Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/302a115016a6bc23ad11741d1d2bc533face601c.roa
File:                     302a115016a6bc23ad11741d1d2bc533face601c.roa (raw, json)
Hash identifier:          b+OIx42UcbRzzfmwl/z+m6+vn0lFCDwueplU79kV1DA=
Subject key identifier:   71:E7:66:6E:77:A2:A8:BE:1A:D4:6A:04:1B:65:4A:C4:9C:F4:85:4F
Certificate issuer:       /CN=c51088545d67fa073263cda959bf704f45a92d2e
Certificate serial:       03800F
Authority key identifier: 9D:F8:D6:8A:EE:DF:99:C1:D3:22:52:C4:9E:9E:D7:F9:1C:88:4E:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c51088545d67fa073263cda959bf704f45a92d2e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/302a115016a6bc23ad11741d1d2bc533face601c.roa
Signing time:             Fri 03 Jun 2022 22:47:46 +0000
ROA not before:           Fri 07 Jan 2022 03:00:00 +0000
ROA not after:            Sun 07 Jan 2024 03:00:00 +0000
asID:                     18747
IP address blocks:        2801:111::/44 maxlen: 44
                          2801:111:2::/48 maxlen: 48
                          2801:111:3::/48 maxlen: 48
                          2801:111:4::/48 maxlen: 48
                          2801:111:5::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229391 (0x3800f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c51088545d67fa073263cda959bf704f45a92d2e
        Validity
            Not Before: Jan  7 03:00:00 2022 GMT
            Not After : Jan  7 03:00:00 2024 GMT
        Subject: CN=302a115016a6bc23ad11741d1d2bc533face601c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:61:a1:d9:85:4b:be:e2:56:fd:f6:ab:85:b7:
                    46:f0:4e:6c:14:1e:56:66:f9:a4:a5:c8:c9:d6:17:
                    ef:8e:e9:b1:d9:86:5f:16:2c:7c:0b:6b:1f:05:ef:
                    ec:83:69:8c:a5:6f:2d:74:73:ee:87:88:a3:58:97:
                    0a:ac:5a:55:26:8f:a3:cb:77:9b:8f:c3:41:2d:cc:
                    88:31:e9:61:ce:f2:0d:f5:6e:6c:05:24:32:f9:31:
                    60:03:10:87:f3:8d:c6:95:c5:75:25:d9:13:13:a4:
                    01:51:c6:39:5f:32:cb:e0:27:88:fa:e7:13:62:15:
                    c7:3e:2e:55:78:fd:99:0e:b0:67:6a:4c:c1:3c:6b:
                    5e:3f:bc:1a:f7:b4:2f:8f:7e:aa:f9:ef:77:50:38:
                    09:6c:70:be:40:5a:60:e3:36:00:24:35:fc:28:f5:
                    f9:be:02:c6:9d:49:9d:45:c5:a0:c6:20:1a:50:aa:
                    0c:4a:fe:70:d2:cc:d9:13:e4:31:25:85:7a:f2:a4:
                    05:84:5b:18:79:3e:91:03:81:53:cc:94:ac:87:25:
                    ad:8d:32:4d:99:eb:b7:3f:38:fa:5d:00:b4:76:15:
                    2d:d1:8b:32:43:c2:92:78:93:e0:27:de:9f:1a:d9:
                    9b:b0:ae:42:13:d3:55:df:f2:46:1e:d9:76:a3:4d:
                    55:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E7:66:6E:77:A2:A8:BE:1A:D4:6A:04:1B:65:4A:C4:9C:F4:85:4F
            X509v3 Authority Key Identifier:
                keyid:9D:F8:D6:8A:EE:DF:99:C1:D3:22:52:C4:9E:9E:D7:F9:1C:88:4E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c51088545d67fa073263cda959bf704f45a92d2e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/302a115016a6bc23ad11741d1d2bc533face601c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/c51088545d67fa073263cda959bf704f45a92d2e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:111::/44

    Signature Algorithm: sha256WithRSAEncryption
         58:13:09:b0:7f:52:93:eb:ed:b9:d3:c3:69:19:01:b8:4e:4c:
         64:0c:1a:21:6b:05:5a:17:f7:a9:1e:90:cc:bd:fa:6e:37:8d:
         8e:94:cc:1d:40:f7:5e:55:d9:3f:35:9f:77:b5:cd:6d:9a:7c:
         09:ae:91:f5:67:91:ea:56:c1:32:8f:d3:a6:98:a9:26:89:b3:
         ec:db:85:a7:25:28:f2:d2:60:99:f8:d2:f7:8b:53:37:1d:f4:
         10:bd:cd:01:e4:a2:72:94:d1:8c:6b:7f:5a:3d:29:5e:f6:42:
         78:91:b1:e7:0c:f7:9f:81:b0:c9:39:04:1b:40:ba:04:92:c1:
         25:1e:05:e5:f6:0b:db:ef:69:35:3d:5e:ea:56:7e:bb:0f:5f:
         d3:42:89:f2:c9:56:76:05:b7:ab:2d:44:c9:b5:cb:ca:c4:15:
         17:2e:a1:6c:2d:ad:48:0c:89:b1:69:df:81:8c:0a:e5:9e:00:
         e4:08:83:09:3e:d5:49:da:82:81:e9:5a:1d:0a:ec:83:0f:90:
         62:25:54:cc:4c:1f:af:6f:10:13:7a:c1:d5:8f:ac:af:20:96:
         2e:17:dd:c7:56:c7:c7:f0:ff:ce:cc:bc:ca:e4:8a:10:5a:38:
         4f:54:ff:45:27:ff:fa:3f:d6:79:af:9a:f9:5c:2e:e2:ea:a6:
         73:83:43:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----