Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3430303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a3430303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          6HiHr1Cxx9wXsQtGwTRledGb6hY9uAcnU3hLaJym47k=
Subject key identifier:   9D:EC:88:06:4A:59:E0:23:ED:52:98:8D:6F:68:92:35:89:8A:51:08
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       135C2C63F4043A0127C7255C94A51C77BC37A393
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3430303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:25 +0000
ROA not before:           Thu 03 Jul 2025 20:35:25 +0000
ROA not after:            Thu 02 Jul 2026 20:40:25 +0000
asID:                     266904
IP address blocks:        2803:f6a0:400::/42 maxlen: 42
Validation:               Failed, certificate revoked on Thu 17 Jul 2025 01:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5c:2c:63:f4:04:3a:01:27:c7:25:5c:94:a5:1c:77:bc:37:a3:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:25 2025 GMT
            Not After : Jul  2 20:40:25 2026 GMT
        Subject: CN=9DEC88064A59E023ED52988D6F689235898A5108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:f1:e7:51:e4:eb:78:f7:98:98:2e:fd:51:
                    1b:9c:6e:c2:19:00:d6:af:2e:dc:11:24:ef:97:e7:
                    3f:89:af:4f:9c:4d:0a:2f:03:bb:5e:19:4c:48:58:
                    9b:eb:1d:32:d7:9b:7e:0d:26:86:3e:60:c3:0a:48:
                    04:bc:e0:bc:36:e9:cc:88:db:2d:93:05:53:44:e5:
                    04:7a:fc:9a:c7:c9:36:00:36:05:39:a5:0f:35:dc:
                    39:4d:d8:bf:7b:59:8f:9b:f1:58:8b:89:41:db:98:
                    2f:ce:35:ce:98:d2:67:cc:91:57:60:9f:a4:18:da:
                    b3:d9:92:9f:8f:99:66:74:67:7e:d0:96:0b:67:b1:
                    25:8e:43:e9:4f:22:f9:62:48:7f:48:af:b9:57:29:
                    75:46:71:3d:fc:36:29:ba:b1:08:21:88:87:4d:d9:
                    3e:d1:01:af:18:65:9b:12:44:55:ca:d4:f2:e7:e8:
                    77:65:3f:e8:1a:b6:c5:8e:44:1f:b8:e0:4c:2b:4e:
                    cd:07:e6:84:0f:97:66:28:52:7b:48:a0:f9:6d:c4:
                    0d:f6:12:7a:60:08:d3:43:e7:55:f5:64:04:cd:31:
                    8a:22:17:1e:6a:60:2c:40:9a:de:0b:22:65:51:a3:
                    59:84:a4:c2:27:b6:94:c8:99:b5:33:fd:e0:ec:f0:
                    21:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EC:88:06:4A:59:E0:23:ED:52:98:8D:6F:68:92:35:89:8A:51:08
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3430303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:400::/42

    Signature Algorithm: sha256WithRSAEncryption
         95:b2:87:6b:b5:fa:d6:f4:09:3e:f4:8d:ce:67:9b:15:3f:72:
         ae:56:77:2f:ca:bf:41:52:24:65:4f:a0:88:03:bc:cd:a6:b6:
         61:e7:e9:6c:55:b9:8a:01:b9:8b:ea:be:30:be:38:9b:8b:c3:
         4d:df:0f:22:53:de:6e:f8:97:a9:05:a5:83:f1:37:96:1c:84:
         35:f0:d6:37:b6:05:2f:8e:7d:22:7c:bf:3a:d2:2b:8e:5d:09:
         88:f7:0a:df:29:c4:41:be:21:0c:d8:4a:ea:06:f4:50:02:44:
         21:dc:c0:24:43:56:8c:5d:c6:81:e9:d9:5d:12:dc:07:8a:99:
         f0:9d:e6:7a:4f:a7:9f:2b:96:52:a9:84:0c:a2:aa:7c:6b:2c:
         9e:86:a7:db:aa:ef:97:1f:a3:b5:a1:d5:b4:5d:b6:cf:84:1a:
         85:b2:9f:ec:48:1c:d9:e2:a8:98:3f:5d:fe:da:38:37:e1:7b:
         e7:d1:34:95:b8:de:bd:ac:ee:ac:18:83:e9:64:3e:cd:64:be:
         eb:1a:1e:07:33:54:92:c0:57:7c:3f:1f:4b:13:33:64:a4:de:
         00:9a:14:bd:57:f6:cb:9a:22:4a:87:1c:52:c7:37:83:6d:bc:
         d8:bb:89:ea:ad:53:0d:1b:d2:f3:4d:ee:d2:21:e2:f8:c0:1c:
         48:c9:15:0e
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUE1wsY/QEOgEnxyVclKUcd7w3o5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM4OThCMkFCMTE5NDg5OEVFM0M1MTU3RjlCQTYxOEZC
QUY2MDE3MjAeFw0yNTA3MDMyMDM1MjVaFw0yNjA3MDIyMDQwMjVaMDMxMTAvBgNV
BAMTKDlERUM4ODA2NEE1OUUwMjNFRDUyOTg4RDZGNjg5MjM1ODk4QTUxMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuXPHnUeTrePeYmC79URucbsIZ
ANavLtwRJO+X5z+Jr0+cTQovA7teGUxIWJvrHTLXm34NJoY+YMMKSAS84Lw26cyI
2y2TBVNE5QR6/JrHyTYANgU5pQ813DlN2L97WY+b8ViLiUHbmC/ONc6Y0mfMkVdg
n6QY2rPZkp+PmWZ0Z37QlgtnsSWOQ+lPIvliSH9Ir7lXKXVGcT38Nim6sQghiIdN
2T7RAa8YZZsSRFXK1PLn6HdlP+gatsWORB+44EwrTs0H5oQPl2YoUntIoPltxA32
EnpgCNND51X1ZATNMYoiFx5qYCxAmt4LImVRo1mEpMIntpTImbUz/eDs8CFHAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUneyIBkpZ4CPtUpiNb2iSNYmKUQgwHwYDVR0j
BBgwFoAUbImLKrEZSJjuPFFX+bphj7r2AXIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjcyMzE1RjFENEQ1MTQ1REMyODI4ODhCOEZENDlDRjE0
RUYyMUZCMzUxMDcxQUQ4QjQwMDIzRkU5RThFRjEwLzAvNkM4OThCMkFCMTE5NDg5
OEVFM0M1MTU3RjlCQTYxOEZCQUY2MDE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Qzg5OEIyQUIxMTk0ODk4RUUz
QzUxNTdGOUJBNjE4RkJBRjYwMTcyLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY3MjMxNUYxRDRENTE0NURDMjgyODg4QjhGRDQ5Q0YxNEVGMjFGQjM1
MTA3MUFEOEI0MDAyM0ZFOUU4RUYxMC8wLzMyMzgzMDMzM2E2NjM2NjEzMDNhMzQz
MDMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNjM2MzkzMDM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcGKAP2oAQAMA0GCSqGSIb3DQEBCwUAA4IBAQCVsodrtfrW9Ak+9I3OZ5sVP3Ku
Vncvyr9BUiRlT6CIA7zNprZh5+lsVbmKAbmL6r4wvjibi8NN3w8iU95u+JepBaWD
8TeWHIQ18NY3tgUvjn0ifL860iuOXQmI9wrfKcRBviEM2ErqBvRQAkQh3MAkQ1aM
XcaB6dldEtwHipnwneZ6T6efK5ZSqYQMoqp8ayyehqfbqu+XH6O1odW0XbbPhBqF
sp/sSBzZ4qiYP13+2jg34Xvn0TSVuN69rO6sGIPpZD7NZL7rGh4HM1SSwFd8Px9L
EzNkpN4AmhS9V/bLmiJKhxxSxzeDbbzYu4nqrVMNG9LzTe7SIeL4wBxIyRUO
-----END CERTIFICATE-----