Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/323830333a356239303a3a2f33322d3332203d3e20323733303438.roa
File:                     323830333a356239303a3a2f33322d3332203d3e20323733303438.roa (raw, json)
Hash identifier:          zv8hDCoXi6K3/xObdHpWt6uVMa/4Bqxw7QZAS7zhcrw=
Subject key identifier:   11:10:60:D3:7B:B6:E1:5B:63:DB:F7:0B:6A:30:AD:E2:C9:EA:4E:EB
Certificate issuer:       /CN=4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF
Certificate serial:       105D478015B1611E4D67C6E0935DF1EFAC122784
Authority key identifier: 4A:CF:10:8A:EA:D5:32:BA:7E:53:C5:4C:0B:F1:05:94:36:D1:E9:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/323830333a356239303a3a2f33322d3332203d3e20323733303438.roa
Signing time:             Tue 04 Feb 2025 18:13:13 +0000
ROA not before:           Tue 04 Feb 2025 18:08:13 +0000
ROA not after:            Tue 03 Feb 2026 18:13:13 +0000
asID:                     273048
IP address blocks:        2803:5b90::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 25 Apr 2025 01:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5d:47:80:15:b1:61:1e:4d:67:c6:e0:93:5d:f1:ef:ac:12:27:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF
        Validity
            Not Before: Feb  4 18:08:13 2025 GMT
            Not After : Feb  3 18:13:13 2026 GMT
        Subject: CN=111060D37BB6E15B63DBF70B6A30ADE2C9EA4EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e9:26:a5:bd:b2:9f:2f:b3:1c:09:8b:56:41:
                    83:31:55:e3:bc:a8:cd:c2:ed:30:1c:7f:b5:b4:33:
                    7b:c9:ea:d1:8e:28:44:02:3b:ac:df:be:33:83:45:
                    26:af:5a:c2:69:ef:ce:14:f7:f9:e1:50:d5:c4:07:
                    15:68:c3:3b:5d:84:01:02:de:08:ff:66:a6:63:c2:
                    78:44:b2:0d:38:d7:09:91:0d:46:5c:1d:78:b3:3e:
                    f0:60:9d:fe:43:08:94:e0:f4:14:d5:3a:8d:01:96:
                    aa:a9:dc:3f:15:1d:dd:08:e3:d4:9a:7c:dc:4f:65:
                    16:c1:bb:71:7b:40:40:44:a0:39:28:a1:de:e3:d6:
                    83:7f:da:87:8b:57:58:75:c2:82:32:1b:be:73:3d:
                    05:35:33:64:61:5b:03:73:e9:76:da:55:3e:30:8a:
                    cf:db:5d:b8:cf:24:b7:b5:2a:76:d4:eb:1a:1d:4a:
                    96:b4:a2:23:5c:8c:f6:d5:99:3d:43:ad:a7:ef:ee:
                    ab:28:82:2d:9a:9f:be:6b:22:8b:14:87:22:ee:c4:
                    a9:23:a2:06:12:c8:03:ad:c1:90:4c:e0:31:ae:81:
                    68:35:56:82:b9:89:0b:da:f6:95:54:6a:40:8d:d9:
                    6a:ee:87:f2:46:0c:c3:07:5e:f9:92:db:93:3e:06:
                    3d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:10:60:D3:7B:B6:E1:5B:63:DB:F7:0B:6A:30:AD:E2:C9:EA:4E:EB
            X509v3 Authority Key Identifier:
                keyid:4A:CF:10:8A:EA:D5:32:BA:7E:53:C5:4C:0B:F1:05:94:36:D1:E9:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/323830333a356239303a3a2f33322d3332203d3e20323733303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5b90::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:aa:7b:10:ee:d8:4e:5c:7f:53:da:68:c2:37:95:05:f6:35:
         a5:bd:a3:3f:d2:98:7b:68:b5:7c:ad:3e:d2:16:6a:5c:55:78:
         db:d1:b5:54:bd:f4:58:a9:e3:d1:dd:70:46:ff:1c:6c:27:0a:
         29:01:aa:e0:f2:e1:b0:cd:41:7f:02:f0:d3:bb:f5:84:68:51:
         1e:d8:6f:d6:d9:de:8a:c0:6e:64:ae:bb:35:6d:00:30:da:18:
         46:33:ae:2b:3c:bc:c1:e5:98:98:5a:4b:51:1d:11:c2:8c:d2:
         dd:a0:15:32:e9:e5:aa:49:a1:12:14:69:f9:bc:87:7f:1a:b2:
         5a:21:de:6e:80:2c:0f:fb:03:03:24:e3:d6:64:2e:08:7f:01:
         7e:43:59:cb:4d:4c:0f:b3:f7:ee:0a:d8:b4:79:24:11:0d:a0:
         06:88:e6:b3:1d:f4:59:6b:d1:10:31:91:b5:ba:3c:a6:05:17:
         85:e0:30:fe:08:a6:97:5b:29:fb:1d:10:f1:53:0f:19:49:1c:
         a5:07:80:47:4f:0a:0d:21:ff:10:a1:ec:9c:24:74:41:5e:14:
         b5:3d:41:2e:48:43:8c:8f:9c:8b:49:f5:06:3e:2b:62:bb:8d:
         53:3e:88:d5:24:c9:95:4e:b2:40:e9:99:60:e0:52:4e:d5:41:
         04:b2:1b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----