            Not Before: Nov 14 02:57:02 2022 GMT
            Not After : Nov 22 02:57:02 2024 GMT
        Subject: CN=14c1094fcf82e790ad468284139f21af0f0e0238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e0:eb:03:91:34:dc:01:8c:65:89:0d:38:dd:
                    16:22:68:ec:90:07:c1:cb:c4:0e:33:57:14:6f:5c:
                    da:2a:51:20:4d:a1:33:3d:a6:b4:3f:87:37:1d:b7:
                    14:56:36:86:ee:d6:ed:42:00:1c:1a:15:a5:ab:e8:
                    f6:ec:1c:b4:87:fc:7e:82:38:35:9f:91:c5:db:03:
                    ff:12:b9:93:49:2f:8c:a2:48:d1:fd:48:14:85:91:
                    84:fe:9c:15:14:2a:0b:d7:1d:62:66:be:ff:f2:4e:
                    2f:9d:de:41:f6:68:8b:4f:f4:7f:91:4c:52:06:d2:
                    e6:75:17:18:fc:5e:b0:34:a4:a9:d9:75:57:de:5c:
                    cd:03:81:7f:20:8e:46:2c:52:4c:d6:b8:87:c7:fe:
                    e7:23:28:66:fb:ea:6b:16:f7:ec:7d:db:91:86:73:
                    d6:84:22:fb:93:1f:aa:0f:bd:59:b2:77:4e:21:9f:
                    59:5f:6d:df:84:56:8f:6a:4d:16:9a:29:5c:4a:ec:
                    76:d0:5c:1b:1e:c1:96:48:70:6d:06:44:e7:f4:08:
                    c1:c5:08:22:56:e2:86:6d:6e:d2:75:11:54:63:cb:
                    6a:9d:1f:00:32:c4:f5:2e:1e:63:e3:f6:60:0a:f7:
                    74:32:f3:f8:54:15:4b:71:74:91:2b:66:d4:e4:f6:
                    cb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:34:5C:EE:72:F8:ED:74:C4:F5:FD:D1:0A:23:37:98:B3:06:32:92
            X509v3 Authority Key Identifier:
                keyid:21:1D:99:A9:7A:3D:56:D2:CC:3E:53:4A:C6:9A:E2:2C:FE:68:70:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/14c1094fcf82e790ad468284139f21af0f0e0238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a9::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:d4:da:ee:c4:c3:a3:e0:1e:70:8c:1b:bc:42:cc:41:2c:c1:
         7b:eb:e7:cf:92:96:bd:97:f3:d0:7d:11:ad:4e:dd:a4:fd:19:
         83:3b:c9:59:1c:66:d4:7a:45:11:64:91:10:a5:ca:34:0a:66:
         27:11:0f:38:56:75:2b:2f:55:e1:0c:31:9b:46:2b:46:af:85:
         89:88:ad:e7:4d:55:58:62:13:6d:4d:33:78:00:11:81:af:d1:
         e8:41:dc:d2:8c:7f:3b:ae:72:41:86:67:cf:8a:57:5c:f7:aa:
         9e:24:61:79:ac:93:c6:dc:83:aa:01:9d:09:f7:a5:7d:aa:74:
         3d:99:66:07:5e:74:04:2e:bb:c3:6e:b4:1a:b5:51:65:bd:1e:
         5c:d0:31:07:fb:dd:8f:15:a4:be:62:6e:71:0a:7b:37:ef:56:
         3a:3a:5f:0c:c5:74:06:2a:a7:7b:d1:51:df:fb:cc:68:c5:cb:
         c5:1c:0c:ef:03:d3:ec:d6:f0:5e:84:2f:3b:46:96:d7:4a:76:
         73:9a:33:de:b4:9a:4f:d0:ea:f5:b8:0a:b3:41:d3:9e:95:91:
         1f:90:54:ed:67:d9:29:1d:83:03:45:ac:42:6d:86:f5:1a:fb:
         01:e6:8a:c4:55:05:5b:f4:a3:14:cd:d6:b1:51:99:4a:5a:65:
         f6:7a:ec:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----