Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/f8d7802ec491a7f4ad66bd286c95a947f37ddf9d.roa
File:                     f8d7802ec491a7f4ad66bd286c95a947f37ddf9d.roa (raw, json)
Hash identifier:          ZXdKrVCivG1Yq2b4L32UAePKWJZTNlXoLQlwsecFue8=
Subject key identifier:   A7:0D:48:7D:3E:54:3F:A3:83:CC:48:F9:97:A6:5A:C5:C8:08:A7:DC
Certificate issuer:       /CN=7a0d3eafbdae2e52636e11aa20b9d745fdef44e7
Certificate serial:       0BDD08
Authority key identifier: EF:AD:68:3D:4A:EA:AB:8A:C7:E2:70:5D:50:FD:72:AD:1B:CD:F2:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/f8d7802ec491a7f4ad66bd286c95a947f37ddf9d.roa
Signing time:             Mon 03 Jul 2023 21:44:14 +0000
ROA not before:           Sun 02 Jul 2023 21:44:14 +0000
ROA not after:            Thu 03 Jul 2025 21:44:14 +0000
asID:                     270081
IP address blocks:        2803:8be0::/32 maxlen: 34

Validation:               Failed, certificate revoked on Wed 07 Feb 2024 05:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 777480 (0xbdd08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d3eafbdae2e52636e11aa20b9d745fdef44e7
        Validity
            Not Before: Jul  2 21:44:14 2023 GMT
            Not After : Jul  3 21:44:14 2025 GMT
        Subject: CN=f8d7802ec491a7f4ad66bd286c95a947f37ddf9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f7:e9:74:99:e4:79:cc:dc:38:33:54:06:a9:
                    85:ed:2a:29:9b:0c:19:a0:56:e3:22:ea:7f:cc:eb:
                    a5:4a:d0:7e:b8:7a:b3:8e:7b:34:eb:f7:77:61:e5:
                    55:17:f3:35:0a:b7:1c:1c:44:06:5a:1c:d6:e2:65:
                    19:c8:69:fd:50:d6:85:67:98:0b:0b:b9:e0:24:f7:
                    b6:87:d3:4a:af:fe:87:f3:cb:60:ac:e9:1b:44:da:
                    10:41:7b:91:db:e7:7a:35:6e:69:87:b5:d2:2d:06:
                    4d:1a:83:1f:37:eb:4f:19:f3:db:fd:5b:f0:b0:77:
                    52:6b:6c:c1:85:33:f8:1b:a0:e2:0e:7e:dc:39:86:
                    d0:12:91:5f:42:c2:54:0a:f2:98:88:4c:01:b8:71:
                    e6:60:ad:55:cd:08:4d:06:b8:b2:d2:a9:fc:b8:69:
                    44:92:00:60:9a:d4:32:bf:27:7e:a3:aa:ba:d4:78:
                    cf:77:9c:4a:51:95:0a:49:49:dc:88:78:85:2f:22:
                    42:c7:33:03:41:9d:5c:15:56:2c:18:54:08:3f:e2:
                    2b:35:c1:92:ef:be:40:83:f6:92:b2:fe:41:f4:27:
                    a5:bd:1f:0b:1e:03:11:b6:3a:e2:6c:df:bc:05:9b:
                    fd:4e:5f:15:b1:9a:0b:4d:b3:de:27:e9:22:07:99:
                    61:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0D:48:7D:3E:54:3F:A3:83:CC:48:F9:97:A6:5A:C5:C8:08:A7:DC
            X509v3 Authority Key Identifier:
                keyid:EF:AD:68:3D:4A:EA:AB:8A:C7:E2:70:5D:50:FD:72:AD:1B:CD:F2:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/f8d7802ec491a7f4ad66bd286c95a947f37ddf9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:73:da:e3:c2:2b:94:2e:fd:7d:4d:6f:f1:00:46:e4:33:e2:
         56:01:02:c5:22:e5:62:a0:a7:07:bf:42:47:3e:26:88:45:fa:
         14:66:82:35:ea:64:24:d4:8e:ff:a5:9f:df:df:28:6e:ee:c8:
         57:f0:93:22:cb:1f:41:67:a7:98:ed:52:fe:df:18:f4:5e:3d:
         17:1d:95:79:e8:e7:45:96:2d:d2:0b:d8:66:2b:ab:95:0d:5f:
         a4:5c:75:cb:49:38:74:9d:10:ab:c4:f4:2c:e4:28:6c:e8:08:
         ca:50:c5:8d:cd:a1:30:d4:a1:f3:c2:a9:b0:1d:05:c6:57:6c:
         b8:2a:65:94:ff:e8:1c:6c:8e:17:c0:c6:9f:0b:2d:6a:b7:91:
         4f:d2:d7:93:66:7b:d7:09:6e:56:53:44:36:e3:57:ba:0c:96:
         30:a4:38:a7:12:d6:ec:29:fa:5a:2c:63:ee:fa:5b:cd:93:78:
         ad:6d:5b:84:70:e9:a2:fb:26:f4:c1:31:2f:2d:62:47:e1:00:
         a1:eb:3d:dc:d9:37:e5:ba:b4:96:18:87:59:88:78:4d:d3:b0:
         65:26:34:3f:d1:9b:e6:87:f5:51:6d:19:e0:b4:b2:6f:65:6e:
         a0:87:76:16:48:a7:aa:1c:bd:f8:b1:c7:3a:65:0d:95:cb:f6:
         a2:94:ae:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----