Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a3a2f33322d3332203d3e20323639393138.roa
File:                     323830333a646438303a3a2f33322d3332203d3e20323639393138.roa (raw, json)
Hash identifier:          QM7xtqN4acjtqjf31bs5UtFFD2RGskeJdLi0hV/sPZ4=
Subject key identifier:   9B:83:41:04:4C:A0:4E:FA:24:E8:3E:99:DE:64:42:DC:1F:26:F6:9F
Certificate issuer:       /CN=94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395
Certificate serial:       6E60EDC1C700969B713C767FE406817D1BBE4AE3
Authority key identifier: 94:D9:2E:DB:BD:4E:B9:AC:D1:A6:7B:58:FD:CB:19:00:48:B1:D3:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a3a2f33322d3332203d3e20323639393138.roa
Signing time:             Fri 02 Oct 2026 19:15:00 +0000
ROA not before:           Fri 02 Oct 2026 19:10:00 +0000
ROA not after:            Fri 01 Oct 2027 19:15:00 +0000
asID:                     269918
IP address blocks:        2803:dd80::/32 maxlen: 32
Validation:               Failed, certificate revoked on Thu 08 Oct 2026 18:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:60:ed:c1:c7:00:96:9b:71:3c:76:7f:e4:06:81:7d:1b:be:4a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395
        Validity
            Not Before: Oct  2 19:10:00 2026 GMT
            Not After : Oct  1 19:15:00 2027 GMT
        Subject: CN=9B8341044CA04EFA24E83E99DE6442DC1F26F69F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:58:36:72:10:86:f2:9c:ad:9a:0a:47:2f:2f:
                    04:dd:67:64:cb:30:97:45:e5:ce:a7:41:a7:a3:8b:
                    6e:9f:03:e4:ca:e7:67:c7:a7:23:6a:84:d4:63:d5:
                    c8:73:c6:f3:0f:45:b3:1e:dc:6f:27:cc:58:2f:6a:
                    3b:46:e3:fd:c1:31:ab:d6:de:d7:8a:6e:a9:a7:db:
                    2b:f0:4e:48:2b:d6:62:21:89:ed:3a:64:1c:64:29:
                    e1:52:d7:7c:9f:cc:91:21:d4:46:a9:3a:f3:61:94:
                    63:83:42:04:4a:6f:4a:d1:13:4d:e5:d0:37:c1:0f:
                    1e:37:48:6b:82:84:7a:b6:f4:6e:bf:2f:82:3b:6f:
                    17:39:0c:db:0b:ff:aa:cd:45:47:5e:a8:fe:ed:24:
                    b6:a0:24:61:e1:25:3d:61:8c:40:55:d4:8d:13:4b:
                    54:8f:41:16:9a:76:7d:c1:a6:f5:8c:34:eb:2a:af:
                    e6:b8:eb:3a:ec:5a:10:30:59:d4:d1:14:18:2a:0f:
                    1e:54:fb:87:09:5d:45:e8:fb:48:a6:9e:b8:06:ee:
                    9e:63:bc:1c:08:6a:3e:ca:82:40:08:44:46:dd:53:
                    6a:a8:ae:bb:19:aa:f8:c8:7b:4b:f4:57:fb:0b:d7:
                    35:e1:13:e4:fb:b1:56:aa:27:fc:6e:ba:3a:c5:5d:
                    9d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:83:41:04:4C:A0:4E:FA:24:E8:3E:99:DE:64:42:DC:1F:26:F6:9F
            X509v3 Authority Key Identifier:
                keyid:94:D9:2E:DB:BD:4E:B9:AC:D1:A6:7B:58:FD:CB:19:00:48:B1:D3:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a3a2f33322d3332203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:c4:bf:87:61:a2:ed:62:7d:d1:f2:b3:5d:43:7e:8f:d2:a3:
         70:dc:7a:f7:37:70:8d:69:ec:51:c8:7f:86:ad:3d:0c:cd:86:
         1f:0f:ab:4a:ec:7e:7e:1b:6f:69:e2:36:36:8d:7a:82:14:d3:
         c0:00:44:0d:c9:9e:5d:38:1e:28:ae:2d:1d:e5:2e:2b:ee:24:
         5d:62:ac:d3:17:03:60:ac:e6:f3:08:8a:c8:2d:32:ec:35:c8:
         51:c1:59:86:4d:70:83:d3:0c:c6:1f:c6:be:8b:f5:82:c9:0b:
         05:04:ad:ce:6f:62:98:ad:f5:28:8c:34:48:9a:e1:5b:14:f3:
         29:5a:9a:f3:a7:1a:c5:a7:87:fe:99:1e:d2:c0:37:e6:b3:b7:
         47:b0:33:58:27:9b:17:2f:30:52:a1:f8:6f:db:5c:44:6e:76:
         a3:7c:a5:ae:68:36:24:19:15:87:b3:95:07:05:76:37:b1:6f:
         0f:4f:83:fd:90:1b:00:81:07:81:c4:50:a5:92:25:78:f5:76:
         49:b5:68:ba:0e:9c:d5:7c:e0:38:f5:41:35:8c:eb:a1:fa:ac:
         48:d2:48:9a:03:a3:96:bb:d3:03:7d:7d:ad:f5:5c:04:f1:d9:
         ba:3a:da:d3:9b:8a:dd:cc:fd:95:1a:17:92:4b:82:f9:6e:78:
         5b:a2:88:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----