Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2af073aa-d765-4230-9aca-1f2851f77ae3/83cf500c927692365f7ba59c41d0f7a80ab59f82.roa
File:                     83cf500c927692365f7ba59c41d0f7a80ab59f82.roa (raw, json)
Hash identifier:          5ERGuwKDLzuEhGTANjhoC0PnKSSbkmiuckN8fxWJWco=
Subject key identifier:   08:25:D0:AE:4C:FB:11:67:BD:AE:73:45:91:42:EA:45:19:C7:5B:96
Certificate issuer:       /CN=58bf8ff08351b2f713c258d0a9c2aa0ce58706d5
Certificate serial:       62EC
Authority key identifier: 55:1A:C3:56:8E:7C:DD:C1:2F:DB:1F:26:81:74:20:F7:A9:C1:7A:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58bf8ff08351b2f713c258d0a9c2aa0ce58706d5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2af073aa-d765-4230-9aca-1f2851f77ae3/83cf500c927692365f7ba59c41d0f7a80ab59f82.roa
Signing time:             Mon 28 Aug 2023 01:56:25 +0000
ROA not before:           Sun 27 Aug 2023 01:56:25 +0000
ROA not after:            Thu 28 Aug 2025 01:56:25 +0000
asID:                     272977
IP address blocks:        2803:d590::/38 maxlen: 38

Validation:               Failed, certificate revoked on Sat 13 Apr 2024 18:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25324 (0x62ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58bf8ff08351b2f713c258d0a9c2aa0ce58706d5
        Validity
            Not Before: Aug 27 01:56:25 2023 GMT
            Not After : Aug 28 01:56:25 2025 GMT
        Subject: CN=83cf500c927692365f7ba59c41d0f7a80ab59f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a7:0c:60:3f:bf:a4:71:23:b7:2b:b7:a5:13:
                    f0:6d:0c:af:36:91:a8:53:84:2d:da:04:28:66:d9:
                    99:bd:9e:ec:a6:fd:9b:1f:7f:c6:53:4f:64:70:d6:
                    62:a5:9d:af:6d:4c:15:88:0d:db:a4:e4:37:aa:9f:
                    ab:17:bc:39:41:ba:00:ca:8c:b1:67:c6:d8:9d:c2:
                    d6:ac:88:2b:9d:19:9a:7a:16:b1:63:eb:fe:bc:80:
                    46:2d:5c:95:48:e1:64:45:63:20:18:35:df:9c:29:
                    d9:ef:17:48:be:b3:63:8e:e6:7a:bb:36:e5:65:4d:
                    0e:7a:45:6a:1e:84:1d:10:ef:5c:13:b1:a9:7f:9e:
                    3c:1b:b1:34:b1:76:80:e7:3f:22:55:30:c2:9f:35:
                    4d:b3:91:a9:3e:6e:8c:7e:bc:08:29:16:c1:e0:44:
                    bd:ca:e4:59:84:85:f3:51:1e:fa:c7:46:28:57:ea:
                    0b:70:8d:88:7b:f9:af:03:29:64:6c:d7:c8:f6:97:
                    a2:16:f9:c1:fb:85:c1:9a:ee:e9:a6:72:55:6c:ee:
                    b7:a5:82:72:ad:d2:a3:b3:36:26:c4:4a:16:ad:bf:
                    aa:ec:99:74:05:4b:02:c4:61:7a:47:76:0f:a6:69:
                    26:97:73:84:6d:45:87:3a:4b:79:60:15:a1:c0:cf:
                    85:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:25:D0:AE:4C:FB:11:67:BD:AE:73:45:91:42:EA:45:19:C7:5B:96
            X509v3 Authority Key Identifier:
                keyid:55:1A:C3:56:8E:7C:DD:C1:2F:DB:1F:26:81:74:20:F7:A9:C1:7A:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58bf8ff08351b2f713c258d0a9c2aa0ce58706d5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2af073aa-d765-4230-9aca-1f2851f77ae3/83cf500c927692365f7ba59c41d0f7a80ab59f82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2af073aa-d765-4230-9aca-1f2851f77ae3/58bf8ff08351b2f713c258d0a9c2aa0ce58706d5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d590::/38

    Signature Algorithm: sha256WithRSAEncryption
         b2:8b:0e:11:3b:29:2f:91:06:25:88:1e:23:bf:09:06:92:32:
         44:0f:d5:2b:7c:b6:55:38:3d:ae:3f:23:e3:bf:6e:55:b3:64:
         1a:d3:6c:92:29:f0:d3:aa:ce:fb:d9:62:33:cb:4a:0c:52:47:
         05:c1:2c:f3:4d:cd:eb:1c:cc:4b:08:fb:14:20:11:6f:12:18:
         27:57:0d:5b:d8:ff:99:6f:51:58:6f:7f:fa:c3:6e:1f:91:9c:
         cf:8d:3c:3a:41:63:33:8d:da:28:3e:fe:a5:8d:5e:4c:45:ea:
         ef:95:4f:01:ad:33:8e:51:e8:ce:f5:6e:a0:b6:c0:1d:71:12:
         04:78:4a:47:63:bc:f1:49:70:29:a6:77:22:d8:c3:b6:6f:3c:
         48:61:11:3e:71:6d:19:b1:ec:e8:40:89:a1:51:6f:c1:6c:af:
         8a:b9:ab:2d:2d:21:56:91:7e:c7:96:61:32:c4:73:79:7f:d8:
         7c:39:86:e2:94:ec:2b:5e:34:05:b3:e4:25:ef:6f:52:bb:9d:
         70:95:a8:41:00:4d:e6:85:e8:d3:7d:a4:ed:b2:c5:1c:cf:1a:
         13:a2:df:66:34:1b:47:93:ba:4a:09:e7:39:82:73:70:da:e4:
         d7:a5:10:ba:13:24:52:e3:01:82:59:75:96:b9:62:9e:9d:b8:
         2d:42:a2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----