Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a323a3a2f34382d3532203d3e203238303031.roa
File:                     323830313a3136353a323a3a2f34382d3532203d3e203238303031.roa (raw, json)
Hash identifier:          tglJ8OsX59evHexUz5UrBdz83dhwC84l68dejzxiEm8=
Subject key identifier:   21:AC:6A:66:E1:A4:1B:BB:7A:C6:31:AA:72:3E:99:86:80:74:4B:1E
Certificate issuer:       /CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
Certificate serial:       49172A47C7F41C0839C4E29518FC3CA73462AFA2
Authority key identifier: A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a323a3a2f34382d3532203d3e203238303031.roa
Signing time:             Tue 08 Apr 2025 14:14:16 +0000
ROA not before:           Tue 08 Apr 2025 14:09:16 +0000
ROA not after:            Tue 07 Apr 2026 14:14:16 +0000
asID:                     28001
IP address blocks:        2801:165:2::/48 maxlen: 52

Validation:               Failed, certificate revoked on Mon 28 Apr 2025 20:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:17:2a:47:c7:f4:1c:08:39:c4:e2:95:18:fc:3c:a7:34:62:af:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
        Validity
            Not Before: Apr  8 14:09:16 2025 GMT
            Not After : Apr  7 14:14:16 2026 GMT
        Subject: CN=21AC6A66E1A41BBB7AC631AA723E998680744B1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:da:81:0c:6f:48:f3:b4:09:8d:f2:9b:ae:ee:
                    55:31:6a:4d:6c:e8:39:8b:85:29:f5:01:b2:07:57:
                    42:5e:d7:24:0b:db:d7:ab:6e:72:ec:83:f1:58:49:
                    22:17:3a:1b:52:4e:6f:ce:76:52:e3:44:31:4d:40:
                    06:40:b7:02:72:97:a4:34:c7:e6:d6:db:80:be:f1:
                    5a:ea:a5:2a:09:44:bd:05:3b:fd:ea:07:03:26:5b:
                    c9:ee:39:06:7d:98:b5:71:0a:bc:76:f5:f1:a4:5d:
                    2f:6b:88:26:73:3f:92:ad:25:54:6e:8e:1f:49:64:
                    fc:95:11:be:b1:a9:36:37:95:fc:21:91:dc:3f:4e:
                    74:91:33:a1:f0:da:ec:b2:2d:aa:6e:24:18:29:80:
                    a5:a8:c4:82:7f:56:9c:54:e2:74:d0:fb:32:94:1e:
                    f1:84:e9:06:9e:43:66:e2:13:c3:f0:95:87:d8:4b:
                    44:30:06:20:4b:f7:16:e0:4f:9f:0f:cb:f9:cc:58:
                    14:f4:cd:69:c7:25:2f:7b:5b:44:b8:45:6e:8c:a9:
                    5f:58:72:92:6e:4b:83:fd:82:5c:06:69:e9:99:f3:
                    56:07:8a:23:4e:4a:3f:bc:4d:3a:ba:28:36:54:19:
                    2f:a2:96:07:47:51:e7:48:4c:2a:6f:15:b5:86:49:
                    35:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AC:6A:66:E1:A4:1B:BB:7A:C6:31:AA:72:3E:99:86:80:74:4B:1E
            X509v3 Authority Key Identifier:
                keyid:A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a323a3a2f34382d3532203d3e203238303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:07:ed:20:aa:c5:7d:bd:f7:47:f4:c2:25:d8:44:f7:a3:c9:
         78:bf:ab:81:4a:eb:eb:c7:7f:48:e3:5a:80:e3:37:a9:a5:a8:
         ef:90:bb:83:0c:f6:89:7d:5c:7a:fa:87:d5:7f:13:f3:aa:5b:
         c6:c3:4f:d0:24:d0:0a:ec:38:ea:2f:20:76:f5:cb:5f:4a:05:
         34:c2:fd:29:49:5d:33:f5:31:a8:23:f6:2d:00:35:38:36:71:
         70:05:83:55:57:9e:04:f4:3c:79:b5:a2:cb:9a:2b:5a:17:c4:
         a3:39:92:d7:86:4b:e3:26:57:7e:b8:c0:ee:22:f0:da:27:1c:
         c4:95:21:3f:26:46:13:b1:60:4e:4b:60:b7:8f:97:1e:c4:e2:
         a2:e7:d5:f0:53:5d:c2:62:ad:79:2b:a8:6f:65:34:a2:76:02:
         55:a0:10:8e:4d:96:8e:d9:e1:1a:89:75:34:19:07:40:10:d3:
         13:aa:e7:b2:14:5a:21:54:6c:14:70:9f:ac:b4:ec:d5:c3:bf:
         6e:11:af:b7:64:12:7f:6d:ff:4c:cb:ad:35:80:cd:68:e9:0f:
         db:4a:b5:5d:fd:a8:94:74:1f:a7:16:da:19:8a:0e:a3:e6:3a:
         d3:93:02:3e:cc:b8:c0:b8:03:35:52:de:ae:2f:ae:33:16:e1:
         a0:50:f5:91
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUSRcqR8f0HAg5xOKVGPw8pzRir6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTcwOUQ3NUUwQkQwMTk5MDAyQzA3MUQzNjk3MUEwOUU2
RDVFNUY0ODAeFw0yNTA0MDgxNDA5MTZaFw0yNjA0MDcxNDE0MTZaMDMxMTAvBgNV
BAMTKDIxQUM2QTY2RTFBNDFCQkI3QUM2MzFBQTcyM0U5OTg2ODA3NDRCMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2oEMb0jztAmN8puu7lUxak1s
6DmLhSn1AbIHV0Je1yQL29erbnLsg/FYSSIXOhtSTm/OdlLjRDFNQAZAtwJyl6Q0
x+bW24C+8VrqpSoJRL0FO/3qBwMmW8nuOQZ9mLVxCrx29fGkXS9riCZzP5KtJVRu
jh9JZPyVEb6xqTY3lfwhkdw/TnSRM6Hw2uyyLapuJBgpgKWoxIJ/VpxU4nTQ+zKU
HvGE6QaeQ2biE8PwlYfYS0QwBiBL9xbgT58Py/nMWBT0zWnHJS97W0S4RW6MqV9Y
cpJuS4P9glwGaemZ81YHiiNOSj+8TTq6KDZUGS+ilgdHUedITCpvFbWGSTUNAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUIaxqZuGkG7t6xjGqcj6ZhoB0Sx4wHwYDVR0j
BBgwFoAUpwnXXgvQGZACwHHTaXGgnm1eX0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RTBEMjhDMEIyMjg1NEYwMjEwMDMzREY3QjBDNjM2MTU5
MzEyQzExRDFDNzQyQUZCM0ZEMUZDMzc4QThFNzYwLzAvQTcwOUQ3NUUwQkQwMTk5
MDAyQzA3MUQzNjk3MUEwOUU2RDVFNUY0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNzA5RDc1RTBCRDAxOTkwMDJD
MDcxRDM2OTcxQTA5RTZENUU1RjQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEUwRDI4QzBCMjI4NTRGMDIxMDAzM0RGN0IwQzYzNjE1OTMxMkMxMUQx
Qzc0MkFGQjNGRDFGQzM3OEE4RTc2MC8wLzMyMzgzMDMxM2EzMTM2MzUzYTMyM2Ez
YTJmMzQzODJkMzUzMjIwM2QzZTIwMzIzODMwMzAzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAWUA
AjANBgkqhkiG9w0BAQsFAAOCAQEAXgftIKrFfb33R/TCJdhE96PJeL+rgUrr68d/
SONagOM3qaWo75C7gwz2iX1cevqH1X8T86pbxsNP0CTQCuw46i8gdvXLX0oFNML9
KUldM/UxqCP2LQA1ODZxcAWDVVeeBPQ8ebWiy5orWhfEozmS14ZL4yZXfrjA7iLw
2iccxJUhPyZGE7FgTktgt4+XHsTioufV8FNdwmKteSuob2U0onYCVaAQjk2Wjtnh
Gol1NBkHQBDTE6rnshRaIVRsFHCfrLTs1cO/bhGvt2QSf23/TMutNYDNaOkP20q1
Xf2olHQfpxbaGYoOo+Y605MCPsy4wLgDNVLeri+uMxbhoFD1kQ==
-----END CERTIFICATE-----