Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6163303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a6163303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          TgSynCCxBNbytUHAhY9bZO45f8Asu9+84j1tqruQ1ZE=
Subject key identifier:   66:82:30:4D:7E:47:64:4A:7D:9F:7D:57:EC:1C:F1:43:7B:9A:F0:46
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       6BB700C1BBF2F9C6A20393E3A2D858F4D470FA7B
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6163303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:00 +0000
ROA not before:           Thu 03 Jul 2025 20:35:00 +0000
ROA not after:            Thu 02 Jul 2026 20:40:00 +0000
asID:                     266904
IP address blocks:        2803:f6a0:ac0::/42 maxlen: 42
Validation:               Failed, certificate revoked on Thu 17 Jul 2025 01:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b7:00:c1:bb:f2:f9:c6:a2:03:93:e3:a2:d8:58:f4:d4:70:fa:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:00 2025 GMT
            Not After : Jul  2 20:40:00 2026 GMT
        Subject: CN=6682304D7E47644A7D9F7D57EC1CF1437B9AF046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:dd:8a:9c:e6:c3:b0:06:a4:f4:db:c6:92:
                    6a:e4:e6:ee:5f:9c:58:59:bd:ee:25:e5:2c:af:cf:
                    a2:48:0f:38:21:08:1c:f5:28:8a:31:08:ce:f2:08:
                    5b:2f:74:53:8c:f4:9b:cb:69:b7:48:fe:71:09:19:
                    01:10:a9:5d:a8:c0:b5:98:a1:4a:97:f6:bc:3d:f2:
                    94:64:52:7d:98:a3:ac:cd:de:e7:4f:b4:ca:06:a5:
                    6a:37:1c:cf:b4:d2:46:a0:fa:44:11:07:a6:da:a5:
                    69:69:7c:4b:d2:51:db:dc:9a:5c:17:85:bd:83:85:
                    7b:49:55:3c:e5:ca:dd:38:7f:3b:fb:a2:ae:9c:ce:
                    5c:34:e7:53:75:6a:57:4e:33:31:f6:99:1e:23:bd:
                    89:4b:f5:4e:d2:58:54:4e:36:95:20:98:d4:b5:1a:
                    f6:1f:d2:c2:8e:35:9b:24:34:22:a0:20:87:76:24:
                    03:6d:2a:86:a5:16:f6:16:c4:a1:be:f2:fa:f1:dd:
                    93:65:b9:f7:4d:fd:d0:ef:b2:d6:fe:2f:d5:ec:50:
                    31:7c:0f:93:37:91:5b:4a:a2:3a:bd:80:ba:09:d5:
                    fa:36:d3:4e:b9:4b:10:9c:67:f9:53:4f:90:f9:bf:
                    87:d8:52:87:d3:95:51:be:aa:0a:41:aa:9d:b4:1a:
                    e7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:82:30:4D:7E:47:64:4A:7D:9F:7D:57:EC:1C:F1:43:7B:9A:F0:46
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6163303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:ac0::/42

    Signature Algorithm: sha256WithRSAEncryption
         0f:79:cd:08:27:c5:86:fa:8a:19:0d:26:6d:55:58:ac:07:96:
         2d:ce:6a:d8:6c:4b:7c:d8:26:75:35:8f:a8:96:7f:08:56:42:
         81:85:35:1a:c5:8e:39:d8:3d:8e:99:83:5b:3d:03:02:02:e8:
         e0:3a:8e:73:9f:02:66:39:88:e2:e4:ff:61:57:1f:9f:48:8f:
         26:2e:de:5e:92:11:9a:44:ea:0b:52:69:7a:77:23:92:c9:45:
         94:71:cf:9d:d6:18:8c:28:4b:0b:fd:bf:88:fc:b8:ae:be:c3:
         9d:79:19:7f:50:ec:d4:18:ff:e4:ce:d9:4e:2e:d2:6a:10:37:
         8c:3f:40:76:c9:88:d6:ca:85:90:30:76:0c:a1:6f:73:38:ec:
         31:a0:3f:9c:7a:4e:83:34:f0:b4:f9:a6:c9:80:39:09:e1:2a:
         e3:73:77:cf:92:e0:3b:17:ea:4f:f5:ab:21:d6:36:92:6e:fc:
         1c:fc:cd:25:1e:29:9f:00:17:8d:68:af:fa:0e:3e:32:fe:e5:
         f1:07:b9:eb:6b:c4:9a:7d:9d:60:4f:48:1c:3c:2e:ea:24:eb:
         23:93:d4:b1:54:d8:09:ac:98:c2:04:c5:41:3b:6e:2d:2b:e9:
         18:95:ce:e1:03:42:a6:a6:8a:da:52:9d:32:3e:88:bd:21:95:
         fe:28:5a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----