Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e70b6795-29a9-4fec-a9fb-7b101ab68144/cf2be17654dc18ecb403fa3fe30778b25bcaccc7.roa
File:                     cf2be17654dc18ecb403fa3fe30778b25bcaccc7.roa (raw, json)
Hash identifier:          IpK9DySHT80IfCEH/f6ahchKLJ/hCEo8PJrx5NJ5RXQ=
Subject key identifier:   27:C8:85:50:78:40:64:69:9B:21:A5:D8:61:31:C6:94:C2:5A:15:0C
Certificate issuer:       /CN=266c39f3ff09d22a22b960d65309889ba5f79757
Certificate serial:       1796E8
Authority key identifier: BC:38:DF:7A:C9:79:F1:54:6D:38:2E:99:AE:01:41:21:FC:5B:53:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/266c39f3ff09d22a22b960d65309889ba5f79757.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e70b6795-29a9-4fec-a9fb-7b101ab68144/cf2be17654dc18ecb403fa3fe30778b25bcaccc7.roa
Signing time:             Thu 10 Aug 2023 20:48:31 +0000
ROA not before:           Wed 09 Aug 2023 20:48:31 +0000
ROA not after:            Sun 10 Aug 2025 20:48:31 +0000
asID:                     262589
IP address blocks:        2801:126::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1545960 (0x1796e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266c39f3ff09d22a22b960d65309889ba5f79757
        Validity
            Not Before: Aug  9 20:48:31 2023 GMT
            Not After : Aug 10 20:48:31 2025 GMT
        Subject: CN=cf2be17654dc18ecb403fa3fe30778b25bcaccc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:52:25:e7:87:c7:a4:c5:14:d4:cc:b0:fb:4d:
                    7e:2a:98:99:c3:6e:48:74:6b:c3:c8:fd:53:e9:27:
                    34:4d:03:08:7a:2e:c1:05:d2:53:32:bf:17:83:65:
                    95:bd:11:24:24:12:f7:83:56:7d:0a:63:f2:aa:e4:
                    2f:b1:0c:90:4b:a7:48:c6:ba:0d:85:a2:54:ca:66:
                    5f:dc:30:8f:a2:bc:fa:ae:f8:14:97:ff:b9:0f:74:
                    9c:74:79:30:c2:8b:0a:07:a1:31:d3:33:c6:38:35:
                    99:ac:ad:40:46:29:6a:df:53:88:a5:45:46:d8:90:
                    bf:08:ce:cc:b2:4f:d2:86:72:e6:a3:40:ee:86:20:
                    10:fc:7e:e0:e2:35:c2:bc:5e:53:da:5a:02:78:0f:
                    bb:b4:ae:bf:52:91:bb:82:2a:72:8c:ca:b8:7c:d3:
                    b2:29:60:17:4e:48:42:77:7c:b7:9a:0b:12:d7:67:
                    65:70:47:69:e7:c3:4d:fb:1f:62:67:74:cb:18:0f:
                    ad:70:1a:43:e9:e6:8f:fd:a2:31:2c:5a:48:70:85:
                    9c:5c:a8:6c:c3:fb:48:5b:6a:9e:be:18:3b:c8:a1:
                    d4:68:79:d3:8e:34:13:37:8d:e9:4d:70:5b:f6:d7:
                    ac:5c:aa:3b:da:c1:5e:02:d6:9d:75:a1:31:4f:bf:
                    b3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C8:85:50:78:40:64:69:9B:21:A5:D8:61:31:C6:94:C2:5A:15:0C
            X509v3 Authority Key Identifier:
                keyid:BC:38:DF:7A:C9:79:F1:54:6D:38:2E:99:AE:01:41:21:FC:5B:53:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/266c39f3ff09d22a22b960d65309889ba5f79757.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e70b6795-29a9-4fec-a9fb-7b101ab68144/cf2be17654dc18ecb403fa3fe30778b25bcaccc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e70b6795-29a9-4fec-a9fb-7b101ab68144/266c39f3ff09d22a22b960d65309889ba5f79757.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:126::/44

    Signature Algorithm: sha256WithRSAEncryption
         2d:b2:68:c6:f9:29:29:10:89:4a:9b:92:96:bf:15:6e:56:bd:
         82:d1:4e:b8:fe:c0:a2:5d:08:7a:84:ae:83:f2:50:fb:d6:9c:
         ae:c5:d7:75:73:e5:d9:34:cc:5b:48:4a:b5:3e:24:b1:48:0e:
         df:da:74:17:30:cd:70:5f:3d:48:7b:e7:43:c6:43:ae:6b:87:
         eb:ea:62:58:f6:25:fb:fc:1d:1e:94:6c:74:c7:23:3c:5d:79:
         bd:49:eb:c2:19:8c:b3:e2:fc:cb:a1:75:97:20:c5:c1:86:97:
         d9:1b:3a:11:79:0d:e3:01:d6:05:81:58:ba:50:20:bf:e3:85:
         29:90:5a:1e:72:44:d0:f1:9f:c2:4e:fa:7c:18:44:3c:f2:9d:
         ef:a4:f6:e0:d4:c4:b5:87:b5:6e:ef:99:0a:11:c0:e1:21:86:
         19:9d:61:02:de:f9:46:25:85:b1:3b:b9:a7:3b:b0:c6:fc:68:
         e5:0a:d2:39:79:53:2c:da:75:29:e2:58:4e:2b:d7:1b:42:0e:
         b6:81:1c:a5:a0:08:42:d5:f3:23:3a:a0:69:a4:7d:36:44:33:
         ff:47:46:98:4e:2d:5d:be:07:98:a8:1f:a7:0c:a7:db:10:10:
         26:a6:8f:06:10:03:6b:1a:2c:32:16:70:ab:be:0c:55:98:02:
         53:3d:cc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----