Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/63ddd94e608bee7f20f1eaaa3482364eb95e9ded.roa
File:                     63ddd94e608bee7f20f1eaaa3482364eb95e9ded.roa (raw, json)
Hash identifier:          iq+5blp0WcwVF3hvan++MMeuk/vTjGT1LS/F5rG7Ewo=
Subject key identifier:   FA:B5:B7:65:94:7A:5F:35:B8:D8:C9:F1:64:2D:3A:3F:5C:91:74:F6
Certificate issuer:       /CN=01c01a1d9e34ff483e0b923a24bb992c0f849c5b
Certificate serial:       015310
Authority key identifier: 21:1D:99:A9:7A:3D:56:D2:CC:3E:53:4A:C6:9A:E2:2C:FE:68:70:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/63ddd94e608bee7f20f1eaaa3482364eb95e9ded.roa
Signing time:             Thu 29 Dec 2022 16:43:11 +0000
ROA not before:           Fri 18 Nov 2022 02:58:07 +0000
ROA not after:            Fri 22 Nov 2024 02:58:07 +0000
asID:                     27951
IP address blocks:        2801:1a9:1::/48 maxlen: 48
                          2801:1a9::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86800 (0x15310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c01a1d9e34ff483e0b923a24bb992c0f849c5b
        Validity
            Not Before: Nov 18 02:58:07 2022 GMT
            Not After : Nov 22 02:58:07 2024 GMT
        Subject: CN=63ddd94e608bee7f20f1eaaa3482364eb95e9ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:19:92:61:b6:8f:39:21:4a:a3:db:db:a6:35:
                    45:8e:df:44:55:cb:09:b3:80:20:cd:97:b8:f5:e7:
                    b6:a8:a4:07:bc:98:c5:5a:58:b2:f4:11:bf:2c:da:
                    23:7a:40:fa:c6:58:b8:0c:75:34:22:f3:28:65:25:
                    bc:5a:d5:4a:94:1c:dd:3b:7a:9b:c2:64:b1:10:1b:
                    67:95:4d:e5:80:70:ee:6e:4b:71:6d:31:b5:f2:bb:
                    0f:75:a3:bd:9f:bb:77:94:95:9f:d0:c0:d5:84:99:
                    f2:a3:01:e8:46:eb:1f:49:51:ac:21:7f:5d:91:ef:
                    4c:57:f6:6f:cd:48:ba:3c:1c:33:86:1a:20:c4:16:
                    3d:5e:be:58:6c:dd:80:b9:4e:55:71:1c:5f:f8:a2:
                    ba:74:d4:2c:0d:3d:98:31:f2:46:7c:6f:34:a6:ef:
                    a7:3a:90:fc:3b:f7:f2:db:cb:a2:76:fc:3e:c4:69:
                    8c:af:35:1a:e8:cc:63:4b:c9:65:62:46:04:5f:8c:
                    32:0a:83:84:d4:1e:3d:21:8e:97:18:42:af:9c:bb:
                    39:ad:c4:54:6a:e3:25:b9:7e:30:49:15:e0:af:1b:
                    b8:7c:99:98:a9:35:ec:08:77:9d:3f:72:23:e9:98:
                    f2:ab:a0:80:48:64:c2:19:ba:80:c5:41:c1:d8:50:
                    23:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B5:B7:65:94:7A:5F:35:B8:D8:C9:F1:64:2D:3A:3F:5C:91:74:F6
            X509v3 Authority Key Identifier:
                keyid:21:1D:99:A9:7A:3D:56:D2:CC:3E:53:4A:C6:9A:E2:2C:FE:68:70:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/63ddd94e608bee7f20f1eaaa3482364eb95e9ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a9::/44

    Signature Algorithm: sha256WithRSAEncryption
         08:2d:cb:2b:35:80:f0:08:61:12:21:b6:a0:9f:19:d8:be:8b:
         1b:33:98:a2:88:48:9e:40:0b:7e:a2:b4:49:5c:20:2a:d8:11:
         d1:0c:18:a1:10:50:67:0d:4f:dc:19:2a:75:29:e2:ff:6c:02:
         6c:12:65:d9:fb:44:24:e9:8f:92:20:98:89:df:d4:7f:b6:a7:
         4a:c3:08:c9:5a:88:68:92:11:a7:1d:5f:f0:17:99:5b:7f:db:
         0e:25:76:89:a5:a0:33:d4:93:5d:a0:3e:89:f0:e8:d6:12:ac:
         54:49:e9:f6:9b:87:fd:c7:4d:56:3b:4c:51:88:05:f7:5a:b8:
         43:ea:1d:b5:48:33:7d:3e:46:62:a6:a2:d0:d0:75:25:da:a1:
         0f:84:a6:7c:cf:6f:62:af:cf:32:9b:c9:06:69:30:7d:55:02:
         d1:70:53:ac:7c:ba:fe:c3:44:b8:c6:e2:7f:fc:ce:68:e5:ae:
         b7:91:9e:8b:f8:0c:04:ab:b9:88:48:ce:eb:fa:fb:d2:f7:2f:
         74:82:b9:eb:d0:f2:e4:1f:59:97:e1:f3:b6:03:8a:2d:09:a7:
         9c:24:d8:10:58:41:fc:d4:9b:4d:af:a0:6f:b9:0f:ef:9c:31:
         21:b4:da:7e:32:ca:46:a1:c8:60:44:a9:8e:ed:38:5f:fe:61:
         59:fb:c6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----