Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323830313a3136383a313a3a2f34382d3438203d3e203631353533.roa
File:                     323830313a3136383a313a3a2f34382d3438203d3e203631353533.roa (raw, json)
Hash identifier:          f8IQj4e1BkDreXEhPrmBDc1RT+JD4aGeWpCNCqBCtQ0=
Subject key identifier:   CB:EE:E6:2B:C7:39:BD:3C:B8:0A:DE:3B:60:99:4D:A8:17:F2:24:F7
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       370BC085C351F43A184225A6BD85B5540EAA38EE
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323830313a3136383a313a3a2f34382d3438203d3e203631353533.roa
Signing time:             Tue 05 Mar 2024 18:16:05 +0000
ROA not before:           Tue 05 Mar 2024 18:11:05 +0000
ROA not after:            Tue 04 Mar 2025 18:16:05 +0000
asID:                     61553
IP address blocks:        2801:168:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 14 May 2024 13:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:0b:c0:85:c3:51:f4:3a:18:42:25:a6:bd:85:b5:54:0e:aa:38:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:11:05 2024 GMT
            Not After : Mar  4 18:16:05 2025 GMT
        Subject: CN=CBEEE62BC739BD3CB80ADE3B60994DA817F224F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6e:44:e1:1b:0e:87:69:0b:5d:4b:a4:da:18:
                    11:2e:a1:fe:2b:08:5d:0a:13:21:d9:77:8c:4a:77:
                    ff:ad:6f:74:8a:9c:dd:fd:16:b4:9f:e8:e4:3d:37:
                    1f:31:d8:e7:9f:0d:a5:4d:f2:f4:4b:f2:b9:38:92:
                    df:83:c8:7d:39:39:34:17:35:bc:1b:bc:00:21:fe:
                    48:cf:5a:5a:1d:c3:39:5b:f6:18:4f:7f:74:dd:73:
                    ed:83:bf:24:8e:36:e5:00:ee:0f:e0:fa:50:df:ca:
                    05:9c:f9:5b:3b:d1:21:6e:1e:68:c7:cd:52:4e:62:
                    ea:0b:82:26:d8:88:54:2a:18:c5:96:fa:9e:8e:ce:
                    33:25:32:8c:c8:95:c0:ee:7c:5d:9e:d3:d9:d2:48:
                    85:94:75:72:45:13:69:53:b6:43:c7:95:cd:66:c2:
                    33:9b:a9:5e:3e:81:02:66:7e:78:2a:11:96:8c:15:
                    34:01:a6:e1:76:93:9a:55:69:86:29:6c:69:74:62:
                    6f:3a:e5:a5:98:5e:6c:59:b0:09:d3:b8:01:ca:7d:
                    cf:8c:b7:29:f8:2f:1c:39:6c:7c:4d:d6:62:75:cb:
                    5c:c6:24:80:84:22:06:bc:aa:f6:1b:92:64:05:b5:
                    f5:d8:db:17:f1:b7:1a:a0:d5:d4:5f:3c:fd:c1:c8:
                    c4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EE:E6:2B:C7:39:BD:3C:B8:0A:DE:3B:60:99:4D:A8:17:F2:24:F7
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323830313a3136383a313a3a2f34382d3438203d3e203631353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:168:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:da:67:5a:eb:37:b6:12:0d:71:d5:b2:9d:d1:e7:e7:db:15:
         c2:61:3a:e7:c8:53:6b:c8:4c:4b:6c:da:00:aa:c3:aa:86:a5:
         2e:59:83:c0:36:9a:3a:90:07:47:18:d0:0f:ce:66:20:0f:0b:
         0d:fd:46:3a:e9:5c:f2:92:43:2b:a5:33:68:65:69:dc:46:bd:
         66:ad:f4:81:a2:87:25:d1:c4:20:3b:ad:a0:c4:b0:a2:37:77:
         8b:cf:41:22:c3:91:18:1b:b0:13:0b:6f:64:76:c0:01:fd:99:
         be:ce:ea:89:49:f6:53:1a:22:69:bf:a6:87:d5:bd:30:f4:91:
         8c:1d:c4:2f:a9:30:e1:39:e7:21:a8:9f:70:bc:f5:8a:53:4b:
         38:48:6a:b3:41:5d:c0:39:d7:40:68:14:3a:b7:ce:b2:f5:75:
         84:77:30:04:16:50:29:13:22:82:8b:4b:ec:6c:c1:fd:63:a2:
         1b:2f:c8:83:54:a4:a1:85:35:fb:e9:fd:26:d8:09:c9:82:e4:
         6e:e0:db:50:ba:33:a7:a6:28:7b:b7:f6:80:48:4e:95:23:2f:
         1c:5d:48:64:39:34:f0:9a:22:4a:f6:5b:cf:12:f8:54:f9:1e:
         67:ed:85:95:00:e5:e6:59:0e:93:95:45:77:45:a8:4a:14:8c:
         e9:1b:fe:63
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUNwvAhcNR9DoYQiWmvYW1VA6qOO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgxQjM4NzY4ODBGNjNENUY5QkE2RDc2M0Q3RTY2M0U5
REIzNjlGQzAeFw0yNDAzMDUxODExMDVaFw0yNTAzMDQxODE2MDVaMDMxMTAvBgNV
BAMTKENCRUVFNjJCQzczOUJEM0NCODBBREUzQjYwOTk0REE4MTdGMjI0RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmbkThGw6HaQtdS6TaGBEuof4r
CF0KEyHZd4xKd/+tb3SKnN39FrSf6OQ9Nx8x2OefDaVN8vRL8rk4kt+DyH05OTQX
NbwbvAAh/kjPWlodwzlb9hhPf3Tdc+2DvySONuUA7g/g+lDfygWc+Vs70SFuHmjH
zVJOYuoLgibYiFQqGMWW+p6OzjMlMozIlcDufF2e09nSSIWUdXJFE2lTtkPHlc1m
wjObqV4+gQJmfngqEZaMFTQBpuF2k5pVaYYpbGl0Ym865aWYXmxZsAnTuAHKfc+M
tyn4Lxw5bHxN1mJ1y1zGJICEIga8qvYbkmQFtfXY2xfxtxqg1dRfPP3ByMTNAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUy+7mK8c5vTy4Ct47YJlNqBfyJPcwHwYDVR0j
BBgwFoAUSBs4dogPY9X5um12PX5mPp2zafwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjgyMDVBNUJCOTcyMDFFOTkwRDMzNzJCN0FGOTQxNTVE
N0YxODYzRUUyRTc5QjQ0NzQwNkYwNTQwRDlCMDAyLzAvNDgxQjM4NzY4ODBGNjNE
NUY5QkE2RDc2M0Q3RTY2M0U5REIzNjlGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80ODFCMzg3Njg4MEY2M0Q1RjlC
QTZENzYzRDdFNjYzRTlEQjM2OUZDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUY4MjA1QTVCQjk3MjAxRTk5MEQzMzcyQjdBRjk0MTU1RDdGMTg2M0VF
MkU3OUI0NDc0MDZGMDU0MEQ5QjAwMi8wLzMyMzgzMDMxM2EzMTM2MzgzYTMxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzYzMTM1MzUzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAWgA
ATANBgkqhkiG9w0BAQsFAAOCAQEAqtpnWus3thINcdWyndHn59sVwmE658hTa8hM
S2zaAKrDqoalLlmDwDaaOpAHRxjQD85mIA8LDf1GOulc8pJDK6UzaGVp3Ea9Zq30
gaKHJdHEIDutoMSwojd3i89BIsORGBuwEwtvZHbAAf2Zvs7qiUn2Uxoiab+mh9W9
MPSRjB3EL6kw4TnnIaifcLz1ilNLOEhqs0FdwDnXQGgUOrfOsvV1hHcwBBZQKRMi
gotL7GzB/WOiGy/Ig1SkoYU1++n9JtgJyYLkbuDbULozp6Yoe7f2gEhOlSMvHF1I
ZDk08JoiSvZbzxL4VPkeZ+2FlQDl5lkOk5VFd0WoShSM6Rv+Yw==
-----END CERTIFICATE-----