Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/9e41342d5f20ef2023d1a50d22034473aac7ee29.roa
File:                     9e41342d5f20ef2023d1a50d22034473aac7ee29.roa (raw, json)
Hash identifier:          JtFe+xDYPBEHd++HOCP+M4c/kWDTDCGkpfRekFdrvLM=
Subject key identifier:   24:4E:3C:F1:BC:ED:5A:70:00:00:FD:C0:9D:9B:64:D8:C4:18:22:66
Certificate issuer:       /CN=b0951c16b2e21e742562516097161ba7ad928df5
Certificate serial:       0174BC
Authority key identifier: A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/9e41342d5f20ef2023d1a50d22034473aac7ee29.roa
Signing time:             Wed 06 Dec 2023 18:46:35 +0000
ROA not before:           Wed 06 Dec 2023 18:46:34 +0000
ROA not after:            Sat 06 Dec 2025 18:46:34 +0000
asID:                     52224
IP address blocks:        2801:165::/44 maxlen: 46

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95420 (0x174bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0951c16b2e21e742562516097161ba7ad928df5
        Validity
            Not Before: Dec  6 18:46:34 2023 GMT
            Not After : Dec  6 18:46:34 2025 GMT
        Subject: CN=9e41342d5f20ef2023d1a50d22034473aac7ee29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f2:12:9d:07:d9:55:9f:eb:fa:06:2b:0d:23:
                    db:a5:bd:89:8f:a5:e8:ae:31:87:e3:9a:0a:51:02:
                    cd:5c:7a:71:dc:81:ed:cf:6b:a7:99:9a:bf:05:d4:
                    f2:4e:be:c1:26:c2:7a:43:0b:1e:10:4d:0b:4c:2b:
                    c3:81:b3:b3:c7:15:8e:09:99:47:cb:e0:ef:ac:c1:
                    97:82:cd:26:88:c7:43:87:7c:7d:f8:22:96:d9:57:
                    c0:f7:0a:da:d0:11:83:e0:29:f3:82:c5:31:82:67:
                    46:74:bf:a3:0c:81:72:13:4f:9c:20:69:d9:6a:2a:
                    f2:9c:74:ef:6d:b3:f3:73:d1:0c:da:f1:46:93:b1:
                    18:2f:f2:a5:ad:ab:2d:98:15:20:32:50:32:0c:68:
                    d1:89:ea:ba:96:b2:c1:73:da:29:cc:5f:a1:8c:97:
                    1e:1c:b4:54:eb:b2:a2:52:5a:62:0a:16:de:9e:c4:
                    08:b6:da:31:47:c8:0f:a9:da:85:21:5a:e0:99:ca:
                    00:46:db:4f:18:36:43:74:28:92:90:64:7e:81:1b:
                    1e:48:c2:4c:41:8f:0c:ae:46:72:cc:0b:9e:62:a6:
                    16:1a:14:0b:9b:be:54:bd:ba:3a:ea:86:e8:77:5a:
                    40:39:2e:cf:5b:ab:04:06:a9:f9:87:81:e6:78:b0:
                    65:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4E:3C:F1:BC:ED:5A:70:00:00:FD:C0:9D:9B:64:D8:C4:18:22:66
            X509v3 Authority Key Identifier:
                keyid:A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/9e41342d5f20ef2023d1a50d22034473aac7ee29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

    Signature Algorithm: sha256WithRSAEncryption
         a8:99:c8:69:fb:0a:02:61:b0:94:d0:28:0f:9c:b3:1f:49:e5:
         43:06:0d:26:d5:a7:12:c0:1b:0b:c2:4f:51:b2:62:cf:85:db:
         ca:55:6b:df:47:2f:6f:7f:72:c0:78:aa:c0:41:e6:d7:8b:28:
         8c:11:10:4f:09:34:df:91:5b:80:bd:ba:7a:1a:12:b1:18:ee:
         68:98:15:8d:08:e0:59:68:d1:de:02:0b:42:22:18:4a:a7:94:
         bd:ae:cc:22:47:50:1a:88:f1:b5:a2:7a:5c:89:1d:fc:dd:18:
         70:7f:55:a1:12:73:da:7f:7d:d3:45:45:29:73:d7:ce:ab:1c:
         84:56:35:ca:17:72:5b:4d:d6:1f:02:3b:59:97:9e:10:f2:8d:
         31:5a:d6:9a:dd:ae:bd:ce:4a:3f:bf:0e:3f:e6:c1:cf:35:6d:
         1b:ca:88:33:83:06:b5:d3:2d:12:d4:59:2d:91:f6:26:8b:85:
         dc:ec:7d:20:7a:28:3f:64:1e:3f:3a:1a:f7:f3:1d:e2:ff:3f:
         79:97:75:f2:9b:b8:a2:52:f3:f4:53:b1:c9:91:43:29:75:0e:
         57:c6:c1:22:92:f2:1f:22:12:78:29:03:cf:6a:6f:f5:e6:3c:
         85:29:ad:6a:7b:89:62:66:89:aa:0c:27:d7:9a:5d:bd:19:56:
         ef:0c:66:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----