Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/97b43f62e376ab585a0d39e6b17be71a94f1af3b.roa
File:                     97b43f62e376ab585a0d39e6b17be71a94f1af3b.roa (raw, json)
Hash identifier:          7+JtHLq5TlA2mvIZEDAnn5DE4PHROvQLKgbLRDNKyYg=
Subject key identifier:   3C:94:22:98:B4:3C:10:D2:2C:FC:C4:B0:C6:45:EC:C9:89:52:4C:CE
Certificate issuer:       /CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
Certificate serial:       12E53A
Authority key identifier: DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/97b43f62e376ab585a0d39e6b17be71a94f1af3b.roa
Signing time:             Sat 23 Sep 2023 08:30:01 +0000
ROA not before:           Fri 22 Sep 2023 08:30:01 +0000
ROA not after:            Sun 21 Sep 2025 08:30:01 +0000
asID:                     271956
IP address blocks:        2803:7610::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 08 Mar 2024 18:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1238330 (0x12e53a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
        Validity
            Not Before: Sep 22 08:30:01 2023 GMT
            Not After : Sep 21 08:30:01 2025 GMT
        Subject: CN=97b43f62e376ab585a0d39e6b17be71a94f1af3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:14:7d:ca:ed:dc:1b:78:17:a2:80:e6:0f:5e:
                    93:4b:bf:88:40:78:7c:19:e8:47:7b:1e:76:6c:68:
                    42:32:8c:a2:f2:4f:38:ca:30:f3:b4:fb:27:3b:3d:
                    cd:7a:23:b5:5e:a5:dc:8b:0e:21:f1:4b:cc:30:21:
                    eb:c3:20:f5:00:e4:b8:5d:1d:f5:94:af:af:23:18:
                    6a:c6:12:c2:3e:51:76:7e:18:ca:58:e7:3c:29:58:
                    fa:a4:62:e8:b8:fe:aa:0e:d3:27:0b:31:cf:ad:34:
                    90:53:d4:f2:19:a3:95:a6:00:7b:97:a5:bb:40:eb:
                    bc:56:76:24:e6:97:ba:b0:14:1c:7d:fa:58:c1:54:
                    13:99:45:f2:a6:f0:09:dc:dd:22:0e:d5:86:ed:a4:
                    44:ac:cb:74:95:8c:a8:44:73:b7:f1:27:63:77:71:
                    19:d2:3d:84:a8:a2:0b:60:95:aa:44:1a:c8:dc:71:
                    fd:0d:93:04:2c:33:7b:58:57:bb:e9:0f:cb:2d:4d:
                    3c:a1:74:b3:8b:37:71:05:8c:48:d8:a8:c1:43:ac:
                    f3:65:eb:79:98:4e:8a:32:a9:14:f4:1f:93:22:3a:
                    d4:d7:dd:3f:19:c8:1d:60:b7:59:ca:97:b0:dc:11:
                    49:fa:bb:80:77:81:4b:ed:7e:76:d4:41:26:8b:da:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:94:22:98:B4:3C:10:D2:2C:FC:C4:B0:C6:45:EC:C9:89:52:4C:CE
            X509v3 Authority Key Identifier:
                keyid:DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/97b43f62e376ab585a0d39e6b17be71a94f1af3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7610::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:8e:d4:c7:b6:dc:10:d2:ac:aa:70:e2:b8:9e:f7:c1:ee:bf:
         b0:08:da:71:cb:03:5b:9b:8c:ba:a2:4c:1e:11:8b:a4:b7:d6:
         02:bb:ef:18:b6:6f:61:eb:e4:df:4e:24:5f:0d:b4:df:87:98:
         ae:9b:3c:1f:73:a5:62:92:eb:32:8f:a9:21:97:8b:11:4f:7c:
         ae:93:ee:84:0f:70:ca:cb:bf:a4:ff:bf:c9:a3:d1:96:74:6c:
         d2:e9:2d:8a:88:c0:64:95:d5:ee:17:82:00:bf:87:5c:68:6e:
         f1:b2:6c:fa:ec:38:54:13:4f:66:e0:6c:17:66:17:66:d9:12:
         d6:2d:6c:0a:8d:17:43:35:4d:88:c1:3a:ce:76:d8:a3:66:9b:
         bd:45:df:0f:2d:75:38:39:18:3f:50:63:bf:51:c5:06:fe:68:
         96:a2:e1:d0:0c:36:ea:c9:2e:8c:e1:63:ea:1b:86:27:8e:13:
         4f:df:b6:e2:fd:5a:00:df:01:45:5d:f1:88:f7:23:13:d0:e7:
         be:a2:77:04:b9:27:38:63:2f:51:f4:bb:25:dc:25:02:1a:08:
         c4:02:b5:d1:dc:aa:71:d3:fe:6c:f5:f6:9f:1f:4e:14:0d:3a:
         cf:bd:7c:5b:a9:aa:93:fa:14:b7:3d:1e:2d:32:e5:d2:e1:5b:
         5c:88:64:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----