Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/31fff44e90543c7d909126fde9bc359d0af1f290.roa
File:                     31fff44e90543c7d909126fde9bc359d0af1f290.roa (raw, json)
Hash identifier:          n3BTyzC7O5wdTlYvvbGuCvGaQLK87Sy8nEcAFgfNwPM=
Subject key identifier:   0D:F7:45:9A:ED:08:3C:EC:49:88:54:D4:A0:89:AC:7B:73:6C:A4:B9
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       20F89E
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/31fff44e90543c7d909126fde9bc359d0af1f290.roa
Signing time:             Wed 25 Jan 2023 12:42:27 +0000
ROA not before:           Thu 25 Aug 2022 16:22:08 +0000
ROA not after:            Mon 26 Aug 2024 16:22:08 +0000
asID:                     262589
IP address blocks:        2800:310::/33 maxlen: 48
                          2800:310:8000::/33 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2160798 (0x20f89e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Aug 25 16:22:08 2022 GMT
            Not After : Aug 26 16:22:08 2024 GMT
        Subject: CN=31fff44e90543c7d909126fde9bc359d0af1f290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:7d:64:1b:66:85:97:d8:37:4e:73:7a:cd:
                    f9:eb:ad:88:78:28:0e:7c:11:90:33:fa:1c:45:43:
                    9c:27:6a:41:22:52:70:0e:1c:ab:43:07:d1:34:09:
                    cc:89:76:61:63:ee:55:9b:cc:7c:a1:cd:a4:46:99:
                    79:c3:18:ae:39:43:46:fa:fe:f9:c3:6f:33:9b:76:
                    05:3f:1b:15:0c:ed:a9:6a:19:5e:07:d4:e5:c1:17:
                    cc:0a:6e:e5:d4:06:a2:57:12:35:b9:2d:f6:66:c3:
                    ed:1f:d8:8f:3c:e1:3a:f1:73:b2:99:ef:4c:2c:4c:
                    0a:e2:c7:c3:37:f2:40:c3:32:d6:ed:ca:3b:20:87:
                    3b:07:59:c3:39:5d:25:5c:f0:e4:3b:f6:f4:15:ee:
                    3c:a9:7f:8d:a3:e1:72:fe:88:41:95:6e:50:37:bd:
                    2f:87:73:8b:43:62:65:2a:82:7b:07:cb:24:5c:4b:
                    46:b0:a1:87:be:34:c4:23:a3:34:c4:a5:7c:4f:1f:
                    86:50:8c:5b:f7:2d:41:4f:01:79:8d:97:24:4a:fd:
                    7d:f6:1c:63:07:28:96:48:b5:fa:53:15:1c:b3:a9:
                    fd:0f:ab:50:27:2d:79:06:74:28:1a:4e:50:bf:09:
                    85:c7:5a:50:97:7d:17:9b:e9:d7:a7:fd:5f:55:57:
                    73:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F7:45:9A:ED:08:3C:EC:49:88:54:D4:A0:89:AC:7B:73:6C:A4:B9
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/31fff44e90543c7d909126fde9bc359d0af1f290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:fe:7e:9c:48:87:80:13:da:89:0f:0e:de:45:fb:ba:d3:36:
         c5:35:14:e8:03:29:e4:19:1a:54:ce:5b:a3:3d:6a:ef:45:7d:
         ea:d1:92:e9:79:6d:84:50:8a:c7:c5:86:78:ef:3c:2a:7c:d7:
         48:d0:f2:56:ec:b0:e7:48:e4:25:50:b2:ac:7b:4d:78:38:56:
         d4:35:b3:9d:e2:55:8c:93:6f:67:a9:84:cd:3b:be:db:69:49:
         80:99:c3:44:30:d9:c1:08:5c:e0:62:7e:76:6f:64:60:56:90:
         47:6a:6a:c2:65:6c:19:b8:25:8e:86:d9:a1:f5:55:a1:30:c6:
         8b:42:d7:69:36:f1:2a:20:03:c5:d7:f2:d1:9f:7f:8e:8f:86:
         37:96:45:3d:fe:c9:ca:f4:fc:8a:00:af:c3:56:b6:b1:44:be:
         a0:72:5d:f8:3d:8b:66:9f:d4:22:8a:0c:29:26:79:f7:4b:e3:
         d1:02:41:e4:65:21:b5:cd:9a:cf:16:f3:1a:49:ed:e9:84:9a:
         d3:d2:2d:50:6c:94:ff:69:f6:d8:48:94:9c:34:9c:ac:f7:0b:
         aa:ff:91:9a:0a:ef:27:21:3f:99:21:ef:79:dd:80:cf:32:10:
         a1:d9:76:70:05:bc:88:2f:b7:8e:7e:19:14:f0:bb:dc:24:d9:
         b1:1a:fa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----