Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3930303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a3930303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          +v45chmqZIbYl5B5O9P0od0NOjzo5QktfVpvYkhp4+A=
Subject key identifier:   EC:EA:6B:50:C7:1E:66:46:56:45:FF:C4:AA:01:3B:16:E8:81:82:8C
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       482BFB8595E0870C8E19A15C6C1FEFB5E1375C8C
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3930303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:20 +0000
ROA not before:           Thu 03 Jul 2025 20:35:20 +0000
ROA not after:            Thu 02 Jul 2026 20:40:20 +0000
asID:                     266904
IP address blocks:        2803:f6a0:900::/42 maxlen: 42
Validation:               Failed, certificate revoked on Thu 17 Jul 2025 01:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:2b:fb:85:95:e0:87:0c:8e:19:a1:5c:6c:1f:ef:b5:e1:37:5c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:20 2025 GMT
            Not After : Jul  2 20:40:20 2026 GMT
        Subject: CN=ECEA6B50C71E66465645FFC4AA013B16E881828C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:f5:f8:96:66:9d:19:c5:80:fc:4e:52:f0:
                    f9:e4:83:6a:a0:49:75:8d:88:94:da:4d:d3:c5:44:
                    3a:c9:4c:99:8e:01:d8:89:17:50:b9:f3:be:07:8c:
                    20:e9:b7:31:91:12:bf:17:20:a4:70:44:54:b6:8a:
                    29:12:4f:90:a6:e3:36:38:04:bb:0a:7d:83:2f:51:
                    49:99:98:64:2d:1c:64:8a:c5:7f:e0:47:51:12:36:
                    bb:9f:c2:51:2c:e4:90:1f:d2:00:f4:ff:61:3c:0b:
                    9f:d6:8c:6e:09:88:0a:9a:12:3a:75:4b:f8:0d:54:
                    17:9d:9c:8c:ec:7d:5c:57:e0:08:88:32:e4:18:10:
                    db:bf:8b:0d:67:a5:d4:c1:04:61:9e:bb:03:eb:f4:
                    9e:4a:89:70:17:fd:95:b1:3b:02:31:fb:90:61:b6:
                    8c:cf:4c:18:da:72:fe:e9:b3:fa:e9:2f:a0:d0:6d:
                    f1:e0:eb:c5:45:b2:c9:5a:7d:d3:4e:de:b0:60:57:
                    38:7f:09:35:0e:3f:65:e4:44:11:56:43:8b:50:de:
                    57:b1:39:9c:17:0a:98:8f:46:90:1e:c8:b0:49:82:
                    00:8a:e0:71:33:02:25:44:1c:66:5a:26:34:5d:1b:
                    a0:93:2f:50:e7:cc:ae:c3:c6:e8:7d:21:e1:50:27:
                    f5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EA:6B:50:C7:1E:66:46:56:45:FF:C4:AA:01:3B:16:E8:81:82:8C
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3930303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:900::/42

    Signature Algorithm: sha256WithRSAEncryption
         1b:c8:ad:cf:32:5d:ba:3e:87:25:b5:88:35:72:0b:36:95:07:
         c3:6a:dc:0b:a6:0f:13:68:3b:4c:3f:c4:9d:e1:a1:2d:79:59:
         ac:7b:74:e2:2e:8a:a1:50:ac:4d:29:d3:73:9b:1c:eb:99:00:
         3b:64:0b:9f:49:60:99:93:1c:b5:69:9e:55:39:02:03:38:71:
         95:79:39:38:5d:c9:0f:00:ba:66:68:41:f2:6a:4b:7e:4c:1d:
         5c:08:ea:1e:1f:c6:3f:db:12:6c:fb:a2:7c:31:88:a5:8a:15:
         36:11:05:d2:d1:b1:ec:33:16:29:49:a8:1e:0b:7b:77:7a:33:
         25:d5:95:e3:b8:ca:fe:a2:1d:4f:7c:0b:06:6a:88:f1:c9:1e:
         5a:d3:7f:1a:b7:a3:37:73:ad:6f:35:e1:b1:c2:78:df:51:f9:
         3c:e5:f9:37:8f:4b:48:1f:26:a1:87:b2:03:6c:5b:ef:32:0e:
         c4:f5:dc:39:e9:55:a8:76:fb:b7:6d:3c:ff:72:72:67:67:16:
         4f:bc:b1:2c:78:e5:a9:90:11:cd:07:fc:e3:2a:52:b9:5a:ba:
         98:70:62:8f:92:bd:c5:9a:4b:ca:e6:60:15:9e:42:0d:6c:f1:
         4f:cc:0e:54:6e:e0:e3:57:a3:50:45:4a:1c:c0:8e:a4:92:25:
         d8:c5:2b:2e
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUSCv7hZXghwyOGaFcbB/vteE3XIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM4OThCMkFCMTE5NDg5OEVFM0M1MTU3RjlCQTYxOEZC
QUY2MDE3MjAeFw0yNTA3MDMyMDM1MjBaFw0yNjA3MDIyMDQwMjBaMDMxMTAvBgNV
BAMTKEVDRUE2QjUwQzcxRTY2NDY1NjQ1RkZDNEFBMDEzQjE2RTg4MTgyOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzBPX4lmadGcWA/E5S8Pnkg2qg
SXWNiJTaTdPFRDrJTJmOAdiJF1C5874HjCDptzGREr8XIKRwRFS2iikST5Cm4zY4
BLsKfYMvUUmZmGQtHGSKxX/gR1ESNrufwlEs5JAf0gD0/2E8C5/WjG4JiAqaEjp1
S/gNVBednIzsfVxX4AiIMuQYENu/iw1npdTBBGGeuwPr9J5KiXAX/ZWxOwIx+5Bh
tozPTBjacv7ps/rpL6DQbfHg68VFsslafdNO3rBgVzh/CTUOP2XkRBFWQ4tQ3lex
OZwXCpiPRpAeyLBJggCK4HEzAiVEHGZaJjRdG6CTL1DnzK7Dxuh9IeFQJ/V1AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU7OprUMceZkZWRf/EqgE7FuiBgowwHwYDVR0j
BBgwFoAUbImLKrEZSJjuPFFX+bphj7r2AXIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjcyMzE1RjFENEQ1MTQ1REMyODI4ODhCOEZENDlDRjE0
RUYyMUZCMzUxMDcxQUQ4QjQwMDIzRkU5RThFRjEwLzAvNkM4OThCMkFCMTE5NDg5
OEVFM0M1MTU3RjlCQTYxOEZCQUY2MDE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Qzg5OEIyQUIxMTk0ODk4RUUz
QzUxNTdGOUJBNjE4RkJBRjYwMTcyLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY3MjMxNUYxRDRENTE0NURDMjgyODg4QjhGRDQ5Q0YxNEVGMjFGQjM1
MTA3MUFEOEI0MDAyM0ZFOUU4RUYxMC8wLzMyMzgzMDMzM2E2NjM2NjEzMDNhMzkz
MDMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNjM2MzkzMDM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcGKAP2oAkAMA0GCSqGSIb3DQEBCwUAA4IBAQAbyK3PMl26PocltYg1cgs2lQfD
atwLpg8TaDtMP8Sd4aEteVmse3TiLoqhUKxNKdNzmxzrmQA7ZAufSWCZkxy1aZ5V
OQIDOHGVeTk4XckPALpmaEHyakt+TB1cCOoeH8Y/2xJs+6J8MYilihU2EQXS0bHs
MxYpSageC3t3ejMl1ZXjuMr+oh1PfAsGaojxyR5a038at6M3c61vNeGxwnjfUfk8
5fk3j0tIHyahh7IDbFvvMg7E9dw56VWodvu3bTz/cnJnZxZPvLEseOWpkBHNB/zj
KlK5WrqYcGKPkr3FmkvK5mAVnkINbPFPzA5UbuDjV6NQRUocwI6kkiXYxSsu
-----END CERTIFICATE-----