Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ff3e5c9-0aa7-4651-823a-20868d934668/d3943011ee4d3b638a72e07cf844eab2132f8ccc.roa
File:                     d3943011ee4d3b638a72e07cf844eab2132f8ccc.roa (raw, json)
Hash identifier:          S0It+2U6LcZSVTjewrZP2gCj29AOgbbLqbavyLFRlpA=
Subject key identifier:   75:E8:19:0C:1D:1A:38:CC:FE:74:E5:22:CF:6C:94:57:54:D9:60:C7
Certificate issuer:       /CN=0b07d38e995ba3dbdfffdb1c5d575d18fb416d5d
Certificate serial:       1253A0
Authority key identifier: 75:A2:64:14:72:89:F2:BC:AF:41:D4:81:7F:2C:75:3A:98:4F:66:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0b07d38e995ba3dbdfffdb1c5d575d18fb416d5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ff3e5c9-0aa7-4651-823a-20868d934668/d3943011ee4d3b638a72e07cf844eab2132f8ccc.roa
Signing time:             Tue 05 Dec 2023 07:30:01 +0000
ROA not before:           Tue 05 Dec 2023 07:30:01 +0000
ROA not after:            Thu 04 Dec 2025 07:30:01 +0000
asID:                     262186
IP address blocks:        2803:d110::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 12 Feb 2024 18:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1201056 (0x1253a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b07d38e995ba3dbdfffdb1c5d575d18fb416d5d
        Validity
            Not Before: Dec  5 07:30:01 2023 GMT
            Not After : Dec  4 07:30:01 2025 GMT
        Subject: CN=d3943011ee4d3b638a72e07cf844eab2132f8ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3d:c3:f2:c4:55:0c:db:75:82:01:75:48:6b:
                    da:48:d0:d4:a8:f9:6a:d9:93:02:46:e3:ef:29:1b:
                    ec:da:69:14:0c:8d:1e:ca:2b:33:4e:6b:38:cd:de:
                    73:98:26:dd:7c:f4:23:cb:af:9a:08:25:7c:18:07:
                    67:aa:54:52:98:87:ce:ba:d8:17:03:4a:7d:47:3b:
                    8c:14:a3:18:b9:ec:4a:3a:ac:1b:07:26:40:6b:dc:
                    22:59:d7:38:7e:d6:62:bf:8a:f1:08:f7:ff:41:8e:
                    43:84:73:4d:01:2d:34:3f:37:7b:60:12:54:39:8e:
                    46:fa:4f:92:09:04:3d:ed:c7:0e:b9:b6:c2:74:4e:
                    f9:49:ca:d8:b5:2d:8c:82:f0:78:d2:db:25:a2:94:
                    46:cb:83:ee:2f:72:9f:0d:29:4c:ec:32:bc:41:ef:
                    89:81:f5:20:de:ae:da:53:2e:c1:6d:64:32:00:9d:
                    74:bc:80:5e:90:bb:9b:58:3a:b9:d1:de:8a:3b:5d:
                    7a:48:de:3a:b8:41:e0:60:ae:29:bb:cc:b5:52:db:
                    40:a0:14:cc:cf:ef:dd:7c:f5:46:8f:bb:99:cc:2e:
                    a0:94:c2:df:9f:fb:8b:02:f9:ae:69:ab:c8:be:e1:
                    68:c9:c8:ce:5b:f3:a1:ac:3b:b4:85:10:ee:2e:ea:
                    e1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E8:19:0C:1D:1A:38:CC:FE:74:E5:22:CF:6C:94:57:54:D9:60:C7
            X509v3 Authority Key Identifier:
                keyid:75:A2:64:14:72:89:F2:BC:AF:41:D4:81:7F:2C:75:3A:98:4F:66:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0b07d38e995ba3dbdfffdb1c5d575d18fb416d5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ff3e5c9-0aa7-4651-823a-20868d934668/d3943011ee4d3b638a72e07cf844eab2132f8ccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ff3e5c9-0aa7-4651-823a-20868d934668/0b07d38e995ba3dbdfffdb1c5d575d18fb416d5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d110::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:65:e0:53:78:54:27:a0:41:11:c9:bb:c1:cf:fe:41:49:7c:
         09:26:0c:66:bb:ff:23:58:a2:9d:fc:5c:d3:29:75:47:7d:e2:
         c3:90:7f:4d:96:d1:c0:7c:61:37:ef:96:59:8d:c2:55:19:ab:
         62:9a:72:4f:9d:82:eb:42:a2:ec:6b:fc:77:34:7b:2c:5c:97:
         76:ec:c3:4c:96:2f:e7:e6:03:af:3e:f0:e0:13:f6:7b:6b:19:
         cc:8a:55:e4:ac:b4:e6:22:05:86:52:75:3e:59:a8:53:04:3a:
         e5:8e:0c:c2:92:ba:d1:26:59:7b:59:e5:e8:ad:78:d0:c4:0f:
         a7:9f:d0:26:a4:e1:93:3b:34:05:4d:2e:fd:bc:01:7c:cf:ad:
         95:99:40:f3:99:0b:1b:03:16:d6:ab:3c:6d:c1:41:7b:ba:f4:
         79:91:c0:24:99:67:81:26:3a:82:e7:9b:42:c5:db:43:c3:ba:
         5b:55:bb:4a:33:51:42:ac:d1:44:3c:85:b7:d6:9c:3a:71:31:
         b0:46:dd:7d:53:66:6b:69:92:6e:80:46:ca:a2:d2:89:8c:3e:
         0c:6f:d9:04:3e:53:88:81:e3:94:d3:5e:ce:90:cd:87:7d:72:
         d2:6c:5e:0a:b3:c3:33:b8:b5:04:c8:f8:cd:15:80:0e:56:2f:
         f3:c5:a5:93
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDElOgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBi
MDdkMzhlOTk1YmEzZGJkZmZmZGIxYzVkNTc1ZDE4ZmI0MTZkNWQwHhcNMjMxMjA1
MDczMDAxWhcNMjUxMjA0MDczMDAxWjAzMTEwLwYDVQQDEyhkMzk0MzAxMWVlNGQz
YjYzOGE3MmUwN2NmODQ0ZWFiMjEzMmY4Y2NjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgD3D8sRVDNt1ggF1SGvaSNDUqPlq2ZMCRuPvKRvs2mkUDI0e
yiszTms4zd5zmCbdfPQjy6+aCCV8GAdnqlRSmIfOutgXA0p9RzuMFKMYuexKOqwb
ByZAa9wiWdc4ftZiv4rxCPf/QY5DhHNNAS00Pzd7YBJUOY5G+k+SCQQ97ccOubbC
dE75ScrYtS2MgvB40tslopRGy4PuL3KfDSlM7DK8Qe+JgfUg3q7aUy7BbWQyAJ10
vIBekLubWDq50d6KO116SN46uEHgYK4pu8y1UttAoBTMz+/dfPVGj7uZzC6glMLf
n/uLAvmuaavIvuFoycjOW/OhrDu0hRDuLurhDwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFHXoGQwdGjjM/nTlIs9slFdU2WDHMB8GA1UdIwQYMBaAFHWiZBRyifK8r0HU
gX8sdTqYT2btMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGIwN2Qz
OGU5OTViYTNkYmRmZmZkYjFjNWQ1NzVkMThmYjQxNmQ1ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGZmM2U1YzktMGFhNy00NjUxLTgyM2EtMjA4Njhk
OTM0NjY4L2QzOTQzMDExZWU0ZDNiNjM4YTcyZTA3Y2Y4NDRlYWIyMTMyZjhjY2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZmYzZTVjOS0wYWE3LTQ2NTEtODIzYS0yMDg2
OGQ5MzQ2NjgvMGIwN2QzOGU5OTViYTNkYmRmZmZkYjFjNWQ1NzVkMThmYjQxNmQ1
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD0RAwDQYJKoZIhvcNAQELBQADggEBABdl4FN4VCegQRHJ
u8HP/kFJfAkmDGa7/yNYop38XNMpdUd94sOQf02W0cB8YTfvllmNwlUZq2Kack+d
gutCouxr/Hc0eyxcl3bsw0yWL+fmA68+8OAT9ntrGcyKVeSstOYiBYZSdT5ZqFME
OuWODMKSutEmWXtZ5eiteNDED6ef0Cak4ZM7NAVNLv28AXzPrZWZQPOZCxsDFtar
PG3BQXu69HmRwCSZZ4EmOoLnm0LF20PDultVu0ozUUKs0UQ8hbfWnDpxMbBG3X1T
Zmtpkm6ARsqi0omMPgxv2QQ+U4iB45TTXs6QzYd9ctJsXgqzwzO4tQTI+M0VgA5W
L/PFpZM=
-----END CERTIFICATE-----