Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/178ec5a4-656f-4674-b158-c6767f091921/263c682338b2d22c98136453229f79203c723e20.roa
File:                     263c682338b2d22c98136453229f79203c723e20.roa (raw, json)
Hash identifier:          tgwq6GCRFVBdfQv1MvgTO6wxgQ3Rx+LF6khUsjkJqNI=
Subject key identifier:   BD:F7:CB:AD:C7:BE:11:BD:C5:54:68:3F:57:3B:02:50:0B:EB:E1:4F
Certificate issuer:       /CN=6f01319158b481143f9879918e0466aa4e1e5377
Certificate serial:       0833B7
Authority key identifier: C9:EF:20:70:94:03:0B:DE:C7:31:82:3C:FA:31:45:BF:17:FB:C2:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f01319158b481143f9879918e0466aa4e1e5377.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/178ec5a4-656f-4674-b158-c6767f091921/263c682338b2d22c98136453229f79203c723e20.roa
Signing time:             Thu 07 Mar 2024 15:19:57 +0000
ROA not before:           Thu 07 Mar 2024 15:19:57 +0000
ROA not after:            Sat 07 Mar 2026 15:19:57 +0000
asID:                     270008
IP address blocks:        2803:89e0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 07 Mar 2024 20:10:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537527 (0x833b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f01319158b481143f9879918e0466aa4e1e5377
        Validity
            Not Before: Mar  7 15:19:57 2024 GMT
            Not After : Mar  7 15:19:57 2026 GMT
        Subject: CN=263c682338b2d22c98136453229f79203c723e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:68:16:cc:9d:15:c2:d9:ec:12:92:a9:dd:
                    3b:b6:c1:2a:56:48:10:2f:fd:de:05:41:b8:d8:24:
                    66:fa:6c:dc:ef:12:0d:81:de:70:db:7f:a7:fe:fd:
                    f5:2b:f9:9a:ba:43:82:ae:00:7a:f1:0d:aa:91:df:
                    88:df:4c:56:82:b9:a2:de:c5:9e:63:21:4a:f7:fa:
                    44:13:48:b9:f7:02:3b:e8:17:5b:6d:58:8b:81:10:
                    d9:e9:66:3f:7c:22:2f:5b:87:9c:97:ad:51:79:db:
                    79:51:17:d2:38:d7:d1:20:f1:46:63:d6:ea:df:37:
                    e0:f9:b5:77:92:6b:4c:8c:29:90:bd:cc:c9:6e:ab:
                    e9:72:c7:fa:1b:d6:0e:cf:c9:8a:5e:77:b1:e5:f9:
                    dc:6c:7b:0b:b7:cc:21:2b:6a:52:a3:60:02:dc:dc:
                    b0:04:8a:8d:fe:2e:15:8e:dd:bf:3c:11:ac:6f:fc:
                    1e:53:6b:8f:3a:6a:87:05:98:44:31:2b:ea:42:46:
                    e9:15:98:ba:1c:0b:7c:d4:20:71:47:0f:4f:57:9b:
                    f8:47:a8:f1:f4:f1:5a:cc:79:79:c0:52:09:54:10:
                    41:95:cf:ea:d6:5f:3f:d6:8b:a2:d6:41:13:28:f5:
                    96:a1:23:63:86:7f:e5:59:45:66:3e:f6:39:67:67:
                    b9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F7:CB:AD:C7:BE:11:BD:C5:54:68:3F:57:3B:02:50:0B:EB:E1:4F
            X509v3 Authority Key Identifier:
                keyid:C9:EF:20:70:94:03:0B:DE:C7:31:82:3C:FA:31:45:BF:17:FB:C2:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f01319158b481143f9879918e0466aa4e1e5377.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/178ec5a4-656f-4674-b158-c6767f091921/263c682338b2d22c98136453229f79203c723e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/178ec5a4-656f-4674-b158-c6767f091921/6f01319158b481143f9879918e0466aa4e1e5377.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:89e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:92:36:31:79:85:26:91:12:f0:94:60:8e:f4:d5:f6:89:d7:
         c2:b1:46:aa:89:49:20:da:bf:14:d7:c4:c2:71:8d:0b:0f:e0:
         5a:77:eb:2f:4d:7f:70:cf:9c:97:a9:0f:f8:20:a7:8a:a1:16:
         42:01:28:81:ad:4d:37:44:dd:82:2a:7e:3d:3c:ad:5d:7a:54:
         5c:75:2c:e8:8d:b4:8c:2a:15:09:fc:e4:6b:80:59:3d:2b:80:
         d5:bf:6e:00:c4:eb:df:ae:fb:61:2e:08:77:ba:bd:68:b8:43:
         39:99:2a:3e:1c:fd:eb:d1:a2:28:81:a9:3c:3b:47:e5:8c:ad:
         80:aa:87:e5:94:c5:09:88:7e:40:5f:d5:23:06:97:87:7c:7d:
         93:ea:1b:56:6d:d8:16:31:84:5b:13:b2:a0:b8:8f:4a:98:41:
         c6:6d:c1:b4:50:81:49:aa:ce:30:f4:8e:58:b1:91:d1:50:89:
         e7:ac:19:ba:60:f2:65:17:3f:62:46:8f:5e:8a:ce:44:41:04:
         2b:9f:d8:bf:f6:0b:00:90:52:4a:86:bf:c8:ec:ae:d7:c3:75:
         04:89:2c:b4:84:54:d4:fd:57:f4:6d:39:3e:33:5b:9a:1f:d8:
         db:9a:fc:11:32:d1:95:a4:03:32:63:c7:65:4e:a2:6a:bd:29:
         dc:60:0d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----