Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3763303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a3763303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          s8eDF+zld8oyybwkeCen5Fd/xnnNlAjKg0+/vgJBl/k=
Subject key identifier:   E3:14:FB:18:03:65:84:CC:EF:2E:5A:41:30:44:1C:C3:03:8C:A0:4D
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       21D8123DD578CC765419CCD0F428D5A3E3DFBF4C
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3763303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:21 +0000
ROA not before:           Thu 03 Jul 2025 20:35:21 +0000
ROA not after:            Thu 02 Jul 2026 20:40:21 +0000
asID:                     266904
IP address blocks:        2803:f6a0:7c0::/42 maxlen: 42
Validation:               Failed, certificate revoked on Thu 17 Jul 2025 01:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d8:12:3d:d5:78:cc:76:54:19:cc:d0:f4:28:d5:a3:e3:df:bf:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:21 2025 GMT
            Not After : Jul  2 20:40:21 2026 GMT
        Subject: CN=E314FB18036584CCEF2E5A4130441CC3038CA04D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:fd:c4:ee:8c:4e:b0:48:29:ee:68:4b:e5:
                    fa:b5:08:21:92:a9:44:0a:b3:ad:c4:9d:a2:10:9d:
                    a4:52:bd:6c:f4:db:20:3b:93:b7:2d:2d:91:a8:84:
                    ad:73:85:fa:91:20:36:81:f5:6c:ef:f9:da:9f:c0:
                    86:fd:c0:f2:6a:ce:41:de:07:54:a6:de:5f:82:ab:
                    cf:06:8e:e1:f2:8d:62:f5:f4:43:fc:c9:05:b0:da:
                    aa:2f:01:17:64:a9:82:89:4f:35:c5:dd:46:39:96:
                    dc:9c:29:a6:d1:2a:6e:52:e6:bd:ae:c9:f7:7c:81:
                    3c:54:bf:47:d7:c2:e8:87:fa:78:0a:ea:1e:bd:7e:
                    24:fb:f1:30:e6:bc:cd:cb:cc:cd:eb:13:1c:2e:41:
                    a4:99:15:5b:11:fa:00:c8:30:f3:f6:e2:6e:1c:e8:
                    e6:87:27:ca:6e:9b:d0:53:84:b4:6c:61:35:42:c6:
                    28:dc:6d:36:4e:96:ce:89:fa:54:fc:1b:f9:40:68:
                    64:78:29:94:fe:a6:7f:c3:5d:4d:6f:bc:f4:40:5e:
                    72:88:d0:01:3c:77:cf:f7:35:3d:ca:8e:75:f5:58:
                    c4:ed:5f:87:9d:1f:a7:94:f1:1c:e3:1c:a3:e5:93:
                    a1:c4:2c:db:4e:8e:70:2f:54:a4:ed:d8:1f:dc:9e:
                    42:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:14:FB:18:03:65:84:CC:EF:2E:5A:41:30:44:1C:C3:03:8C:A0:4D
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3763303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:7c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         27:67:27:bf:a2:bc:c4:67:90:bf:44:27:a6:9b:a2:62:9b:55:
         e1:d4:a7:38:4d:6e:9c:0c:b5:1f:a3:68:97:21:b5:b5:a0:99:
         cc:7b:18:5c:79:9b:d3:70:ee:81:ad:c3:9b:88:7c:43:2a:52:
         07:4d:1a:ff:5b:f4:bc:6b:d5:69:ff:2c:cb:1e:36:14:39:a5:
         46:36:0b:73:29:a1:ca:55:ca:86:10:87:cf:a1:de:ed:2a:24:
         5d:35:13:f8:22:65:5f:d7:76:81:01:06:14:36:8d:28:85:2c:
         48:cd:e7:9e:58:0c:e6:50:ee:ba:6f:6e:10:d5:e3:91:a2:76:
         47:db:88:4a:ea:55:72:fa:a9:aa:1f:1d:f0:a8:63:46:c6:67:
         81:5f:ee:2c:1f:d1:15:ee:e3:42:28:6c:55:1a:ac:6b:a0:96:
         27:17:62:ce:ca:dc:e4:e5:21:b0:e8:ac:74:bf:19:e6:76:af:
         42:fe:a0:c5:61:55:55:11:5b:2c:ca:0d:5d:28:1f:78:84:a5:
         2e:13:1a:fb:74:88:f0:83:c2:ba:19:18:e0:e3:cb:2d:ad:24:
         91:a4:62:bd:75:1b:89:22:c4:ec:07:a5:ae:1b:b2:5b:1f:d9:
         47:32:a4:db:47:47:a6:16:5b:72:c0:0f:a3:5a:44:5d:f5:48:
         6e:25:22:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----