Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/599dbf96-86a8-4263-9244-19dd3c8e4a40/04f7ca3737fd05638e5bdf5a5e0302b037d416d2.roa
File:                     04f7ca3737fd05638e5bdf5a5e0302b037d416d2.roa (raw, json)
Hash identifier:          1mQX2ddgqhkeddRjl9Oyld+cYE8ZDfmHeujMz3HI4Ig=
Subject key identifier:   B7:B8:24:99:D4:AD:EE:47:EE:6A:49:2E:1B:CE:DF:0C:68:B9:C2:95
Certificate issuer:       /CN=f17650a807d8733d69a847baa5df03d2d89197f8
Certificate serial:       0735F2
Authority key identifier: 83:65:08:E4:32:7E:F9:52:BC:B8:0D:AA:FD:C8:68:17:F2:B6:DC:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f17650a807d8733d69a847baa5df03d2d89197f8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/599dbf96-86a8-4263-9244-19dd3c8e4a40/04f7ca3737fd05638e5bdf5a5e0302b037d416d2.roa
Signing time:             Thu 25 Jan 2024 06:17:39 +0000
ROA not before:           Thu 25 Jan 2024 06:17:38 +0000
ROA not after:            Sun 25 Jan 2026 06:17:38 +0000
asID:                     272974
IP address blocks:        2803:9590::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 25 Jan 2024 15:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472562 (0x735f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f17650a807d8733d69a847baa5df03d2d89197f8
        Validity
            Not Before: Jan 25 06:17:38 2024 GMT
            Not After : Jan 25 06:17:38 2026 GMT
        Subject: CN=04f7ca3737fd05638e5bdf5a5e0302b037d416d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4e:02:40:2a:13:d8:65:16:e8:0e:f1:ff:33:
                    a1:fa:df:a8:79:40:be:7e:41:6f:58:59:96:39:63:
                    da:9d:07:e0:93:33:43:ee:24:ae:f1:9a:7c:a7:60:
                    76:fb:04:1c:b4:25:17:7d:42:c7:27:07:da:4e:71:
                    48:e9:f7:82:4f:ba:2d:3e:d2:0a:1f:ab:55:4e:bf:
                    49:40:5a:54:82:11:b4:cd:10:63:48:b1:8b:fd:fb:
                    2e:f6:b1:74:c9:48:a7:02:a8:bd:85:e8:7d:fe:54:
                    48:5d:01:c0:ee:58:c8:e8:6e:c6:62:ee:82:a6:4b:
                    27:76:ca:85:35:24:69:4c:bc:be:e1:51:72:4e:a4:
                    23:04:11:01:21:86:56:49:e0:b3:7a:c6:ec:04:57:
                    95:3d:66:57:39:4d:94:23:43:cd:86:fa:fe:03:bb:
                    ac:c8:8b:39:7b:c4:c2:1d:86:95:45:85:15:ee:ac:
                    88:57:7e:e4:f5:fa:11:39:aa:71:27:de:9f:ac:df:
                    bb:0d:98:30:3b:03:e4:3a:75:f6:fd:62:42:d9:3d:
                    2f:cb:4a:3a:57:9c:90:67:89:95:c9:aa:32:b1:e7:
                    c1:55:b2:e6:a5:05:fd:3d:07:51:59:6f:aa:ed:89:
                    28:53:f3:96:7b:17:b2:31:c4:55:59:a6:ef:31:0a:
                    b8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B8:24:99:D4:AD:EE:47:EE:6A:49:2E:1B:CE:DF:0C:68:B9:C2:95
            X509v3 Authority Key Identifier:
                keyid:83:65:08:E4:32:7E:F9:52:BC:B8:0D:AA:FD:C8:68:17:F2:B6:DC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f17650a807d8733d69a847baa5df03d2d89197f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/599dbf96-86a8-4263-9244-19dd3c8e4a40/04f7ca3737fd05638e5bdf5a5e0302b037d416d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/599dbf96-86a8-4263-9244-19dd3c8e4a40/f17650a807d8733d69a847baa5df03d2d89197f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9590::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:5e:49:9d:55:29:16:a9:c3:49:25:1d:87:a9:78:d8:92:61:
         77:c9:b0:c0:2d:30:57:a3:29:d8:43:53:d7:85:bf:29:d5:e3:
         a8:09:f8:28:d8:d7:37:51:21:75:2c:0a:98:9b:59:a5:ad:29:
         60:87:f4:c9:21:35:8b:6f:f0:e9:69:71:a6:7a:ac:79:5f:c9:
         2f:42:09:31:0f:d8:04:51:42:3c:09:a6:da:18:c4:20:2c:14:
         8c:36:05:af:f1:67:28:73:fc:bb:d6:78:31:fe:6f:b7:a1:f8:
         5c:24:ae:07:24:93:a5:ba:e3:62:bf:06:23:52:41:db:51:89:
         a2:3d:6a:e5:f7:f2:4d:5d:a8:a6:43:5e:d2:8e:57:40:d4:db:
         04:55:bf:f2:37:3e:13:1c:85:be:4f:51:a3:f0:c1:7d:8e:d7:
         b7:0a:f6:47:a0:bc:92:f2:18:02:82:77:3f:50:ac:26:3b:b6:
         b8:dd:6b:b4:d0:0a:60:89:c3:a7:89:f2:09:f9:e3:82:2b:ca:
         ba:35:5a:ba:d4:93:93:32:16:d5:ec:6a:3e:d8:dd:97:33:eb:
         c7:b3:96:4a:96:6e:ba:88:56:5d:09:eb:25:a0:50:97:3b:05:
         86:96:26:f2:fe:ad:f2:a2:54:96:88:92:cc:3e:e4:41:a7:90:
         73:40:5c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----