Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3a2f33322d3438203d3e20323636363739.roa
File:                     323830333a663932303a3a2f33322d3438203d3e20323636363739.roa (raw, json)
Hash identifier:          hhl2DcVrET2E0hrNEaFDox/4/s3CnUuYa0Y8FNsn6mc=
Subject key identifier:   B5:F9:E2:E0:D0:DD:28:8C:69:04:7E:65:4C:A4:95:C4:2B:95:3E:F9
Certificate issuer:       /CN=A8F348342236CEF0874883E7673551354708EDDE
Certificate serial:       697175D7F0903F727661FCE94CB89244640AAF0F
Authority key identifier: A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3a2f33322d3438203d3e20323636363739.roa
Signing time:             Tue 04 Feb 2025 20:04:04 +0000
ROA not before:           Tue 04 Feb 2025 19:59:04 +0000
ROA not after:            Tue 03 Feb 2026 20:04:04 +0000
asID:                     266679
IP address blocks:        2803:f920::/32 maxlen: 48

Validation:               Failed, certificate revoked on Wed 19 Feb 2025 04:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:71:75:d7:f0:90:3f:72:76:61:fc:e9:4c:b8:92:44:64:0a:af:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F348342236CEF0874883E7673551354708EDDE
        Validity
            Not Before: Feb  4 19:59:04 2025 GMT
            Not After : Feb  3 20:04:04 2026 GMT
        Subject: CN=B5F9E2E0D0DD288C69047E654CA495C42B953EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9e:b2:f8:34:8b:bd:43:8e:f1:ac:5a:89:fb:
                    c2:13:52:bd:21:79:91:1c:25:a1:50:9d:e1:25:69:
                    c4:9f:7e:a1:0d:13:85:83:20:e1:2c:f4:18:1b:a5:
                    61:2f:1d:52:28:22:6a:8c:21:c6:24:99:f8:de:9d:
                    11:83:d3:7b:b2:01:79:ee:ed:ee:f1:c8:1f:5b:60:
                    9a:74:0e:76:16:8e:8e:bb:a1:3d:0f:59:d6:9c:fa:
                    c4:2f:a8:90:99:cd:da:2a:c1:85:a8:78:7d:9e:32:
                    6f:c3:c5:0f:91:e9:9b:da:4e:e0:86:4e:80:2a:ea:
                    cd:e5:6b:ec:5f:1b:5d:c8:ee:d9:ef:e9:4a:94:e6:
                    87:9e:04:f4:88:77:f7:9f:f0:f8:43:f4:f1:2a:ed:
                    bc:9b:43:1e:02:09:3f:78:c7:ec:cf:57:ea:08:67:
                    63:4d:ba:19:32:3d:2d:89:33:82:ae:67:57:0c:c9:
                    4f:b1:26:3c:60:4d:b6:bc:53:44:93:f3:03:67:42:
                    26:f1:86:9c:7b:b1:a6:c3:58:c3:2b:c5:ca:c3:7a:
                    86:45:e5:c4:6a:61:a7:09:4c:05:80:70:79:86:43:
                    5b:96:2f:d9:d9:70:89:95:f1:7b:d2:e4:70:e4:da:
                    00:fe:cd:15:93:86:ca:c0:4d:1f:ea:3e:2c:b8:a0:
                    2f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F9:E2:E0:D0:DD:28:8C:69:04:7E:65:4C:A4:95:C4:2B:95:3E:F9
            X509v3 Authority Key Identifier:
                keyid:A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3a2f33322d3438203d3e20323636363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f920::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:5a:81:eb:8a:8e:42:4e:74:24:e1:e6:80:5c:24:ff:f2:61:
         c5:d7:aa:7a:5d:f4:a0:7b:69:fd:04:8b:f0:40:6b:64:f3:b4:
         6e:14:50:2d:0b:88:4c:dd:eb:7a:21:7b:a9:e7:30:e6:99:56:
         22:a7:c5:3f:49:3c:ee:5e:84:ee:8f:90:1b:75:14:ed:73:10:
         7f:1c:be:c4:90:0d:17:f9:9b:10:ba:dc:ef:34:12:39:6c:a3:
         f7:f8:77:d9:c4:ef:bd:ef:b8:93:50:ed:6f:91:72:78:28:72:
         59:be:d6:bf:c6:c0:24:a1:0c:ff:88:3c:ba:14:67:82:cc:b2:
         d5:ab:bc:42:86:14:36:b1:8b:a6:4e:ed:01:2e:81:5a:7a:07:
         09:25:87:14:ee:41:93:12:1e:02:db:93:84:8e:86:c1:0a:0d:
         20:9b:ce:2d:d9:05:0a:58:81:5b:58:d6:40:bb:a7:48:10:20:
         d6:74:0b:75:0b:0e:0f:83:5e:f0:2f:77:95:a1:a5:c8:ea:a2:
         de:a6:d3:c9:d7:1a:a4:34:2a:16:e7:3d:d4:0d:20:c4:5e:c0:
         1c:96:37:fd:62:f0:a0:95:dd:8b:d2:4f:18:8a:1c:2b:13:77:
         37:0f:ef:11:aa:18:67:56:e8:27:f8:a6:df:a3:7a:cc:8d:c1:
         a4:7e:f9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----