Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/323830333a323634303a3a2f33322d3332203d3e20323632353839.roa
File:                     323830333a323634303a3a2f33322d3332203d3e20323632353839.roa (raw, json)
Hash identifier:          NFYOHyVSHim13qSsD2lrX2r/I/+v+I1b1+PZglBqZNE=
Subject key identifier:   ED:B6:B2:49:84:B0:89:BA:3E:84:A1:9A:3B:C0:EA:B4:DE:3A:76:DC
Certificate issuer:       /CN=E5AE7BFB852947BC2524209953A000E85EF4362B
Certificate serial:       085921C66A1FA0BEA54BD18B624ED69412727A51
Authority key identifier: E5:AE:7B:FB:85:29:47:BC:25:24:20:99:53:A0:00:E8:5E:F4:36:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5AE7BFB852947BC2524209953A000E85EF4362B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/323830333a323634303a3a2f33322d3332203d3e20323632353839.roa
Signing time:             Wed 31 Jul 2024 18:00:00 +0000
ROA not before:           Wed 31 Jul 2024 17:55:00 +0000
ROA not after:            Wed 30 Jul 2025 18:00:00 +0000
asID:                     262589
IP address blocks:        2803:2640::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 18:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:59:21:c6:6a:1f:a0:be:a5:4b:d1:8b:62:4e:d6:94:12:72:7a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5AE7BFB852947BC2524209953A000E85EF4362B
        Validity
            Not Before: Jul 31 17:55:00 2024 GMT
            Not After : Jul 30 18:00:00 2025 GMT
        Subject: CN=EDB6B24984B089BA3E84A19A3BC0EAB4DE3A76DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:28:b1:ea:90:fe:1a:2d:9d:0f:a5:94:d4:86:
                    a5:5a:4b:82:0a:14:3b:52:b5:4c:34:20:73:cf:79:
                    7f:c3:9e:79:c4:32:5e:99:36:3e:e7:17:18:12:25:
                    f2:98:96:72:03:2a:93:77:4b:dc:e3:b9:0e:51:43:
                    6a:a5:47:1c:e7:39:c3:ce:3f:14:67:26:db:09:a8:
                    ca:2f:60:b6:3e:23:f9:70:2f:fe:67:73:87:b3:a3:
                    88:05:d2:4a:f4:fa:55:25:83:6d:5a:9c:b0:3f:46:
                    e9:fe:95:6a:6b:60:9a:e4:a9:26:9c:31:fd:25:08:
                    1f:d3:c1:4e:d5:18:11:cd:cc:ea:8d:7b:81:48:8b:
                    e8:d3:43:39:eb:d1:12:7c:f0:df:9a:cc:55:71:74:
                    f3:97:f5:7c:3c:5d:41:28:fe:c4:37:3e:bc:21:1f:
                    5a:62:b9:06:f1:ca:6f:e3:14:11:d8:25:d1:14:41:
                    e7:cc:a3:8f:85:99:07:1c:64:86:9c:24:73:36:d8:
                    89:fe:ab:61:2f:90:79:8d:17:63:b6:7e:78:f3:a2:
                    88:71:f0:4d:c8:c5:ae:59:7f:ef:a8:8c:38:17:95:
                    ab:5f:dc:4b:59:f2:37:ab:bd:d3:4b:80:7a:08:c2:
                    44:5d:7d:cd:b7:86:5a:0a:9d:20:97:30:d8:98:14:
                    1b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B6:B2:49:84:B0:89:BA:3E:84:A1:9A:3B:C0:EA:B4:DE:3A:76:DC
            X509v3 Authority Key Identifier:
                keyid:E5:AE:7B:FB:85:29:47:BC:25:24:20:99:53:A0:00:E8:5E:F4:36:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/E5AE7BFB852947BC2524209953A000E85EF4362B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5AE7BFB852947BC2524209953A000E85EF4362B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/323830333a323634303a3a2f33322d3332203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2640::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:70:c7:63:1c:07:4d:f0:ac:45:db:3c:9f:6f:08:e8:97:aa:
         cc:ea:ea:65:74:29:9d:14:c9:da:74:62:ca:ec:14:75:0b:bb:
         2c:fa:2c:6b:5d:07:3f:81:57:58:d5:53:ec:3c:2f:5b:bc:d3:
         b2:7a:13:98:96:af:72:af:8e:3a:d2:c3:d9:81:b3:f5:11:13:
         22:c8:35:bc:12:18:28:0d:44:ae:31:85:8f:20:f2:13:14:1e:
         1e:6d:6a:5c:bf:c7:55:ae:8e:c0:98:71:03:0d:6e:65:40:3f:
         88:d9:ce:6c:a9:c9:4c:e9:da:44:a5:1c:cc:8e:bf:da:86:76:
         b0:66:a5:a7:b8:a6:5c:ef:93:31:4d:34:ca:23:65:8d:89:77:
         72:d8:e8:b6:76:69:77:d0:52:b7:c0:de:e1:fc:5b:94:ac:63:
         fa:7a:d0:92:f4:e8:41:2b:c2:9f:02:37:ba:7b:31:eb:ad:4f:
         b1:2f:b7:68:56:f3:7b:ea:01:df:ca:63:55:0f:66:68:0d:ef:
         2c:2a:51:69:e7:2b:a6:37:5f:3f:8c:45:b6:61:48:e3:89:1e:
         1d:7e:16:79:81:d6:ee:48:26:a9:1b:97:6c:4b:e0:83:b9:33:
         93:b0:d5:27:1f:8e:7c:60:29:85:fb:c3:57:5a:04:cb:88:d6:
         4b:91:b5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----