Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313263303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a313263303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          BqkhOhNuwEgG8ahFCLfa5Pw+rLAuBNuP+bMp7anV96U=
Subject key identifier:   CE:26:88:51:17:84:57:91:10:2E:F5:E8:FA:2F:3D:CB:40:76:32:28
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       78C8897D5A374EC7CCF9B64670024FCD14D6CF6B
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313263303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:17 +0000
ROA not before:           Thu 03 Jul 2025 20:35:17 +0000
ROA not after:            Thu 02 Jul 2026 20:40:17 +0000
asID:                     266904
IP address blocks:        2803:f6a0:12c0::/42 maxlen: 42
Validation:               Failed, certificate revoked on Thu 17 Jul 2025 01:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c8:89:7d:5a:37:4e:c7:cc:f9:b6:46:70:02:4f:cd:14:d6:cf:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:17 2025 GMT
            Not After : Jul  2 20:40:17 2026 GMT
        Subject: CN=CE26885117845791102EF5E8FA2F3DCB40763228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:4d:43:67:4c:87:df:6f:ba:41:af:d8:9a:
                    82:7a:59:75:a9:21:83:97:c0:30:9c:5d:f3:ed:bd:
                    81:55:77:3a:85:dd:af:0a:aa:83:fb:d2:7c:61:44:
                    17:23:e4:87:88:8c:5b:7a:50:75:f8:17:6b:9f:6e:
                    d8:33:6e:dd:dc:75:ac:8f:88:68:18:a3:7c:9d:4d:
                    70:83:03:d3:02:3a:b8:9c:a0:98:81:d5:b1:4d:eb:
                    7e:b3:a9:c7:24:01:3c:72:37:96:24:40:ab:d8:7b:
                    7c:d9:68:b7:3a:0a:da:48:ed:f0:21:8a:95:83:f6:
                    48:3a:99:3f:3f:da:11:d4:2e:bb:ce:64:c0:29:ae:
                    f5:ba:f9:bc:b3:fe:54:4d:97:da:7d:d9:83:65:e4:
                    67:8c:35:4d:46:fc:9b:fa:cf:8e:b3:3d:bf:79:1f:
                    20:c5:c4:1f:ad:73:82:d2:49:9d:d1:07:a0:78:61:
                    4e:b3:ae:6b:8b:0c:67:1f:d5:14:80:07:bb:ab:cf:
                    5a:c7:3d:be:24:35:5e:5e:bd:43:45:a7:75:cc:c8:
                    4a:8f:81:a4:2c:c4:29:d0:fb:23:bb:a0:f5:83:51:
                    71:5a:92:f4:63:6e:04:e8:e1:81:dd:e0:b2:ae:be:
                    2e:ca:22:85:09:97:f2:60:3f:d2:cd:33:29:4f:ac:
                    b3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:26:88:51:17:84:57:91:10:2E:F5:E8:FA:2F:3D:CB:40:76:32:28
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a313263303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:12c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         0f:24:60:12:56:aa:3b:dc:32:05:f7:da:56:88:b7:e8:d6:28:
         45:9b:95:7c:a8:dc:60:bc:c8:7e:d6:e4:85:e2:0c:bc:2d:51:
         56:ae:ac:26:37:91:31:86:ce:7e:cd:d4:6c:fc:0d:e0:d3:6e:
         5f:e1:bc:6a:4c:b6:80:6f:f0:86:88:a2:8e:21:87:a3:d4:bf:
         24:2a:44:48:b1:8b:02:3f:62:25:d0:64:d6:5b:9e:15:04:a0:
         dc:f4:4c:9e:39:b5:e8:83:4e:cd:1c:1c:15:e8:7e:ea:58:dc:
         7e:7a:11:ad:82:43:43:6f:ea:bb:b3:9a:2c:ea:8a:f4:da:be:
         3e:07:bd:4c:95:43:6e:8e:da:c1:6b:9e:f5:b1:ba:01:6e:a5:
         e7:2d:27:8d:a2:78:a1:c5:44:b9:5f:cc:bf:65:1c:11:29:3b:
         70:f3:5e:46:46:cd:b1:28:0b:8d:2f:c4:e6:39:b3:f9:c4:fe:
         17:e6:25:5b:3e:dc:ec:37:0a:c8:d9:15:68:fd:68:e0:fe:4f:
         9d:08:46:ff:79:fe:d2:76:81:f3:8c:30:28:b5:1a:5a:63:83:
         7b:13:da:66:1c:43:fb:41:10:41:b4:15:00:1d:03:0b:d2:08:
         5d:a9:94:f8:ab:7e:fa:81:bb:64:1c:7a:f3:fe:3a:eb:f0:37:
         55:97:96:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----