Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/7c7061948c605525d4e286ba6687b81d2d16424b.roa
File:                     7c7061948c605525d4e286ba6687b81d2d16424b.roa (raw, json)
Hash identifier:          Dt+wcwzjuLZsj57oOzRku1aXDwF0skol4xKbmIQhBZk=
Subject key identifier:   82:0C:FD:B3:44:52:67:80:F7:71:EB:8C:C0:3F:AC:97:75:15:AC:EC
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       0D0106
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/7c7061948c605525d4e286ba6687b81d2d16424b.roa
Signing time:             Thu 09 Mar 2023 13:59:39 +0000
ROA not before:           Fri 15 Apr 2022 03:00:00 +0000
ROA not after:            Wed 30 Apr 2025 03:00:00 +0000
asID:                     271891
IP address blocks:        2801:151:3d::/48 maxlen: 48
                          2801:151:52::/48 maxlen: 48
                          2801:151:53::/48 maxlen: 48
                          2801:151:c3::/48 maxlen: 48
                          2801:151:ea::/48 maxlen: 48
                          2801:151:c4::/48 maxlen: 48
                          2801:151:11::/48 maxlen: 48
                          2801:151:57::/48 maxlen: 48
                          2801:151:58::/48 maxlen: 48
                          2801:151:59::/48 maxlen: 48
                          2801:151:a3::/48 maxlen: 48
                          2801:151:a4::/48 maxlen: 48
                          2801:151:a2::/48 maxlen: 48
                          2801:151:fb::/48 maxlen: 48
                          2801:151:3c::/48 maxlen: 48
                          2801:151:45::/48 maxlen: 48
                          2801:151:4b::/48 maxlen: 48
                          2801:151:51::/48 maxlen: 48
                          2801:151:5a::/48 maxlen: 48
                          2801:151:60::/48 maxlen: 48
                          2801:151:66::/48 maxlen: 48
                          2801:151:10a::/48 maxlen: 48
                          2801:151:f9::/48 maxlen: 48
                          2801:151:103::/48 maxlen: 48
                          2801:151:105::/48 maxlen: 48
                          2801:151:107::/48 maxlen: 48
                          2801:151:109::/48 maxlen: 48
                          2801:151:37::/48 maxlen: 48
                          2801:151:39::/48 maxlen: 48
                          2801:151:c5::/48 maxlen: 48
                          2801:151:8b::/48 maxlen: 48
                          2801:151:8c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852230 (0xd0106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Apr 15 03:00:00 2022 GMT
            Not After : Apr 30 03:00:00 2025 GMT
        Subject: CN=7c7061948c605525d4e286ba6687b81d2d16424b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1d:1f:25:22:06:04:b6:9c:e7:70:f6:f5:d4:
                    8a:ea:8a:b6:4a:e9:b6:f1:29:b0:8f:43:92:5d:70:
                    6a:92:46:7a:6e:d4:c8:0b:76:4b:6f:77:ac:84:5e:
                    3b:70:e4:0f:a0:9d:94:73:d6:13:c4:3f:c4:bb:5f:
                    46:41:76:d5:d8:c9:0a:7c:8c:fa:00:18:73:55:41:
                    2d:00:80:62:8e:3d:dd:73:ef:3a:a6:82:9c:a6:9f:
                    7e:27:85:94:41:f9:5a:30:74:f6:12:7c:7e:24:3c:
                    1e:ad:ee:8b:f1:62:5a:5f:e4:07:0f:95:14:da:0b:
                    4b:05:36:37:e4:82:bd:e7:8e:f5:25:d1:7c:b0:de:
                    97:0a:2d:90:38:89:02:27:fc:14:fd:b2:26:a1:8c:
                    f6:68:33:6f:90:72:ad:d9:df:0a:f8:88:7c:a9:00:
                    ef:5f:50:1f:28:18:22:45:21:c7:cf:c4:0c:6a:ca:
                    e5:68:d3:8c:9b:69:ae:ac:7b:36:87:e6:3f:c0:13:
                    80:c6:fd:99:2e:3b:46:0d:ea:15:67:95:8f:b5:28:
                    9b:92:1e:c8:d7:77:ae:05:ae:51:20:9c:ab:a2:78:
                    53:53:0a:1d:f0:76:03:e1:a7:59:69:ee:e5:5d:63:
                    37:f9:1c:75:a2:0f:6d:cb:9c:c5:91:b8:17:37:5b:
                    9d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0C:FD:B3:44:52:67:80:F7:71:EB:8C:C0:3F:AC:97:75:15:AC:EC
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/7c7061948c605525d4e286ba6687b81d2d16424b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:11::/48
                  2801:151:37::/48
                  2801:151:39::/48
                  2801:151:3c::/47
                  2801:151:45::/48
                  2801:151:4b::/48
                  2801:151:51::-2801:151:53:ffff:ffff:ffff:ffff:ffff
                  2801:151:57::-2801:151:5a:ffff:ffff:ffff:ffff:ffff
                  2801:151:60::/48
                  2801:151:66::/48
                  2801:151:8b::-2801:151:8c:ffff:ffff:ffff:ffff:ffff
                  2801:151:a2::-2801:151:a4:ffff:ffff:ffff:ffff:ffff
                  2801:151:c3::-2801:151:c5:ffff:ffff:ffff:ffff:ffff
                  2801:151:ea::/48
                  2801:151:f9::/48
                  2801:151:fb::/48
                  2801:151:103::/48
                  2801:151:105::/48
                  2801:151:107::/48
                  2801:151:109::-2801:151:10a:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         6d:78:aa:15:8e:83:93:a4:6b:12:9b:af:af:79:d8:5d:07:bc:
         2b:0f:a5:6e:12:33:a0:4b:1b:af:5b:9c:b5:26:63:a5:cf:6e:
         3a:9a:4d:45:3c:12:f3:69:18:9f:56:23:e1:0a:e5:36:c7:5b:
         cb:b7:eb:72:25:2d:4a:eb:26:84:01:73:7d:4d:54:b8:e9:e0:
         6e:a7:61:e4:78:c9:c3:6c:0f:ef:62:fb:9a:50:f0:8b:42:b3:
         23:c8:9f:c7:75:04:db:fe:c9:1a:8e:d9:18:33:7f:2e:c3:b1:
         2c:93:d8:82:46:37:44:86:b1:45:32:80:25:d6:8d:2a:21:ec:
         83:ef:05:09:81:49:c1:fa:08:67:32:88:66:b0:32:85:a9:98:
         2b:52:ac:a7:c7:a6:a8:d9:96:8f:ac:fe:38:da:1d:c1:ff:97:
         98:33:cb:e6:38:4e:09:d3:fa:72:eb:f0:98:f9:27:1f:90:a3:
         2c:47:bc:d4:e5:e0:0d:64:86:79:80:54:50:c2:14:8d:13:1e:
         8d:40:be:91:17:92:db:89:d4:07:f8:e9:88:7e:53:0c:07:c0:
         31:be:d3:9b:c9:d8:f3:aa:64:33:b4:de:d5:ca:30:13:00:5c:
         47:00:82:4e:47:92:6b:f0:22:8d:c4:3f:cd:5d:25:95:8f:ed:
         86:0d:52:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----