Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3a6ab581-9392-45b3-be90-e10350426462/24f1eecaf6f68b4edd4a536627b724cdfd7ff9f2.roa
File:                     24f1eecaf6f68b4edd4a536627b724cdfd7ff9f2.roa (raw, json)
Hash identifier:          2mzooTfe6nNaDKBUnb1SaOZ0zAzwjLVMD8TXIdhn6ZI=
Subject key identifier:   A9:F6:40:F4:D6:F8:C6:9B:AB:3C:3E:4A:B3:2D:E6:44:C7:56:B5:59
Certificate issuer:       /CN=9320cf286d5e9ab8d030eceb13d4663a644d9a38
Certificate serial:       0307C0
Authority key identifier: 40:47:2F:18:F8:D9:0A:D8:A6:3A:88:A3:23:67:82:9C:A5:C5:87:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9320cf286d5e9ab8d030eceb13d4663a644d9a38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3a6ab581-9392-45b3-be90-e10350426462/24f1eecaf6f68b4edd4a536627b724cdfd7ff9f2.roa
Signing time:             Mon 02 Jan 2023 23:14:59 +0000
ROA not before:           Sun 01 Jan 2023 23:14:41 +0000
ROA not after:            Thu 02 Jan 2025 23:14:41 +0000
asID:                     272156
IP address blocks:        2803:4890::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 22:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198592 (0x307c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9320cf286d5e9ab8d030eceb13d4663a644d9a38
        Validity
            Not Before: Jan  1 23:14:41 2023 GMT
            Not After : Jan  2 23:14:41 2025 GMT
        Subject: CN=24f1eecaf6f68b4edd4a536627b724cdfd7ff9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:db:1d:c4:b4:dc:db:9c:ef:57:29:d8:6e:aa:
                    df:fa:cb:41:9e:3c:5a:06:85:08:79:4a:18:bd:cd:
                    84:ce:f1:3b:4f:8a:cd:61:3a:1c:ad:fe:60:30:c9:
                    29:42:19:5a:6c:f1:1f:87:72:49:8a:7b:ef:49:ad:
                    2d:6b:02:db:fb:ed:10:c3:73:0a:46:fc:9e:c6:ec:
                    5c:a1:37:fb:6d:c0:17:ff:eb:ad:10:78:f6:d6:81:
                    c2:35:5e:12:6f:a8:ff:75:7e:40:be:60:21:18:c7:
                    8a:65:a8:6d:72:af:57:d1:f8:c2:49:f7:cb:f3:4f:
                    dc:65:50:ed:45:b9:34:f1:46:7e:ad:49:79:63:5c:
                    fb:47:b0:d1:96:5b:0d:d9:ea:d4:0f:8f:f6:27:12:
                    24:33:35:5d:87:59:fc:68:84:6d:13:a5:73:12:d8:
                    76:3e:6a:fa:39:28:c8:ce:6e:7e:fa:21:45:42:44:
                    6c:c9:32:8d:d7:0e:6e:4a:7e:74:bd:b3:04:0f:db:
                    bb:9c:d1:b8:58:f4:56:33:1e:c9:22:f0:b1:cd:aa:
                    92:be:9a:e6:0c:96:b5:79:16:c8:d3:4e:54:01:62:
                    d4:2b:71:4e:4e:e4:2a:3e:88:be:c0:ec:d5:5f:5d:
                    99:2c:94:ec:e9:fb:8a:ee:10:0a:a5:f9:f1:70:08:
                    8c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F6:40:F4:D6:F8:C6:9B:AB:3C:3E:4A:B3:2D:E6:44:C7:56:B5:59
            X509v3 Authority Key Identifier:
                keyid:40:47:2F:18:F8:D9:0A:D8:A6:3A:88:A3:23:67:82:9C:A5:C5:87:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9320cf286d5e9ab8d030eceb13d4663a644d9a38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3a6ab581-9392-45b3-be90-e10350426462/24f1eecaf6f68b4edd4a536627b724cdfd7ff9f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3a6ab581-9392-45b3-be90-e10350426462/9320cf286d5e9ab8d030eceb13d4663a644d9a38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4890::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:6a:78:48:69:30:40:b1:ea:80:cd:6e:68:07:04:38:a5:72:
         76:fb:f3:3c:86:95:da:5b:41:c4:ad:74:29:c8:3f:c6:dc:69:
         d0:bb:af:45:3a:95:37:19:c7:2a:d2:8e:e9:ed:29:92:8d:ce:
         19:61:cc:cb:f6:13:5d:75:7a:83:00:d2:02:be:5b:46:f4:7e:
         ab:7d:8a:93:21:12:36:82:3d:32:3c:81:c6:5f:e5:4b:f8:35:
         b8:65:30:5e:7d:a1:1c:b7:0f:69:e6:17:30:f2:35:3f:44:3e:
         73:af:25:c1:a4:f5:47:7b:44:2e:b7:0a:be:e6:3e:28:80:2d:
         2f:5f:3a:d2:8f:24:39:fb:bd:d9:67:bd:e0:0b:df:b1:ae:10:
         5d:e0:e5:9d:fd:75:e1:20:6a:5b:b8:7a:53:65:8e:ee:e3:4c:
         f4:d0:ad:7a:94:44:47:6a:c8:74:49:cb:9a:ba:c6:43:61:3e:
         a8:b3:f2:e3:73:db:b3:17:18:03:20:1a:b8:b4:0e:a7:c3:79:
         31:e2:4a:dd:fe:7b:00:27:d5:2e:f5:32:d1:39:10:1a:1b:c2:
         dd:f4:93:3b:5a:a2:8b:5c:9a:77:05:16:3f:30:8d:48:78:01:
         ee:17:6d:dd:f4:c5:46:a6:70:7e:ba:6b:ec:54:55:eb:0c:39:
         4f:a0:2b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----