Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/323830333a333734303a3a2f33322d3332203d3e20323634373337.roa
File:                     323830333a333734303a3a2f33322d3332203d3e20323634373337.roa (raw, json)
Hash identifier:          Zkgd/+4Pyz2U4x7/ztRf83EJOUapYukOIPxHb1zo5hQ=
Subject key identifier:   92:4B:79:CF:94:BA:D0:8F:1B:4B:C3:46:71:D0:0C:C1:CA:C1:C7:E9
Certificate issuer:       /CN=0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF
Certificate serial:       5ADA8FE67147189F4EDEDAFD004927D1B9B5EDD3
Authority key identifier: 0F:95:9E:8E:89:90:C6:B4:68:4A:74:EC:F5:D6:A8:A2:BE:22:B2:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/323830333a333734303a3a2f33322d3332203d3e20323634373337.roa
Signing time:             Tue 05 Mar 2024 17:46:32 +0000
ROA not before:           Tue 05 Mar 2024 17:41:32 +0000
ROA not after:            Tue 04 Mar 2025 17:46:32 +0000
asID:                     264737
IP address blocks:        2803:3740::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 22 Jul 2024 22:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:da:8f:e6:71:47:18:9f:4e:de:da:fd:00:49:27:d1:b9:b5:ed:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF
        Validity
            Not Before: Mar  5 17:41:32 2024 GMT
            Not After : Mar  4 17:46:32 2025 GMT
        Subject: CN=924B79CF94BAD08F1B4BC34671D00CC1CAC1C7E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:d3:77:a7:49:82:86:75:96:18:21:b9:7c:
                    02:88:5f:03:84:b3:69:ab:cb:20:56:bf:b4:e8:76:
                    24:7b:94:c5:5a:90:ca:84:bc:52:bc:aa:b7:be:4b:
                    f6:0d:6e:ad:27:b2:c6:af:e3:9a:b7:9b:ef:2d:bf:
                    cb:81:55:bc:dc:a8:d2:6b:98:eb:20:b7:ab:17:21:
                    e6:71:7d:bd:34:3e:97:8f:fe:a6:65:45:53:61:cb:
                    15:a3:ea:78:c7:4d:6f:51:02:81:b9:14:72:9a:b2:
                    bc:01:14:d1:73:62:3f:b3:91:d9:b8:92:fb:44:10:
                    3a:3b:a1:98:60:4f:ba:af:19:0f:2b:7e:68:58:07:
                    6a:5b:7e:17:82:c5:5c:67:68:8f:27:04:83:1d:c5:
                    ad:d6:ca:1f:d2:6c:0d:c7:76:4a:03:b5:56:dc:1d:
                    ca:8b:4a:12:54:9e:01:12:bf:dc:fc:b5:58:a7:0e:
                    a3:98:f2:56:21:aa:c9:e4:66:f5:20:75:7d:ab:6f:
                    fc:d5:21:29:bd:da:af:d0:ad:c9:10:76:7f:ca:ba:
                    93:ff:af:f9:fd:78:54:d3:3c:3a:98:d8:c8:02:46:
                    4e:cd:4b:7f:f1:47:31:8a:ae:33:b9:8f:09:c8:87:
                    81:77:9c:bf:b8:08:8c:a9:8b:17:cc:b5:98:ea:b7:
                    54:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4B:79:CF:94:BA:D0:8F:1B:4B:C3:46:71:D0:0C:C1:CA:C1:C7:E9
            X509v3 Authority Key Identifier:
                keyid:0F:95:9E:8E:89:90:C6:B4:68:4A:74:EC:F5:D6:A8:A2:BE:22:B2:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/323830333a333734303a3a2f33322d3332203d3e20323634373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3740::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:1e:0f:09:45:bc:15:1b:db:81:59:04:3d:ba:3a:8b:1c:80:
         09:bd:62:5b:dc:52:96:c0:18:c5:39:94:fe:01:b8:00:a2:da:
         d1:a1:0a:11:3c:ec:c4:13:0f:de:43:8c:34:10:a8:17:43:8e:
         87:26:a9:9a:35:05:29:42:a4:57:3b:f5:da:6c:9e:08:9b:58:
         da:df:a4:5a:36:72:f7:94:2c:8c:a4:af:e6:48:9e:3c:44:99:
         3c:da:c5:1d:db:5f:3e:3a:00:cf:b4:ab:ea:2f:14:75:81:ff:
         f9:f1:b9:e0:d6:02:04:03:f5:b6:a6:47:10:20:d7:35:4a:e5:
         3d:f3:7b:bf:be:67:ba:79:19:22:e4:d6:7f:53:3c:98:6a:94:
         c5:93:41:e3:d3:6b:f3:f9:3a:18:57:0a:5c:07:f0:c0:d3:c2:
         c6:5b:34:fa:73:fd:db:8e:35:05:1e:c6:95:c6:45:a0:1b:b2:
         bf:91:99:d5:0a:4d:68:41:01:73:e4:b7:a0:17:0c:91:74:90:
         d6:f7:b3:32:62:ea:b4:36:61:b7:ee:6d:d4:2d:a0:df:02:ea:
         60:68:12:0e:2a:86:f8:97:61:c3:f9:8e:ea:85:70:69:3d:a6:
         1b:b7:0d:85:a6:7f:58:51:f2:54:dc:48:e1:c1:74:5e:d5:ef:
         dd:31:9b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----