Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/09eabdac80ba045d50833ad1f15afbea9362044e.roa
File:                     09eabdac80ba045d50833ad1f15afbea9362044e.roa (raw, json)
Hash identifier:          6FTdPsLvaow+RE6tmeh7ep9A1LqV/i8ypl0E1SSK7p0=
Subject key identifier:   C3:7E:6E:58:F6:75:2B:87:24:BB:52:0B:E7:BE:2C:75:54:83:2E:AA
Certificate issuer:       /CN=425b31fb70180b4aa636c240ebd5276c722716f7
Certificate serial:       1E5142
Authority key identifier: D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/09eabdac80ba045d50833ad1f15afbea9362044e.roa
Signing time:             Tue 10 Jan 2023 20:43:09 +0000
ROA not before:           Tue 23 Mar 2021 14:32:28 +0000
ROA not after:            Tue 24 Mar 2026 14:32:28 +0000
asID:                     262195
IP address blocks:        2800:a90::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1986882 (0x1e5142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425b31fb70180b4aa636c240ebd5276c722716f7
        Validity
            Not Before: Mar 23 14:32:28 2021 GMT
            Not After : Mar 24 14:32:28 2026 GMT
        Subject: CN=09eabdac80ba045d50833ad1f15afbea9362044e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:56:40:90:ba:21:7c:ed:ed:aa:ae:10:94:77:
                    e0:93:ac:08:61:d6:ec:74:d9:41:f9:bc:bb:1a:ed:
                    a0:13:34:57:3f:b6:cb:d4:7f:2f:fc:61:9a:0f:e0:
                    d5:d4:0c:b7:98:1c:6c:33:ef:6b:74:86:c5:43:b3:
                    9c:40:cf:a7:82:f8:89:f1:e5:89:13:5a:94:7d:7f:
                    7e:af:03:5c:94:a3:8e:70:26:99:8b:32:da:2f:42:
                    40:60:28:ef:68:b5:66:5f:c1:0f:b3:2a:66:3d:29:
                    e6:d1:cf:81:04:23:00:49:cf:0b:05:fb:29:9a:35:
                    5a:83:38:10:53:be:d6:43:71:c3:b6:16:a4:e8:2b:
                    2a:48:35:f0:cf:80:69:1e:f3:e1:06:8c:b5:d8:bb:
                    df:14:3d:94:f4:85:e3:3b:20:23:23:29:aa:c5:5a:
                    09:64:ca:bf:ec:8b:08:61:6b:67:2c:a7:ab:59:06:
                    d4:26:b2:d2:75:3d:5c:dc:32:be:16:40:72:24:c3:
                    ee:d0:48:e4:25:97:45:7c:b2:7d:4f:00:2f:56:e4:
                    38:62:08:47:93:a4:82:b3:38:83:74:b7:48:68:a0:
                    1c:98:39:8e:a5:b7:c5:b5:14:70:a6:8e:11:c8:0b:
                    60:0f:47:0d:51:9d:b9:97:b9:11:7b:ff:46:91:b2:
                    24:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7E:6E:58:F6:75:2B:87:24:BB:52:0B:E7:BE:2C:75:54:83:2E:AA
            X509v3 Authority Key Identifier:
                keyid:D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/09eabdac80ba045d50833ad1f15afbea9362044e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/425b31fb70180b4aa636c240ebd5276c722716f7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:8c:e9:8e:31:55:99:5d:8e:d2:fa:fe:2e:72:72:9d:78:d2:
         de:f2:5d:2b:8e:c6:94:15:7b:75:a2:5e:b5:78:66:6f:fe:fc:
         8b:09:3a:e0:31:fa:54:a3:15:c9:b4:13:70:b2:b0:08:b3:fc:
         b1:22:b6:5c:a7:6f:71:3c:84:9b:0e:12:a9:f4:4f:c0:93:1e:
         0a:3b:10:41:d3:e1:f0:05:60:94:0b:cf:50:cd:49:cd:fa:92:
         82:ae:ce:e2:e7:ac:ff:90:13:f6:c7:d3:8e:2e:8b:1f:24:ba:
         e0:77:6a:97:ab:1f:98:e6:4f:e8:6c:8c:34:52:58:7f:1f:01:
         c1:80:ce:c8:60:51:8c:ad:c7:68:0e:3c:95:79:1c:aa:84:ff:
         fa:37:bf:d7:1a:8d:ae:eb:5c:64:4c:1e:a5:7c:33:4a:28:47:
         8c:c7:0b:0d:fe:a1:0e:58:21:98:7e:56:85:1a:0f:c5:ee:68:
         05:98:77:3c:e4:db:32:93:a0:06:5c:ed:00:65:6e:46:a7:f3:
         30:11:10:ec:ea:4f:e1:72:51:e1:9e:b0:8a:ff:c6:f9:59:24:
         5d:07:dd:8f:1a:80:f6:ed:fa:f2:2f:84:2c:72:4a:fc:5d:96:
         e5:85:c3:4b:67:90:af:cc:7a:53:b5:3e:ad:93:8c:3b:c9:38:
         8f:7b:3c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----