Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          x7YiXjbsqZEI+uFoMKIfr1DDCz3BoPfk1Otu3zl1PZ8=
Subject key identifier:   35:A9:C4:8F:10:C9:3A:07:47:BA:86:F7:02:7E:F8:66:59:41:E5:45
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       33FCD372439EC2F143C4C23F260EBBBD4A640923
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:27 +0000
ROA not before:           Thu 03 Jul 2025 20:35:27 +0000
ROA not after:            Thu 02 Jul 2026 20:40:27 +0000
asID:                     266904
IP address blocks:        2803:f6a0::/42 maxlen: 42
Validation:               Failed, certificate revoked on Thu 17 Jul 2025 01:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fc:d3:72:43:9e:c2:f1:43:c4:c2:3f:26:0e:bb:bd:4a:64:09:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:27 2025 GMT
            Not After : Jul  2 20:40:27 2026 GMT
        Subject: CN=35A9C48F10C93A0747BA86F7027EF8665941E545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d5:f0:2d:19:f5:d2:af:f5:b2:ee:47:19:f2:
                    bc:91:b1:8b:1b:d5:5a:e4:39:97:80:63:ac:e6:9e:
                    35:e7:ff:e0:2d:8d:5f:f7:cd:62:0a:d4:e0:4f:65:
                    9c:e6:f6:43:d9:95:46:5c:b7:8d:48:e7:35:e8:93:
                    56:57:39:d2:6e:e3:0c:67:1b:af:ad:ba:da:9c:03:
                    7b:50:b2:c5:3d:db:c4:cc:41:df:a2:43:0d:d1:00:
                    26:66:85:47:f8:56:5a:2f:3e:7a:57:e2:60:51:f0:
                    92:0e:b6:54:d9:08:1a:19:64:68:c2:f9:40:c2:bc:
                    20:96:9f:37:73:f3:b8:66:dd:82:68:1b:ce:5f:7d:
                    10:84:8e:87:9c:89:1b:e6:cd:f6:7f:e7:86:bb:b0:
                    c7:ce:4e:87:80:ce:1c:b6:9b:65:dd:b8:bf:4b:27:
                    4a:df:88:1d:87:51:95:43:12:0d:98:a0:87:7c:a8:
                    af:cb:f5:b6:70:17:30:7e:4c:7f:ce:a3:33:76:66:
                    29:fd:67:55:de:f2:8a:71:58:4f:81:23:8e:a4:ba:
                    04:12:2a:96:47:1f:d4:e5:ea:55:28:ba:d3:d7:ca:
                    eb:e2:0e:84:f7:52:0e:9e:fe:ed:77:8d:ed:4b:72:
                    40:49:5c:e0:03:bd:99:b5:6e:d6:16:00:12:9c:59:
                    52:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A9:C4:8F:10:C9:3A:07:47:BA:86:F7:02:7E:F8:66:59:41:E5:45
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0::/42

    Signature Algorithm: sha256WithRSAEncryption
         05:b4:97:03:3b:3e:ef:26:4b:03:5c:ea:02:3e:72:a1:c7:e0:
         b4:50:65:c6:b9:4e:68:dd:36:f0:03:b9:20:c3:01:34:e9:68:
         84:15:a6:45:2c:bc:e9:31:3b:6e:7b:1c:31:f4:1d:12:48:d3:
         1d:97:ae:53:78:d0:62:29:13:34:d1:6d:1b:6d:ad:93:98:9b:
         68:55:45:17:2f:72:14:6a:ed:79:f0:98:b4:78:85:6c:b5:63:
         bc:43:bc:24:03:50:d4:5e:2f:ee:d7:17:1f:16:3b:82:bf:eb:
         74:ea:12:95:35:e8:e6:11:eb:93:45:2a:e1:67:80:30:26:a0:
         b6:01:75:f7:ce:d9:d9:49:0b:1e:b2:8a:f4:f7:c1:57:bb:1c:
         8a:9b:8e:f3:c1:49:9e:c9:4c:bc:c2:87:37:31:15:fd:5f:c0:
         b8:5e:43:94:3d:9f:c5:58:70:0b:7d:e0:c4:39:96:0f:27:5d:
         26:9b:6f:cd:ab:23:5b:3b:e1:df:c8:26:78:76:ac:87:94:b1:
         ce:5b:40:76:e1:8c:58:c9:70:6b:21:fd:ca:90:a0:88:c8:83:
         7f:d8:13:a9:e2:75:cd:d8:6a:f6:bb:54:d2:a1:b6:69:04:c2:
         4e:27:24:a2:8c:7f:b4:97:6c:d7:aa:fb:a1:23:dd:19:4b:ff:
         6a:e1:67:6d
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUM/zTckOewvFDxMI/Jg67vUpkCSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM4OThCMkFCMTE5NDg5OEVFM0M1MTU3RjlCQTYxOEZC
QUY2MDE3MjAeFw0yNTA3MDMyMDM1MjdaFw0yNjA3MDIyMDQwMjdaMDMxMTAvBgNV
BAMTKDM1QTlDNDhGMTBDOTNBMDc0N0JBODZGNzAyN0VGODY2NTk0MUU1NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF1fAtGfXSr/Wy7kcZ8ryRsYsb
1VrkOZeAY6zmnjXn/+AtjV/3zWIK1OBPZZzm9kPZlUZct41I5zXok1ZXOdJu4wxn
G6+tutqcA3tQssU928TMQd+iQw3RACZmhUf4VlovPnpX4mBR8JIOtlTZCBoZZGjC
+UDCvCCWnzdz87hm3YJoG85ffRCEjoeciRvmzfZ/54a7sMfOToeAzhy2m2XduL9L
J0rfiB2HUZVDEg2YoId8qK/L9bZwFzB+TH/OozN2Zin9Z1Xe8opxWE+BI46kugQS
KpZHH9Tl6lUoutPXyuviDoT3Ug6e/u13je1LckBJXOADvZm1btYWABKcWVKTAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUNanEjxDJOgdHuob3An74ZllB5UUwHwYDVR0j
BBgwFoAUbImLKrEZSJjuPFFX+bphj7r2AXIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjcyMzE1RjFENEQ1MTQ1REMyODI4ODhCOEZENDlDRjE0
RUYyMUZCMzUxMDcxQUQ4QjQwMDIzRkU5RThFRjEwLzAvNkM4OThCMkFCMTE5NDg5
OEVFM0M1MTU3RjlCQTYxOEZCQUY2MDE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Qzg5OEIyQUIxMTk0ODk4RUUz
QzUxNTdGOUJBNjE4RkJBRjYwMTcyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY3MjMxNUYxRDRENTE0NURDMjgyODg4QjhGRDQ5Q0YxNEVGMjFGQjM1
MTA3MUFEOEI0MDAyM0ZFOUU4RUYxMC8wLzMyMzgzMDMzM2E2NjM2NjEzMDNhM2Ey
ZjM0MzIyZDM0MzIyMDNkM2UyMDMyMzYzNjM5MzAzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBigD9qAA
ADANBgkqhkiG9w0BAQsFAAOCAQEABbSXAzs+7yZLA1zqAj5yocfgtFBlxrlOaN02
8AO5IMMBNOlohBWmRSy86TE7bnscMfQdEkjTHZeuU3jQYikTNNFtG22tk5ibaFVF
Fy9yFGrtefCYtHiFbLVjvEO8JANQ1F4v7tcXHxY7gr/rdOoSlTXo5hHrk0Uq4WeA
MCagtgF1987Z2UkLHrKK9PfBV7scipuO88FJnslMvMKHNzEV/V/AuF5DlD2fxVhw
C33gxDmWDyddJptvzasjWzvh38gmeHash5SxzltAduGMWMlwayH9ypCgiMiDf9gT
qeJ1zdhq9rtU0qG2aQTCTickoox/tJds16r7oSPdGUv/auFnbQ==
-----END CERTIFICATE-----