Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6563303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a6563303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          gwyCYwwXZ5i/VIGYLKf00bDfHPDXzABz4MXUkrytCB0=
Subject key identifier:   2B:E1:88:6E:E7:F2:A7:D5:B3:81:D5:E0:1C:C9:72:1C:9B:DD:D7:60
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       7AFA3E4C12C626AB3012646F9A317E4ED37021C7
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6563303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:25 +0000
ROA not before:           Thu 03 Jul 2025 20:35:25 +0000
ROA not after:            Thu 02 Jul 2026 20:40:25 +0000
asID:                     266904
IP address blocks:        2803:f6a0:ec0::/42 maxlen: 42
Validation:               Failed, certificate revoked on Thu 17 Jul 2025 01:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fa:3e:4c:12:c6:26:ab:30:12:64:6f:9a:31:7e:4e:d3:70:21:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:25 2025 GMT
            Not After : Jul  2 20:40:25 2026 GMT
        Subject: CN=2BE1886EE7F2A7D5B381D5E01CC9721C9BDDD760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:16:b1:ef:6a:63:82:c2:45:6e:b2:04:8e:99:
                    cb:bc:10:2a:ae:b1:3d:1f:86:d3:28:99:3b:ff:f2:
                    33:00:b1:a1:d0:d2:e1:d3:b0:1a:90:45:76:3f:9f:
                    5b:01:71:3c:5d:c6:69:60:c9:66:59:d7:8f:61:18:
                    53:d8:cd:63:9c:89:95:f3:9f:a1:b9:b1:5f:c9:c1:
                    9f:1c:a5:8a:ed:a4:45:27:e8:88:d6:cd:60:b1:72:
                    07:9d:8d:b3:f4:1f:62:67:95:9a:82:d4:01:c2:9d:
                    37:4d:10:af:9d:ad:51:aa:2d:7e:f3:08:e5:57:61:
                    b2:1e:e3:69:2f:7b:25:76:3e:36:19:e8:34:3b:91:
                    dc:d4:77:49:42:3a:8f:64:17:60:a5:77:c4:4b:8e:
                    77:2b:50:83:69:d0:26:71:85:35:39:a8:a4:16:fa:
                    5e:23:44:6a:11:50:1a:de:ab:df:45:ff:2c:6c:8f:
                    8c:c0:57:7e:a4:64:ab:41:04:9d:cd:a4:02:b5:53:
                    f8:3f:68:4d:45:c4:03:8c:d3:19:fa:b7:24:3d:99:
                    05:1e:82:1d:33:46:04:a9:89:45:35:44:85:b0:6a:
                    6e:8c:3e:72:0a:b9:c7:c1:de:32:52:dc:82:b8:f0:
                    d7:9a:e5:91:d9:83:3e:52:c1:e7:d2:dd:ff:53:e3:
                    41:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E1:88:6E:E7:F2:A7:D5:B3:81:D5:E0:1C:C9:72:1C:9B:DD:D7:60
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a6563303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:ec0::/42

    Signature Algorithm: sha256WithRSAEncryption
         4c:01:68:c0:5a:6b:b7:ca:cb:da:26:19:73:dc:ab:1c:74:8b:
         05:a2:fe:49:ae:76:ab:af:da:2a:af:86:7d:cf:86:83:f9:cd:
         ae:fe:43:04:0d:a8:5d:c2:ea:7c:59:89:0e:8b:ee:9c:a2:bb:
         f8:96:d8:22:8a:a9:cd:9f:97:e9:b1:19:57:aa:1e:f4:49:b8:
         b9:6c:5d:dc:90:73:2f:b4:e5:61:ad:d1:d9:5b:ce:d7:4f:35:
         25:00:05:b7:f4:bf:32:2d:80:e7:bf:b3:78:ee:13:ee:d4:ce:
         0d:39:d2:70:28:10:34:78:a2:6f:e8:24:d4:84:34:6b:e7:73:
         a0:ff:f7:17:3f:a4:b0:6f:5d:e2:f1:11:81:4c:04:49:a8:2e:
         9f:9f:07:65:2b:ff:8a:80:d1:c4:72:e3:84:cd:f1:2a:92:40:
         2b:4d:2c:95:82:79:8d:df:95:a0:a9:c2:7e:a3:db:7f:72:4f:
         92:14:a4:f4:e2:cf:40:72:b4:9c:a4:63:08:6c:14:0c:01:23:
         92:18:ad:06:cf:a4:c8:16:35:2f:69:a5:c7:9d:3b:99:b1:a4:
         5a:df:40:3b:58:a9:b9:03:a2:78:8c:00:05:ac:79:ab:6d:5f:
         fd:42:fd:d2:e8:7b:4d:9b:3b:0d:7b:8f:10:fc:49:8b:c9:b3:
         83:07:11:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----