Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60AFE8BC3EC13EE2D206C28045F40ED7986A4B6BB21F0DA51886B067F8F711F6/0/323830333a383863303a3a2f33322d3438203d3e20323634373834.roa
File:                     323830333a383863303a3a2f33322d3438203d3e20323634373834.roa (raw, json)
Hash identifier:          fHiqVkTlTxyuay8j6GGmloY272XBzOKjn/cENkttfOs=
Subject key identifier:   FF:42:B1:39:CE:E9:1A:5E:B4:5C:2C:1B:85:4B:86:19:73:4E:8E:29
Certificate issuer:       /CN=A063A2EC6361BB1225A3DE1AEB30237C01F81570
Certificate serial:       25F1802E44703CAAEDF46971C5BF1A8FB723475B
Authority key identifier: A0:63:A2:EC:63:61:BB:12:25:A3:DE:1A:EB:30:23:7C:01:F8:15:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A063A2EC6361BB1225A3DE1AEB30237C01F81570.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/60AFE8BC3EC13EE2D206C28045F40ED7986A4B6BB21F0DA51886B067F8F711F6/0/323830333a383863303a3a2f33322d3438203d3e20323634373834.roa
Signing time:             Tue 05 Mar 2024 17:51:51 +0000
ROA not before:           Tue 05 Mar 2024 17:46:51 +0000
ROA not after:            Tue 04 Mar 2025 17:51:51 +0000
asID:                     264784
IP address blocks:        2803:88c0::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 02 Sep 2024 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f1:80:2e:44:70:3c:aa:ed:f4:69:71:c5:bf:1a:8f:b7:23:47:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A063A2EC6361BB1225A3DE1AEB30237C01F81570
        Validity
            Not Before: Mar  5 17:46:51 2024 GMT
            Not After : Mar  4 17:51:51 2025 GMT
        Subject: CN=FF42B139CEE91A5EB45C2C1B854B8619734E8E29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:f9:34:11:6a:fc:29:3e:08:aa:36:53:1f:
                    08:c5:b5:2d:7a:fa:25:9a:b7:5a:c7:ee:14:eb:9d:
                    f8:1a:0d:bf:aa:7d:cf:36:06:4d:95:02:6c:53:46:
                    bd:ec:32:49:5f:03:40:c3:ab:6a:89:59:53:98:92:
                    4c:a6:67:07:74:c6:41:9b:f6:3d:ea:8c:b4:ba:9a:
                    2e:7e:75:e5:7c:a2:6d:b0:60:1c:b8:32:c3:ad:58:
                    9d:1b:40:1f:f0:7a:23:fe:f4:35:03:7d:c8:9b:20:
                    18:a2:e9:bb:f0:8c:26:21:80:1c:68:e2:c7:33:2a:
                    dc:0a:35:d9:68:b1:3a:da:73:85:13:a1:34:c4:6a:
                    aa:a1:5e:40:ea:b1:a4:83:2e:0d:60:01:0a:7f:dc:
                    1e:02:c6:0f:6d:ce:86:8e:c5:bc:0a:03:bd:03:60:
                    24:fd:1d:49:ef:03:f3:dc:ba:0e:19:d0:45:14:7a:
                    9a:bb:a1:04:11:c0:07:15:f6:61:a7:4a:d5:54:62:
                    b2:bc:98:b3:de:0a:23:94:14:ea:42:b0:ea:c7:6d:
                    58:c1:05:34:99:4e:25:11:5c:42:68:54:ac:52:b1:
                    eb:67:cc:21:49:2b:8c:7f:13:b7:b2:cb:42:0c:a2:
                    9a:84:76:42:04:90:4d:de:3c:96:ad:5a:4b:c9:57:
                    30:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:42:B1:39:CE:E9:1A:5E:B4:5C:2C:1B:85:4B:86:19:73:4E:8E:29
            X509v3 Authority Key Identifier:
                keyid:A0:63:A2:EC:63:61:BB:12:25:A3:DE:1A:EB:30:23:7C:01:F8:15:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/60AFE8BC3EC13EE2D206C28045F40ED7986A4B6BB21F0DA51886B067F8F711F6/0/A063A2EC6361BB1225A3DE1AEB30237C01F81570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A063A2EC6361BB1225A3DE1AEB30237C01F81570.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60AFE8BC3EC13EE2D206C28045F40ED7986A4B6BB21F0DA51886B067F8F711F6/0/323830333a383863303a3a2f33322d3438203d3e20323634373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:88c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:10:ce:8b:c3:9b:7e:14:17:10:b7:04:1c:9f:40:84:ad:11:
         ca:66:1e:94:85:07:d1:89:7f:e4:21:fa:7a:96:a7:83:8f:83:
         67:05:27:72:2d:9c:b7:63:a6:94:dc:1d:5a:fe:28:15:e3:a3:
         bf:d7:b4:21:f5:a0:91:e2:ba:e2:da:50:54:89:24:ed:dd:83:
         42:0e:bc:a6:a2:53:ab:22:de:8f:04:df:9e:cd:e2:a8:ae:5f:
         7a:fc:67:8b:18:03:e3:47:d2:e2:da:57:f0:57:96:f3:ff:9d:
         fd:54:12:bb:4d:75:78:da:83:c4:2d:89:0d:4d:71:fd:13:13:
         8b:2b:aa:4b:5e:e9:d6:82:20:ea:50:42:56:27:29:d8:16:b5:
         b7:54:ac:e1:88:c9:d4:88:db:a9:40:35:fb:33:dc:1b:4a:d8:
         0e:65:bd:d3:df:5d:75:83:2c:31:b4:78:e3:0e:20:1c:85:3b:
         6a:3d:3a:83:35:88:0d:ca:28:a1:75:9f:15:7e:57:fa:30:09:
         40:c8:f0:db:96:c0:05:d2:ed:3a:75:e9:72:37:4e:c7:e7:d4:
         11:70:cb:91:4c:73:84:75:9b:03:f7:4e:90:eb:a3:ee:ef:ae:
         fd:87:40:cc:b4:47:b8:2d:3a:02:39:e3:30:b1:2d:8f:87:a8:
         22:d1:5e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----