Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cadcc0fe-1cb7-429e-a237-d2506cdb966a/0b14dfb7eb2d443f216b7819b1dd9178ccfcbf4b.roa
File:                     0b14dfb7eb2d443f216b7819b1dd9178ccfcbf4b.roa (raw, json)
Hash identifier:          hPqTZKNRd8fckie/uNzd5Yc5CTOhcnsRs0TUIe8wnsA=
Subject key identifier:   4E:F8:27:95:90:E9:EA:71:B9:AA:09:B9:C0:3A:81:9F:4E:C3:58:8C
Certificate issuer:       /CN=0ee1417c821c1047cee571e478b81c5ba728dc74
Certificate serial:       0D696B
Authority key identifier: 89:39:3A:27:3F:B1:D2:B2:F2:8F:D7:F9:1E:50:30:79:0A:E8:6A:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ee1417c821c1047cee571e478b81c5ba728dc74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cadcc0fe-1cb7-429e-a237-d2506cdb966a/0b14dfb7eb2d443f216b7819b1dd9178ccfcbf4b.roa
Signing time:             Wed 24 Mar 2021 14:35:09 +0000
ROA not before:           Wed 24 Mar 2021 14:35:09 +0000
ROA not after:            Tue 24 Mar 2026 14:35:09 +0000
asID:                     27845
IP address blocks:        2800:9f0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 23 Jan 2024 07:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878955 (0xd696b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee1417c821c1047cee571e478b81c5ba728dc74
        Validity
            Not Before: Mar 24 14:35:09 2021 GMT
            Not After : Mar 24 14:35:09 2026 GMT
        Subject: CN=0b14dfb7eb2d443f216b7819b1dd9178ccfcbf4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:28:44:af:3e:e7:c9:64:91:03:da:f3:c4:e2:
                    ab:b0:f0:06:db:1d:1b:4d:46:83:2b:74:0f:9e:85:
                    78:ca:ef:87:91:ec:3b:36:9c:26:4c:f4:3c:00:77:
                    c7:4d:a6:82:54:f7:e2:aa:80:d8:ed:9a:9e:df:cc:
                    2d:bc:59:e4:f0:af:83:ed:9a:f8:42:76:b4:16:be:
                    31:35:63:ab:97:9b:51:7b:38:ec:0d:68:c0:d9:ab:
                    2a:9c:fb:18:cf:a8:de:8b:ce:45:1b:25:d8:df:7b:
                    43:85:5d:b9:9a:8f:c2:18:33:d6:5f:84:58:26:e9:
                    93:c7:81:f2:d1:bf:5b:52:ae:59:0d:d1:b7:9e:36:
                    bf:4c:e7:8f:1b:7c:f3:88:d5:1e:e6:a2:46:0b:f0:
                    01:9f:6d:53:b8:3d:66:80:c5:93:68:8e:83:8b:21:
                    57:6c:c0:7b:ea:88:62:84:4b:b4:bb:a2:f3:01:31:
                    e3:61:42:07:fe:3e:9e:33:72:0f:72:26:95:da:0e:
                    10:45:f4:9b:42:90:9e:09:f7:b5:4e:30:ec:35:28:
                    48:0b:f4:e0:53:f6:2e:59:78:87:fa:0e:52:4b:7d:
                    52:06:45:52:ed:8d:af:52:52:78:54:64:2e:8a:1a:
                    d1:39:ac:cc:22:b1:7c:80:ae:b1:af:b6:ef:15:d0:
                    94:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F8:27:95:90:E9:EA:71:B9:AA:09:B9:C0:3A:81:9F:4E:C3:58:8C
            X509v3 Authority Key Identifier:
                keyid:89:39:3A:27:3F:B1:D2:B2:F2:8F:D7:F9:1E:50:30:79:0A:E8:6A:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ee1417c821c1047cee571e478b81c5ba728dc74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cadcc0fe-1cb7-429e-a237-d2506cdb966a/0b14dfb7eb2d443f216b7819b1dd9178ccfcbf4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cadcc0fe-1cb7-429e-a237-d2506cdb966a/0ee1417c821c1047cee571e478b81c5ba728dc74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:9f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:cc:de:fd:df:b6:db:2f:0a:63:fa:a9:c3:c8:49:4f:60:a1:
         cc:b6:86:c9:be:b6:91:7c:f4:86:79:59:86:54:5f:3e:31:bb:
         84:4c:e6:a8:7b:ff:ca:47:e5:17:9b:6a:8a:53:6d:c8:71:ba:
         8e:1f:47:78:cc:db:a9:52:12:a5:46:cc:76:b3:d6:5b:7f:2c:
         28:ec:10:b3:ca:1d:ec:57:d5:d4:b5:12:c6:f7:1e:42:4a:f5:
         9d:80:83:26:97:1e:62:1c:51:d7:6b:4a:4d:6e:78:05:0d:33:
         6a:ad:48:76:5c:46:17:2f:a2:09:61:e1:c2:9b:08:1d:d3:84:
         7b:6c:ed:d6:3a:36:64:99:1b:e1:2d:2b:f9:18:e5:6c:c0:1e:
         64:69:08:00:a8:1b:1b:19:a9:cb:aa:60:01:66:9f:e4:b2:c9:
         2c:24:17:31:99:30:11:bf:df:49:f6:94:9b:85:e0:f2:02:03:
         c1:85:9e:fb:84:36:a8:e4:19:59:84:c0:42:28:4b:69:64:b6:
         8a:d7:25:b3:92:c7:32:17:fd:36:3e:4f:9f:5c:a3:70:b8:3b:
         8a:6f:cc:45:fe:a6:24:60:10:23:c8:c4:24:87:46:c2:47:50:
         df:f4:3b:90:3a:0e:f6:a9:d6:fe:7a:10:16:0f:8a:a7:29:cc:
         8c:e9:67:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----