Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a34303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a34303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          63t9g2tPK2bfm0eAz9bzWofh/n/6xLuQWsK3HkSuQYw=
Subject key identifier:   82:02:9C:F8:82:31:22:B6:0D:3C:B3:CF:12:4E:18:37:75:E5:9E:30
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       4ECB267DD53D874A19E1B9CAFD1550A85E6AD3A0
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a34303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:16 +0000
ROA not before:           Thu 03 Jul 2025 20:35:16 +0000
ROA not after:            Thu 02 Jul 2026 20:40:16 +0000
asID:                     266904
IP address blocks:        2803:f6a0:40::/42 maxlen: 42
Validation:               Failed, certificate revoked on Thu 17 Jul 2025 01:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:cb:26:7d:d5:3d:87:4a:19:e1:b9:ca:fd:15:50:a8:5e:6a:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:16 2025 GMT
            Not After : Jul  2 20:40:16 2026 GMT
        Subject: CN=82029CF8823122B60D3CB3CF124E183775E59E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d7:16:7f:1e:b4:21:95:22:a4:b9:6f:92:5b:
                    0a:ed:f9:7b:89:18:e3:19:f3:c2:65:ad:4c:33:2d:
                    bb:9d:70:60:99:9b:aa:da:c6:87:36:97:08:93:93:
                    2f:64:40:f7:63:bf:9a:6e:b4:bc:03:14:62:7f:12:
                    79:0b:b2:72:18:c5:e4:11:0c:e2:8f:a0:11:28:e5:
                    f0:ae:6c:8c:09:61:4e:04:a0:65:f3:b7:77:59:b3:
                    3f:b0:c5:cc:d0:44:a3:d9:2f:53:3e:bb:9b:17:fc:
                    f5:86:35:92:65:f2:8a:75:13:dd:25:ef:38:f8:c6:
                    fa:86:10:e7:32:1b:f0:5f:94:2b:6c:bd:95:c5:6b:
                    80:6b:b9:41:4f:98:54:69:7c:54:33:a7:71:bb:e4:
                    84:5e:f9:05:45:7d:3f:7a:21:6a:07:1a:28:56:84:
                    9d:f0:97:67:9a:43:24:2a:ce:39:b7:8a:16:0c:da:
                    11:c9:5b:8a:62:76:5d:0d:3e:e9:f8:db:ad:d8:14:
                    6d:c5:b8:aa:0f:3f:44:42:48:b8:25:3b:d8:fe:32:
                    1b:b2:27:e5:96:ab:50:c1:22:c3:8f:cd:de:31:b7:
                    f9:07:f2:75:f0:36:9b:0b:66:f5:3e:60:43:09:19:
                    ac:6d:dc:b7:a2:a7:ae:a6:eb:7f:f5:70:c4:1a:51:
                    b0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:02:9C:F8:82:31:22:B6:0D:3C:B3:CF:12:4E:18:37:75:E5:9E:30
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a34303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:40::/42

    Signature Algorithm: sha256WithRSAEncryption
         72:98:a7:41:4a:eb:06:0a:34:88:82:5a:4f:a1:f2:81:45:5b:
         a1:9e:9b:5f:d9:f8:0b:a2:9d:02:e0:13:8e:db:e3:38:b0:9e:
         7b:00:0b:2e:75:cf:a3:b0:92:42:46:84:cb:45:b5:fe:02:d1:
         b7:74:5a:81:62:2a:cd:c0:cf:5e:b8:eb:f3:9e:8a:20:9c:ec:
         96:bf:b0:58:8e:80:52:d1:52:ff:80:93:dc:a6:6f:3b:44:d6:
         95:79:91:82:21:90:01:4f:4b:01:12:f2:73:d1:cd:d2:5c:ec:
         b0:9b:fa:6b:8e:c7:2b:04:58:49:1d:3e:66:cb:aa:e2:5a:be:
         a6:bf:de:c6:aa:53:0c:07:43:ed:9b:d3:af:5d:35:7d:97:e5:
         0a:37:71:04:6a:1e:22:83:8c:13:48:f2:ba:d5:f7:90:3d:e9:
         c8:25:e2:3e:c4:b9:c9:c7:fa:e8:68:41:d9:9b:a3:28:1d:ed:
         66:78:ec:98:0e:5a:7d:d5:59:06:ad:d1:a5:d9:7c:7d:d0:ee:
         31:ca:67:bb:9f:d6:15:3e:cf:aa:3f:a2:07:b1:8e:b8:8a:27:
         d7:84:7b:4b:b5:c1:1a:87:df:13:29:fd:52:60:a7:54:e7:ba:
         bc:2f:84:ca:e7:23:bb:7e:df:6d:cc:f8:00:ee:8a:ef:d2:67:
         61:84:00:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----