Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/8737eb79cf58ec70579e537f8ed9a046d049bdc2.roa
File:                     8737eb79cf58ec70579e537f8ed9a046d049bdc2.roa (raw, json)
Hash identifier:          O+i89v5T9fiyGDDy9+MKgWcLx5kAW2wPLk0e7bRw7Vg=
Subject key identifier:   96:B9:D7:3F:31:B9:E3:E9:8E:86:7C:05:71:B7:0E:71:FD:62:0F:97
Certificate issuer:       /CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
Certificate serial:       130772
Authority key identifier: DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/8737eb79cf58ec70579e537f8ed9a046d049bdc2.roa
Signing time:             Fri 29 Sep 2023 08:30:04 +0000
ROA not before:           Thu 28 Sep 2023 08:30:04 +0000
ROA not after:            Sat 27 Sep 2025 08:30:04 +0000
asID:                     271956
IP address blocks:        2803:7610::/48 maxlen: 48
                          2803:7610:2::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 08 Mar 2024 18:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1247090 (0x130772)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
        Validity
            Not Before: Sep 28 08:30:04 2023 GMT
            Not After : Sep 27 08:30:04 2025 GMT
        Subject: CN=8737eb79cf58ec70579e537f8ed9a046d049bdc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ea:1c:0f:0e:c6:cf:fd:a2:38:73:7e:4a:b8:
                    fc:2c:0b:e3:57:d9:d1:e0:45:b3:ab:47:2e:e6:c7:
                    25:3d:21:da:c1:53:3c:a6:f8:99:f5:45:fe:dd:3b:
                    69:4a:f0:3e:58:04:67:a4:11:f9:08:70:79:45:5a:
                    11:72:5c:53:8c:be:7a:37:56:f7:0e:98:53:6a:dc:
                    13:be:dc:73:12:0d:84:8c:64:1e:60:7c:75:a2:63:
                    66:26:2f:73:10:e6:16:a4:3c:91:71:3f:15:40:cf:
                    e1:ad:d3:99:f0:5c:6f:41:f2:0d:3d:41:13:c5:58:
                    f6:c1:db:32:cb:dd:6d:97:19:2d:db:1d:c5:ba:9b:
                    5a:8d:f7:1f:e1:98:29:6b:49:70:23:43:94:32:10:
                    40:c0:c0:8f:08:5a:31:c5:21:72:fd:70:73:70:4b:
                    60:00:2b:94:a5:13:2b:67:cd:86:a4:25:be:89:cc:
                    df:f9:d0:1a:7c:a8:3a:28:11:0d:a4:cf:eb:75:ec:
                    d3:dd:79:2c:5a:c4:f4:b9:29:37:d2:4f:f9:97:26:
                    78:be:c5:19:68:99:d8:9d:da:8b:ca:59:28:66:02:
                    6b:ef:b3:c3:e8:73:5c:bb:d6:21:4c:2b:a0:6b:bd:
                    98:37:6f:69:6a:b6:5f:27:c5:f2:8f:7c:0d:b4:34:
                    e4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B9:D7:3F:31:B9:E3:E9:8E:86:7C:05:71:B7:0E:71:FD:62:0F:97
            X509v3 Authority Key Identifier:
                keyid:DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/8737eb79cf58ec70579e537f8ed9a046d049bdc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7610::/48
                  2803:7610:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:60:53:d9:c9:9e:74:ae:46:23:15:99:69:5b:99:8a:4c:0c:
         78:01:f0:72:5a:db:d7:78:1d:5c:d8:f6:7d:40:f6:af:9d:8f:
         f3:c7:1f:3c:94:94:b5:6c:dc:57:70:9d:84:38:73:28:74:f1:
         03:82:f4:6a:07:08:1e:e6:f6:95:a2:9d:e6:4c:d4:8c:df:22:
         eb:81:f9:2f:b7:c5:cd:73:17:5a:7c:21:d4:98:5c:82:b2:ce:
         0c:42:2e:46:ad:0d:d8:6f:ab:df:27:17:70:19:ab:f5:8d:e8:
         be:d1:fa:9f:3e:f9:30:6d:df:58:92:15:fa:8f:eb:e3:4d:20:
         d9:34:29:9d:f8:d5:ce:8a:ca:b3:ea:28:72:a4:98:af:76:af:
         48:15:6b:d8:92:d5:8f:d5:58:73:dd:93:9b:23:7b:ad:46:81:
         ce:0a:2d:ca:dc:bc:be:dc:3a:b3:22:7b:df:70:fb:b8:44:51:
         12:5f:11:63:ba:c2:22:c1:c6:6a:c7:fe:ef:dd:49:dd:e7:3d:
         63:31:57:25:90:83:db:80:29:c5:08:36:f3:7f:87:ff:d7:2c:
         88:8b:b7:47:a7:89:0c:8b:4a:41:60:9d:23:9c:81:28:96:de:
         94:ec:74:bf:87:d1:3d:59:2c:b4:15:d5:8a:08:ac:f4:cd:48:
         e3:2b:bc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----