Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/a37e99796da8168ebaeac20ada5e27c18c6903ba.roa
File:                     a37e99796da8168ebaeac20ada5e27c18c6903ba.roa (raw, json)
Hash identifier:          Ubbcbl0fRZKEgd5PAJFfeMKBZp91Ondd3SXM1rgu/0I=
Subject key identifier:   E4:5F:2F:6B:06:4A:7E:4C:A0:97:08:C9:AB:16:88:21:33:1F:9B:BB
Certificate issuer:       /CN=01c01a1d9e34ff483e0b923a24bb992c0f849c5b
Certificate serial:       C4A9
Authority key identifier: 21:1D:99:A9:7A:3D:56:D2:CC:3E:53:4A:C6:9A:E2:2C:FE:68:70:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/a37e99796da8168ebaeac20ada5e27c18c6903ba.roa
Signing time:             Wed 14 Dec 2022 21:32:00 +0000
ROA not before:           Sat 19 Nov 2022 02:57:02 +0000
ROA not after:            Fri 22 Nov 2024 02:57:02 +0000
asID:                     13489
IP address blocks:        2801:1a9::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50345 (0xc4a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c01a1d9e34ff483e0b923a24bb992c0f849c5b
        Validity
            Not Before: Nov 19 02:57:02 2022 GMT
            Not After : Nov 22 02:57:02 2024 GMT
        Subject: CN=a37e99796da8168ebaeac20ada5e27c18c6903ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:70:8e:89:fe:a7:c0:4f:60:10:76:ac:5b:0c:
                    2b:04:59:2d:b4:40:44:22:d7:dc:51:c1:c1:88:6b:
                    be:a6:d4:f2:d1:39:35:fe:56:8a:7c:5f:3b:07:2c:
                    7a:a5:0e:ad:4b:b1:b1:cf:e3:cc:8d:fc:63:c8:d6:
                    5f:ce:6b:9d:5c:26:f6:f9:ab:66:f9:7d:c2:1c:8b:
                    e3:be:84:33:f8:0e:f3:e8:f7:b1:c4:27:41:6b:0c:
                    6f:0c:74:b1:80:95:31:e9:21:db:3d:32:db:66:de:
                    db:72:3a:89:08:95:03:2f:53:77:ea:64:82:03:e8:
                    de:4c:e0:a8:bb:e9:9c:2c:23:9f:34:78:80:1e:03:
                    5d:0d:c3:ec:48:28:db:5c:e6:25:5b:a2:23:3f:fe:
                    1f:13:1b:c0:4a:17:97:85:ff:5d:26:80:70:b3:ba:
                    2a:83:e2:9e:9c:5d:b6:db:2c:f0:e3:81:3a:bd:aa:
                    9f:4f:01:1b:81:a7:d7:f1:00:de:cf:30:7c:87:04:
                    15:fd:1a:46:74:1d:cf:bc:55:2c:f8:5b:c4:1a:aa:
                    7f:0c:79:90:93:e0:e0:15:a1:3d:27:87:fd:04:8e:
                    fe:ae:ee:49:a2:93:be:00:f2:46:4c:59:1e:25:27:
                    46:7d:27:40:24:3e:ca:02:6b:78:29:e5:01:98:1e:
                    13:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5F:2F:6B:06:4A:7E:4C:A0:97:08:C9:AB:16:88:21:33:1F:9B:BB
            X509v3 Authority Key Identifier:
                keyid:21:1D:99:A9:7A:3D:56:D2:CC:3E:53:4A:C6:9A:E2:2C:FE:68:70:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/a37e99796da8168ebaeac20ada5e27c18c6903ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a9::/44

    Signature Algorithm: sha256WithRSAEncryption
         5b:80:1a:ae:f5:a5:86:ed:2f:95:27:a1:c7:9f:69:35:32:22:
         7a:da:19:b1:ce:ea:b3:5b:66:17:78:9a:a1:e6:8e:56:6f:5b:
         b0:a3:cf:2a:1f:89:a6:4b:b6:5c:9a:9d:80:7b:50:99:9f:f3:
         23:65:e4:05:31:b5:7d:32:75:78:db:4d:ad:33:90:1c:d3:ad:
         bb:18:90:bf:bf:35:43:2d:4e:bb:9e:df:23:79:b5:aa:87:b3:
         e8:6b:ef:7c:47:7c:73:0d:c7:8e:b9:35:d4:5c:1d:f8:e0:43:
         02:20:74:28:f8:5b:3e:4f:99:f6:ae:40:03:77:cf:9e:62:40:
         dd:27:60:c0:41:4d:a2:83:23:40:50:02:fa:8f:c5:58:1d:37:
         1e:c6:5e:c0:a6:c9:1f:1d:f7:93:d7:62:d6:59:69:b8:93:b2:
         f5:32:63:f9:14:7f:9a:cf:a5:ff:cd:21:16:d3:c8:3f:f6:c2:
         18:48:a2:8f:95:cc:69:62:de:f1:47:01:20:52:ef:21:5e:e8:
         b1:e0:f0:40:44:42:ac:fb:08:ba:03:e2:a2:4a:34:aa:58:d7:
         ac:8e:8b:21:14:84:10:9d:d2:34:1d:e5:71:88:93:74:8d:9a:
         b8:95:d7:cd:20:06:3f:6b:83:fe:0a:61:31:11:dd:cc:a4:69:
         21:3e:82:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----