Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6334303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a6334303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          RSgZIPjJDVfiyph8whgIIeZsyh0RPkV1LW/TgmTgTFU=
Subject key identifier:   5E:E8:38:8D:33:FD:E4:0F:21:6F:C8:D4:CA:FD:51:73:1A:BF:26:8E
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       2AD76CB90AC046D1B912807A9F43623617D4221E
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6334303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:01 +0000
ROA not before:           Thu 03 Jul 2025 20:35:01 +0000
ROA not after:            Thu 02 Jul 2026 20:40:01 +0000
asID:                     266904
IP address blocks:        2803:f6a0:c40::/42 maxlen: 42
Validation:               Failed, certificate revoked on Thu 17 Jul 2025 01:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d7:6c:b9:0a:c0:46:d1:b9:12:80:7a:9f:43:62:36:17:d4:22:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:01 2025 GMT
            Not After : Jul  2 20:40:01 2026 GMT
        Subject: CN=5EE8388D33FDE40F216FC8D4CAFD51731ABF268E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:5a:48:6c:c6:0b:5c:45:08:b3:cd:94:65:
                    88:4b:c2:68:e1:aa:33:7e:ed:ec:39:c2:49:5b:a1:
                    a0:85:53:c1:73:40:a0:82:7f:82:ad:a0:9b:ba:b6:
                    21:74:39:26:7a:1d:e5:27:09:15:bb:58:a1:21:1a:
                    81:a4:e2:3c:53:31:d8:c7:c8:e0:9e:dd:b5:9f:b3:
                    b3:2e:81:9f:86:6b:4a:5a:16:52:f0:29:ee:d6:e9:
                    bc:e8:a6:e1:fc:3b:75:dd:3a:ac:b7:5b:ce:d9:98:
                    35:02:f7:20:af:b0:8a:4b:70:a5:e2:ed:10:97:e2:
                    34:01:e1:8a:98:79:87:57:93:51:2d:00:9c:72:05:
                    77:11:3a:db:53:56:86:68:33:8a:01:83:4e:00:29:
                    0b:f8:9a:82:77:6b:98:cb:ef:0f:d1:41:bb:b4:42:
                    4c:69:10:d7:63:d7:5a:fa:b7:9f:1f:5e:83:86:03:
                    cd:58:54:67:b9:2b:95:84:12:9d:a9:3d:07:b3:66:
                    1d:97:9d:83:b9:7e:d4:ec:31:c2:7f:74:3c:b9:ce:
                    14:c1:68:fe:fc:6a:35:9f:9a:15:1d:f4:3e:6a:97:
                    2a:e5:59:23:61:07:75:7b:5a:06:d2:14:3c:36:8d:
                    7d:6c:4c:40:17:08:2c:11:45:c9:e6:3f:d9:66:68:
                    b3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E8:38:8D:33:FD:E4:0F:21:6F:C8:D4:CA:FD:51:73:1A:BF:26:8E
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6334303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:c40::/42

    Signature Algorithm: sha256WithRSAEncryption
         0a:fa:95:3b:9c:54:fc:d0:fa:8b:81:8b:a9:dc:c9:31:07:15:
         44:c5:b0:87:6a:69:10:51:c6:f4:96:7c:91:af:84:42:32:91:
         59:5a:f5:95:3d:88:c9:f0:37:02:1d:c0:7b:c1:2d:2f:ad:11:
         f5:e1:9d:e0:cd:71:c0:9d:c6:c2:54:4c:fc:e7:24:11:43:48:
         30:ec:46:91:36:44:ce:01:88:d1:46:fe:90:fb:a0:0d:57:97:
         f4:2a:d5:6f:44:20:20:49:e5:d0:87:43:bb:9d:67:f4:df:89:
         8b:c6:3b:06:6c:b3:3b:48:1c:bc:df:cf:44:e0:0e:03:24:9b:
         71:ae:26:42:dc:42:77:06:6d:f5:18:2a:1e:04:64:b4:5c:00:
         dd:5d:c4:26:5a:95:0d:f8:39:ca:f3:18:43:d8:ee:92:b2:ab:
         e6:ac:c3:04:b7:72:27:18:45:49:b0:7a:4f:7b:c4:cb:09:82:
         f7:a9:b2:0b:ef:4c:db:c3:e0:f1:44:49:6e:d5:a1:ad:b3:82:
         fb:b8:ed:03:75:29:b6:1a:c6:80:41:a6:6a:ef:c3:e0:6e:78:
         36:bb:ab:81:8a:b5:09:f6:29:16:f4:a1:62:da:53:44:b6:b1:
         8a:ee:ab:61:a0:d3:54:76:24:7d:cf:64:11:c5:d4:81:fa:1c:
         70:6b:c1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----