Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/61b986ece46dd90887b5f2fd6f8da014b076b9f1.roa
File:                     61b986ece46dd90887b5f2fd6f8da014b076b9f1.roa (raw, json)
Hash identifier:          Ar84rUdE45zPw9P0Pxyt6jmCAvf5yqNCsmuALA3EVMc=
Subject key identifier:   D1:5B:1F:E4:0D:8E:91:92:68:FB:59:0A:0E:5D:EC:E9:E9:7B:AD:78
Certificate issuer:       /CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
Certificate serial:       18C7C4
Authority key identifier: 61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/61b986ece46dd90887b5f2fd6f8da014b076b9f1.roa
Signing time:             Thu 14 Sep 2023 20:26:24 +0000
ROA not before:           Wed 13 Sep 2023 20:26:24 +0000
ROA not after:            Sun 14 Sep 2025 20:26:24 +0000
asID:                     272992
IP address blocks:        2803:8b80::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 28 Feb 2024 16:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1624004 (0x18c7c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
        Validity
            Not Before: Sep 13 20:26:24 2023 GMT
            Not After : Sep 14 20:26:24 2025 GMT
        Subject: CN=61b986ece46dd90887b5f2fd6f8da014b076b9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c5:98:b9:bb:1f:b8:e7:db:ec:8f:e1:49:51:
                    d1:67:0e:61:60:5a:fa:01:73:c9:68:04:8e:59:78:
                    63:72:59:3d:32:bf:b6:96:52:5d:1a:9a:7d:0f:8a:
                    09:77:56:73:f6:96:e3:ed:3a:05:0f:0e:69:a6:c8:
                    7a:09:ea:42:06:8e:a7:7b:ff:22:25:ed:b0:0b:b0:
                    e0:c0:98:97:dc:19:95:3a:63:1b:2e:6f:c4:81:42:
                    b6:3a:1f:75:37:27:f0:31:a4:f9:8a:a0:9c:ff:56:
                    f9:24:cd:ef:0c:06:4a:86:3d:fd:c5:80:ac:aa:05:
                    33:ba:f7:8b:80:45:9d:ea:ba:dc:49:43:60:0c:ab:
                    df:b6:04:a5:26:6b:c0:c8:bb:39:a8:4f:20:a8:11:
                    cf:65:1d:3b:1b:3d:f8:e7:95:f1:1b:22:84:28:a0:
                    f2:00:d9:e9:df:3c:e3:a0:2f:22:0f:25:2f:39:c2:
                    79:a1:7f:14:4e:8c:c1:e2:32:63:11:a4:ac:18:6e:
                    6e:ee:06:c7:57:65:d3:34:d2:72:d0:2a:b2:bb:33:
                    45:5e:53:af:0e:85:17:3f:22:14:0a:26:28:2b:71:
                    8e:f2:9f:d3:28:26:94:99:e6:be:1a:f6:3d:9a:0d:
                    f7:a2:4a:1b:1d:74:60:83:d2:a0:50:66:6d:9f:ec:
                    22:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5B:1F:E4:0D:8E:91:92:68:FB:59:0A:0E:5D:EC:E9:E9:7B:AD:78
            X509v3 Authority Key Identifier:
                keyid:61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/61b986ece46dd90887b5f2fd6f8da014b076b9f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:26:87:c1:cc:1b:8c:a1:6e:96:a4:68:29:97:6a:2f:a3:cc:
         b3:24:33:fa:b0:67:3b:e0:e7:b8:90:be:d2:62:6f:9a:72:86:
         f1:19:36:c3:1b:d7:dc:06:5e:de:79:c6:a4:8c:8b:c0:57:6f:
         83:df:30:c1:86:54:d3:8c:5c:22:5a:31:d4:9c:9b:93:72:c4:
         2c:59:c0:2f:f5:ff:3e:10:01:a0:fe:59:fe:b0:82:d5:95:81:
         9a:87:f0:e6:7f:b9:26:25:b5:dc:9f:bd:96:ee:e5:fb:a8:fd:
         3e:8e:9d:09:2d:db:db:6b:8d:34:ae:3a:da:3a:14:27:81:9f:
         dc:c8:e6:5e:15:80:96:69:d3:99:fe:81:30:a0:47:e6:ad:94:
         3b:11:30:78:09:82:b0:6f:99:74:3d:0a:dc:ba:1f:fc:fc:ab:
         d2:ab:21:ed:9f:3f:0c:72:43:94:2a:ea:5c:b6:de:8b:57:34:
         41:3d:20:3b:94:ce:46:87:ab:75:3b:77:01:cd:42:4c:65:c6:
         28:60:75:b4:e1:92:1e:31:87:2a:14:48:33:a9:07:0e:5e:71:
         ed:56:74:55:ac:67:bc:bb:9a:e9:49:70:a5:7b:5a:c7:33:5f:
         90:bd:cf:7e:c8:d2:35:08:7c:dd:b9:a6:e1:3c:f0:0a:22:3c:
         6f:e1:cc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----